1881f49192a8828ff06ff9c56b4b594e9d27b59f7b843ae8ed9c7baa0e561659

Analysis

user interaction
yes
max time kernel
95s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 19:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.txt
Size 105B
Sample260808-ymdp8steje
SHA256 1881f49192a8828ff06ff9c56b4b594e9d27b59f7b843ae8ed9c7baa0e561659
MD5 11b16d52c7c96c0957a63323b3b6525a
SHA1 04420a54467ec2fd37047f2bf0114eb487f91b11
SHA512 3907f8449445d7d7e59cf23eccefd7fbb67db50f1f57ea1bd9948648196bfe66546d1a0b841040737d7dea5af6b190c532cacf7246420e882747b598181aa85d
TLSH
T1BAB0121F470DD80037ADBBB867104A05870921885CCFE98F3E7904BFF40811B64D0CCA
MD5 SHA1 SHA512 TLSH

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 5 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
133	discord.com
135	discord.com
144	discord.com
145	discord.com
173	discord.com

Drops Chrome extension 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnkgmjnbphhjkiiedlfhcjaaomhffhp\1.3.0_0\manifest.json	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2812	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306924537203163"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{F39312BB-C1EC-439D-AA58-49A39B1D1649}	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe
Token: SeShutdownPrivilege	3284	chrome.exe
Token: SeCreatePagefilePrivilege	3284	chrome.exe

Suspicious use of FindShellTrayWindow 41 IoCs

pid	Process
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe
3284	chrome.exe

Suspicious use of WriteProcessMemory 46 IoCs

description	pid	Process	procid_target
PID 3284 wrote to memory of 1236	3284	chrome.exe	87
PID 3284 wrote to memory of 2264	3284	chrome.exe	88
PID 3284 wrote to memory of 2264	3284	chrome.exe	88
PID 3284 wrote to memory of 2812	3284	chrome.exe	89
PID 3284 wrote to memory of 3704	3284	chrome.exe	90
PID 3284 wrote to memory of 3704	3284	chrome.exe	90
PID 3284 wrote to memory of 3368	3284	chrome.exe	92
PID 3284 wrote to memory of 1028	3284	chrome.exe	93
PID 3284 wrote to memory of 3368	3284	chrome.exe	92
PID 3284 wrote to memory of 1028	3284	chrome.exe	93
PID 3284 wrote to memory of 4660	3284	chrome.exe	94
PID 3284 wrote to memory of 4660	3284	chrome.exe	94
PID 3284 wrote to memory of 3916	3284	chrome.exe	95
PID 3284 wrote to memory of 3916	3284	chrome.exe	95
PID 3284 wrote to memory of 2612	3284	chrome.exe	96
PID 3284 wrote to memory of 3228	3284	chrome.exe	98
PID 3284 wrote to memory of 3228	3284	chrome.exe	98
PID 3284 wrote to memory of 1168	3284	chrome.exe	102
PID 3284 wrote to memory of 1168	3284	chrome.exe	102
PID 3284 wrote to memory of 4308	3284	chrome.exe	103
PID 3284 wrote to memory of 4308	3284	chrome.exe	103
PID 3284 wrote to memory of 1432	3284	chrome.exe	105
PID 3284 wrote to memory of 1432	3284	chrome.exe	105
PID 3284 wrote to memory of 2564	3284	chrome.exe	110
PID 3284 wrote to memory of 2612	3284	chrome.exe	111
PID 3284 wrote to memory of 4384	3284	chrome.exe	112
PID 3284 wrote to memory of 3720	3284	chrome.exe	113
PID 3284 wrote to memory of 2436	3284	chrome.exe	114
PID 3284 wrote to memory of 2436	3284	chrome.exe	114
PID 3284 wrote to memory of 4228	3284	chrome.exe	115
PID 3284 wrote to memory of 4228	3284	chrome.exe	115
PID 3284 wrote to memory of 5052	3284	chrome.exe	116
PID 3284 wrote to memory of 5052	3284	chrome.exe	116
PID 3284 wrote to memory of 4852	3284	chrome.exe	117
PID 3284 wrote to memory of 4852	3284	chrome.exe	117
PID 3284 wrote to memory of 3016	3284	chrome.exe	118
PID 3284 wrote to memory of 3016	3284	chrome.exe	118
PID 3284 wrote to memory of 3124	3284	chrome.exe	119
PID 3284 wrote to memory of 3124	3284	chrome.exe	119
PID 3284 wrote to memory of 2412	3284	chrome.exe	121
PID 3284 wrote to memory of 2412	3284	chrome.exe	121
PID 3284 wrote to memory of 2808	3284	chrome.exe	122
PID 3284 wrote to memory of 3488	3284	chrome.exe	123
PID 3284 wrote to memory of 3488	3284	chrome.exe	123
PID 3284 wrote to memory of 2576	3284	chrome.exe	124
PID 3284 wrote to memory of 2576	3284	chrome.exe	124

