hxxp://www[.]mchi[.]net

Analysis

user interaction
yes
max time kernel
600s
max time network
593s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/08/2026, 10:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://www.mchi.net
Sample260806-mdds4as1hs

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4880	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134304852492486262"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
2592	chrome.exe
2592	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 17 IoCs

pid	Process
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe
Token: SeShutdownPrivilege	1928	chrome.exe
Token: SeCreatePagefilePrivilege	1928	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe
1928	chrome.exe

Suspicious use of WriteProcessMemory 47 IoCs

description	pid	Process	procid_target
PID 1928 wrote to memory of 3184	1928	chrome.exe	87
PID 1928 wrote to memory of 3644	1928	chrome.exe	88
PID 1928 wrote to memory of 3644	1928	chrome.exe	88
PID 1928 wrote to memory of 4880	1928	chrome.exe	89
PID 1928 wrote to memory of 3920	1928	chrome.exe	90
PID 1928 wrote to memory of 3920	1928	chrome.exe	90
PID 1928 wrote to memory of 4996	1928	chrome.exe	92
PID 1928 wrote to memory of 4996	1928	chrome.exe	92
PID 1928 wrote to memory of 2500	1928	chrome.exe	93
PID 1928 wrote to memory of 2500	1928	chrome.exe	93
PID 1928 wrote to memory of 1340	1928	chrome.exe	94
PID 1928 wrote to memory of 1340	1928	chrome.exe	94
PID 1928 wrote to memory of 3076	1928	chrome.exe	96
PID 1928 wrote to memory of 1312	1928	chrome.exe	99
PID 1928 wrote to memory of 1312	1928	chrome.exe	99
PID 1928 wrote to memory of 4452	1928	chrome.exe	100
PID 1928 wrote to memory of 4452	1928	chrome.exe	100
PID 1928 wrote to memory of 2044	1928	chrome.exe	104
PID 1928 wrote to memory of 2044	1928	chrome.exe	104
PID 1928 wrote to memory of 2204	1928	chrome.exe	108
PID 1928 wrote to memory of 3732	1928	chrome.exe	109
PID 1928 wrote to memory of 3300	1928	chrome.exe	110
PID 1928 wrote to memory of 3020	1928	chrome.exe	114
PID 1928 wrote to memory of 3020	1928	chrome.exe	114
PID 1928 wrote to memory of 3984	1928	chrome.exe	115
PID 1928 wrote to memory of 3984	1928	chrome.exe	115
PID 1928 wrote to memory of 5112	1928	chrome.exe	117
PID 1928 wrote to memory of 5112	1928	chrome.exe	117
PID 1928 wrote to memory of 2972	1928	chrome.exe	118
PID 1928 wrote to memory of 2972	1928	chrome.exe	118
PID 1928 wrote to memory of 1388	1928	chrome.exe	119
PID 1928 wrote to memory of 1388	1928	chrome.exe	119
PID 1928 wrote to memory of 2592	1928	chrome.exe	120
PID 1928 wrote to memory of 4144	1928	chrome.exe	121
PID 1928 wrote to memory of 4144	1928	chrome.exe	121
PID 1928 wrote to memory of 4536	1928	chrome.exe	122
PID 1928 wrote to memory of 4536	1928	chrome.exe	122
PID 1928 wrote to memory of 1688	1928	chrome.exe	123
PID 1928 wrote to memory of 1688	1928	chrome.exe	123
PID 1928 wrote to memory of 1576	1928	chrome.exe	124
PID 1928 wrote to memory of 1576	1928	chrome.exe	124
PID 1928 wrote to memory of 4440	1928	chrome.exe	125
PID 1928 wrote to memory of 4440	1928	chrome.exe	125
PID 1928 wrote to memory of 1280	1928	chrome.exe	126
PID 1928 wrote to memory of 1280	1928	chrome.exe	126
PID 1928 wrote to memory of 380	1928	chrome.exe	129
PID 1928 wrote to memory of 380	1928	chrome.exe	129

