hxxps://yellowishgather[.]com/b[.]3UV/0FPY3npSv-bfmGVsJIZsD-0z1/NrDOId5oO/TyIH2hLLTiUG0lM/j/k_5/Mojmcs

Analysis

user interaction
yes
max time kernel
140s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/08/2026, 04:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://yellowishgather.com/b.3UV/0FPY3npSv-bfmGVsJIZsD-0z1/NrDOId5oO/TyIH2hLLTiUG0lM/j/k_5/Mojmcs
Sample260806-e4cdystaka

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5940	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134304641718711643"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{989D6414-DC38-44C0-BD43-2863A15AB099}	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5024	chrome.exe
5024	chrome.exe

Suspicious behavior: LoadsDriver 8 IoCs

pid	Process
660	Process not Found
660	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
660	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 22 IoCs

pid	Process
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe
Token: SeShutdownPrivilege	5036	chrome.exe
Token: SeCreatePagefilePrivilege	5036	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe
5036	chrome.exe

Suspicious use of WriteProcessMemory 58 IoCs

description	pid	Process	procid_target
PID 5036 wrote to memory of 6080	5036	chrome.exe	84
PID 5036 wrote to memory of 4704	5036	chrome.exe	85
PID 5036 wrote to memory of 4704	5036	chrome.exe	85
PID 5036 wrote to memory of 5940	5036	chrome.exe	86
PID 5036 wrote to memory of 3580	5036	chrome.exe	87
PID 5036 wrote to memory of 3580	5036	chrome.exe	87
PID 5036 wrote to memory of 888	5036	chrome.exe	89
PID 5036 wrote to memory of 2316	5036	chrome.exe	90
PID 5036 wrote to memory of 888	5036	chrome.exe	89
PID 5036 wrote to memory of 2316	5036	chrome.exe	90
PID 5036 wrote to memory of 4228	5036	chrome.exe	91
PID 5036 wrote to memory of 4228	5036	chrome.exe	91
PID 5036 wrote to memory of 2356	5036	chrome.exe	92
PID 5036 wrote to memory of 2356	5036	chrome.exe	92
PID 5036 wrote to memory of 5988	5036	chrome.exe	93
PID 5036 wrote to memory of 5988	5036	chrome.exe	93
PID 5036 wrote to memory of 3920	5036	chrome.exe	94
PID 5036 wrote to memory of 3920	5036	chrome.exe	94
PID 5036 wrote to memory of 2472	5036	chrome.exe	95
PID 5036 wrote to memory of 2472	5036	chrome.exe	95
PID 5036 wrote to memory of 5664	5036	chrome.exe	96
PID 5036 wrote to memory of 5664	5036	chrome.exe	96
PID 5036 wrote to memory of 5748	5036	chrome.exe	97
PID 5036 wrote to memory of 5748	5036	chrome.exe	97
PID 5036 wrote to memory of 3316	5036	chrome.exe	98
PID 5036 wrote to memory of 3316	5036	chrome.exe	98
PID 5036 wrote to memory of 2152	5036	chrome.exe	99
PID 5036 wrote to memory of 2152	5036	chrome.exe	99
PID 5036 wrote to memory of 2388	5036	chrome.exe	100
PID 5036 wrote to memory of 5688	5036	chrome.exe	103
PID 5036 wrote to memory of 5680	5036	chrome.exe	104
PID 5036 wrote to memory of 5680	5036	chrome.exe	104
PID 5036 wrote to memory of 6008	5036	chrome.exe	110
PID 5036 wrote to memory of 3884	5036	chrome.exe	111
PID 5036 wrote to memory of 3712	5036	chrome.exe	112
PID 5036 wrote to memory of 5548	5036	chrome.exe	116
PID 5036 wrote to memory of 5548	5036	chrome.exe	116
PID 5036 wrote to memory of 4288	5036	chrome.exe	121
PID 5036 wrote to memory of 4288	5036	chrome.exe	121
PID 5036 wrote to memory of 4292	5036	chrome.exe	122
PID 5036 wrote to memory of 4292	5036	chrome.exe	122
PID 5036 wrote to memory of 4320	5036	chrome.exe	123
PID 5036 wrote to memory of 4320	5036	chrome.exe	123
PID 5036 wrote to memory of 6136	5036	chrome.exe	124
PID 5036 wrote to memory of 6136	5036	chrome.exe	124
PID 5036 wrote to memory of 5524	5036	chrome.exe	125
PID 5036 wrote to memory of 5524	5036	chrome.exe	125
PID 5036 wrote to memory of 4564	5036	chrome.exe	128
PID 5036 wrote to memory of 4564	5036	chrome.exe	128
PID 5036 wrote to memory of 2396	5036	chrome.exe	129
PID 5036 wrote to memory of 2396	5036	chrome.exe	129
PID 5036 wrote to memory of 5736	5036	chrome.exe	130
PID 5036 wrote to memory of 5736	5036	chrome.exe	130
PID 5036 wrote to memory of 4244	5036	chrome.exe	131
PID 5036 wrote to memory of 4244	5036	chrome.exe	131
PID 5036 wrote to memory of 3564	5036	chrome.exe	132
PID 5036 wrote to memory of 3564	5036	chrome.exe	132
PID 5036 wrote to memory of 5024	5036	chrome.exe	133

