20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7

Analysis

user interaction
yes
max time kernel
150s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 06:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
OperaInstaller (1).exe
Size 178KB
Sample260809-g5224sscnc
SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
MD5 4ef32b114eaa6f05340b46d0f48154c7
SHA1 a07219dc2a0fa96f5f9a03b1bb350c9ab2679d3f
SHA512 6631937f30fcfdc536bd14735870c9c4592f4414e9c1d71ec69c718bf341ff286174b782c6a23a6c29744be940bcac34aa93845e60727e090bee8423d738ea9d
SSDEEP 3072:IYHHEa1Lz5KhEwh5kc9+5sFoq0X/r6LGV4RxJ0OZnS+Rl//bRRlTHGVJp99vqRy:IYEwP5KhVyc9esFoBvum4RvGJTEy
TLSH
T1EB046B823AC184B5E5B244321864DBB19A7DFC700F65D9DB73987A3B5DB02C09932F6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	OperaInstaller (1).exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2024	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307302618701193"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{EC160BFD-0DF3-4AD8-A67F-C7F124609434}	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
1140	chrome.exe
1140	chrome.exe

Suspicious behavior: LoadsDriver 10 IoCs

pid	Process
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
676	Process not Found
676	Process not Found
676	Process not Found
676	Process not Found
676	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 30 IoCs

pid	Process
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe
Token: SeShutdownPrivilege	4720	chrome.exe
Token: SeCreatePagefilePrivilege	4720	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe
4720	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4720 wrote to memory of 2452	4720	chrome.exe	100
PID 4720 wrote to memory of 2024	4720	chrome.exe	102
PID 4720 wrote to memory of 3228	4720	chrome.exe	103
PID 4720 wrote to memory of 3228	4720	chrome.exe	103
PID 4720 wrote to memory of 4688	4720	chrome.exe	104
PID 4720 wrote to memory of 4688	4720	chrome.exe	104
PID 4720 wrote to memory of 568	4720	chrome.exe	105
PID 4720 wrote to memory of 4484	4720	chrome.exe	106
PID 4720 wrote to memory of 568	4720	chrome.exe	105
PID 4720 wrote to memory of 4484	4720	chrome.exe	106
PID 4720 wrote to memory of 2600	4720	chrome.exe	107
PID 4720 wrote to memory of 2600	4720	chrome.exe	107
PID 4720 wrote to memory of 2760	4720	chrome.exe	109
PID 4720 wrote to memory of 2760	4720	chrome.exe	109
PID 4720 wrote to memory of 3156	4720	chrome.exe	113
PID 4720 wrote to memory of 1176	4720	chrome.exe	119
PID 4720 wrote to memory of 3232	4720	chrome.exe	120
PID 4720 wrote to memory of 3176	4720	chrome.exe	121
PID 4720 wrote to memory of 3888	4720	chrome.exe	122
PID 4720 wrote to memory of 3888	4720	chrome.exe	122
PID 4720 wrote to memory of 1244	4720	chrome.exe	123
PID 4720 wrote to memory of 1244	4720	chrome.exe	123
PID 4720 wrote to memory of 2600	4720	chrome.exe	124
PID 4720 wrote to memory of 2600	4720	chrome.exe	124
PID 4720 wrote to memory of 3804	4720	chrome.exe	125
PID 4720 wrote to memory of 3804	4720	chrome.exe	125
PID 4720 wrote to memory of 2260	4720	chrome.exe	127
PID 4720 wrote to memory of 2260	4720	chrome.exe	127
PID 4720 wrote to memory of 4968	4720	chrome.exe	129
PID 4720 wrote to memory of 4968	4720	chrome.exe	129
PID 4720 wrote to memory of 2200	4720	chrome.exe	130
PID 4720 wrote to memory of 2200	4720	chrome.exe	130
PID 4720 wrote to memory of 3232	4720	chrome.exe	131
PID 4720 wrote to memory of 3232	4720	chrome.exe	131
PID 4720 wrote to memory of 4736	4720	chrome.exe	132
PID 4720 wrote to memory of 4736	4720	chrome.exe	132
PID 4720 wrote to memory of 3804	4720	chrome.exe	133
PID 4720 wrote to memory of 3804	4720	chrome.exe	133
PID 4720 wrote to memory of 3908	4720	chrome.exe	134
PID 4720 wrote to memory of 3908	4720	chrome.exe	134
PID 4720 wrote to memory of 1732	4720	chrome.exe	135
PID 4720 wrote to memory of 1732	4720	chrome.exe	135
PID 4720 wrote to memory of 5008	4720	chrome.exe	136
PID 4720 wrote to memory of 5008	4720	chrome.exe	136
PID 4720 wrote to memory of 2808	4720	chrome.exe	137
PID 4720 wrote to memory of 2808	4720	chrome.exe	137
PID 4720 wrote to memory of 1512	4720	chrome.exe	138
PID 4720 wrote to memory of 1512	4720	chrome.exe	138
PID 4720 wrote to memory of 4932	4720	chrome.exe	139
PID 4720 wrote to memory of 4932	4720	chrome.exe	139
PID 4720 wrote to memory of 2268	4720	chrome.exe	140
PID 4720 wrote to memory of 2268	4720	chrome.exe	140
PID 4720 wrote to memory of 4268	4720	chrome.exe	141
PID 4720 wrote to memory of 4268	4720	chrome.exe	141
PID 4720 wrote to memory of 488	4720	chrome.exe	142
PID 4720 wrote to memory of 488	4720	chrome.exe	142
PID 4720 wrote to memory of 4660	4720	chrome.exe	143
PID 4720 wrote to memory of 4660	4720	chrome.exe	143
PID 4720 wrote to memory of 4188	4720	chrome.exe	144
PID 4720 wrote to memory of 4188	4720	chrome.exe	144
PID 4720 wrote to memory of 2412	4720	chrome.exe	145
PID 4720 wrote to memory of 2412	4720	chrome.exe	145
PID 4720 wrote to memory of 1732	4720	chrome.exe	146
PID 4720 wrote to memory of 1732	4720	chrome.exe	146