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://www.mchi.net
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffa9913c728,0x7ffa9913c734,0x7ffa9913c740
  2⤵
  PID:3184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1668,i,146495157653698784,12775671971590469470,262144 --field-trial-handle=2000,i,275529103971762132,17185226899346203915,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1996 /prefetch:2
  2⤵
  PID:3644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1572,i,15074600741785647108,2170220112102306499,524288 --field-trial-handle=2000,i,275529103971762132,17185226899346203915,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,16852846905893589370,10427041322302749462,524288 --field-trial-handle=2000,i,275529103971762132,17185226899346203915,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2540 /prefetch:8
  2⤵
  PID:3920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3152,i,1067134515926626629,10582954600285202945,2097152 --field-trial-handle=2000,i,275529103971762132,17185226899346203915,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:4996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3144,i,13888530800467342968,10029646039814517775,2097152 --field-trial-handle=2000,i,275529103971762132,17185226899346203915,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:2500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4416,i,17398922861320770805,10145711945709744381,2097152 --field-trial-handle=2000,i,275529103971762132,17185226899346203915,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4456 /prefetch:2
  2⤵
  PID:1340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5332,i,5043898137182312581,2757035106887043068,524288 --field-trial-handle=2000,i,275529103971762132,17185226899346203915,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5336 /prefetch:8
  2⤵
  PID:3076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5648,i,3693761285172759157,9683188179555816897,2097152 --field-trial-handle=2000,i,275529103971762132,17185226899346203915,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5628 /prefetch:1
  2⤵
  PID:1312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5708,i,11581481910183789203,705476945716019821,2097152 --field-trial-handle=2000,i,275529103971762132,17185226899346203915,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3428 /prefetch:1
  2⤵
  PID:4452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5348,i,2494124656452293543,4404069503800195837,2097152 --field-trial-handle=2000,i,275529103971762132,17185226899346203915,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5716 /prefetch:1
  2⤵
  PID:2044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5640,i,1789877861529698252,18234272194780960856,524288 --field-trial-handle=2000,i,275529103971762132,17185226899346203915,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5616 /prefetch:8
  2⤵
  PID:2204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5356,i,16134714790912232105,3441617073525997029,524288 --field-trial-handle=2000,i,275529103971762132,17185226899346203915,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5784 /prefetch:8
  2⤵
  PID:3732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5564,i,7317266762732593964,13349406177175994425,524288 --field-trial-handle=2000,i,275529103971762132,17185226899346203915,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5512 /prefetch:8
  2⤵
  PID:3300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=3508,i,16656698621697277176,17158132089372977948,2097152 --field-trial-handle=2000,i,275529103971762132,17185226899346203915,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5688 /prefetch:1
  2⤵
  PID:3020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5716,i,14679024146038763531,15964734098344323298,2097152 --field-trial-handle=2000,i,275529103971762132,17185226899346203915,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5596 /prefetch:1
  2⤵
  PID:3984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5912,i,8072031730220627775,15395911164916811589,2097152 --field-trial-handle=2000,i,275529103971762132,17185226899346203915,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5136 /prefetch:1
  2⤵
  PID:5112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5636,i,17899189220015268887,13727739860668798631,2097152 --field-trial-handle=2000,i,275529103971762132,17185226899346203915,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5664 /prefetch:1
  2⤵
  PID:2972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5912,i,16652039049895684563,17343756034340928997,2097152 --field-trial-handle=2000,i,275529103971762132,17185226899346203915,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5872 /prefetch:1
  2⤵
  PID:1388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3084,i,17199530436579311747,9352657080633612286,262144 --field-trial-handle=2000,i,275529103971762132,17185226899346203915,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3440 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5636,i,8243793089145369689,14338554015327242438,2097152 --field-trial-handle=2000,i,275529103971762132,17185226899346203915,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5372 /prefetch:1
  2⤵
  PID:4144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5652,i,12217601316073324656,5150389544039423266,2097152 --field-trial-handle=2000,i,275529103971762132,17185226899346203915,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4620 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5628,i,1254810579204980768,11819164049834800110,2097152 --field-trial-handle=2000,i,275529103971762132,17185226899346203915,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5692 /prefetch:1
  2⤵
  PID:1688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5912,i,1621931135669797284,4536675127877525031,524288 --field-trial-handle=2000,i,275529103971762132,17185226899346203915,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6056 /prefetch:8
  2⤵
  PID:1576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6028,i,7903962526980674592,17266223743944253390,2097152 --field-trial-handle=2000,i,275529103971762132,17185226899346203915,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6088 /prefetch:1
  2⤵
  PID:4440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=5936,i,7747201647515836990,13864195031708529004,2097152 --field-trial-handle=2000,i,275529103971762132,17185226899346203915,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2704 /prefetch:1
  2⤵
  PID:1280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=1476,i,1330873014248141462,6535865446440878909,2097152 --field-trial-handle=2000,i,275529103971762132,17185226899346203915,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5688 /prefetch:1
  2⤵
  PID:380

