Analysis

  • user interaction
    yes
  • max time kernel
    900s
  • max time network
    885s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    09/08/2026, 22:54

General

  • Target
    http://yallacraft.com
  • Sample260809-2vvkhazycx
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 7 IoCs
  • Suspicious behavior: EnumeratesProcesses 12 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of WriteProcessMemory 63 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://yallacraft.com
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3932
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffe3185c728,0x7ffe3185c734,0x7ffe3185c740
      2⤵
        PID:3796
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1616,i,15743843693792974139,4834949976344290563,524288 --field-trial-handle=2040,i,3404395246155764385,15589050178833893895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2064 /prefetch:3
        2⤵
        • System Time Discovery
        PID:2308
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1704,i,16538998229070632988,545326721524101226,262144 --field-trial-handle=2040,i,3404395246155764385,15589050178833893895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2036 /prefetch:2
        2⤵
          PID:4568
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2396,i,13244206185884773615,18184613584453568095,524288 --field-trial-handle=2040,i,3404395246155764385,15589050178833893895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2508 /prefetch:8
          2⤵
            PID:3516
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3164,i,7409215040485568709,12128122371095754097,2097152 --field-trial-handle=2040,i,3404395246155764385,15589050178833893895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3168 /prefetch:1
            2⤵
              PID:2936
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3176,i,7853368815879213267,16558050431159226983,2097152 --field-trial-handle=2040,i,3404395246155764385,15589050178833893895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3288 /prefetch:1
              2⤵
                PID:3128
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4432,i,10734671736730599665,3627615945230748466,2097152 --field-trial-handle=2040,i,3404395246155764385,15589050178833893895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4448 /prefetch:2
                2⤵
                  PID:3060
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4584,i,3377413499164068027,966985341243879342,2097152 --field-trial-handle=2040,i,3404395246155764385,15589050178833893895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4712 /prefetch:1
                  2⤵
                    PID:3080
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3268,i,10028415594940738877,4174188774667741635,2097152 --field-trial-handle=2040,i,3404395246155764385,15589050178833893895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3272 /prefetch:1
                    2⤵
                      PID:1960
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5436,i,7126338889852028250,12222533843160725833,524288 --field-trial-handle=2040,i,3404395246155764385,15589050178833893895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3484 /prefetch:8
                      2⤵
                        PID:3988
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4688,i,7296875016051680355,11867735130348741547,2097152 --field-trial-handle=2040,i,3404395246155764385,15589050178833893895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4776 /prefetch:1
                        2⤵
                          PID:1428
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5728,i,7602126870076395447,9288801775920307033,2097152 --field-trial-handle=2040,i,3404395246155764385,15589050178833893895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5704 /prefetch:1
                          2⤵
                            PID:1808
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5736,i,13105748856841207720,11809732647576826710,524288 --field-trial-handle=2040,i,3404395246155764385,15589050178833893895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3296 /prefetch:8
                            2⤵
                              PID:1260
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5684,i,14845765175070218079,12415030769412572342,524288 --field-trial-handle=2040,i,3404395246155764385,15589050178833893895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5668 /prefetch:8
                              2⤵
                                PID:3352
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5652,i,7283756271769317984,6124387243639881976,524288 --field-trial-handle=2040,i,3404395246155764385,15589050178833893895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4812 /prefetch:8
                                2⤵
                                  PID:4760
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4788,i,11356497662673149488,8020923691621268725,2097152 --field-trial-handle=2040,i,3404395246155764385,15589050178833893895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4792 /prefetch:1
                                  2⤵
                                    PID:3488
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3692,i,17119755906209565115,7160881523654913867,2097152 --field-trial-handle=2040,i,3404395246155764385,15589050178833893895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5748 /prefetch:1
                                    2⤵
                                      PID:1704
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5788,i,400839370949171773,14045581385772227914,524288 --field-trial-handle=2040,i,3404395246155764385,15589050178833893895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3924 /prefetch:8
                                      2⤵
                                      • Modifies registry class
                                      PID:688
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5816,i,11028693553498100798,1558902653627403222,524288 --field-trial-handle=2040,i,3404395246155764385,15589050178833893895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5732 /prefetch:8
                                      2⤵
                                        PID:4540
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6364,i,13088339676479264712,5123743412107500590,262144 --field-trial-handle=2040,i,3404395246155764385,15589050178833893895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6352 /prefetch:8
                                        2⤵
                                        • Suspicious behavior: EnumeratesProcesses
                                        PID:1800
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6364,i,10524986450011176975,7067650142900525900,2097152 --field-trial-handle=2040,i,3404395246155764385,15589050178833893895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6304 /prefetch:1
                                        2⤵
                                          PID:3916
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=4440,i,11019973555540362269,15600596776538828375,2097152 --field-trial-handle=2040,i,3404395246155764385,15589050178833893895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6216 /prefetch:1
                                          2⤵
                                            PID:4808
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=4472,i,14558773738365306761,14035364025981916194,2097152 --field-trial-handle=2040,i,3404395246155764385,15589050178833893895,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4560 /prefetch:1
                                            2⤵
                                              PID:368
                                          • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                            "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                            1⤵
                                              PID:4576