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://yellowishgather.com/b.3UV/0FPY3npSv-bfmGVsJIZsD-0z1/NrDOId5oO/TyIH2hLLTiUG0lM/j/k_5/Mojmcs
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffdd78cc728,0x7ffdd78cc734,0x7ffdd78cc740
  2⤵
  PID:6080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1680,i,1053283390888698943,3226537883736835658,262144 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1996 /prefetch:2
  2⤵
  PID:4704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2076,i,5809180140604200573,3980708781885821811,524288 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1560 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2368,i,14067371286729830824,10579862356902126134,524288 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2516 /prefetch:8
  2⤵
  PID:3580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3216,i,10134092793052713122,10207403068895064610,2097152 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3228,i,10680165093846533168,3027566220771877477,2097152 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:2316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4296,i,5921939313628784769,5600626335215280032,2097152 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4320 /prefetch:2
  2⤵
  PID:4228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4708,i,16657422435761814186,10605047167237141574,2097152 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:2356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4840,i,14960044973783002088,13029957588394032701,2097152 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:5988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4912,i,9776434742833241649,46234383928340855,2097152 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4928 /prefetch:1
  2⤵
  PID:3920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5056,i,7013077186604772419,9831742537825183672,2097152 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4908 /prefetch:1
  2⤵
  PID:2472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5628,i,2051042204549935909,435728423646807627,2097152 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5372 /prefetch:1
  2⤵
  PID:5664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5724,i,2339215995088015535,9379060506908579207,2097152 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5316 /prefetch:1
  2⤵
  PID:5748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3428,i,279498390968210946,17018274459762706558,2097152 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4884 /prefetch:1
  2⤵
  PID:3316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6484,i,4198814856536262424,413289634726526551,2097152 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6492 /prefetch:1
  2⤵
  PID:2152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6820,i,5458968968800112116,7223143079663134057,524288 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6816 /prefetch:8
  2⤵
  PID:2388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6796,i,17436067233664978513,13223244198371308925,524288 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6800 /prefetch:8
  2⤵
  - Modifies registry class
  PID:5688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6820,i,325067606065437195,9223192349129729907,524288 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6844 /prefetch:8
  2⤵
  PID:5680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6904,i,1427871346062276605,6204844559675106779,524288 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6308 /prefetch:8
  2⤵
  PID:6008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6328,i,7205663093963736760,9690278156940490808,524288 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6428 /prefetch:8
  2⤵
  PID:3884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6324,i,9179180950116283904,5515860973157754590,524288 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6420 /prefetch:8
  2⤵
  PID:3712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6076,i,174983988308089941,16022806306620757078,2097152 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6324 /prefetch:1
  2⤵
  PID:5548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=7100,i,14233429700646324792,10633332125034685241,2097152 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7180 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6776,i,2153232192057528006,7064144879735661907,2097152 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7272 /prefetch:1
  2⤵
  PID:4292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6308,i,11475446167850167621,5362024298703234809,2097152 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6192 /prefetch:1
  2⤵
  PID:4320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=208,i,1498258828806479380,13957401123324392016,2097152 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6084 /prefetch:1
  2⤵
  PID:6136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6192,i,7425720595421261508,10469176670417697819,2097152 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6180 /prefetch:1
  2⤵
  PID:5524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=7532,i,14213630549562671035,5832687533605785435,2097152 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=728 /prefetch:1
  2⤵
  PID:4564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=7456,i,11617265090820351428,14963523413461312235,2097152 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7352 /prefetch:1
  2⤵
  PID:2396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=7200,i,5523852423130057225,3449573585448115505,2097152 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6168 /prefetch:1
  2⤵
  PID:5736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=7292,i,4496295588526397100,7621163701576873344,2097152 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6776 /prefetch:1
  2⤵
  PID:4244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=8076,i,9670709024184935248,199408589793244950,2097152 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8052 /prefetch:1
  2⤵
  PID:3564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6196,i,13900840540752774068,6263021633403075562,262144 --field-trial-handle=2000,i,6851843606001342098,6572831390508798739,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7536 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5024

