hxxps://www[.]dlsite[.]com/maniax/work/=/product_id/RJ01303304[.]html

Resubmissions

09/08/2026, 07:04

260809-hv7ehsbl5v7

09/08/2026, 05:16

260809-fx8dgs1dkh3

Analysis

user interaction
yes
max time kernel
1500s
max time network
1503s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
09/08/2026, 05:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.dlsite.com/maniax/work/=/product_id/RJ01303304.html
Sample260809-fx8dgs1dkh

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2628	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307262176736136"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2746394149-3500112804-1243524366-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2746394149-3500112804-1243524366-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2746394149-3500112804-1243524366-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2746394149-3500112804-1243524366-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2746394149-3500112804-1243524366-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\RJ319122_trial.zip:Zone.Identifier	chrome.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
2244	chrome.exe
2244	chrome.exe
3400	LocalBridge.exe
3400	LocalBridge.exe
3400	LocalBridge.exe
3400	LocalBridge.exe
3400	LocalBridge.exe
3400	LocalBridge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs

pid	Process
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe
Token: SeShutdownPrivilege	5792	chrome.exe
Token: SeCreatePagefilePrivilege	5792	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe
5792	chrome.exe

Suspicious use of WriteProcessMemory 48 IoCs

description	pid	Process	procid_target
PID 5792 wrote to memory of 4784	5792	chrome.exe	81
PID 5792 wrote to memory of 5104	5792	chrome.exe	82
PID 5792 wrote to memory of 5104	5792	chrome.exe	82
PID 5792 wrote to memory of 2628	5792	chrome.exe	83
PID 5792 wrote to memory of 5040	5792	chrome.exe	87
PID 5792 wrote to memory of 3492	5792	chrome.exe	88
PID 5792 wrote to memory of 5040	5792	chrome.exe	87
PID 5792 wrote to memory of 3492	5792	chrome.exe	88
PID 5792 wrote to memory of 5420	5792	chrome.exe	85
PID 5792 wrote to memory of 5420	5792	chrome.exe	85
PID 5792 wrote to memory of 5132	5792	chrome.exe	89
PID 5792 wrote to memory of 5132	5792	chrome.exe	89
PID 5792 wrote to memory of 5552	5792	chrome.exe	90
PID 5792 wrote to memory of 5552	5792	chrome.exe	90
PID 5792 wrote to memory of 3940	5792	chrome.exe	91
PID 5792 wrote to memory of 3940	5792	chrome.exe	91
PID 5792 wrote to memory of 4668	5792	chrome.exe	92
PID 5792 wrote to memory of 4668	5792	chrome.exe	92
PID 5792 wrote to memory of 6100	5792	chrome.exe	93
PID 5792 wrote to memory of 6100	5792	chrome.exe	93
PID 5792 wrote to memory of 856	5792	chrome.exe	94
PID 5792 wrote to memory of 856	5792	chrome.exe	94
PID 5792 wrote to memory of 5444	5792	chrome.exe	95
PID 5792 wrote to memory of 5444	5792	chrome.exe	95
PID 5792 wrote to memory of 2992	5792	chrome.exe	96
PID 5792 wrote to memory of 2992	5792	chrome.exe	96
PID 5792 wrote to memory of 2104	5792	chrome.exe	97
PID 5792 wrote to memory of 2104	5792	chrome.exe	97
PID 5792 wrote to memory of 1072	5792	chrome.exe	98
PID 5792 wrote to memory of 1672	5792	chrome.exe	100
PID 5792 wrote to memory of 1740	5792	chrome.exe	101
PID 5792 wrote to memory of 3624	5792	chrome.exe	102
PID 5792 wrote to memory of 4928	5792	chrome.exe	103
PID 5792 wrote to memory of 4928	5792	chrome.exe	103
PID 5792 wrote to memory of 5972	5792	chrome.exe	104
PID 5792 wrote to memory of 5972	5792	chrome.exe	104
PID 5792 wrote to memory of 484	5792	chrome.exe	105
PID 5792 wrote to memory of 484	5792	chrome.exe	105
PID 5792 wrote to memory of 5320	5792	chrome.exe	106
PID 5792 wrote to memory of 5320	5792	chrome.exe	106
PID 5792 wrote to memory of 428	5792	chrome.exe	107
PID 5792 wrote to memory of 428	5792	chrome.exe	107
PID 5792 wrote to memory of 2244	5792	chrome.exe	108
PID 5792 wrote to memory of 4660	5792	chrome.exe	109
PID 5792 wrote to memory of 4660	5792	chrome.exe	109
PID 5792 wrote to memory of 5572	5792	chrome.exe	110
PID 5792 wrote to memory of 5572	5792	chrome.exe	110
PID 5792 wrote to memory of 4712	5792	chrome.exe	111