C:\Users\Admin\AppData\Local\Temp\OperaInstaller (1).exe
"C:\Users\Admin\AppData\Local\Temp\OperaInstaller (1).exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2728

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffef67ec728,0x7ffef67ec734,0x7ffef67ec740
  2⤵
  PID:2452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1616,i,12576092630086581100,17317747402635139387,524288 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2080 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1704,i,1855385064743504032,14460375629225859356,262144 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2056 /prefetch:2
  2⤵
  PID:3228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2400,i,11064043639756648590,434266686772959353,524288 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2576 /prefetch:8
  2⤵
  PID:4688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3248,i,4058742722645863951,2634337352143279418,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3324,i,4736411716461026372,14334944901878086389,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:4484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4468,i,1412462730668243049,9154173472328345290,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4480 /prefetch:2
  2⤵
  PID:2600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4692,i,12256517317791618915,6159571556486504363,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:2760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5516,i,12012753097452943743,10662838264440709038,524288 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5420 /prefetch:8
  2⤵
  PID:3156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5716,i,11448627780486992465,8895942661546989577,524288 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:1176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5592,i,10064713459801540419,9384233586413738348,524288 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:3232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5516,i,7443523231109629170,3253497275892583623,524288 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5804 /prefetch:8
  2⤵
  PID:3176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3880,i,13091573182087860442,6167434901402104638,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4584 /prefetch:1
  2⤵
  PID:3888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5772,i,14402296150225004430,16729611724474477388,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5756 /prefetch:1
  2⤵
  PID:1244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=3396,i,5519817713265036740,3923472953535863863,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3356 /prefetch:1
  2⤵
  PID:2600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6092,i,1335438850391432904,18050506436555947176,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6068 /prefetch:1
  2⤵
  PID:3804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6064,i,10182996020740512861,2538000516482392032,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:2260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=3540,i,12216862498768096614,10113399273487480479,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6136 /prefetch:1
  2⤵
  PID:4968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3428,i,2248340652868592069,8242813481238574997,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3404 /prefetch:1
  2⤵
  PID:2200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5416,i,1572705054681192964,8913818952209049614,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1224 /prefetch:1
  2⤵
  PID:3232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=4824,i,9705216906547224404,16577633013269260848,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4572 /prefetch:1
  2⤵
  PID:4736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=3324,i,11242971026061127956,14156090016601788080,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3136 /prefetch:1
  2⤵
  PID:3804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=3476,i,14341142124593843285,16689733962307119748,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:3908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=3468,i,17215441754157451238,11603301470429761174,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:1732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=4728,i,9921603802148056155,15224561344582668522,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6180 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6100,i,14105407025307763090,3689312455376649358,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6016 /prefetch:1
  2⤵
  PID:2808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=4760,i,8934183226864824072,13898568005089760313,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5864 /prefetch:1
  2⤵
  PID:1512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6388,i,18369609687455750310,7259892373074220949,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5584 /prefetch:1
  2⤵
  PID:4932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=4476,i,11368762525039461352,10612583606199481349,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:2268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=4732,i,3514387671814011773,8538861552073848219,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:4268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6160,i,11194451631069711102,11800767778179940233,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3828 /prefetch:1
  2⤵
  PID:488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=6060,i,18111744661798337133,11898253738656262766,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5800 /prefetch:1
  2⤵
  PID:4660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=6620,i,2684612995191564111,5814047366375582028,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6596 /prefetch:1
  2⤵
  PID:4188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=6776,i,231805230433717564,1314422919061873615,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6824 /prefetch:1
  2⤵
  PID:2412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=6896,i,10468849582611725622,17310473602442366579,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6908 /prefetch:1
  2⤵
  PID:1732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=7080,i,11035787571237885294,4429335077273699332,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6972 /prefetch:1
  2⤵
  PID:2664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=6964,i,12893605464940408505,15213657797310531123,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7256 /prefetch:1
  2⤵
  PID:2120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=6656,i,10277679559165799965,12950856344198653559,2097152 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4480 /prefetch:1
  2⤵
  PID:2260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=7372,i,6159413688978541179,3092470235207375879,524288 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6996 /prefetch:8
  2⤵
  - Modifies registry class
  PID:2688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=7428,i,2200795212762995449,4174318175362689391,524288 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7352 /prefetch:8
  2⤵
  PID:1552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3436,i,1265054917006500785,2543775081732420050,262144 --field-trial-handle=2072,i,1787765137170539764,17435754630924434162,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7188 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1140