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4980

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2036

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 111bbaa0f5a12eba1178dbdb108883519b2acf19f34f9ee635192afcc04f065f
MD5 52df8c70d8bad0c6cefa1fb80b4cbac3
SHA1 70488ef275b830653126c4a2eb7b1b0dad8aa0dd
SHA512 b370d25aaebf63687a783d90fb179a4822d90de84707236a3ad916c2f55aff35ba3e64a78ad6748e1352ea51dab6847c4020ad56ad1d7422961e6437bf2cf3c1
TLSH
T1FEE02BADC962EC371CFD175D60500746E75513173780948B7A3C951D8F7423A5646C6C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 696a520e64225315750156efa8ad8ad64d53ebd00e0680b9b66c7b2eeceee7cd
MD5 15a0a9a4a07cf5d90b6e2c6786d1ca96
SHA1 1bdf3f1cf476fdd2aa5aa2c9a0f507f6e9e8f048
SHA512 181f74dbbdea26b05db60b6ecf013b2512e8ed36f4bb3ac66000cd2945a82791cd21542119c144d8eee332ed99d9e615530c4c318f3ed488dd349da2c844c25c
TLSH
T17E511EB09C93FC34FFDD5931179CCD24A0E4C2672EB15E968A044CB0A2B76E0EDD96A5
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 609755463f22f58d7a192f13799f8ab3307f90a8f4ea6512ffbe39c2f04b20c0
MD5 61a10911a3e852e81e92512ffac53b1e
SHA1 b38cc8fa4f3175bf06eb3c2f9ad65654f74edd57
SHA512 c4509e2e621fdfa503c2a4211d3ede5735c4fc2ecf6362f3f181a017093206e0d695c6783133a13c653c91b6e26d569a81325156b2b6c07cdd8dc6c813fd04f2
TLSH
T1CD311EC198D28C31CF6E9A3606D1CD30F1F5147400FA9A93528485F0D9FBAE0CDCAA99
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 48624292b0b76c0e71ef70eeb0848ce2f85cb239e7c940ce717e2202d4f40b34
MD5 cfe793b8b03fc18bfe96e95f0c6a2664
SHA1 71ef12f911c25c4eda7d2cf944504ae69348aefa
SHA512 935d4c62a3ad9eafa130db503d2732a0f0271eb7f8201c60fc68cc79b52eaed6ab04866d2256a8a4f203bec043f22724aaf347f8d93e8954231091a84f33a6f4
TLSH
T11B511DA05C93FC34FF9D5930179CCD2460E4C2272AB15E479A080CB0A2BB6F4EDD96A5
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 16KB
SHA256 384cb406c9d3e6f830de5f692b35394f6e78ce5dc650dc7bef535a441c6f5267
MD5 704ba1e58ba1da776fc748b95ea18f94
SHA1 a563b0b6d1473156fbeb220a871768c65730f82d
SHA512 5380848d2e873f0fefe2d833e4d19c008309c2da4af8b72736147ba8abe04b07d811df1bde32794a0657a8d11b196bc811ca743de2e7c601b354f9a4f291b40e
SSDEEP 384:DSSSySRSDSxSBSbBeSxSo1S6lJSHSWScSYSSrS0SSSISTUDbRnRaaIEdOtSOSLSk:WpJcW8Mbz8zly1LYpOzp/m79uBoM+9Vb
TLSH
T10372CFB3C2E8C92E88515AF4DB187E1BCE6D456C42183D2788D9BE4B97E1872D35074F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 a436b3761bce0b85076d09f691612e72900a42c1983471af3fc48a063aa8e0d7
MD5 06947db9a9a6582f746b522147d79fda
SHA1 be9c3a34ce88bd8bc95a5d27ee57318795150a54
SHA512 819cc388b94a6e6bd622ae05e90ee5eda9f9d19b074ba926b7dccd4b1f0f82a7472e8010edb483561e0269cf4dc6a88ed1d4546480c7acfafa03de7a5e16a90e
SSDEEP 192:5RLcBh7dBQadv7lhpSPRpvwOPIfg1MT3k92Hsb+WNKIqfn48Py7WGdWTYDgv2amk:5RLmh7tdJhSXB7Qwh88pxU2R5vG
TLSH
