a106b919dbc3fc70f9545bbef295394f1203a1513afa2c821c99e1160a741be0

Resubmissions

06/08/2026, 14:33

260806-rw4jpatbjg3

06/08/2026, 14:30

06/08/2026, 14:27

06/08/2026, 14:25

06/08/2026, 14:22

06/08/2026, 14:19

06/08/2026, 14:14

Analysis

user interaction
yes
max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/08/2026, 14:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
12940985a546ecafaa95cc3f87fd9d0d.jpg
Size 54KB
Sample260806-rmy8lsac79
SHA256 a106b919dbc3fc70f9545bbef295394f1203a1513afa2c821c99e1160a741be0
MD5 ec369b34fe52344349e0973b4a73462c
SHA1 ec0d170ac861c19ee511c37c1c8b727f690da2cd
SHA512 3a60c700660f06b8e5b320c05d8e893f8ea3c28d841513d0b7c7b0e4375dcc833088897278f7bd64f8ff4565cbe4140c4806b5a418424fc630840618fca76183
SSDEEP 768:j5Khh/aseRG1iV++PxNNneZAmaOgofO5EI9z36Rpa1dvzhnjTu/qnDygG0L3IL4/:j5gLeRrxve9Rqn9z3KpahnG/GOgG0UmH
TLSH
T14643E172B2565442C290ABF25D18073B1D68DE11F9CD5553E5C98FB872AC2F0CD7A2DC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2076	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134304995801377599"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{77C01CD3-95E2-4B20-8D11-8550D8299CB3}	chrome.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
1736	mspaint.exe
1736	mspaint.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
2108	chrome.exe
2108	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 20 IoCs

pid	Process
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe
Token: SeShutdownPrivilege	4260	chrome.exe
Token: SeCreatePagefilePrivilege	4260	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe
4260	chrome.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1736	mspaint.exe
1736	mspaint.exe
1736	mspaint.exe
1736	mspaint.exe

Suspicious use of WriteProcessMemory 54 IoCs

description	pid	Process	procid_target
PID 4260 wrote to memory of 704	4260	chrome.exe	100
PID 4260 wrote to memory of 2328	4260	chrome.exe	101
PID 4260 wrote to memory of 2328	4260	chrome.exe	101
PID 4260 wrote to memory of 2076	4260	chrome.exe	102
PID 4260 wrote to memory of 2832	4260	chrome.exe	103
PID 4260 wrote to memory of 2832	4260	chrome.exe	103
PID 4260 wrote to memory of 596	4260	chrome.exe	105
PID 4260 wrote to memory of 2748	4260	chrome.exe	106
PID 4260 wrote to memory of 596	4260	chrome.exe	105
PID 4260 wrote to memory of 2748	4260	chrome.exe	106
PID 4260 wrote to memory of 1968	4260	chrome.exe	107
PID 4260 wrote to memory of 1968	4260	chrome.exe	107
PID 4260 wrote to memory of 1752	4260	chrome.exe	109
PID 4260 wrote to memory of 1752	4260	chrome.exe	109
PID 4260 wrote to memory of 3956	4260	chrome.exe	111
PID 4260 wrote to memory of 3768	4260	chrome.exe	116
PID 4260 wrote to memory of 3768	4260	chrome.exe	116
PID 4260 wrote to memory of 4792	4260	chrome.exe	117
PID 4260 wrote to memory of 4792	4260	chrome.exe	117
PID 4260 wrote to memory of 3320	4260	chrome.exe	118
PID 4260 wrote to memory of 3320	4260	chrome.exe	118
PID 4260 wrote to memory of 4860	4260	chrome.exe	119
PID 4260 wrote to memory of 4860	4260	chrome.exe	119
PID 4260 wrote to memory of 3208	4260	chrome.exe	123
PID 4260 wrote to memory of 1980	4260	chrome.exe	124
PID 4260 wrote to memory of 3408	4260	chrome.exe	125
PID 4260 wrote to memory of 3676	4260	chrome.exe	126
PID 4260 wrote to memory of 3676	4260	chrome.exe	126
PID 4260 wrote to memory of 4924	4260	chrome.exe	127
PID 4260 wrote to memory of 4924	4260	chrome.exe	127
PID 4260 wrote to memory of 5104	4260	chrome.exe	128
PID 4260 wrote to memory of 5104	4260	chrome.exe	128
PID 4260 wrote to memory of 2108	4260	chrome.exe	129
PID 4260 wrote to memory of 4704	4260	chrome.exe	130
PID 4260 wrote to memory of 4704	4260	chrome.exe	130
PID 4260 wrote to memory of 3344	4260	chrome.exe	131
PID 4260 wrote to memory of 3344	4260	chrome.exe	131
PID 4260 wrote to memory of 1748	4260	chrome.exe	132
PID 4260 wrote to memory of 1748	4260	chrome.exe	132
PID 4260 wrote to memory of 4804	4260	chrome.exe	133
PID 4260 wrote to memory of 4804	4260	chrome.exe	133
PID 4260 wrote to memory of 2392	4260	chrome.exe	134
PID 4260 wrote to memory of 2392	4260	chrome.exe	134
PID 4260 wrote to memory of 1864	4260	chrome.exe	135
PID 4260 wrote to memory of 3480	4260	chrome.exe	136
PID 4260 wrote to memory of 3480	4260	chrome.exe	136
PID 4260 wrote to memory of 2468	4260	chrome.exe	137
PID 4260 wrote to memory of 2468	4260	chrome.exe	137
PID 4260 wrote to memory of 4660	4260	chrome.exe	138
PID 4260 wrote to memory of 4660	4260	chrome.exe	138
PID 4260 wrote to memory of 1740	4260	chrome.exe	139
PID 4260 wrote to memory of 1740	4260	chrome.exe	139
PID 4260 wrote to memory of 3768	4260	chrome.exe	140
PID 4260 wrote to memory of 3768	4260	chrome.exe	140