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1492

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1824

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 bef89a6aa7afb1011d2fb63a65808538d1f3042cc02e80d06055c88ffb44c2e6
MD5 2b8b26014db6473e7df10c7992f77246
SHA1 cae2b438e06b7f7934f54a3b00aaed26bedead24
SHA512 6b585d7719463827c8b9a73947f35b6ac2c41b6eb6a7bb0f0eda313a54afcace768cdb2011bc8540a5daa3d47a5f760cde6a1e36627f1018be553fe3f2182c48
TLSH
T169E0F165C922FC3B19FC131864718706EB41138B26408C0F773C500C4FB477A4182C1C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 49766762d985290070c364eecea494f943c4d01b14cebda12c55618a9081cc4c
MD5 a6b021abcb60a54cfb6042c5ff0edb23
SHA1 d9a8d771e8f3c9ef034c0f730b6c05626f515b59
SHA512 185dae67dda6f91450633e71a4a58ac555550e7f75953292d6dd93a94efb2f20c79ec31babe15bd24774791981f3647e5977a1a6686d9bf2eb79d713a4737d69
TLSH
T12641CEF783B4997D8A0096F4EB156F2FCE690524432C7CA6C9D46E2B43F28B2D14078E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 f526c66faa7d6bf4a60751ad3c1fe2948936d69991d0f6486b10e00df045e6d1
MD5 96daeab76f612347088c1b41622a9400
SHA1 bc556081e82fb0af0e2c8b40415e602590f2a84b
SHA512 f2e0ea6156086c0b44e5386a41a0912ac8299e229a3bfa17594ee9369362d70308476124fead46d91d7b521653af496795ae72aa5fa37e6ce390fb6cc09142cd
TLSH
T165319BF793B4997E860092E4EB156F1FCE690524131C3CA689D46D2B43F29B2D10038E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 100d482647f24a80aedb91cd846acac190784746e9320bc78eda4a570b80b36a
MD5 92d5857e211bbe68e9076a6ae210c61b
SHA1 9c9f6223ba29fb953112d618672e8d37eadf99be
SHA512 895fc59394bc0c3f05024e697ed921a93ad254a2a9f3701e1c755e0ff03c1c8a4b9d152b77a50d19db105f31425b4b113f9b8f45c11f39c689e1366b614fc736
SSDEEP 192:FRybiEBmHv7MF+pAPRp2S9HHb3b+WNnZhPAw21eserD7fUUVyIsnAUge:FRybePgoUX915bP12PerDHe
TLSH
T11042A46AEE11697B6CCAD219FE227B53D7F5102221D01E94EAFC892C15EB6CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 92cf84c898b890a419bd2044c7f7744f48624b46551c644a2132d3b448cf064c
MD5 105303ce7f7f7790e3a59ff68b5fb27f
SHA1 b691ef9bd2d9b7e6cada3e5d1db0870255019d63
SHA512 72d79427c15ef8a32858dc2dc49890592511c345d7609b9ba9d57c04407ad565e9f242890f63fac716e429f727949ab7bafebb8616493c8909fe305f967c7885
SSDEEP 192:FRybiEBTQv7MF+p2PRpYB/9HHbrb+WNnZhPcw21eserD7fUHVyIsnAUgE:FRybrMgo6XU11bPB2PerDcE
TLSH
T1CB52C56AED116D7B6CCAD219FD62BB13D7F5103221D01E94EAFC8A2C15EB6CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 455ee36ea4610284d6d166544a470fd1754bf3a270be20951dffd7cc980e82ee
MD5 b4f44ec6ca2b7a502fb14b2986d49a87
SHA1 819ae56730b9e6fa5e3f17298dc7e1b82b028b99