T1AC62D75BB5206AB7ADDBC226F821BB17E3F1112565E11E94A7FCC92C04E76CD311780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 62aba2820fc2e9a9301dce797513557e0e025626fb9b99d80840e043bc60f679
MD5 99802afd94dc47ed965a296822452284
SHA1 9055124cb7ae7c6252eb556c1782faf650ff600c
SHA512 1d9c94e9d006e6ef1146393957c9fd92ed05e97dd48e399bc21de294dee0330fd63c981abba3b1e7179e9a53039acc8ac0c07a116bba222efb8938fd998f5f30
SSDEEP 192:5RLcBh7dBQaFv7lhpSPRpvwOPIfg1MK3k92Hsb+WNKIqfn48P4x+GdWTYDgv28mm:5RLmh7t1JhSXB6Qwh8IxxU2z5E
TLSH
T1DD62E75BA5206EB7ADDBD226F821BB17E3F1112664E11E94A7FCC92C04E76CD311780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 400c03ad1697be68e09a47ac64387a2a51226c01926fd3a11ce4cc767f4d42da
MD5 f81be488dc8c6d02ce377044a160b316
SHA1 a3b9bd10f5979625c9a3170b39ef639498193e5c
SHA512 8f771edd3847c7cee495bb36d2822d2b7751828faf1200477fff0765f53c402c2e48dbdc266ad11186ba3af3cb01303652dc2e1cbc13565d22edf1b918d9e643
SSDEEP 192:5R37dBQvOv7lhpAPRp2wEgl3Z92Hsb+WNcfn4nTYDgv2XmP1gnVyIsnAUge:5R37YqJhUXjQwHsU22Ge
TLSH
T1E552D75AB91069BBADDBD22AF9117B17E7F1102524E52E80E7FCC92C14E76CD312740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 04081a7abb400645a4ebd1cdf8b8f397bc79c0a8d73359ed6acfb9a4b2609f6e
MD5 d29370037f5a3ffad4413857438ee1ad
SHA1 fd2886940652a8c2b3836a05024a6dbf4d844785
SHA512 4f528138799e4b5f56e74827cddfbc4e67aecb1431d40e58e9066462aceb7c102709fbaf7221d15bd42edb1c04f32f7689fbb0005d9037652100cdf32cc0bd9e
SSDEEP 192:5RLcBh7dBQvFv7lhpSPRpvwffg1T3k92Hsb+WNDqfn4ZGdWTYDgv2GmP1gIVyIsv:5RLmh7o1JhSXwQwB+xU295E
TLSH
T18862D65AB5106ABBADDBC22AF8217B17E7F1113564E11E84A7FCC92C04E76CD321780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 322b825a38994f6e28c6df1a9c1a9c31fd3e8ddf2194f0621215ff2af6f5da8b
MD5 335da072d2217ade51474f77edd83f85
SHA1 b0c3e3674f16c7e1d32a6577d621a81bf58d5e93
SHA512 bba3f6fa572d735eb6b845380c43e29157a8ec9418679c676c3729ae5b6474cff1f841da3dd85d213b85636e1e76da8a08e93b6968faaba9b1d5f151095de4d3
SSDEEP 192:5R37dBQ/wv7lhpAPRp2wEglyZ92Hsb+WNcfn4Ggv2KmP1gnVyIsnAUge:5R37OsJhUXsQwHN2hGe
TLSH
T15E52D65AB91069BBADDBC22AF9217B13E7F1102524E52E84E6FCC92C15E76CD312740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 3a36feb28f1a1a25aff68b5a9430ab594c5587333bab5bfe9b9b68e9798e6467
MD5 9aedd07d7a7ee1243d78ef5497da4ebc
SHA1 5aba22d002faad7af9277abebc6c7a8f46591ae2
SHA512 7d6a1d91909a7987e32946f83d49b5daea6aef8dd8b7a72dc8f04e4d67ab0e4c2c9d1c98b5104d5a5cd46314d055b9883f92d8e3b21ffbcb6f58e7651c7a1542
SSDEEP 192:5RLcBh7dBQRPv7lhpSPRpvwffg1T3k92Hsb+WNDqfn4ZGdWTYDgv2GmP1gIVyIsv:5RLmh7eHJhSXwQwB+xU295E
TLSH
T17262D65AA5106ABBADDBC226F8217B17E7F1112565E12E84A7FCC92C04E76CD321740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 595c24658fb191544693a1283c50caedf141fc31752325548b0b8c44b5acd312
MD5 8669898c7bb6d72d150ae5584ab5db17
SHA1 a44cb7ba4f4ec29091c03ce1bdd1074ce5475d6c