                                            • C:\Windows\system32\svchost.exe
                                              C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                              1⤵
                                                PID:2468
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                1⤵
                                                • Checks processor information in registry
                                                • Enumerates system info in registry
                                                • Modifies data under HKEY_USERS
                                                • Modifies registry class
                                                • Suspicious behavior: EnumeratesProcesses
                                                • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                • Suspicious use of FindShellTrayWindow
                                                • Suspicious use of SendNotifyMessage
                                                • Suspicious use of WriteProcessMemory
                                                PID:2788
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffe3185c728,0x7ffe3185c734,0x7ffe3185c740
                                                  2⤵
                                                    PID:3184
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1652,i,16599114854052180281,17041346679203757410,262144 --field-trial-handle=1844,i,1843086627968894774,15821443701749519435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1852 /prefetch:2
                                                    2⤵
                                                      PID:4696
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1904,i,7725937780955592787,4221428266745135255,524288 --field-trial-handle=1844,i,1843086627968894774,15821443701749519435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2088 /prefetch:3
                                                      2⤵
                                                      • System Time Discovery
                                                      PID:2168
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2264,i,14304166088881918869,6894498073837404579,524288 --field-trial-handle=1844,i,1843086627968894774,15821443701749519435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2464 /prefetch:8
                                                      2⤵
                                                        PID:2488
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3228,i,7811644436403213433,10234526484115158738,2097152 --field-trial-handle=1844,i,1843086627968894774,15821443701749519435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3256 /prefetch:1
                                                        2⤵
                                                          PID:1936
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3236,i,3109968626105162097,7905005276884753014,2097152 --field-trial-handle=1844,i,1843086627968894774,15821443701749519435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3300 /prefetch:1
                                                          2⤵
                                                            PID:2792
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4540,i,13915988968424820438,7415328909577814739,2097152 --field-trial-handle=1844,i,1843086627968894774,15821443701749519435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4576 /prefetch:1
                                                            2⤵
                                                              PID:2500
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5368,i,2072409474076418342,10451761950608453756,524288 --field-trial-handle=1844,i,1843086627968894774,15821443701749519435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5252 /prefetch:8
                                                              2⤵
                                                                PID:2976
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5580,i,11638537970161449363,15444717327047826546,2097152 --field-trial-handle=1844,i,1843086627968894774,15821443701749519435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5384 /prefetch:1
                                                                2⤵
                                                                  PID:4800
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4528,i,13326344735234243859,13605525856293147731,2097152 --field-trial-handle=1844,i,1843086627968894774,15821443701749519435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5604 /prefetch:1
                                                                  2⤵
                                                                    PID:4152
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4624,i,14534171257293840728,13201380043569206986,524288 --field-trial-handle=1844,i,1843086627968894774,15821443701749519435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4612 /prefetch:8
                                                                    2⤵
                                                                      PID:3736
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=240,i,11877909433130368476,14023379946008472023,524288 --field-trial-handle=1844,i,1843086627968894774,15821443701749519435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4636 /prefetch:8
                                                                      2⤵
                                                                        PID:876
                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4664,i,7349239347760190477,12025812727966649436,524288 --field-trial-handle=1844,i,1843086627968894774,15821443701749519435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5908 /prefetch:8
                                                                        2⤵
                                                                          PID:1780
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5912,i,12165376058219669558,17470267024725566054,2097152 --field-trial-handle=1844,i,1843086627968894774,15821443701749519435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=240 /prefetch:1
                                                                          2⤵
                                                                            PID:1664
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5556,i,8221702978248669089,15629679541823661438,262144 --field-trial-handle=1844,i,1843086627968894774,15821443701749519435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4624 /prefetch:8
                                                                            2⤵
                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                            PID:4756
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=3116,i,15966226655934448686,868998855479625350,524288 --field-trial-handle=1844,i,1843086627968894774,15821443701749519435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4624 /prefetch:8
                                                                            2⤵
                                                                              PID:1864
                                                                          • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                            "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                            1⤵
                                                                              PID:1000
                                                                            • C:\Windows\system32\svchost.exe
                                                                              C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                              1⤵
                                                                                PID:2908