SHA512 870bae78217c4a3f7d09068317f96a3053a6304d8c782172af58abb713b7b0d82916956e8397a30f445d4e15960c97b66d632788799ce8d342d457e4734fd64c
SSDEEP 192:FRybkEBTQv7MF+p2PRpYB/9HHbYWb+WNnZhPcw21eserD7fUHVyIsnAUgE:FRybJMgo6XU1cqbPB2PerDcE
TLSH
T19952C56AED116D7B6CCAD219FD22BB53E7F5103221D01E94EAFC8A2C15E76CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 bf74abef15b90ca09c9c813c4e747924aefa6f69cd6827b9c2b6fede238ce553
MD5 ce068c3e42fab0a13ac726a0efac48c5
SHA1 d64e4464f89a8be7ce9700aeadcda7a7bc56af3f
SHA512 d57e9e3a7b4b07355ae81d6499339729bce5b3fd1d9e3dbacbee985c7dd94aaebb2cd2fbaf75883612fabd76e7d0328b065961d230da7fb94f833f13ecdab1f2
SSDEEP 192:FRybiEBmQv7MF+pAPRp2Bt9HHbfb+WNnZhPWw21eserD7fUBVyIsnAUgE:FRybeMgoUXY1RbPv2PerDIE
TLSH
T18842B56EED116D7B6CCAD219FD627B13E7F5102221D01E94EAFC8A2C15EB6CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 665f22058ed3623a0c65e81f707207dfe4ad852c2fcf858a170f7eabf819487d
MD5 4c4f3a4fd0d595cb7e924af21db7e14f
SHA1 cb7605478d301d1cacd0a2cf4e9a96a73cb2b08c
SHA512 6609a20e907d398d08dfc211959cb26d9ed6aeab4c68ef097cf963a1bf209284898a33422442e482a6400a50802afa5e2b7186419f6bd787afafcf170b037fc2
SSDEEP 192:FRybiEBm/v7MF+pAPRp2BC9HHbjb+WNnZhPWw21eserD7fUBVyIsnAUgE:FRybeXgoUXv1tbPv2PerDIE
TLSH
T12842B46EED116D7B6CCAD219FD627B13E7F5102221D01E94EAFC8A2C15EB6CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 34d3b150d9ebc3413240a436dcd8cc4d2da0e46d00a681d2118263aea9d32f3e
MD5 73285efb9f7ee0bd384426865ccccf8e
SHA1 51903f2b7a36fa90857257254c2bebdfe5da7eef
SHA512 e9bab3e8a04453bd7ca516137298f57170d38058ccd5df170108532fdb6eefb2d5ae94de47967a5242cb07be597050bef4f69d7f740877c626e131f01424e28d
SSDEEP 384:TRjPq7KxkXqKf/pUZNCgVLH2HfgslT37pLuLcSjFgXODPO+ErU3voHGjBm2oR0h9:TxPq7KxkXqKf/pUZNCgVLH2HfgsV37pM
TLSH
T1287219676C4C8E7B0F94CACCDC167F4F9DB5025B65EA886482FA582903D5ADF01061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 2b7ea91a7d7f480461e266bc1c5c4d8899302d88c41717fa2f0bb29c9443e7c8
MD5 f446c1c95d0174c7477e72ea584c52cc
SHA1 16577bdb3ab0a4792f74e76ec7e04206350a66af
SHA512 bfbbeec88a150b98c2720f2ce8c501aade75f614bf176bc0d16e001cbf75e3e6b6a8824be812c22d86147791dafe7ee8d316f8a41d5284cf3ff1b0fa71279c0c
TLSH
T1BFB0128180426642C01712F4264224887154DF18A60B174143E4692688261608018151
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a4c7.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58a4c7.TMP
Size 96B
SHA256 516fa6023dcb5a60787e428dc45bbc514d9bc8feb75974573f470f49d5f6660e
MD5 5c7511ab2dd15feba909510b102da4e5
SHA1 dedc069af83fb35be00f91453ee37af3455e4d3f
SHA512 a25d497abecf094d7374203aa2524fafb0d75c89e92144ef899c1f97eb5f7992e5f78a027e20f6e815d696c20704265748a0f3e94afa96262824036dcc8544d7
TLSH