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.dlsite.com/maniax/work/=/product_id/RJ01303304.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcf44cc728,0x7ffcf44cc734,0x7ffcf44cc740
  2⤵
  PID:4784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1648,i,7684601842312682000,16305902919152523682,262144 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1900 /prefetch:2
  2⤵
  PID:5104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1452,i,5922648209482612690,3915177975370501025,524288 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2268 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2384,i,15476221283878663366,12175030555047018753,524288 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2892 /prefetch:13
  2⤵
  PID:5420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3140,i,6621495719147594161,1237356231892544002,2097152 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:5040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3144,i,14319494256958960569,1257308603270226248,2097152 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:3492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4356,i,3831962003963464401,16399165826545204014,2097152 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4448 /prefetch:9
  2⤵
  PID:5132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=5156,i,3488824406329351173,1460860989073120356,2097152 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5172 /prefetch:1
  2⤵
  PID:5552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5140,i,11674061638310842240,11776283798550871493,2097152 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5308 /prefetch:1
  2⤵
  PID:3940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5516,i,12264951064611079881,2939324289260976526,2097152 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5480 /prefetch:1
  2⤵
  PID:4668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5512,i,6307912316590877739,3928271417003382112,2097152 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5340 /prefetch:1
  2⤵
  PID:6100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5812,i,1090802783866384011,13078531702150788104,2097152 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5344 /prefetch:1
  2⤵
  PID:856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5884,i,15276069159854044593,15544287267519149790,2097152 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5916 /prefetch:1
  2⤵
  PID:5444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3244,i,10837482315441489880,15385757387293338008,2097152 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4696 /prefetch:1
  2⤵
  PID:2992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6168,i,789783923513215318,14187865604560774295,2097152 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6180 /prefetch:1
  2⤵
  PID:2104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6788,i,4072494311227733755,13936159282161923840,524288 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6792 /prefetch:14
  2⤵
  PID:1072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6136,i,3243261135546366878,9792737687585605704,524288 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6816 /prefetch:14
  2⤵
  PID:1672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6824,i,17493443271979149150,10534461637923498050,524288 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3892 /prefetch:14
  2⤵
  PID:1740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5376,i,13583052509306417243,10437821019695742975,524288 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3320 /prefetch:14
  2⤵
  PID:3624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5920,i,17237909944091702457,16691372475059965876,2097152 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5504 /prefetch:1
  2⤵
  PID:4928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5944,i,2169394345264269330,9530287600222514238,2097152 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6696 /prefetch:1
  2⤵
  PID:5972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5704,i,16442859290819855862,16260845445460797730,2097152 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5744 /prefetch:1
  2⤵
  PID:484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5868,i,17276004770645743269,8310340655796329475,2097152 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5632 /prefetch:1
  2⤵
  PID:5320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3344,i,11164425682286514207,14275966500906761612,524288 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6808 /prefetch:12
  2⤵
  PID:428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5756,i,2083266504531257084,8705185374372120283,262144 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5708 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=2840,i,5502901076050199955,11083892302712921840,2097152 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6052 /prefetch:1
  2⤵
  PID:4660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4620,i,13220746016952315141,15836488848617387395,524288 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5568 /prefetch:14
  2⤵
  PID:5572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4532,i,15672228728305371046,15675571137448062295,524288 --field-trial-handle=1888,i,9408976668305313421,9261325147323092478,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4988 /prefetch:14
  2⤵
  - NTFS ADS
  PID:4712

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2532

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2368

C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2104.12721.0_x64__8wekyb3d8bbwe\LocalBridge.exe
"C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2104.12721.0_x64__8wekyb3d8bbwe\LocalBridge.exe" /InvokerPRAID: Microsoft.MicrosoftOfficeHub notifications
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3400

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 b6838ff569c116022437cad9f18b4fa28054af2aaace92016fe327aa688961d6
MD5 5f7a04f2870c0f6ce48cbf8b98168f25
SHA1 da33e15b90303e694b386f1fe495c4093ac1dcbf
SHA512 79edcf6f4b4779eaec86361fd316ebff40ee39d85fc21b9418e1aeae481b88d631fba74e118e69ca4ce923eba0542c4b20aa291c55501cf5ca7b6d691d7cfaeb
TLSH
T120E02BA9CC61BC271CFD1B2C6151034ADBA113172B805A5F3B3C911C8FB2A3A554582C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000004