                                                                              Network

                                                                                    MITRE ATT&CK Enterprise v16

                                                                                    Replay Monitor

                                                                                    Loading Replay Monitor...

                                                                                    Downloads

                                                                                    25f048ee-e57b-48ef-9a7f-c4be40444c36.tmp

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\25f048ee-e57b-48ef-9a7f-c4be40444c36.tmp
                                                                                    • Size 276KB
                                                                                    • SHA256 daeff255710d3fae645919affd83502d6b322ec7cfc32aad076893476be36c88
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    CrashpadMetrics-active.pma

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\CrashpadMetrics-active.pma
                                                                                    • Size 1024KB
                                                                                    • SHA256 ae1bddb9e2cc97b0c9cd78ef3cd17553be6e5204677bd67e0b8f7fa27007f189
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    settings.dat

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                                                                    • Size 40B
                                                                                    • SHA256 f46e987b393cd6609db2cfb81579623e6c1ff06cd5d0bb36f4f71348130de12b
                                                                                    • MD5 SHA1 SHA512

                                                                                    BookmarkMergedSurfaceOrdering

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                    • Size 6B
                                                                                    • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                    • MD5 SHA1 SHA512

                                                                                    BrowsingTopicsState

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                    • Size 414B
                                                                                    • SHA256 108569c24bd68929cee42675f78cae656f65a3bcaa255c8a7539fa06c0139e5e
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    f_00003f

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003f
                                                                                    • Size 51KB
                                                                                    • SHA256 bbc4044fe46acd7ab69d8a4e3db46e7e3ca713b05fa8ecb096ebe9e133bba760
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    f_000111

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000111
                                                                                    • Size 59KB
                                                                                    • SHA256 84d857d3faaa3e403ea5d7dc5741d433ac7db34fedd15f5d644ede9bea842588
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    f_000113

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000113
                                                                                    • Size 86KB
                                                                                    • SHA256 88ad3c10bb551c66fbdb95dec032af6c39fec645095b9a1bed102ce1ca32d79d
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                    • Size 2KB
                                                                                    • SHA256 368435794b8c4964c48ae7c846c2919f9356a34d9e3658193e8186a0a31bbd89
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                    • Size 5KB
                                                                                    • SHA256 e1f6359e4a759fa5d20387fe484604f0ae524bab3c73cf60184e55f763e3f519
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                    • Size 4KB
                                                                                    • SHA256 19f0eed11eb4d36d508c9ed36244f5d982c297bf17852ab1ac23bf0027c9b9fe
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    data_1

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnGraphiteCache\data_1
                                                                                    • Size 264KB
                                                                                    • SHA256 d6c8ba7e6e24bbca40424ba0a64d3db9f7bd55b0933830ca5ff7da0c5ce61280
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    LOG

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
                                                                                    • Size 320B
                                                                                    • SHA256 d03a3fc4c6a9b1d8fc04e0a0cd33300aa89efb12788edd5adf46a0e815cf8225
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    Favicons

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Favicons
                                                                                    • Size 24KB
                                                                                    • SHA256 6b8b334c30b6e91fa0b6808bd66ab86731b4a98d90df42e7837aabe55de0fe03
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    data_0

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_0
                                                                                    • Size 44KB
                                                                                    • SHA256 a790ff0a60632b0df71e274b7751b33a909a675ae9e9046dd03ce6aab59006e2
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    data_1