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\.txt
1⤵
PID:4812

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops Chrome extension
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffe5c15c728,0x7ffe5c15c734,0x7ffe5c15c740
  2⤵
  PID:1236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,16250464622148430036,16789684886050195534,262144 --field-trial-handle=1984,i,15719436404705046167,14398823857187334337,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1980 /prefetch:2
  2⤵
  PID:2264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,1337389732014147739,13309192897887067963,524288 --field-trial-handle=1984,i,15719436404705046167,14398823857187334337,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1804 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2416,i,8327925188455979628,6461358927722177267,524288 --field-trial-handle=1984,i,15719436404705046167,14398823857187334337,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2428 /prefetch:8
  2⤵
  PID:3704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3252,i,17160799956565388915,15276257097802120280,2097152 --field-trial-handle=1984,i,15719436404705046167,14398823857187334337,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:3368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3464,i,354368115121709865,3279277118939967365,2097152 --field-trial-handle=1984,i,15719436404705046167,14398823857187334337,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:1028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4484,i,17315843037411154594,8710941453139384321,2097152 --field-trial-handle=1984,i,15719436404705046167,14398823857187334337,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4496 /prefetch:2
  2⤵
  PID:4660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4728,i,7925914446650316022,4899833597298621828,2097152 --field-trial-handle=1984,i,15719436404705046167,14398823857187334337,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4736 /prefetch:1
  2⤵
  PID:3916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5540,i,9239545946033717299,7016445289616379155,524288 --field-trial-handle=1984,i,15719436404705046167,14398823857187334337,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5536 /prefetch:8
  2⤵
  PID:2612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5744,i,1352893568856313989,166063780581299434,2097152 --field-trial-handle=1984,i,15719436404705046167,14398823857187334337,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5756 /prefetch:1
  2⤵
  PID:3228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5712,i,1681842137341200792,15601871411655657262,2097152 --field-trial-handle=1984,i,15719436404705046167,14398823857187334337,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:1168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3504,i,7252908523430513255,18143605662346255318,2097152 --field-trial-handle=1984,i,15719436404705046167,14398823857187334337,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5968,i,12600205817072222236,1307985132702010920,524288 --field-trial-handle=1984,i,15719436404705046167,14398823857187334337,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6012 /prefetch:8
  2⤵
  PID:1432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5988,i,16165745745381372515,10442567239726914219,524288 --field-trial-handle=1984,i,15719436404705046167,14398823857187334337,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5548 /prefetch:8
  2⤵
  PID:2564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5992,i,3498155726073371928,6735589399110545923,524288 --field-trial-handle=1984,i,15719436404705046167,14398823857187334337,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6088 /prefetch:8
  2⤵
  PID:2612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6076,i,17949314582016936455,141877333711539552,524288 --field-trial-handle=1984,i,15719436404705046167,14398823857187334337,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6084 /prefetch:8
  2⤵
  PID:4384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5960,i,1181194523304585310,3028053256606417049,524288 --field-trial-handle=1984,i,15719436404705046167,14398823857187334337,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4252 /prefetch:8
  2⤵
  PID:3720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3948,i,7330502359955580394,17160226399518739831,524288 --field-trial-handle=1984,i,15719436404705046167,14398823857187334337,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5548 /prefetch:8
  2⤵
  PID:2436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6088,i,8064065966899798819,14661707897401684368,524288 --field-trial-handle=1984,i,15719436404705046167,14398823857187334337,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4900 /prefetch:8
  2⤵
  PID:4228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4524,i,17929628927779577199,12677348325203078864,524288 --field-trial-handle=1984,i,15719436404705046167,14398823857187334337,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:5052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5912,i,3227809458544573682,3420511014775528407,2097152 --field-trial-handle=1984,i,15719436404705046167,14398823857187334337,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6136 /prefetch:2
  2⤵
  PID:4852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=240,i,5540953297403258661,9572434587227835903,2097152 --field-trial-handle=1984,i,15719436404705046167,14398823857187334337,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4612 /prefetch:1
  2⤵
  PID:3016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=4880,i,2807479044584406006,3463584172000580749,2097152 --field-trial-handle=1984,i,15719436404705046167,14398823857187334337,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:3124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5852,i,17860244872108652262,8280001318739609394,2097152 --field-trial-handle=1984,i,15719436404705046167,14398823857187334337,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5720 /prefetch:1
  2⤵
  PID:2412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4752,i,4871054449567879159,12817220076423367152,524288 --field-trial-handle=1984,i,15719436404705046167,14398823857187334337,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4780 /prefetch:8
  2⤵
  - Modifies registry class
  PID:2808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4840,i,1754539847575091137,13218632027682494819,524288 --field-trial-handle=1984,i,15719436404705046167,14398823857187334337,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4820 /prefetch:8
  2⤵
  PID:3488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6248,i,4866369095224725392,10574529530679236648,2097152 --field-trial-handle=1984,i,15719436404705046167,14398823857187334337,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5464 /prefetch:1
  2⤵
  PID:2576