T156B02208C082A202C38283B02880ABCCB020CF30CA030323EAE00A22CC223200828020
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 9fd60b40aeefa8addb02ed86b9b44e568aec45b70b85dac6786a20a10662f530
MD5 282ff9a93f252d6c682095ad32ad0bba
SHA1 53a64283f6de742933a67439a23ed6e48c69aeea
SHA512 233f437522089c2b2f79e848937cc168d40890b846949f26269c7f3d3909072b1bf323c329f0b55ecf419d8d004312c39f3ea2a219ce7173344baac873e5e1bb
SSDEEP 3072:qhGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:qwm7Rkm1tYpBeh2BAoM
TLSH
T12EC302375D75A83759B9BB1EB08E0A1F1EF14AA7C830DA96C8D85A0433F97CC1A45D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 5bde4c872e75645a95056fe8fa0c0d7b6baebbd96bb0460421de0cafc5fe2503
MD5 29b81ee37a4c40bdac0554fbca2a1a09
SHA1 9c87f306de5f32df4ef026e8ad3c46213005b70e
SHA512 6bf1563bfe4f0d6f668585a90788c4dc6342e4f6f1235b19eb3530d677291cb8eee87a07a495abcb9767e0060e4eb9a664244c5ee5f1ab025b41f40bb25cd04a
SSDEEP 3072:ChGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:Cwm7Rkm1tYpBeh2BAoM
TLSH
T1F6C3023B5D75A83759B9BB1EB08E0A1F1EF14AA7C830DA96C8D85A0433F97CC1A45D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 1400587b6df101ea0b7f81f9afc70dc20bbc7f5cd9eff91bf189898075b6d954
MD5 2938795701054fd32f36408edcb822da
SHA1 bc69be7e514e7630a212218c0882ce9d3a768ffc
SHA512 9debeffa163f882fd24182933c57dd12f7dd6640ec63aad084382b31de1580579455604ea27287097fa9c113ec1aa8cdb30aeb6dd54738797d4ce8346d7dd617
SSDEEP 3072:nYGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:nTm7Rkm1tYpBeh2BAoM
TLSH
T191C302275D75E83759B9BB1EB04E0B1F1EF14AA6C820DA92C8D85B0423FA7CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 9bd512c3510493618896f53bf13e28a1bf3e3a7fa8b34242c945d464881913f4
MD5 9356848ea30b1c151b2f8c205f9a237f
SHA1 5a09e0f7ddd961fb9eb49f5c26d9f488add8c926
SHA512 76e5b9b9d0cda13e9c70d8cc65b40517df7291753d29f92e9048fd25757cd372d6e18ce78e295b0274823652285dc06070f9f459351bf9510c2caaea553a698a
SSDEEP 3072:/SGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:/lm7Rkm1tYpBeh2BAoM
TLSH
T1F0C312275E75E9375879BB0EB08E0B1F1EF14AA6D830DA92C8D86B0467F97CC1A05D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 40e72db7d388da74009348a98c28f530d3983c3a83eaf6a30cea8a20e148cdb6
MD5 b67836540cba58f8350f568405e5dd65
SHA1 a410a1f11cfe655b350e9d0a7537494a28d28bc6
SHA512 ff973134926c1be98b39e663e1b5412486de1bf17945f2b4428b62874edc2b749abb94c615251be90023591f28b020bf38ad308780a16fd41b5cb6c2dca1005a
SSDEEP 3072:CYGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:CTm7Rkm1tYpBeh2BAoM
TLSH
T11CC302275D75ED3759B9BB1EB04E0B1F1EF14AA6C830DA92C8D85B0423FA7CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download