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000004
Size 106KB
SHA256 3b62a7faf624340f39fd71f9232caee41d057425274641aadc3b49cf6be556f8
MD5 bb17a7e4a283a8ef98584257cb96a4c8
SHA1 4ecb9407335400b93d6aa7a8caa384f1f345bcea
SHA512 3e06d4c13b0e3c72403945eaf98cbac440a0dd1b2255d6b22ceef44a349a415e3df5cbdebd27fcc1666b92005558ff61aa9bb351aecdcef4c65f5b26a7ce482a
SSDEEP 3072:xi+s7Xskpp3jBzEHu1toypQpEtRNHAFI3IsJDDb4rw6:xih7pp3lIufhJgFWIwb4E6
TLSH
T1C4B312BDD666C5B47A6209C92882CDFEB21B9867C3C4543E40421C8BF3039EB5E7761E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005
Size 65KB
SHA256 0edb153c16b32ad11c424df7c8597c9b8e338196124d00757387a77ca3a4c41e
MD5 9de5ba346cbb60edd24e89ccc548db41
SHA1 9a8cbbee3eec8270655a609d26124f48da920948
SHA512 f2c156792e875e9ee669a76a4ed29815d5e982c3f7d44e0aaa32c604cc8d3b3b6b0a41bcb084824e20599c329c52f1648e83ee711dda7bfd07c9b4b23c27c21f
SSDEEP 1536:gJVBPcV+vC5OquuzUcAR5twF+FmLurCpf+Ri5ndG9hs+tqBdxpxa4rP+OTTMvmT:QPc1CCUcAHW+FmLmC1+RAa7UBdxpEiGW
TLSH
T1D75302402C09B2F15CD4E15BACCFB16B15FA1D6B490DE25AAE602935CD33A4F3F6868D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008
Size 28KB
SHA256 e4635d3e86bad3d27f00561202399578a4756e0317ff796dd82d773cd86bccca
MD5 f961ac265860890ccc68085bf588aea2
SHA1 58615c8c0eb50b4abd5b0c243a66d4399b2919f1
SHA512 b0f35c10dad5b90478e32f0ac2fb6b81adc65d664b67eeed4f1c8c53800f95c24f8699d4c1f9c32c830422678fc7678e78b20c1665269657a9dc395ac15af70b
SSDEEP 768:8v/HJGQN/WsiQr9Pbu2sQDaulphDcN73DT4luEDr1psvvj+JwU:6H7NYMu2sQBcNncUC12vA
TLSH
T1E9D2021D5DB066C1E0664354893A2CEB931EFFD88D506F1B6D7A238E1768D0CB566C34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
Size 100KB
SHA256 76af0f71342345912448ad34d3ffd3c39f6f96dca79de9e22e9be0454238218d
MD5 3fa5329d44c8c5264a17ceb9cf354fc1
SHA1 92b356086882634ea0c1a7ea478b0343057c8070
SHA512 339e359d57f0c2107ebec127bb5da89465d9f3f821e508b5105bd4f6549b4c48749f0571887f5140d4ad9fce03ec8e9c33065b342d3950d11524334ac8f4e1ff
SSDEEP 1536:6QLzYzs1NwtIIZ2k9X8URR7uKX9UMVgfgAfBNs75ImZzKWuOoFFnDDVvbEEeRckD:HLzYB9Ek9JCKNUAfMOEWMbn1bV6
TLSH
T148A312DA04D5D310016B99CD63628633EB1D2B0D39F179C5B9BA2409FAEB7BE7C19324
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c
Size 269KB
SHA256 5545641f1b32e6277aa52b4cb789ebb090cbbf1797ca5b74eab1594545d247c0
MD5 734d6fe1a2ac8d78f2f301b48f882f8d
SHA1 520c65d76a4a7fa5c2423f1d5c9832645f61cceb
SHA512 68141e2158c43e9dbe67f882d36cbd1536b841f9b36c8c62731fd2685dbbdfa9f50eeb4c3477680c8f260481a30ee81dcba9913a53dd90f12ba5bacc3e64d8c0
SSDEEP 6144:Cg/Vh/TSyoIVc7QUew0Zn+BteEtm/QSOudAHGUDN6bk:Cg/Vh/TSyoIy8TZaQQS/dAmNbk
TLSH
T1B844231EA079F575D32271BBB50E11F49248E51E2298DCF8D2AFDB34C290066C587E7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000035