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1
                                                                                    • Size 264KB
                                                                                    • SHA256 fd37cea4d6a6b7d0b649e241623f56dc8f6bee419ca553f0643fc33af1bd7edb
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    data_2

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_2
                                                                                    • Size 1.0MB
                                                                                    • SHA256 11b4bfdf5a770869abc3a07d29e3de8d4726f0a6262581022cf5d01751373729
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    History

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History
                                                                                    • Size 160KB
                                                                                    • SHA256 f2902b43e6609e611bee6428630cb72364481f43acf45ef9a08dc22fd1c9261f
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    000004.log

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\000004.log
                                                                                    • Size 133KB
                                                                                    • SHA256 6ec38ac21d6d8b53e3288602ed7a843ca8fa2e6ce19d612e15b06c5450636199
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    000005.ldb

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\000005.ldb
                                                                                    • Size 1KB
                                                                                    • SHA256 dc3530bfe54343283c68a0c7e3eba93c7213652d8bed5e55615f4398dd818cae
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    CURRENT

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\CURRENT
                                                                                    • Size 16B
                                                                                    • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                    • MD5 SHA1 SHA512

                                                                                    LOG

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG
                                                                                    • Size 672B
                                                                                    • SHA256 99757f9fb5ef426f434bbb378814569ae6c159a792e3089d2bcb4d6eef673464
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    MANIFEST-000001

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                    • Size 100B
                                                                                    • SHA256 1b5782b03a058fb8e1b7b67d6d37b40aa3c5288c07b26e436372b6dd81c4fffe
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    000003.log

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
                                                                                    • Size 42KB
                                                                                    • SHA256 60d9a529ec4d1495e7ff7fcc33c4b7f3396f34622dd144a73c7008c4e154c69a
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    LOG

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
                                                                                    • Size 329B
                                                                                    • SHA256 411abb98cebc76c2538b1c2cf0bee348d050551acfa71ca2aa70084d18883f3e
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    Network Persistent State

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                    • Size 9KB
                                                                                    • SHA256 d07c61572e12984d6dcaf5e5c218bd52547c49e9bb8823fdcec36a54e3d8278a
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Network Persistent State

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                    • Size 4KB
                                                                                    • SHA256 e680bb968f872ddd795d0fe42919bb29dfe080a20eba998743958a9a95fc1b87
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Network Persistent State

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                    • Size 2KB
                                                                                    • SHA256 59698b023541ac94e6896f282ace6fe4be9237916c178386ed26b612be21856b
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    Network Persistent State

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                    • Size 11KB
                                                                                    • SHA256 3925c561bec2b5a0536aad6d8c790d5e17f44dd35949a94d0e362999d0571283
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Network Persistent State

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                    • Size 11KB
                                                                                    • SHA256 039194069ec164eeb4e54fae275f7cf4512dfbabd2e482ade826336f13e8eb84
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Network Persistent State

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                    • Size 10KB
                                                                                    • SHA256 ef5620808dd4b66a5ffa4238703e98a3d059b86e06b65e27e8e293142596d238
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Network Persistent State

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                    • Size 10KB
                                                                                    • SHA256 556b8080c5cd95c2ec67b00c2b0db7a87a498d0559a13300054f93135fb8843e
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Network Persistent State

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                    • Size 2KB
                                                                                    • SHA256 68a246459622a83f112dee09af146d1a0d05f48afb5122e7a75f0d70bab062aa
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    Network Persistent State

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                    • Size 8KB
                                                                                    • SHA256 6564927ab8f2b1417a4ee75fe6fa3660245dccf56568ac6864f2ffa598eb35dc
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Network Persistent State

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                    • Size 10KB
                                                                                    • SHA256 7aa60f8b6fc0ab8b2c8a8b958b07fdff7f7e1b649b1e69c40e4cafcd4908e909
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Network Persistent State

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                    • Size 11KB
                                                                                    • SHA256 08593fc87a4ba933fc447ef138f56b1ff4f09cac2be0fdff2ccfe42614d82976
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    SCT Auditing Pending Reports

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                    • Size 2B
                                                                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                    • MD5 SHA1 SHA512