C:\Windows\system32\mspaint.exe
"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\12940985a546ecafaa95cc3f87fd9d0d.jpg"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1736

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:2064

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffbd08bc728,0x7ffbd08bc734,0x7ffbd08bc740
  2⤵
  PID:704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1748,i,13890100594247199452,13317330532897941854,262144 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2052 /prefetch:2
  2⤵
  PID:2328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1656,i,16265156617463161785,2018090400974371548,524288 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2408,i,8545584081019852823,15687244139537492205,524288 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2536 /prefetch:8
  2⤵
  PID:2832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3264,i,11604858178455933796,4232392159801131968,2097152 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3472,i,17671692911173246197,14977758750422510848,2097152 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:2748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4440,i,13733271725197655741,7287777431550404255,2097152 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4484 /prefetch:2
  2⤵
  PID:1968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4744,i,12408172735910208279,18390497466563671818,2097152 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:1752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5500,i,3789239071931303942,14711546952010366971,524288 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5348 /prefetch:8
  2⤵
  PID:3956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5504,i,14979451298928947585,14783772235329778019,2097152 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5676 /prefetch:1
  2⤵
  PID:3768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4756,i,5858728688573620130,6129301944177852760,2097152 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6016 /prefetch:1
  2⤵
  PID:4792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4820,i,4563988783711608631,11240013173554746107,2097152 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:3320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4828,i,17556729656655128067,10337471574276546459,2097152 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4824 /prefetch:1
  2⤵
  PID:4860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5880,i,11566077287316941899,10105278356440415613,524288 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:3208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5584,i,12754282224053070917,8470320392603590656,524288 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4760 /prefetch:8
  2⤵
  PID:1980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4856,i,3096762993039913656,8018209328999115243,524288 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=240 /prefetch:8
  2⤵
  PID:3408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5076,i,16826691275407446613,13723647501894371153,2097152 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4452 /prefetch:1
  2⤵
  PID:3676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=3504,i,17587408441355044075,7444800923631362514,2097152 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:4924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3140,i,4945299213508371917,10569470686303793129,2097152 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4728 /prefetch:1
  2⤵
  PID:5104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5956,i,13819260765330636457,10029016692474949984,262144 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6120 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6116,i,1284949458048334944,15199343834909784014,2097152 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6140 /prefetch:1
  2⤵
  PID:4704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=4596,i,5552727805480914288,101664424190805843,2097152 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:3344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5972,i,5617902371084971857,4207004462136507738,2097152 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4464 /prefetch:1
  2⤵
  PID:1748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=3992,i,6455088884329669301,10954866256390774324,2097152 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4512 /prefetch:1
  2⤵
  PID:4804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=5856,i,11705763949026645244,16314200741260435907,2097152 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5956 /prefetch:1
  2⤵
  PID:2392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6392,i,12865206233504865636,6731545901718180898,524288 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6416 /prefetch:8
  2⤵
  - Modifies registry class
  PID:1864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6036,i,13751191676325373341,3652025839681589489,524288 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6396 /prefetch:8
  2⤵
  PID:3480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6460,i,5253652055273624683,3610751060541800528,2097152 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5860 /prefetch:1
  2⤵
  PID:2468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=864,i,3215443843845378487,835057890435223271,2097152 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6720 /prefetch:1
  2⤵
  PID:4660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=5864,i,6396047049171594933,11569815604443897082,2097152 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5072 /prefetch:1
  2⤵
  PID:1740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=6732,i,2910135150599726234,2634747812462101525,2097152 --field-trial-handle=2056,i,13110980837605242633,3904106742663681186,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6740 /prefetch:1
  2⤵
  PID:3768