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4200

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4396

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

8fb9016f-cef4-4c03-b5f4-a473a555968f.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\8fb9016f-cef4-4c03-b5f4-a473a555968f.tmp
Size 13KB
SHA256 a5b792ec6b73de8d8aa20a8aee7f86f3032f80252e2d762c111ced1eba03a77c
MD5 7bd4257eba7a5e78d8988959ef37016b
SHA1 a050dfaa4aea9490efebefe05a7de8d0d5d0aede
SHA512 d8d64eda4cccde11e086aabb4b249e3c87f7f56cc1e75ec6caff516036e1a89f557f3b7c80b8e226f40b0484e1965151396f0c1067a4a60564b96ed3a05f7147
SSDEEP 192:eROcBznr1KJfv7spAPRp22OMdz9wHsb+WNrECZ4z42eW7kwQ4qVyIsnAUgtaJ:eROmznu3YUX/fKwDD2J7O8
TLSH
T1F952E63EFD146A3B9CCAC22AF922B757D7F5112521901E94E6FC9D2C18DB9CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 ae814d1012ef2d35ddbb0ee6f574952fbb692bf7a549215880eba1f3213cddde
MD5 0400d7286aadfabf8155eb8dfe4f08bd
SHA1 a17c353656ab7a902995879ed54f3ccc74dcbd53
SHA512 32f4e2e041fecc6b7e94729692555f0c5501f9c05d1d973132341a7053cede6b8d9ebfa0bcb9978dc831f4b5f5ac91dde970c699c7a15f2331e41e0fc2614060
TLSH
T1D3E02B69CD25AC2709FD075950144646E750139B3E81574F3A3D510CCFB062641C6CAC
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 984B
SHA256 3cb53be01bc137b12832c8f3ef0fb01494363a9ed8f89576b184227f645993df
MD5 a333f421982a996a5d2fe5b68ed61fe5
SHA1 c13cd7067d0980c906e96a2138770d7989368050
SHA512 ea9a77375a890e06679a02ea91dce87bebb87ec8bb1c3a3a757febda712e937a840a54b612f8058588d10331ae356f0981d351bce9e204b0aa1b9617fae26fbf
TLSH
T16B116830A64C0E3EFBE02B7190EE4EB45A30066D0B7E5BFED9998F66910137B445A00E
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3284_851881145\CRX_INSTALL\LICENSE
Size 1KB
SHA256 1394d42ecd443b28cc79985bee3b5d11467b3d17a5e3d35cc3ae1f16568874db
MD5 44f7e387ae637c12b24ffb0dea352ae8
SHA1 aec4d316c9ab4c6d401b1af65a0245aa95a6b3ac
SHA512 b17c9eacdb7cd8119f98e00b8fa2db773832363bd090518597117d51977ad6337349ddc6a4b76e97becaa42a6724d0e560f8fa54b6e1e667f46ab9a9472af11a
TLSH
T1B311422E725147621C9A13605578A8D5F22BB25A7A9F2A84246EF245232A06CC5FB844
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3284_851881145\CRX_INSTALL\_metadata\verified_contents.json
Size 2KB
SHA256 d2ff80a390f8d05eba9f25ba730f856234abb26c190df2832ea4f26cce35773a
MD5 5ecf0222c4a142b5251a42bfe6842792
SHA1 94927a978d6afe93c4f9ed189776ca69fb0ae1c5
SHA512 1ddb2a1924cb254e1707d20b8bfd050d7f20671f17efd270baf67f5ffd26828ef75a26782a4c73df5f4d2e7a5611bc2c286b5e6b5291940fc05365ff09de5671
TLSH
T16D41E8B0D87AB18D6814307429B67B325B39D0E9B2D9341F52C39C3DD4EB115A6B70ED
MD5 SHA1 SHA512 TLSH

Submit Download

icon128.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3284_851881145\CRX_INSTALL\icons\icon128.png
Size 18KB
SHA256 e637e4ef94c30730eb3401d90b5601004c1f5f476b831a30f08546d4012ac770
MD5 42f76443a602c62b4a10097437c5f1a0
SHA1 28d2308ae406fdf93d5db7fd8e901dbdc5140cfb
SHA512 2315aeaf93eb4e816dcef7146210ec3495ff6cc19f8f299869e9901d3f7ee4292f0189afcd360eb2b728936989d3048f864e2eb8be521c77bf2fc7f9d750b11c
SSDEEP 384:XYcV3laQPQKOjSMcg6F/BwHD0PypZKHiwcsTrfh2BLgnSg53j:XYcV1f4xr6GpSdcurfh2BLgrt
TLSH
T15E92E1E1474C024B47FE630ADFC4EB79A48B503496FAEDA4C2BB5D39871403C6595AD0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon16.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3284_851881145\CRX_INSTALL\icons\icon16.png
Size 688B
SHA256 535bebd40025fcebf2f86782e2274f5ed3cf66f8eb452817f3fa99000296baef
MD5 10f79657a8b3e868e08a8b90108495aa
SHA1 e9512045aa1521d4459653f3d20470d90605d403
SHA512 32dc41d8e6b88f379c750409e716dfdf24d9c36cc60f1fec7e327b6c57b63b4e52d9cfdc6fbc065f6245808548041188dbdd2ab4893a47654deb32e6a563e7c0
TLSH
T1520144CF422C0434FF995A96A2C4468A352457BBD960E2DB17B6D1288C78688566D506
MD5 SHA1 SHA512 TLSH