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000035
Size 72KB
SHA256 47378e6f6336bbee2c1fd6c3ac94ff248fdbd57a3295af4844fe400b236bd689
MD5 3f55a6faccc81ee0561c10c2f83f9072
SHA1 a0c6b0a95e9ca598442e0ad7cb79094fce5ba05c
SHA512 df344ba1223fcda1ae333545ff604e48183b38337b4615259b8e64b6dc3209bdb14c40f70f40d335b7578cfbc8540fc26738cc3f40e5129289bf25a3eb64f8e8
SSDEEP 1536:PmHX5DvFdm32rzu0A0Tb96ZsY3VZOfjw00RcFVqIiDWynF:OJDddWuq0A0b96ZsYFww0lNcF
TLSH
T12573022A0719BECB95E3268ECFFE6DDD15BC03AAD9B30603D89FC14C3D88A905185718
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000046

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000046
Size 117KB
SHA256 e20869a0d2af0f56f38d3cae2f802a082c9e9431a6026eeb16961ba09411de1f
MD5 90b037cb43513a15e65e4d1dfa3ac9bb
SHA1 128d9d2c3090c7ce960bd326c52ee65dff781615
SHA512 b7b0fba5ffa417e70686135e89a085e7efd28b5e98b6860129d76dda05200c706be8f7988e5359b47bb5a87f6afdcd8c6eb6a0e86bc5f159dd99cd1d746a9921
SSDEEP 3072:OtJjIBy7Ydxn71gFRCCG/1EcxRHu4JuzgkSEckkfBW2:OPEE7YdngFR6/1EQszvMI2
TLSH
T134C3121AEF753410C174ACD0577A1ADE86FEDFF2BDA450A063E8B4BB5EC92D0A610471
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007c
Size 20KB
SHA256 57e12433622a0f043d950bc766a5bc423008d0468cab6497f3ead4e55df7c1c7
MD5 8bd8220ca4c1c9bf2756086b9cdd2737
SHA1 c4b09065bdb49f26cb911e6c724d49cdaa771b6d
SHA512 16c22bb9f89d11df3db453ab71365fd27de31ffe97b1159b5ba940932773b0c4fd02903d9ed55cb1f05eb88ede1b3561ee555e90a0a592abda4f826ebe5eb691
SSDEEP 384:BoikZS4VhesCQMQABVDUA+6SxKg8Z848u3eI2Vci2jRYxqEafv:dGcsCQMQCVDUA+VxKg8Zv8VGi6GPan
TLSH
T11E92E17988A32D89689D4E44A3FF6B5A5E09C94B1D2F05FE59181CC863D4E8BFC2C45C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 76194aab64e9a773c01ab223cf3f94352c528e03acad20d67487763f00caafed
MD5 4e8284327f2f7540afc2414bdb3b653c
SHA1 8608169ff7c9e830f22ec7176fc9c7ba561c10e3
SHA512 ecfbb295445b09f2ff49e720902e5f4e0863bb031d5e446be0eaae2bddf513d9f50d04c895c7c8dcaf2e64faa3fc37c08c893f5645d72ddd13ead92b7c541aef
TLSH
T1AF8133779AC0861AFB142CF844FD041CF174458B97731F328696FE7905A37DAB185E50
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a40421699a04ccb04709de62910b4b83ecf485113ea11659fc9372b2d7736635
MD5 d0fd991eeeed5aeb12cb8651a64f2431
SHA1 7636dd0eb250029b16d947a45d8244a29ad5cc40
SHA512 b8a2a5c8ba50491fda161638f510b8b3c1ded805fe2d0823093df14e990a1b64a02abc25f160a0b1a203955bc4caa19fb52644b3f221cb4fa1719c75c0a36a00
TLSH
T161610C77A9C29139F7242CBC14FD542872714A8BA7332F224B93DE7446E3BEE6185D24
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 16KB
SHA256 a795003c8b4b8232229509720dde370c64074fe952d6e48507da6e4a99490b5b
MD5 692f825463ade78f4ef08ca31ae59bd2
SHA1 0a722c44a44fcf4e2cb3fb6625f30b87295e6f07
SHA512 2dadb29a79cd8d5977a60ade70dbc9d2afff256091c367a4790faa7e0b6f03a407ac303fc079460c65e86442d50d788f892ad820fd9adff98312e8a4c8c2f8c8
SSDEEP 384:DofxOF3QeKpeUoFze1SaBe89wglSFL7MDTaIaEd4FfWGwRVR4CKd4dhFBRaIBRGH:i1dv7fYFq7m
TLSH
T19E7254F743B1962D8E1196F9AB14AF2FCE591620033C3D3689D47E0BD3A2462E12675F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 16KB
SHA256 f612d6c7ad0e552eb116c23b5df4daffdb16f7617f614a6b7e73254d29ed8fe7
MD5 44412f683e2eda03c12627d12c6c9ad7
SHA1 617a601305789f831a741236517607071acb77de
SHA512 2d7b556f7353aad02ed5b1cdef8d0c5928a44550c0de974d102fd24ff0d9ab7dacb1c1a603882d1c8ea145d09c2dd49c93525f6bc58aae68f27c0e278f7c1e10
SSDEEP 384:DIU9QqUNe/Ze5l/leHS/BewAbzcS0aIaEd4FNtWGbAkRVR4iCKd4dCFBRaIBReRx:TYBiroYGttiq
TLSH
T1E47255B783E4862DCE1256F99B14BF2BCE5A1624033C3D2A89D47E0BD3E2471E11675E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 3eb04231303824ecca24edc3413f92ea509190282482e163c06b8cdfe15d7264