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4004

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4572

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 e6c216973f33f5de0c10036d3b5ba6b8750869e16c676652f6c46d1e887be23d
MD5 6262538c27b1b540c3b5473728275e86
SHA1 380154397b66e3f49c5b3965035c9e46329364be
SHA512 e08fc9462e9dde831473411ab0fc7c5d059f661791f6f26b9fd64c19664dc6cfe28433488138dfea4170a18dbe492648cace4605cd418dc8049f1878867cc58d
TLSH
T1A4E02BDAC921FC375CFDC71D50904A45EA11135737A0855F3A3C811C8FB06A70587D6C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005
Size 71KB
SHA256 99ff0be776dea84eaa37ec69b52f6304cd4b37a60677782d9b505b70183b8de4
MD5 9cabca241ae51db3e05f219326a7f445
SHA1 7242a774a9abca60ad895da8e88691b963bc9a43
SHA512 f121a88d2869d4ecb7c3daa69938d7116f237060ff4126e9f9eb3a7ef2f2e8e041a6b1399f8042e9c3560fc1930249add9662d56088e32c739e8210489094b14
SSDEEP 1536:4W7XKPClEZFrypihpDlvQ3Q1WIk4Yfzea3ajKp7FJlcvyPy1:4W7aayl1Wf4SOj1KPy1
TLSH
T1056302C496F6CB8AE7F320CFC84802A6FF045BEEDDD434A9BA791894E990605FF85145
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000018

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000018
Size 331KB
SHA256 db4ffbf0ec662620013dc14bc1268bdad6256d19d7d511ec7eff8446887e6900
MD5 05ef8155cf66131654d3bb9c9cba5853
SHA1 e79d53fcb604921222dd1dbc2f1c10c631ff6075
SHA512 ee38793245d91683ddb1f847e5b56a09864fd32ec059055459b3ebe101abed79683ee59c80f30b8f6249d2bbd83fbf7bca83dafb4ef2b634ceff6969c80fed23
SSDEEP 6144:FljUD58FLTW53eaLkNv+Ps0dj1fpqaGjYf0NIcB3bM1rJZ24:FDm5uaLcv+PFj7ajJNImbM1rD
TLSH
T1247423A9B50E3C8AC94F9473827EAFD2A4356FF38D47BAA3634241F401874342E4676D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 384B
SHA256 8b6c277b6fd1c1ab3668a0ddf2aaaa962f82937d444170a6a67da0c0fb8c5c3e
MD5 209ff46449ab8c44ad75d6e25244cdc6
SHA1 a7f3624b20cfb84c80a2f1f45dc51f4b4fe1aa9a
SHA512 2f7a260c20412d81f46ec376b0e3a32aafbc2fe11ca0b1115752fda508bfc2d815fa75d73fc8126f3d43b88bb2c07b874c82a8fd0d58dbc6532d4641ff413a3f
TLSH
T1EEE0C2445851C082EF4C43F1A6D08D86F9B4801C0A475FD2E5C658F398F43B0EC05C77
MD5 SHA1 SHA512 TLSH

Submit Download

00000000

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\00\00000000
Size 25B
SHA256 5d09c9893a79999fd1b32b5f1ea81cf68b1ce0a7676b8c8a50d705715980ae52
MD5 bf20ac2bcc2f681dfc7b1cd6704efa69
SHA1 b32864378a4e1e54e6d6ac005f0044e5e5feddf9
SHA512 5d7c2885528ea992b2d8120b44e73773c91fe5a7b56dea31e61c5b262ddf216e66ea7bb316e1a6b0e14872aa079f3c97f587df268c1135a6882eaaa8e0bbf23b
MD5 SHA1 SHA512