Submit Download

icon32.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3284_851881145\CRX_INSTALL\icons\icon32.png
Size 2KB
SHA256 8e491945f0b163f11c1c52fcbdc8c36bba3a8210d8da7d1757e6b756e28acecb
MD5 9275ff7b1df10ada93f23a1b2b71f699
SHA1 b8f7d3ded8822eb94c1716b576bd195a6aa1e78b
SHA512 e74856651c320ee2cbd13e45dbd6279bd146c89e9f891b2ae0045d71a6917d377bb3008d86737afb8201d1032f8d3d84ea039013bad6664c098ea957d6e81b9f
TLSH
T15C413AC77167319A6211822A24B025DFE4A38555DA7233CAC3DA824CE6F1D3F43CD6D0
MD5 SHA1 SHA512 TLSH

Submit Download

icon48.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3284_851881145\CRX_INSTALL\icons\icon48.png
Size 3KB
SHA256 5b17b934e930ffcf3f89432b773a05121e7ea8b988b09591272d8e2dfea5b644
MD5 ec9c51c4f55e105f3db2b38ff9f2a9dc
SHA1 732d660aabae5d54161d510d62dfe93e6d3806c7
SHA512 e853ec1f595ce9696def237716605a323ae8b0e6e9ce28da8d7a1b11e16786090875c29e9afe6065fffc05649e54abf2a759c0a10baf3fd9cbda915b25c6d4b9
TLSH
T162815CB30E2756056C9B606172C471CBAC5BB58DABB78B5DE25BC3A0273C58A382F544
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3284_851881145\CRX_INSTALL\manifest.json
Size 1KB
SHA256 d3d235629fab45aa2ce6e246eb2c17e8434b7b555524acc802a236570962d077
MD5 049d952e8dd0228a0f84a72c8682f8b8
SHA1 f561ef407b37cbf509837e8efbdfe3a90be2b8f8
SHA512 f0e677b99184a75a2cf58d9881d99cc82d5b8e7a752bf294a16d7e01cacedc6e3cd9d604fe33786871331278d78c7c341a24871c1e397e6b3478116eea5a9557
TLSH
T1C021991B8864D87F037C8774ADB65A03F205232E5E81E99E38BCD158CFF035A9591BC9
MD5 SHA1 SHA512 TLSH

Submit Download

popup.css

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3284_851881145\CRX_INSTALL\popup.css
Size 26KB
SHA256 502d14588529d7e7c233d3a41d0e5aa89c5f45968019314b3aa15fe1c2ea8fbd
MD5 6d21841b9afeeb8aea1f0f238ef75de8
SHA1 682df5dae828f033bda66cf1ead1a9bdae33fd8a
SHA512 eb7f47dcdc029be41247d9441e880836a05897fd36097d032363353e53cbabd7a1837b7e45a519dc4b86ad2a692f3c4b4cd1edec9b6e950be1e130ca3495c74b
SSDEEP 768:mL5IUCJI8utOUJn6rNLENlNAdhl40BFFNoCimFLgv8mhCudX7Fzv8c/dA79pbkrE:maLv2M3oCHGks+malym
TLSH
T194C2652663031814B4176B657BFBDB492368B007D606D93CBDD920D8CF992E8EA26FD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