MD5 0feb91a03a7b88bafa5a88cdd1653525
SHA1 bd04e8fc42068c6f9931ddda71765d7f4722b282
SHA512 05e432fd2aba0896babc19c1a47f8d9c72617f81b1c0f51ae233f99e9acc50735257fb1eac6dd8f42c812f695accb9a8728454ed1388c85bec18452500ff2738
TLSH
T1BA416BF7C7E8857D890155F4A7152E2FCE290D14536C3C56C8D8AF1F53E18B1E24168E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 18KB
SHA256 324d1e83155214b5f44d7b067b94697dea0f2fb7d040691d5fc0dc370e460491
MD5 7d22284037880ff15a3ffd07d3355e41
SHA1 60ea8b1241abd50cf37342ab4c7ad6e45e7d9f5f
SHA512 0d878e8a947292ccad811559f68fd36a0c2487fdbc687cff1e3f4c3ff35413b440fe002335d4afa2d28f92336d2e57da25042e8ec9cfb64d4fcde28ace730a5e
SSDEEP 384:DIU9QqUNe/Ze5l/leHS/BewAbzcSo9WaIaEd4FfWGwRVRWCKd4dCFBRaIBRG4B+9:TYBQC8Y+qnkN
TLSH
T16A8268F783E4952D8E1156F9AB14BF2BCE5A1624033C3D2A89D47E0BD3E2471E12275E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 17KB
SHA256 14e9e17bc79095c6a2f97eda254909ba7d3e027c03d070d6991d78df12b26580
MD5 a251d6a6c0967ba34fb19ff33792d106
SHA1 996005d77b2e8062f8ad1065837f193951929ab1
SHA512 227673a5e45fa457af09702cdf46e1a2a64814b0833d25f7ae1c790d7f1d63531dccdcc4fec6bb3c586d6890c758c1bafad6aa65180f5bb6a1fe8177d38b8da9
SSDEEP 384:DofxOF3QeKpeUoFze1SaBe89wglSFwL7HWaIaEd4FfWGwRVR4CKd4dhFBRaIBRGM:i1di7fYFq71
TLSH
T1EE8245F783B1962D8E1196F9AB14AF2FCE591620033C3D3689D47E0BD3A2462E11675F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 17KB
SHA256 fd944054027fbbfb0a93669137b9b65bbd0077856a0592cab5c7bc5e3b296bce
MD5 b60a87edcedc3b492f86fe89dab26448
SHA1 0884f4efd21d17a2bcf5e92db1db255427438def
SHA512 51a31ee4f12540af908e8188dec65d639e8c9e2d55ac77c7e894bb4ac610ad9d4c08b687259cb89cf07694f91af69922106e8092dd7324c2c324a3e5945fc8ab
SSDEEP 384:DofxOF3QeKpeUoFze1SaBe89wglSF9+zHWaIaEd4FfWGwRVR4CKd4dhFBRaIBRGb:i1dA7fYFq7A
TLSH
T15E8255F783B1952D8E1196F99B14AF2FCE5A1620033C3D3689D47E0BD3A2462E12675F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 4KB
SHA256 ec443acbb65144938e3e76a8213a5d5d7bab5ef0bf534adb40b907602e6cb49c
MD5 aa2e29a065733548824464f254fe03fd
SHA1 ba20379727e3fd717f94deb28dc4dfcba179fad8
SHA512 46d22a006f6f53f2a76b311543564715607366a368681944b46e43db160e07d15c559b9c9a45a3c6d1cf9a6c34ebc9678b265da8047de39b2543241ed2ec5438
SSDEEP 96:KjOSUS9jIUsieURzNDUlBUVUFBUptU7oUjVUPFURpUEUKcUS0hHUrKUIkUpUUUjq:CUSCUcUVNDUDUVUFBUXUMUBUPFURpUE5
TLSH
T1F781AFA7C6BEB56B607D8CAB2D497C0629BEF432019164F8DF66817CF4C54F70B12426
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 bf18aa55c80b1c5304b052cd22b649358eb296cdbaef4fc137694ad42bd092c5
MD5 cdf6b84e5e58d749667ba7603f2047ad
SHA1 696d3a7caea6e84fc7c2083aefd84037b375f364
SHA512 ab1caf2de56f553c57d40d64c19f961337da70f615b750737074aac9b3652b6cc12fb1b4717ce06c2aa0e4c7ccea5467ece62030de98aae73f9d7e7c2f6d0862
SSDEEP 192:sRyxVXD5vrN9VlFwu/G0v7Hp+PRpfUx9DHsb+WNnyik5ZGgvX1egB1aunWVyIsnN:sRglxjjjSXc5w2ugb1ajv4
TLSH
T10952D72AAD10697BACDBD259FA657B67E7F5103121D01E88FAFC892C14E76CC321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 01f646001cb7953643cf3a10d6648946c09a28b43c1fd1a73c532060ec960a94
MD5 cc9039ba36d47270bc64bbe7fda24acc
SHA1 f031faa03e13b79cf2bd08fa610cd79802067fcf
SHA512 eb7dbf4c0a98423c1c3c7bb6a996b979265b3ff1eb4233cf48694f7339fd7aa47dd640b9942842d8bebeb0feb73f8f0025c1d51e25751ae89a3463ed2be0cb60
SSDEEP 192:sRyxVXD5vrN9VlFwu/O0v7HpAPRp2Ux9DHsb+WNnyik50DYCX1egB1auFWVyIsnN:sRglxjbjUXJ5w2eYQ1anv4
TLSH
T19642C72AAD10797BACDBD269FA657B57E7F5103120D01E88EAFC892C15D76CC321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 2f37e6be2dfa4541460d907690173be5add230def364d34c2642c1ac62460f66