Submit Download

000001.dbtmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\000001.dbtmp
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 a813ef258b2940e7167fa1aab30cebb4b57b0307152bdc439053fa13f8c2ee87
MD5 a7ea1c79a1bb47bfa627f4357fc2d3ac
SHA1 632f741abf50b815a32995243c6388fa971bea25
SHA512 fb191347c858f89659773fdeb02afdf2adbb1aee68362f0058e2d7bc7d24bfdc05a5a29cfceedd2eec123f6b61764f2e197731d4163d6b86c94f438f68fb24ac
SSDEEP 96:Dy+B8cBJ+VaIViBKBNBdwB6B0BtB/BFB5cbsB9lQK:Dy+B8cBIVaIViBKBNBdwB6B0BtB/BFBF
TLSH
T161B16CF7D3E8856D891292F4EB24AE1FCE690914431C3D6AC9E4AE1B93E3572D24074F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 513d31c9abc667caf0baba09b59864310f07d8518d3475295fdbee3e84897fc1
MD5 596aa7a595b67a89ad677eb2f46f20fb
SHA1 686db2bc2979a40879e7c8fa6e7fe07de62672fb
SHA512 8f725fb28f16350347b58fbe3eae9b8293ec853e5ad0bfe9fadb6a898b291f8fa356aec23413e591bbdcbf05b2f0282d2087ff2dcd6cf50d28dc0fc0ea49e87f
SSDEEP 192:kRFOfieE9f8bVyv7ApAPRp2X+9qH0Pb+WNn74pUj2IeSehmrHVyIsnAUgtaJ:kRFOfLEmekUXBkSsO2fBm18
TLSH
T1C552B52AAE106A7B9CDBC219FA667B63D7F1103531902ED4EAFC992C14E75CC321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 ecd89a1a7042ec86dac27b83c474c7858afe2299962cd968cfda9783d2131d0a
MD5 b03fda6cf110d762e8ca4c877615d663
SHA1 6fd40ff8687e40ef996db4da1c2fb3cd5cf8e1c6
SHA512 27c4946c84c7b48a1c793c6cc455406622a6b67f5319a20aa68b26e71a55c998726476185a96047fb07f720b2b1899a6ab0a87d3a1fd4e06f9c63775d0592d98
SSDEEP 192:KRFOfieE9f8bSLv7AwwPRp2GOD+9qH0Pb+WN+9c7WUj+Mj2keSehmrwVyIsnAUge:KRFOfLEFzkBXHkSRJV2LBmIe
TLSH
T1A862C72AA9106A7BACD7D219F9557B27E7F1203531902ED4EAFC892C14E75CC7217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 46c29479ab7307ea894a354193397cc4f1c31dd2da1bec72fdc3b13ca8608c8f
MD5 318c9041d5b7cc789cc49274ccef265e
SHA1 5f392b4fee7b9d60b2e3c2ac449476f0f0633962
SHA512 052b49749fee52cfad9d2b8679a319b0f18f62e31bba73be3e41829f79fd45deeffd65f981ad1b974bccfd12e550d2c5447ed3e9313a656e6ab1118c331d45c9
SSDEEP 192:KRFOfieE9f8bVcv7AwwPRp2X+9qH0Pb+WN+9H3PUj2weSehmrwVyIsnAUgraJ:KRFOfLEmIkBXBkSKc23BmIe
TLSH
T1E252C82AAE10697BACDBD219FA567B63E7F1203531902E94DBFC992C14E75CC321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 3e1791c91ae9f965fa16fe9b049c1de32e61b1e659a98502c0fad6ac9967ce84
MD5 2c804f6a77f56adeae8b125fdccce940
SHA1 21f7fba46826caf604243f40e32abd48cfa39447
SHA512 34289efbf0479e1cf898231a8fd1c6eb38957cd23738bd5374e6ce8ec5a7a9ddf3d9d82914674f3f06e8b19a41eebdd2fa692c78cbf0446894c95ce9b910681b
SSDEEP 192:KRFOfieE9f8bVyv7AwAPRp2X+9qH0Pb+WN+92FmUj2qeSehmrHVyIsnAUgtaJ:KRFOfLEmekBXBkStZ2BBm18
TLSH
T12C52B62AAE10697B9CDBC219FA227B23D7F1102531902ED4EAFC992C24D75CC321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 b22e6284589ad993f572c39fa9bb481aed656363c6c3f409c442c09cb5e7b7c7
MD5 b4685b020f44f32d9200e16739f97c8e
SHA1 db3d04f60f01e38ae6bc04016a6754c568718e24