popup.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir3284_851881145\CRX_INSTALL\popup.js
Size 48KB
SHA256 64382c78dd57a6f8cf8d47ea2a0880e4d84b8a657e1e4a8b94dcee9539b06cd9
MD5 721620c73164357b49b6ea3862eaf951
SHA1 7dcc93aacb9efcc86b386bf91ef597523f7146e0
SHA512 6d54a8f6d6b891ee933b0d5af9f6fd4f07720e24926f3d7a82b3f4d314ba23d042b1be00af8e6c38a1832cdbcc390e519d1152f36cc36b9950f4b2abf302bbe4
SSDEEP 768:kFjrIgWiztfFOKEdzGOkRq4ait10YUuwjK/bOHb:kBrIgjRfFyZkRq4zfwjKiHb
TLSH
T11123642A25B3113585632C799BFBAD1536213003E149CE147DADDAC81FB2E94EDB37E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 59698b023541ac94e6896f282ace6fe4be9237916c178386ed26b612be21856b
MD5 73d81465e89fcaea7bb6dd3239073989
SHA1 bc9241af7c596fffa28aae51185fe4d6819aca44
SHA512 315743b69ea17ced31c39188800a0575c2c6420a70743bafa7d23c789f69dd9849cd3e6b2ace70fa029846c6bddb1be7bd6726c6bb86cb90dae322f4b8902512
TLSH
T150416AB3C7D8857D891052F4BA156E1FCD2D0E24535C3D5AC8D8AE0F63E68B5E20058E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 583e8ea60e2edfa60a0c268fa7193fc768db2e5d7fe7e34ecd5cfe0a2e518532
MD5 5a578413f96fd4052bc56594d9ea16ea
SHA1 f1f38544229adf7af8aca6d4e8e2ce5f78cabefe
SHA512 e88f5c97721038d43ed4bd977ac82659188a8c50077a71d791c2d5d3defa7f407e86bfe0370b8b571b711d0750c329eda8b3e418e7eb11ed39685755611c2860
SSDEEP 384:DFKfDbwbbtrhLNuJUdreZ5AzrNWa8fO/UFJ1YSIpr3ednr5aTyGDc1ezxKrrHrpx:ptwQcLf
TLSH
T18842AFF7C3D8C62DC94156F49B156F1FCE2A0928432C3C2AC8D8AE5F93E2971E25164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 d15e1b98fa42fca3ec9b8130c74a68af42dcd35bc3465162f364eb67b417bfec
MD5 00768fec653273350f6b1d98604acd1d
SHA1 3af2a7caeb08df9dae98ea31ce613ac57ce58db2
SHA512 4b2f74dd85ed066c1ddbd97cdbe0c2eafbe49b78086b4ac3b180adca195c1407563a9d218a944c8f464ad74c6da7e9adea84ee450e9af7abcca912352a62aee9
SSDEEP 192:eROcBznrg+KJfv7spAPRp22OMdz9wHsb+WNrECZ4z42eW7kwQ4qVyIsnAUgtaJ:eROmznc3YUX/fKwDD2J7O8
TLSH
T14B52E72EFD142A3B9CD6C22AF922BB57DBF5102521941E94E6FC9D2C14DB9CC321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 69756141204a102ab93d1aef45f11df6576d60f710a1300c6d0f4183e879c999
MD5 908d3fc082112aaf963558e1523fb9e6
SHA1 36d211b08e43824c6026cb88c787a011e7570d56
SHA512 36bc98e737598a0a64645c81b0176f6556c4651c85810a35b3db470ea76f2a61b9209a78aeb129b15830f72fbd97ffe5183756f30eda52234f5fb1141b6c71a1
SSDEEP 192:eROcBznrg+KJPv7spAPRp22OMdz9wHsb+WNrECZ4z42GW7kwQ45VyIsnAUgraJ:eROmzncHYUX/fKwDD2h7De
TLSH
T14652E82EFD542A3BACD6D21AF922BB57D7F1102121841E94E6FC9D2C14EBACC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 379d96542283773f422c052abe7293924621df1604b63c9a59676e1514d2db6c
MD5 d066f854d368cbebca026e5da297c2c3
SHA1 4f2f84d54b0a8dfd273bbdb70bcde51ad5e2f12f
SHA512 613285c6b38983d33fb336394c5eff7edb692f60dfa433defdbf45524dd1c84cadfc8cba744a39b1c75482b318f7db6eaaae9842cfa8649a9ad00cece8442e41
SSDEEP 384:gCjUH7KxkXqKf/pUZNCgVLH2HfgslsZ7pLuLcSjCDXODUr+ErU3/NHGcmyqOqjmo:gCUH7KxkXqKf/pUZNCgVLH2Hfgs+Z7pF
TLSH
T15A7209676C4C9E370F94C6CCD8267F4F9DB5024B65E9886483FA9C2903D5ACB114A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\4a8e30c0-e0de-4f4e-8b1f-2b17254a0176\index-dir\the-real-index
Size 72B
SHA256 93799662392c98f96b3f3c8090ce6721253e6d8921501541e4246b9b6b087e45
MD5 560cf9afea99051371f14c570314d5c7
SHA1 b8bb6324dbc4e4167347576f40d8026dcad18ccc
SHA512 668dfbe783afc53c4d14bce83e48bc9c203882686d8a3062697978d35d85f19f71066f9af51c8a077d2c1cd99c570c360119f9ad2c5801378084c59c2d88b594
TLSH
T167A002659E70A412E1418BFB1461854433246DFD09659205E199DA48D97E2D049C5581
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\4a8e30c0-e0de-4f4e-8b1f-2b17254a0176\index-dir\the-real-index
Size 48B
SHA256 2b0572117425961eb88c53fa58fae96f46a2e4614b12d76d22d67d7927cf616c
MD5 179a763061410340ee0f0b8903f7959e
SHA1 21d459c9b5692ae5f24fc0c0342e1657f8d9d418
SHA512 41e3e0689a2d803cc71ba31af519e167783263d38699a7783bdbe5bd50921c331fb8d30c1fba53809d51cdb747cc3d8b38b2c784c46d1b30a0094910682b213d
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\ecb7b532-a224-4514-a8b6-4639e6893c24\index-dir\the-real-index
Size 72B
SHA256 864f76e0d2250f5b018d63d73571fdd4466b6dbbcfccfa8fc2e6ffbe3aa3bb7b
MD5 219dc6f040a2960d97786d9d605b3b14
SHA1 33f36611a52195a4d68ddcddda8b86ed87f8612d
SHA512 1349724c87b1a3ebf59ac4974dd2e6f840c932c37c6c92e1b1b407812c0ac945b161563e22657f890069f247d4207a6b90c289125e85af776f3caea0a495ff88
TLSH
T1C7A0023591404206C2541A7218F3495476104821414106A655E1048AED503C5D906050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\ecb7b532-a224-4514-a8b6-4639e6893c24\index-dir\the-real-index