SHA512 dab452591090691ccc081f9523e8cebdd2030b7a6d08fcef7b1d8b4a35aa54b3dad9d8f54c220afa8d8ac0673207e69bbbbf315e8f34747742b208be3fd80b16
SSDEEP 192:5RLcBh7dBQvJOv7lhpAPRp2wffg1T3Z92Hsb+WNDqfn4ZGdWTYDgv2PmP1gKVyI4:5RLmh7qqJhUXGQwB+xU2OtE
TLSH
T1A362E65AB9106ABBADDBD226F9117B17E7F1112564E11E80A7FCC92C04E76CD311780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 e0deb304af8bf820d824b3dfd64e034455127c1e77b0c4c06a0e86cbd4cc100d
MD5 5ca9023a7eb46aa751f4a023891b5176
SHA1 f4334dbbdd488ed112f753859715c8ce542f9c88
SHA512 589c77f2d826467080c4c575d89df4fe2e07593ff899617495b30b111d805e059d9f36334c2c58279a28918bb9f396a52d426b43fa469b23912f6d89215da5fb
SSDEEP 192:5RLcBh7dBQvAOv7lhpAPRp2wffg1T3k92Hsb+WNDqfn4ZGdWTYDgv2PmP1gKVyI4:5RLmh7LqJhUXvQwB+xU2OtE
TLSH
T12F62E75AB5106ABBADDBC226F9217B17E7F1112564E11E80E7FCC92C04E76CD321780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 ed4fa690643e09f3bbd84971d54e69c98716f72a4c6b81115c2a2803ec0b730d
MD5 6325e0da78a0be81c0c11c532ca42f0b
SHA1 de6b7b4323517fae56ac6c03a5f2fa26c9c0f2fd
SHA512 7a7f4e347493f334cfb95b3f8aeb20e45cffa47cf84997ca676c0a8e0d5c79b746afa6e41277e8874535f903d7d001a68b0921fbeaccd199733fc76e125712f0
SSDEEP 192:5RLcBh7dBQasv7lhpSPRpvwOPIfg1Mm3k92Hsb+WNKIqfn48Py7WGdWTYDgv2amk:5RLmh7t4JhSXBSQwh88pxU2R5vG
TLSH
T18A62E75BB4206ABBADDBC226F821BB17E3F1112564E11E94A7FCC92C04E76CD311780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 c54836683d23f9fee57c69a9d42002f448a01bbb5b6b38437c5fcac9744adcc4
MD5 97aacfb3977979cfbf9d8a6c4d36d689
SHA1 28c462804fa985bea43aac67e658ae60025ec226
SHA512 ac229055b177234c91f43061b9900ff41ba000713f4120fbf08cb18c16d47d484d5415a198c6f1896335d53e2a7e2f4dc407a06b90151f49d9994124c8990d05
SSDEEP 384:+wjKJ7KxkXqKf/pUZNCgVLH2HfgslU697pLuLcSjwxXODKh+ErU3wZJHG/A1YTPB:+0KJ7KxkXqKf/pUZNCgVLH2HfgsG697U
TLSH
T192720A676C488E770F94C68CEC177F4FADB5024B65E9886483FA982903D5BCF11462EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 96c73c5665f3fe0e421eb9d4bec9824e8616711bf4ba98551bb588fcc664420f
MD5 fe7b97bfc87cd842bfe896b10efb02fd
SHA1 40be49bb29430f59e597435ea5968e6d9dfa5685
SHA512 546c17df73c0667b5be037c70f841129f3aa2ac0f113abbc694d1af29b31561b7dcf9dc704ad948d37d9ad35dc73f440efb2e49a2cd7e95bdc74ceea5a24e325
TLSH
T1C0B01250C402A501C01247F4214254987168DF10DA0A171543E0A932CC29150C614060
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe583524.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe583524.TMP
Size 96B
SHA256 8b4f318947e39a338a1be1767b40e2c6559b390e3fcc9974c1ff8c1a4ae1d914
MD5 467a5de544a641685edcfb6c4b565b57
SHA1 3e6b2098b24174a8c3d6e463fc88d7cf4bfa40b1
SHA512 e193e86c630181db2cdcf6ab5a3b773fd834a719750c9636d89aa3fc58546d2e5a6a0f958828cedfbaed005006ad7ba82759b38710b2cd708a1b2422deefab1b
TLSH
T151B00265D1176612C0422BB129A9D5DC7170EF25C7131356B2E01E6ADC656608625568