SHA512 c0cde21924e01f83d8d445f1bbdae927f7f880966c345c8e118a7ba686cd7e09e464677d7ba4f928b1524cb267158fc3555399885965e6d2edce7bf234b908a1
SSDEEP 384:MRF2mzfLEPMTBXcFBvykSXvff8VqP2XBmIe:hmzfCi7kSXvOXBI
TLSH
T1F472B52BE9202A7B9DDBC269F911BB27E3F1202565C02D94EAFC992C14D76CC7207417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 9fbd258378206187fb260661f259fbbc8c6165004a744d17faa69934a6b2a954
MD5 1a4d6f67929c8079bde7a2d892fdbcb9
SHA1 8f9575a557879e5cacac4ed36a0369d32c75dbd6
SHA512 57fe0f2ba27d338ab384a8942beb05ebecc2b491a760fdb2e819088ff01f681124dc8b09f99072c47a06d526258bc327ad2352e3ed8db05042921490436e3e67
SSDEEP 192:KRF2cBzfieE9f8bSQv7AwwPRp2GvX+9qH0Pb+WN+9c7WUj+Mj2keSehmrwVyIsnB:KRF2mzfLEFMkBXWkSRJV2LBmIe
TLSH
T12A62C72AA9106A7B9CDBD219F9557B27E7F1203621902ED4EAFC892C14E76CC7217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 e789ac5c6c8af99a92fbbd8e2eb1155f7bd44d0eb3292da814517f0dba15a466
MD5 7e8501854e1f49e2bac1270f11264070
SHA1 3f6d1830862bea7c40088d22e29433191d90fa8e
SHA512 e205b8ecfa67881f7a7960163c26bb1f6f5fa2bb9ec09df08b297f57121bac92cd999a704c2eb23fc71c8eebc8a0625272694af8c4b988ce9ea6247e68473453
SSDEEP 192:KRFOfieE9f8bVjv7AwAPRp2X+9qH0Pb+WN+92FmUj2jeSehmrSVyIsnAUgraJ:KRFOfLEmbkBXBkStZ2aBmGe
TLSH
T1F652C72AAA10697BACDBD219FA527B23D7F1102531D02E94EBFC992C14E75CC321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 13805701603dbbca9403b94e006c712edafb4f98a8e0ae4ce0ad1b025b835f93
MD5 28aca1b912d001e337a9e715a111a353
SHA1 177a8b35a6fa74a15deedffd79dc9066169fc496
SHA512 0e554b40f873ea651a22f9b91cf52ad45cc99b35e2db0e34845d695aa13aaf61497b6646f39f5b0ba26fc4a43100e92a0aff8ad949d0289fb397cfe00b0cede5
SSDEEP 384:V7jxY7KxkXqKf/pUZNCgVLH2HfgsluX7pLuLcSjvKXODx4+ErU31PHG0pdpS8gfp:V3xY7KxkXqKf/pUZNCgVLH2HfgskX7pf
TLSH
T1A4720967AC0C9E374F94D6CCDC277B4FADB5015B61E9886483FA981903D5BCA110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 231db5d9de1bc45d225e26a82bb5d72419e02739e8b1fadc5f0e9c7c732d9726
MD5 5cf772bb66bf5fe47df8e489e1b49969
SHA1 5976a9bf1e7cbac82cf28cd3b4235f2594fba5fd
SHA512 6ded886689e3bd2a6aaace63aef024a6b106eabc90acc023d910cdb3b75adcbcb6f893b17815b0c545d20eaf9e2b8eae79037dcd659501f36b2bcb5a1a5ca990
TLSH
T1A9B012408141A101C04202F4515718DC7214AF11960B1B0143E06FA2D829151E018051
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e1fe.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58e1fe.TMP
Size 96B
SHA256 24e2c6ae5890e3932f1af7d17fa7d02226cca65c10afbbcfd21495fc0030cd5a
MD5 26e1a2b53113860ed5dcd6f776615ebd
SHA1 5b9904bda08cf5fe0a1bf71256aa88c8d73eea46
SHA512 daaafd4d47ec0b309909331b7b9420d7f586c6724f7dc7030c88f4cad67cf2ccc69ab93275977a8d9b0e2b6b0b4872ee058086f41113fd6d858441ed6c1ecefa
TLSH
T10FB00255C1427312C04603B12DA59DD8B561DF25C60B2216D2F02BA6DC69A654525661
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\FileSystem\t\Paths\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\IndexedDB\indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 b0348b4151d13f660319c322c74457ec553a9ab98c818afb436d00cf145e1bd5