                                                                                    TransportSecurity

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                    • Size 5KB
                                                                                    • SHA256 03d39b8198c2dfab5ca8055e286d43bb8a5dee6f5ee06c2b149a6a3588fb82be
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    TransportSecurity

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                    • Size 5KB
                                                                                    • SHA256 db4096296168f933a105df673070d85f9fce0e85741615964a079915b2ef4688
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                    • Size 12KB
                                                                                    • SHA256 3bb1e1855ca063d0184adbc444cf6102555d6ba85f244961427501c4e4eb8f76
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                    • Size 13KB
                                                                                    • SHA256 7004a376d491e7d818fd0f0fc46c3bc5ea278fb59f4ce11e2a65525bdc9abd25
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                    • Size 12KB
                                                                                    • SHA256 32af3708fe0a22ca576e5fdf1ff311228e376a4a657e136e7f39baf5a32afbe6
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                    • Size 14KB
                                                                                    • SHA256 f472d6d202550088a8f87db47d6a1002f0f981f9aea53319a3a8ca44dcaae95e
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                    • Size 14KB
                                                                                    • SHA256 7e7d6c283a36963724002a7d12e82cbf4dd49c8e400fc96fb44bfe81a5ebf308
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                    • Size 13KB
                                                                                    • SHA256 67291e7b5fb7ce0fcf96ad2475d0dcf4b0f4a0f9e6a834f06a239ccf5787938c
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                    • Size 13KB
                                                                                    • SHA256 993614dd36fa848ac0357e9ea1c1be4d7d759f20220606e6571e93415b7dcae7
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                    • Size 13KB
                                                                                    • SHA256 4a3dd9440a3551b611df97468a068868a104c05a9a33bc7716dae8abdefd9a74
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                    • Size 14KB
                                                                                    • SHA256 140c0281f2c4d679dcfddf78cf7479ec6100a765c96c78c38be085a066241d55
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                    • Size 13KB
                                                                                    • SHA256 78fc35f6abe5c4f878be529c15b6889b07e49451c28e650b5a5867b62ec7e42b
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                    • Size 14KB
                                                                                    • SHA256 21991927efacf5ee0940a4ffdd536a1f1117d3a6f02d154360b635aedb14988c
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                    • Size 14KB
                                                                                    • SHA256 f166618b1e469eebd68e83a35f182a29b813875c5541758ec70a7f283b5380db
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                    • Size 14KB
                                                                                    • SHA256 7756f90bda1c9015a0834a2350faf96b91e1798eb55808e77d70b3b9c368c156
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Secure Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                    • Size 17KB
                                                                                    • SHA256 379d96542283773f422c052abe7293924621df1604b63c9a59676e1514d2db6c
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    000003.log

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\000003.log
                                                                                    • Size 4KB
                                                                                    • SHA256 176aa2a69c3efca5804555d8e49e2e4dc79d66dac563225b946d6c8a7df11c79
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    LOG

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG
                                                                                    • Size 336B
                                                                                    • SHA256 6c99276febc26e96e3b71434ade478cfc71663f60d4dee99e83bdc86cf9e95b9
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                    • Size 120B
                                                                                    • SHA256 c5351f339585543dd6e2f3101a98acec5001d9a96d1b9459df0e6583c12d7701
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index~RFe589333.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe589333.TMP
                                                                                    • Size 96B
                                                                                    • SHA256 57ed51cdc7121799133485a129e548145d1aa34107a13e8f6bdf02128bc5fa72
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    LOG

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
                                                                                    • Size 317B
                                                                                    • SHA256 e62d30d9ec0622adaecaf520080de707710f3c9228f0f5e18514fe541a67b916
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    Tabs_13430789853103609

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Tabs_13430789853103609
                                                                                    • Size 14KB
                                                                                    • SHA256 a900fcc903e400cf9328d6a9c9a415daf0aa000f63243b3b1e7386e09b21506c
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    000003.log

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000003.log
                                                                                    • Size 172B
                                                                                    • SHA256 e0c53f656deec4e34f829fe36957bfbec0972c19207d425b87926da4db7f54f2
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    LOG

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
                                                                                    • Size 345B
                                                                                    • SHA256 9f294ac9175e528b86dc9702fc4c93b09e85cd7973fe80524a2360db4e84408b
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    LOG