MD5 32ef3204ffef535abacd92fde2963bbb
SHA1 9025c3a9988fbd1377ba8cc97695bbd66a2b84ec
SHA512 30760fe31ba918f77e637a8dd7693604850b68a4da8a915fc34f1d3c85589acf1a5b9007c83ab2d3ad9f161f79fd9d58bbd90ebdb199373c847dd1efe9e962bf
SSDEEP 192:sRyxVXD5v9N9VlFwu//0v7Hp+PRpfUy9DHsb+WNnyik5SkmKX1egB1aunWVyIsnN:sRglfjAjSXv5w2pm41ajv4
TLSH
T17B52C82AAD10693B6CDBD259FA657B63E7F5103121D01E88FAFC892C15D76CD221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 1a242cd9f0b4b9a1921b7a4234bb1ab5e091c3e1b8c6fb161c806be42d15399b
MD5 53f367788376359da3c0aa6998e34552
SHA1 edb711075da1a78673f0391263a7b0f522e8ba31
SHA512 0300f70a81b843e31abf64f1490078ecfd2b54561193072317ff9d87dc337d179c9e8fd83fe9d5a1dcc6ed7b384f4505d8801ef22c592d8a760956c07b5ca86d
SSDEEP 192:sRyxVXD5vrN9VlFwu/ScE0v7HpAPRp2Uyr9DHsb+WNnyik5yXOo2hbX1egB1auwj:sRglxjpZjUXe5w2+2B1aie
TLSH
T1A042C72AAD10693B6CDBC269FA657B93E7F5103620D01D88FAFC892C14D76CC321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 1aecb46ba5589d7c3535103b66994d01d31615356a4c276ea0eb00581f35229c
MD5 8a5586cc0e111b6f1938ac5fb03776c5
SHA1 ba031007e086c0c401d8e6bbeb9989bacd97e595
SHA512 bc2b01dd61f11904c79ae43c38f53fbf54b91a836b5c4768471f1f6dd58457806bdedbc42f7e8250979d6c3cbb9a5d06c3f655e792e259a3659cec7c999f9fc2
SSDEEP 192:sRyxVXD5vrN9VlFwu/i0v7HpAPRp2Ux9DHsb+WNnyik5yxeLX1egB1auwWVyIsn3:sRglxjnjUXJ5w2+eX1ai54
TLSH
T10742C72AAD10693B6CDBD269FA657BA7E7F5103520D01E88FAFC892C14D76CC321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 51358a646940bb6edd5949fd3c9e59b3e49772d81951524bbbfaf09dd864ad79
MD5 7c52da3fc36fbd1a6f3c6371896ed0f0
SHA1 3edbd5a0415e8403748c76e98706789386ad7776
SHA512 583bc60d00df6a9f501cdc6baaac0b188727a8e0b1be40e2b1b02908d46048f395205db7341b804d1c8d18c4436ab3cecbd8a3ae2a520d60b038335782111b7e
SSDEEP 192:sRyxVXD5vrN9VlFwu/X0v7Hp+PRpfUy9DHsb+WNnyik5/m0OKZX1egB1aunWVyIs:sRglxj4jSXv5w2dNOK51ajv4
TLSH
T14052D72AAD10697BACDBD259FA657B63E7F5103121D01E88FBFC892C15E76CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 ed98fb286c7d312efe0c768d10ff1798afabb81dab9a5c46f5bffa1c129d0b24
MD5 aac6d06d50a88983e8fb32f7a5e0c8c0
SHA1 4e6832e634cc46d25025f86fd9cd1fbed5084d81
SHA512 f363940c9342cc6dd727100eb20af6ae6752c416333cc3fa1cb4d6a457136dc47751d22b211ba07319a9d1b0bc7ee6f1c17bc5d5273f4c82a1a837fb8d0bad35
SSDEEP 192:sRyxVXD5vrN9VlFwu/10v7Hp+PRpfUy9DHsb+WNnyik5SkmKX1egB1aunWVyIsnN:sRglxjujSXv5w2pm41ajv4
TLSH
T16752D82AAD10693BACDBD259FA657B63E7F5103221D01E88FBFC892C15D76CD221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 0058840b7daf291fbe3c8609fbd162c901d7877dd0a8b90d0543509fc6dbf1bf
MD5 879740c85e423c2276a82fcaca19a316
SHA1 2ffb59aa8a521a71b57e55dc39de0a4aa77039ca
SHA512 0477f006723bebd6b61dda712763aff60c4b4f95fc6c6e248b0a5fc7d737b4199279895391a5744dbe9d181b1092d16015fd6e9521f36794031df61165a142a2
SSDEEP 192:sRyxVXD5vrN9VlFwu/R0v7Hp+PRpfUy9DHsb+WNnyik5SkmKX1egB1aunWVyIsnN:sRglxjCjSXv5w2pm41ajv4
TLSH
T1C052D82AAD10693BACDBD259FA657B63E7F5103221D01E88FBFC892C15D76CD221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 3fceec2368f93ddd3be7eaa1465a3011c325ff47801261d2e3bc86a459460fa8
MD5 a9125c26694a66613be5174b13bd716c
SHA1 d0abfcc6f0e0b8d2779b7f996521b8ebdf6cd039
SHA512 5811381d70a31e2f21b2051a0c5593e8505bc21c15a15c6e78f2f2a296602ffd19c6ce03bfc0a32c575a8048dba5ba42472a9bf5d2aadd73dfc95e4c5fe7a5ed
SSDEEP 384:97jJY7KxkXqKf/pUZNCgVLH2Hfgsl6y7pLuLcSjvKXODJ4+ErU3rQHGjLsHHG:93JY7KxkXqKf/pUZNCgVLH2HfgsYy7p8
TLSH