MD5 addadb20711f871b5501000197790d66
SHA1 d90a68ccb1a719f005e4948056ed93044dfb23cb
SHA512 b6d65aa913a90b2d480342e905cd311c707c6c1478514429535525d2f9e5b82e096e0b275549b1ade0ac99186499ce14591aa55d16a038423df488bc61244604
SSDEEP 6144:VIWSfybk+WaOARvsx5gyLGMm7Rkm1tYpBeh2BAo2:S5ybkIZEgH/9oBGcAo2
TLSH
T17C34233E6E4A7F7B59A8BF1D710E2B1E1DB15AA2DC14E985EDC91F0013ACA9C4D05E30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 357709feba91638ebb528d5bfee5a0e0d2b9d3fb12a23ae6606f49020567bc59
MD5 38769727af7125e17b77c89cb1e8c4a8
SHA1 e5982d8f75d8d5fc25975ee3c5d5d9e291e9f5c4
SHA512 1e095bda690fea192d007a36537377d348f3183d991dc69d776274baa4c51b74dad6d0c9f50a8a62c983946ae3ead71fd046905906fb7005cb063a22b8dc45f6
SSDEEP 3072:ANGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:rm7Rkm1tYpBeh2BAog
TLSH
T162C3123B5E75EC3B5CB5A74EB08E0B1E2EF149A6C920DE9288D85A0437F97CD0A44D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 27f88777df662a46c5051db3dd70643b6f5d51c31e09bcd98c7ccca22d995a37
MD5 372779c3d9e4eebbf57180a163438688
SHA1 d468639a0004670353a788bf43f57ef7e3e749ee
SHA512 96a4d7a0fccaaf022e6d3eaa500ecfbbc995a6c8691cb6a32b2b1de9c51faa85d5ad638323bf81e5d99c4b6c8fa1421a4e2dd55d35661a58800cd66069226276
SSDEEP 6144:eIWSfybk+WaOARvsx5gyLGMm7Rkm1tYpBeh2BAo2:F5ybkIZEgH/9oBGcAo2
TLSH
T17734233E6E4A7F7B59A8BF1D710E2B1E1DB15AA2DC14E985EDC91F0013ACA9C4D05E30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 953d8c57606f3ebed6c9f13e8874800461c504f4857f44cfe0b0e744172eda02
MD5 49b27fb51379bc9611882c1a7284ff7a
SHA1 a78a7eff4ffc18cc7b336b202b4fed93c67763c9
SHA512 a8c0b719810dcc66bc747be35ee78b9e4a85392ba525ccf654f3a748b2f5d0390e51a27440bb7d2e18073509b675626daa466988f353b1f3c095b58cae4ad3ce
SSDEEP 6144:lWSfybk+WaOARvsx5gyLGMm7Rkm1tYpBeh2BAo2:l5ybkIZEgH/9oBGcAo2
TLSH
T19B34232E5E4E7F7F59A8BB1D710E1B1E1EB209B2EC54A596DDC51B0013E8E9C0D09E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 dd267c848d9306661200c04f929688e08cd0a0acf6f79bc478ef29911a53571c
MD5 9c7dfb6e2e2fc826cb57aeeb5510d91c
SHA1 d268f85857e4dbde30db73976fe51882dd72d51a
SHA512 1bb0e1c9fc823beb27ba6f562fe2543ea1d5100a9d6d23aee082a5225a4b97230cf4984b4ea6dd3cabde3351688c0ad52a2fc53c3c98bda20f0c13a33bb0d98f
SSDEEP 6144:hWSfybk+WaOARvsx5gyLGMm7Rkm1tYpBeh2BAo2:h5ybkIZEgH/9oBGcAo2
TLSH
T16334232E5E4E7F7F59A8BB1D710E1B1E1EB109B2EC54A596DEC51B0013E8E9C0D09E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 e1a672bdc5c993b5237f4db841677e064fa29c3ea3cb38fed95adc16ff9aadb7
MD5 2fa63595e0c7a0d0d3c966c28aeb706b
SHA1 d9e3b4db823dfd1a497cbb4a503e4feacadbf6fa
SHA512 51443e503e293a87d5d3503063cf3351fe7d5e876b22da8a7f1dc99ebe832939087e252687376400dae650cad1172de9240fac146e66a6d6ef62dc652c9701d8
SSDEEP 6144:6WSfybk+WaOARvsx5gyLGMm7Rkm1tYpBeh2BAo2:65ybkIZEgH/9oBGcAo2
TLSH
T16F34232E5E4E7F3F59A8BB1D710E1B1E1EB149B2EC54A596DEC51B0013E8E9C0D09E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download