Size 48B
SHA256 2334c1a7c94d29592fe3fe08c3032318eac72bb9009b08088344bf6d6ae6d6da
MD5 b0d51624f1735b57d776d1f7c8a20c32
SHA1 afa2cf0b95c57661fe2833aced331d82073b6615
SHA512 e769984bcc02ecf9ca13538f4be3e10613bb9b62da0f027317a0adb5490d243fe3aac49ba3db0231f38740d5733ea6c0aa6675d41130406f25076a0b1656ae21
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 229B
SHA256 2e913b9afd4a8ccb5449ea692fa45f4090d7a32c8e2c9e023b3443e860a1af0d
MD5 e181394a680318eecd8cce7ad1763a0b
SHA1 2292aac256504b6c992d78b92dde82480794833b
SHA512 0c709e133a143d37b572915af7365a1313a69865348b438e7c027a6e9bc56f8d83a824115e9ae38111f5421c03bb10f4556ca65fd3dd1630d8522793a7e88e6c
TLSH
T1D8D0971BF14A1803DFAACBCA1611112B873934C848EA9249912294D90498E0A9222F93
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 69664dcab12d28962d972f1a08ceeca102977eda2c32dd1bffd21b6cd1feccd4
MD5 ae21cb2598a503e586da78a5b0c9bdb9
SHA1 d2141b9182303693c198365d705dd7999f58a284
SHA512 61c503cff82e527c5c2afcfd9961951fbb7a65df376cceb3efd20886f9e83aea326e5cfdaf5b25e4fcd083e7477c2550518fe714976914e62218e9d5549cb18f
TLSH
T1C3D0A71BF05B1842DBAE8AC61621156B87357CC448A5958C945335ED24B8E4A9232E97
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58f3e1.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe58f3e1.TMP
Size 138B
SHA256 7878a46e5bc17bedc0ede0fdbeddeb5eb7d591676e6df1f3b1f75104c0ad3089
MD5 c69a51f5994cd8a4fe114327c37cfe44
SHA1 876735c981765c49918b9164ad04ddd994ef39a0
SHA512 c5211186b70c1eb51d0165178eb97b956979e6e3622935ef637d01f91ee02e68ad47e6f69a2a6fb73e5e7b7d240248c47ff326ae5fb879008c64f579e0ec6db7
TLSH
T1CEC02B53F18600078B1483C00232205F47003CCC8CCAC54C602339E83474E172311FD3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 6377fb20f5c6bbda6263616faf5aab242e8ca852917a22917e2673dbfd6f0ebe
MD5 84c1d6c804bdc354cb7fbcc489134ed8
SHA1 3cd93b397f6e6c4249de94c4b478df38ac27303d
SHA512 6ac783739f4b25a9839400c7def9d2cf7aa6bb8fdb1f985ffcd1481ecf7ee383725011da07659be5c4b5689909f7df3c9060081601d3ec70f81f2f067d073d26
TLSH
T166B0124184059152C08203F8118214D8B1149F14960E270A43F06D2388292918824060
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 78fabf3e427925235929fa872ce2e4a1c44b92ea224f488dfc8374d5f7f5471d
MD5 452b8ac7648f1c5d2e7033bb4d883293
SHA1 f83151ebb603ead6961d7131f8602ffc07f09777
SHA512 7f7019179006de908b519e546aa2fc248685e3dab046c3d2d0a59dabd01931f63f57bb591f44810b217007f78aef359bf8a35bb2fb44b4a2189ed168f0637170
TLSH
T114C0124AC0097201D04A03F51182E8E9B324AF34E61F179953F42F1BDC34951C097256
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589cb8.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe589cb8.TMP
Size 96B
SHA256 7bd38bff36bfbf6bc143c93c88ead10849e9b4c3ec4a333c902f01df30fd8196
MD5 dd47d4e46f5df78bf951d88c51b81dd7
SHA1 d47018300e1f4579f30f74afd7b874b63861d24b
SHA512 fe08dea6794e9878fc5a3ba5509b35b3ae5b2716c17be58b577ed0d68b6369b59e25af7d9b81afc79a2243cd3e32e40b9d4b1dc38140e593a172031cc8da8be9
TLSH
T1EEB02223C0822A22C08203B028C08ACC3020CF30C303020AA2E02A3ACCA03B020208A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 71db87be84ef174477385cb83806b132a410947ca2de03e3fa01944a089919e1
MD5 b045646a6c6392d2561fcdcaa1fb7977
SHA1 471e0027b914ecf74f8cfdb4ad2b9087ccfcb794
SHA512 5dfa9e63cbbf0230dd66f0f5613532b97c69c3d954f099da90c4fbadf0c46b8bd90ddd57e0f803f2466002db0c7edd3a6f37842c323a378c6db9ad8fbb176f37
TLSH
T154B0022D62CDAC92DAEA13F024C588FD33612D2117835E1EA8B480F58512751E363964
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\CacheStorage\92dcffc6-8fbb-4788-adab-101ea2ad7e52\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\CacheStorage\index.txt
Size 91B
SHA256 b2868a378d48dd2d0a8b1f9f0fc91fc8f6c51510152ddd8707ab7b30272eef89
MD5 ad403f8db487fae66b9f95d5a7cf2f31
SHA1 354f27b34d9531c26eefa59b6c81dc46d3fe2673
SHA512 741c8f89f6e54c7633753fc28270d9c6bbc7eb2e3a63f7078085b297e5c4f6a9e3908a302535c490bd5fb81f5df7323e25b8ae15652b36ee10afe2013af09dd8
TLSH
T1B8B002BB504259D51F7534F7014732DDC56633CC9C85DE8D94721058321457F2001C65
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe595971.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\CacheStorage\index.txt~RFe595971.TMP
Size 178B
SHA256 f7a2a03bccc74eb74b53e7cc35d1ba105a1514efab4cfa0ce4c55f7fa224534b
MD5 196234483a491e731bec36677109f6e9
SHA1 274c4ec085eef7abb5977dfa3cdd8e9fec74f48e
SHA512 2ca667518aa923d3df71cfa6fbf0145e80ab05e34c6d534d70a33d9b6c3afbe65301b699c8b2a471329dadfce555b448640ae826585b6ee082ebbaf8b740cdac
TLSH
T172C0807B10C169926F3414E7514732CCC5393FC84CC1964C541370153230D571505D57
MD5 SHA1 SHA512 TLSH