T13E720967AC4C9E370F94C5CCD816BF4FADB5024B65E9C86483FA582903D5ADB110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 faf8b7149680f02873a79ce8e85b2d19cdfff184dcf69a159c629ee528f5fe3d
MD5 44b02eefddc578901d12ce2b49796a87
SHA1 5bb13defbddcb63632c85000c76225ab2fc5452f
SHA512 d0b725e1e47cc0417f1f0cf2890ce95c3e5ba1c1e95f9d9807b4d43a15037bed9cde867616c28540ef38e9040900eca5709cc685c187a4d558663933f444ac0e
TLSH
T1F1B0125180415241C04706B0114B54E872685F29A64A1F0153F07A37CC252E28014050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586b57.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe586b57.TMP
Size 96B
SHA256 bb5a3c8030135b5c27f27c21a7cc32a9a616b13c640320af8b71c3d262d48fbb
MD5 24cc8590e1409114341f27fd8ccf050f
SHA1 5dc7c43be476436ee3db108c971cf64468610dd7
SHA512 5e24dba84d2c5a7a7bd4b61a025ff2f404f240ddfade0ee57c0c8fb6bd7b507e746c037f735cc3f05b1a38a26b9e0f3e88f3ad4a86b3d552d8582c1d3c4ec293
TLSH
T152B02220C0EAA202E00203B0238AE8C8B020CF32C3030282EFE02F23CC20BF00820020
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 8dd658f3259dbeb61f049bf71c013eebccb5ab9be53121f89f13a4aaabba1f01
MD5 43a2ca4a62ed59ed0f875a0448aca41f
SHA1 7b1962dba3933e80c771c6316308baf172af548f
SHA512 d32bf256ec50d3b052753e122dcda8cd56891191ab49db70d9bad2eb8c8f7faa087b1df53cee80643814360f4136edbecf62f81555f445576143e3be6e50fb4e
SSDEEP 3072:vGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM+:+m7Rkm1tYpBeh2BAo+
TLSH
T18EC3122B5D75A87658B9BB0EB04E0B1F1EF149B7C920DE52C8D86F0423FA7CD1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 a740de2ebebcc0847099c96373a5058d9ceddb28f3af73a3a46925e4aa7d578e
MD5 599d7230769e85b81d341840211b1935
SHA1 146869603b0ed99f939e4535d177fa50169bb12e
SHA512 b49f067ad4724eb248c7ecdca7675f14956864ef70af7f09b79bc13152c98c051bb623342f93e559cd37ec9f93aff643c6ee53fad7bff51b21ed52c00cd1cd00
SSDEEP 3072:6MGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM+:6/m7Rkm1tYpBeh2BAo+
TLSH
T170C3123B5D75AD375DB9B70EB04E0A1F1EF149A7D920EE52C8D86E0423F66CC0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 69e07a4085a912373eec5cef121f562866c1875e8073dcd620ada6e1773986f7
MD5 ec4b75bbc45da48f7120f432ec7b0721
SHA1 673bf20756a5b9bfc7d5350249026ad6b8be6bbf
SHA512 f6c2d77cc0273831f274d3cc55fbb5a12ff869d1274d022366d68a6e815706b09623c4a4c7c293e27374ca5b8f2fb5feae6d24e06091213913f72eb3768270e4
SSDEEP 3072:4Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrM+:zm7Rkm1tYpBeh2BAo+
TLSH
T1B6C3122B5D71A93658B9A74EB08D0B1F1EF149A6C930DE92C8D86B0477FA6CD0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 c7d6e12e8b71413d4a22a90e59315b633f6aee77490bb5b8b22e53083c2e2f92
MD5 6708ec423f56f3887d41e9ac84353ffd
SHA1 7d0f68ef5b3502468e48400245f033870e3c2aa3
SHA512 40b7b8bb952066e40f1fd7d92c5e1b43c6b77a037a0c205046fe4d67156c88e3b72d91193c94c81f91f2eaf4b0f8c17eedf70d3cd3fb59cf71d3df79e00e6096
SSDEEP 3072:gGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM+:Lm7Rkm1tYpBeh2BAo+
TLSH
T175C3122B5D75A87658B9BB0EB04E0B1F1EF149B7C920DE92C8D86F0423FA7CD1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 b67d301d5cdbc89f6ae0b2835c929a9507fb54d68b41cad26c3aee9a4702c8ef
MD5 683cea00ced2f26e198a5d2938d047c5
SHA1 736f3f90057da31dcc8e35c07706ecfa6d5dac19
SHA512 ffe380b86c8384f8a00eac01b8a310606715f1e3d47bb474337bb436d3ec7ea274aad1122b23561798cab612cf4b98d5ccb0fa1ff223109526fa9cb1c9b54a4a
SSDEEP 3072:KMGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM+:K/m7Rkm1tYpBeh2BAo+
TLSH
T1DEC3123B9D75AD375DB5B70EB04E0A1F1EF149A7D920EE52C8D86E0423F66CC0A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RJ319122_trial.zip:Zone.Identifier