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
                                                                                    • Size 324B
                                                                                    • SHA256 75e49b345a558f5b71c1090fc70bcc4763841bacc9b25add676f8ec2aeb6ef4d
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    QuotaManager

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager
                                                                                    • Size 40KB
                                                                                    • SHA256 46a1071384ce09caa87d78e42be0b8dc79b9b7d92f2704e8c03d2085ae9856f2
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    QuotaManager-journal

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager-journal
                                                                                    • Size 8KB
                                                                                    • SHA256 2abc5859fbfcd3ea8019878a99245c1a707f1ff25133daf6dc693cc86acdf5df
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    000003.log

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000003.log
                                                                                    • Size 28KB
                                                                                    • SHA256 4fed968acadff5afc7d6c5f4dd89398f686fe450e1089af1d2bf231e2161d0dc
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    LOG

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG
                                                                                    • Size 317B
                                                                                    • SHA256 85098ae294adf15c0aa9afb2846d898330906828bca8cee420332f0cf0410184
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    000003.log

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000003.log
                                                                                    • Size 1KB
                                                                                    • SHA256 d31bd4492d61570aae70a2b350139809b5ff04f0fea7e81a181010b664dae868
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    LOG

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
                                                                                    • Size 335B
                                                                                    • SHA256 7ad6690caa380d1bffa180e1d24a91bc8152920c77f53b111a0a6b6e8ada2a3e
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    data_1

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\data_1
                                                                                    • Size 264KB
                                                                                    • SHA256 517e3f3a118c315be11309ad888c6094b753bdf3498a28b852337f90378eea37
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Last Version

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
                                                                                    • Size 13B
                                                                                    • SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
                                                                                    • MD5 SHA1 SHA512

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                    • Size 116KB
                                                                                    • SHA256 5f667bae0b2610c3285849eb2cac8a3dcbfbd92b9586eb3d88e8ed1832818456
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                    • Size 276KB
                                                                                    • SHA256 b143ad9b74e9afc42944f7e95c0ed027c142720dda88a53b40e7f91ba1fea17a
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                    • Size 236KB
                                                                                    • SHA256 1bce1a4d86f62ac27ff3365efc5a880de62f3118e1cd5d8b512fecdcf16b4913
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                    • Size 117KB
                                                                                    • SHA256 e4e02374fa28c2a8bc331294114e7c8a11acfa5f11d2a0d73a2bbf33d8869074
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                    • Size 116KB
                                                                                    • SHA256 e2dfec7ddc227c32a3f9444d93ee1c393d40dacde777329489e6769b13879c87
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                    • Size 158KB
                                                                                    • SHA256 18b6d55190e09bfde72bc2a6c8f395f7c0ae22bdce3495fa5d07878b330a44bb
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                    • Size 115KB
                                                                                    • SHA256 f23a4b2b3ba8bfaec437f836146d4d56c190cd059aa17f57d0cd1284e0ed53e6
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                    • Size 116KB
                                                                                    • SHA256 108979d791eceed3d7d599e0bd65a67c68357635c008a9123812a9c1a6f0d7ea
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                    • Size 236KB
                                                                                    • SHA256 8d22f4a1cf725b9d8604c19e0d53c013a360040451791ef817feceb822bbb910
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    data_1

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
                                                                                    • Size 264KB
                                                                                    • SHA256 3da2a6a21f9cc62612f60a5a279ea0df93462da1d4e5317a214c9879a3c62bf5
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Variations

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
                                                                                    • Size 86B
                                                                                    • SHA256 2741df9ee9e9d9883397078f94480e9bc1d9c76996eec5cfe4e77929337cbe93
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    metadata.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\component_crx_cache\metadata.json
                                                                                    • Size 13B
                                                                                    • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                    • MD5 SHA1 SHA512

                                                                                    ukm_db

                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\segmentation_platform\ukm_db
                                                                                    • Size 48KB
                                                                                    • SHA256 ac35cf1e4255004d51990ea1120eaf519463b4792fc88ad9200102503aff9b16
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    default.dic

                                                                                    • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                                                                    • Size 2B
                                                                                    • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                    • MD5 SHA1 SHA512