Submit Download

eab542c2-c83a-4272-8c76-a609537ca11c.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\eab542c2-c83a-4272-8c76-a609537ca11c.tmp
Size 13KB
SHA256 57e515aedf0bbf04b5a82fc9a2a69d177596baffe21e9327f64c39f88e94de5b
MD5 a92d1756eff0fc48daed0378f0e5b743
SHA1 9ed58acf81cfe06c5330f97290190dd4f871da65
SHA512 d6f59beccbc9210c6d99c43f78288c52f4d5090d9953b43f08d1e4650ae102ac4fd2f6db48c73a85226aa38980200f853cd0a004d9c03e5a6625f495d4d2b5f1
SSDEEP 192:eROcBznrg+KJCv7IpAPRp22OMiFz9wHsb+WNPiECZ4z42GW7kwQ45VyIsnAUgraJ:eROmzncOkUX/UKwYD2h7De
TLSH
T1F552F82EF9542A3BACDAD22AF922B757D7F1102521C41E94E6FC9D2C14EBACC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 e130624dfe47cee1bb02c14e062ad6c328c6c51c4e99c827a73f38b7bfdb0011
MD5 a08f8c78a9fdd21c5747396ea4410bfc
SHA1 a9440a68814914c63f1d4f7b6277facdfd792138
SHA512 3dc74cee7310eaad5d7882a9c53259f88273964cccf82f6566d1941f444bd6b38a6fc15b3187b91a610a65b474258507d65e52433c8714c541f5438aebe934e1
SSDEEP 6144:e4hxNPRW2PYddqmY7U52Fvm7Rkm1tYpBeh2BAoC:nXPRW4Kq97UAs9oBGcAoC
TLSH
T1E43423327CB4B9794C59FE4D308F2D2E1EF28DDAD864BEC6C8D46F0826AE9441912D74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 164d287991dc9635fb9d36d240d1d622ca9c3984c929a7a58c68844317316baf
MD5 e76eaba1c45582d552449f232e8ebaae
SHA1 d5d8e1ec78cf4ebd7353dcb02c1ec15bf1455b9c
SHA512 e0ee3875853f0649119d73095388ad136d4af01b36f66474419498f11673b1fac5541b1fd5c4aafe857b9beaada18f8419481c0f50a6600de018b72faa6b6698
SSDEEP 3072:EGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:nm7Rkm1tYpBeh2BAoK
TLSH
T1FAC3123B5D65E9379979BB0EB08E0B1F1EF149A2C920DE52C8D86A0437E97CD0A04D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 503b8b67ab674566ed33c2d9b7120a33114596d173645b4e19fc0be0355aaf82
MD5 449ee54b9de628e73e8208062ccc6139
SHA1 5039b08b1c9c783853b97041313fc941d920fa6a
SHA512 f13d86ec0ff45e668decc9866a12af7d6ce50079efc1f277558ae6b873a8421c6cf1b10b4dd730503786a67568e982971734e36dae216075e14774637ee2fd79
SSDEEP 6144:9hxNPRW2PYddqmY7U52Fvm7Rkm1tYpBeh2BAoC:LXPRW4Kq97UAs9oBGcAoC
TLSH
T1EE3423126DB5AE794C5DFE1D308F2D2E2EF28DD894A4BEC2C8D49F0827AE9841512D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 7c3265b897608b63cb735f3c3f70d7076f8c0d027f2fdf6d34380f4a63acc312
MD5 6a1241f373ec043e508133aaf04cd853
SHA1 d0e364011d4e8f08f672608044c620d6ca408937
SHA512 40e4d9e5706ca79249f7d50d17005dc629ccf21a5b57eecdf6b79e8cb445e60e181f50ff356373f51b8a5f164079e3ccca20fea8c93cfad3503fb5bb0b9ba1c0
SSDEEP 6144:UhxNPRW2PYddqmY7U52Fvm7Rkm1tYpBeh2BAoC:kXPRW4Kq97UAs9oBGcAoC
TLSH
T1183423127DB5AE794C5DFE1D318F2D2E2EF28DD894A4BEC2C8D49F0827AAD841512D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 369027c53f9de8589780d8ccabaaa85c42885f9f6796be17e02a2d2c1e17bd69
MD5 7cc8d994cfa644d00a3a9157f97670f9
SHA1 ad4971980b36c8be75072022d23106045a5007e7
SHA512 fddc27b6c7cf815948824d6e51cc48022034941dc7025f263ba0b65b968b69872a86b5a4c24f940415be015bea03dc876031ed84b807b624780fa7ca06d733f0
SSDEEP 6144:4hxNPRW2PYddqmY7U52Fvm7Rkm1tYpBeh2BAoC:AXPRW4Kq97UAs9oBGcAoC
TLSH
T15B3423126DB5AE794C5DFE1D318F2D2E2EF28DD894A4AEC2C8D49F0827AE9841512D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