Path C:\Users\Admin\Downloads\RJ319122_trial.zip:Zone.Identifier
Size 182B
SHA256 6b383b38d0018ad64c951a30f35ee4fc67144e33be1d4488603cec1f5510e394
MD5 114d2e2e3228dff6e6da9c32c253e6c0
SHA1 8ae7d945faf1ea893c60a19ade7a0cb0dfbca7f5
SHA512 37e1189b872f25de1de83312f46c34de2b9a313dccc84894adc59ef23916487f9e4d7aee9e95cb4c6a7a8fe76e42e341192b80b40176a48f58a859ad8d0646f0
TLSH
T1CFC080EB4D1889140544A795537DD7CD5B4F71D9C8908BC1DC0414E394454E1C8D0916
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3400-1047-0x000002EC3CD40000-0x000002EC3CD4A000-memory.dmp

Download

memory/3400-1048-0x000002EC3CD70000-0x000002EC3CD78000-memory.dmp

Download

memory/3400-1046-0x000002EC22790000-0x000002EC227BC000-memory.dmp

Download

memory/3400-1050-0x000002EC3E400000-0x000002EC3E4A8000-memory.dmp

Download

memory/3400-1051-0x000002EC3E000000-0x000002EC3E022000-memory.dmp

Download

memory/3400-1052-0x000002EC3CDD0000-0x000002EC3CDE4000-memory.dmp

Download