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 0ea319cb6d8c8a4fe6ba4c7016cb3a959e4bddd75cae46c5e6c169db532d91d2
MD5 e8fb4a589049dd9756241a7b6ba5b0d2
SHA1 d6319b7c9df74ca092eaedb274b09653d64d00ef
SHA512 851eb1dc5c425afc474decfc3c331eb45d0cca6646670a517fe158359bcd7d7efbd9cda5b0343495c80d8ac994650e57e05af9e05afecbeee4647f3b6d3d3ef9
TLSH
T1DDB0245030401C17C74D03F070D1CDC07D507C700D43CD137050D4D544135400175500
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\52f2c8fa-f4b4-4c81-a66b-ea3ee0d09962\index-dir\the-real-index
Size 72B
SHA256 9563027b93a588437f2aca5aad0cffe1d2ece92a3ba04c15669e4f2d326a55bc
MD5 e1daba8d840b9314230ce2939265698f
SHA1 87eec2c0e271dcb07a5df447de5d9f2c76ec0509
SHA512 d295fd3d2ece25dcc10a5fdf4a114997f2c8e83152bfaccb3b4a470d7e25691d915ae04d1830753bee125570be8bc757c6d890c59c641a4cdea9aeadcefea14e
TLSH
T125A0025067C51041D11026B460454BE973D0DD5009114B034490019C8CE06C49961155
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586d7a.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\52f2c8fa-f4b4-4c81-a66b-ea3ee0d09962\index-dir\the-real-index~RFe586d7a.TMP
Size 48B
SHA256 73b13ea8c842781b9956d0b38ecb317bac27e00f26c03386c2dde3f202648400
MD5 8b2f618115cbc01f080a61e648687229
SHA1 e0df27101e7488fe9838b9b1801b31ded6d010b9
SHA512 c5657bd113eb60529c12ff7dd5d80dc2f10779b2f8d4bc42f30084c1ca8e4168921d5a1fe29a93750bc9150fa3087b4a842f5033e7901047cf6e623f71b4806d
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 180B
SHA256 0e10e198d846a08c83ffbf7bfcf2e7b32253b194e28528f3d30f734af94e6c72
MD5 96201cd5fd6570e5f363dce8aa246ffb
SHA1 18bf93eade836a22e2352f241747c23da3e2f689
SHA512 3421f91814c30f45b1200e2b30dabb8fed7d88065923fdc99a0f47cc3e863c32f50c10c2809965d26139f0aeb8030735ebac30f16e002beea749f59044c94bab
TLSH
T19EC012B7208192D32E5539EE105172C9C6223ECD5D80E76C64113055223085B0405820
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 93B
SHA256 4ae6b9e90a17df8cc99079cfc822f9ef3e3a4ce12185ad476b4b5f1b84fee5f6
MD5 08c63871d33f0e5d84b91050fbc0d812
SHA1 78a83270612ddb08922ce58256fa5c45f5d463be
SHA512 21f12bdbe89f796f3ac3f6b56cac5032a0588476bca928a6380f64f1b50ecf812bd0f734b496ed28c1a452ca6eca4119fb9845d20484de445a58df4d0a392a1a
TLSH
T134B002FF114165C71E6575EF004575DDD52332CD9D90EA9C94755064335046F1401C34
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58080a.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt~RFe58080a.TMP
Size 180B
SHA256 1a9c9fcf588b17e22844877b9a5f00893ff52ab8f57dbce25b2388d6b520e782
MD5 33ffb580a9990e98cc027b93b0ce3e4e
SHA1 4aa56efbc3b2dc522cfc4e416a712882764964ae
SHA512 8c9dab839d8f2e5d0c850feb084443fceb2bc1066a6221f95cd5e42e7a2c17b1bb802e736b3b8cb0e17f5fcd9cff20e6702462bfa89577e5de641c6c18620bff
TLSH
T19BC012BB228092C22F6569EF004532C8DE36BFCA9D80A68C886170A6233081A0901834
MD5 SHA1 SHA512 TLSH