background.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3284_861207420\CRX_INSTALL\background.js
Size 6KB
SHA256 a2ab41f3958c48c5916b2912807e692b8f026064e59d8973ac91591af7cce96f
MD5 e5768b8f81a34adb12c0279e7cffdb40
SHA1 ac0cdb13711806b5ff7173a23e703125e12ac7a6
SHA512 41d27d82fc91075df66a90a2e489cb70cd072cdf86ff8be479186f136a9d95b8079739fd954f33cda5ac341c96cdfe6b0346b74021a84b57d75ac568aa5dd64f
SSDEEP 192:WcbENHvM6GA+gxVynd4ViQxmx/J0TI55Lp9:RA+r0i95a69
TLSH
T1B3E1359F19F3587A66F321789B6B900E7B21A003200CCD657F9CE2945FA06A466E3FD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon128.png

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3284_861207420\CRX_INSTALL\icons\icon128.png
Size 18KB
SHA256 b11e0e3deba08e721ac43d3e83b9c2c7d8cd09912218bd5dc5cf54dd7fc82321
MD5 2bb5d792cba43313919383dca221d302
SHA1 80c9d82c0d657fb2ee95cb7ea744647a05ec3550
SHA512 61cee3b869e1585bb728834aa498b16ccd3f2676ecf38e1e139aebc83d2d7f41b1a30b3ece83e06150efa6c05c69bc4306415de3a591cddbc221f047f30b08e1
SSDEEP 384:TBV4rBvWZfdLBLROlY5D/S+gpMDeSP2VPFfxb7rfWMyCuGP8Tvzfscr0:wvudFLROlY5Dq+leSP2XxPrWMXDPgvzs
TLSH
T12C82C0EFB606939C984E3F75767DC28A7C12B47A002395065ED45CD802B4F2A279B2F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

popup.html

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3284_861207420\CRX_INSTALL\popup.html
Size 14KB
SHA256 cece5f3e113918f0708f749a41eab873abdef2a7f37f1e0a874883e645d8fd88
MD5 e98ec19582cf07b5ed257ee67c1b69d4
SHA1 abcd328803cf5f7e3a573d2028a39af42f6759b9
SHA512 bab59edd662fec5e40d2095d193f7a09f37f379afbabdc6fe21f3e1e893ba28f3efe60a83258709bd69eab3e1dbfc55505b81963a8664d48d69048ffcb3bc149
SSDEEP 96:tTwRaFoeU/ZI4I1a60nbfXdSBqFVRESKVdVlsXKzeyh+0vrREpoNZ7ospiTSUWM/:r5X4rvlK/ec7aTr6e
TLSH
T1F6520F3062FC1E3E91534091965577373A6EA2D3E70E5210B97E05F5CF86E8AEA370B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gnnkgmjnbphhjkiiedlfhcjaaomhffhp_41369.crx

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3284_861207420\gnnkgmjnbphhjkiiedlfhcjaaomhffhp_41369.crx
Size 51KB
SHA256 c4268a6baf967af7455fa29eb0c51ca045a30f4837e160630b63d3e688bbca75
MD5 b200189fc549fbcd05c3c2db925311b5
SHA1 f2e902aae6cb2be6fc1f1760dca62cef43b2a53a
SHA512 87ac2a7d5b6e435ab607770b067deb4dd2580102cd9c1fe18fd92807a704023d941eb5010eb85bb1b28eae7a4128307ddec73dd6b1788b0f592f4f42118fa2ae
SSDEEP 1536:FcAa09dTpnB3weYXKu7aGU+GOWQu7FWY5Dq+ltOXxLToOVeE:FQkdTpB3nY6uuQuh9bQxXo9E
TLSH
T15F33F19EAEAAD17DCECDBB30137CD763AD13607A1806990604E44CCA4DB0B593B52DF6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download