Submit Download

000001.dbtmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\FileSystem\t\Paths\000001.dbtmp
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 fc7e4e985772b43678248e5794fab43deefca91c9abcdfbd68590e60485fdaaf
MD5 06a402f3fce55021ff4c7cbd8b81a131
SHA1 43a294aa54d44684bfdeded3a3bb721d962abc77
SHA512 e3c911f5fb8bf2c777abafd3f4b8afcc5d5c14628326499c4aaa4883b7bf02a0467a9f118edf2c4257f7e02b2c02c50d797eabcd3e8e6c1131bb5f6d093c3450
SSDEEP 3072:GGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:xm7Rkm1tYpBeh2BAo3
TLSH
T130C312275E71A9375D79AB4EB08E0B1F1EF14AA6C930DE92C8D86A0437E97CC1A05D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 872996f55ecf15e4b2b28e59128ff1b3c8c72863c3f85cb08bc063131affc02f
MD5 7a3e9fcb36b4c6c7da7bab18e35d3044
SHA1 cac0015c3fea2ede480b98b136bdc8fc4cbdd572
SHA512 160ecff7ed49e283e647a3dff44f5be872ec77e49aa7fedf6aaadf3e3eb96aa052b4f97ee5a3c202e3ca37e4665ec0efa769d3076e4f7c7be084095f6bf5a966
SSDEEP 3072:LGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:Sm7Rkm1tYpBeh2BAo3
TLSH
T18AC3122B5D75A8375DB9BB1EB08E0B1F1DF14AB6C920DE52C8D85B0823EA7CC1A45D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 3b3f6161796c98688ed460fdf15ffa6b9d02be8d979412d1002abda7c3d09b1f
MD5 caea7f4e9699da0778a517bbe0c9b030
SHA1 d150dacc12325d969ac075a76eb6d732b059cb23
SHA512 7aededb1971114ecf468540f2f3cee61541f8e079f976ce4604b1842ee356a4ee9a60d366ca8f53d32cd4122dc864159af01cb30e3696bd22cb37ef34058fa81
SSDEEP 3072:uGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:pm7Rkm1tYpBeh2BAo3
TLSH
T1BFC3122B5D75A8375DB9BB1EB08E0B1F1DF14AB6C920DE52C8D85B0823EA7CC1A45D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 7da90a9df7842fe30805cc705e87ed403bd1f061a2d67ec763b0a0bf2df714d3
MD5 59d63badf56703d5fa3603bf0ab821b7
SHA1 4c1f7992477bc4a3db97f408957ffe3e14fa364a
SHA512 3f0395dd640e941ed1b3f50e28b61dbba858ba742b8d626def0d587d28ea62d8e71df84ee967d47aac313b7479fed564d36dd2e71075bd5f38802d69fbf12be8
SSDEEP 3072:CGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:1m7Rkm1tYpBeh2BAo3
TLSH
T171C3023B5D75A9375DB9BB1EB08E0A1F1EF24AA6C9209E52C8D85A0423ED7CC1A44D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download