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4136

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3524

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 e9ac0144344bb65d9aacb4e6ee78a642e9dbf63d6d1c093cf096bcd26a2f28dc
MD5 36117bd97d4364b153f34289af2b0973
SHA1 c0909a87ff31333f2cf93756d06f4e95501320d4
SHA512 a1fbcaec0ed67dafe8d769ab4f4f1e9bad562012737e5b765873eac06d64cf52b1022136a738436a7f9574d5b19a3a11f35ad49e0d6b2382844236fc572ccc4b
TLSH
T109E02BA9C831EC371DFD471D50640A4AEB6123571760C45F3A3C95088FB1677028599C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00001a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001a
Size 331KB
SHA256 db4ffbf0ec662620013dc14bc1268bdad6256d19d7d511ec7eff8446887e6900
MD5 05ef8155cf66131654d3bb9c9cba5853
SHA1 e79d53fcb604921222dd1dbc2f1c10c631ff6075
SHA512 ee38793245d91683ddb1f847e5b56a09864fd32ec059055459b3ebe101abed79683ee59c80f30b8f6249d2bbd83fbf7bca83dafb4ef2b634ceff6969c80fed23
SSDEEP 6144:FljUD58FLTW53eaLkNv+Ps0dj1fpqaGjYf0NIcB3bM1rJZ24:FDm5uaLcv+PFj7ajJNImbM1rD
TLSH
T1247423A9B50E3C8AC94F9473827EAFD2A4356FF38D47BAA3634241F401874342E4676D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 360B
SHA256 93afb14981ae8c5c5f7e5607a56a81d4654fd5f5381b514ca82ede74015a1b3e
MD5 8813ce7ec7cf5109578819c57143b65d
SHA1 d72327e66e76555781a2de7c8a096384b1b24a59
SHA512 3ff676f2dbd81efed32bcb12c2f91a9836877a83eb58d75c5b9b427c359e58aefcaf8cf6ebfe0ea9c1e0d7c9c62645c1482246e2a40a03b24aea70fe2d229735
TLSH
T17AE0970301C31803CF661B3465A22F1628BC8633B4E283030FA20E4307073D0CBC60A8
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 3635364c86d79596a84316307c12001527418a541d8ded3e28a9569c1c165edf
MD5 4aa15824b9fd5bc068f2c80a8e3230dd
SHA1 fa9dd61d180733d53eb925cd197f418e301345ac
SHA512 c306e6686b565c89759c8232b6966353f149526fc47da2530096c2b62993ecf457ab69b7aee9a87f6cf4526c55defedae0e99258cc41c4867bb519c89b2c9622
TLSH
T1925188F3D3E48A6DC95192F4DB25AE1FDD290A18121C3C66C8E4AE5B53F2872D21139E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 18KB
SHA256 23f83bf5fc88d9958e65dad5c975f5e9da8e815f76b7fe40476648dfa4daf520
MD5 718c543466217cd904cef2413807a1e5
SHA1 e83104c4b740188f8778ee0490fb893504a568db
SHA512 9f581138f276e45fb74de67e68a8d3635bacb2a2acca7719b12c88a004fe1ad22d3a6a0be98eeb0c9dbe4d894b930d96ac92b58448f6935aa9ee62b00a8cd745
SSDEEP 384:DltS26GXEcrxUXYTUf8PeqTFneJuIWJqbacpFSucOReArbF0K04Xpbmj2H6tWXGb:mSM9+D5XsG
TLSH
T152829CF7C3F8866EC85152F0AA253E1BCD5D1919432C3C5BC9E5AF0B97E2871E241A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 d64338b227bfebca9a0cc83333f96ea57896c224d9aff6fddcbc7c67836d43e3
MD5 f50f5ee0c7a9d13d413c2f42b17d2efb
SHA1 26071db027ac951c356bf85e9334a424c1553142
SHA512 a563f0a149b0cd29aadadbbd60f32f0936d8fc4fbba26e91cd7a89fb84ff5b873936bf6e3ded8788296eb051c3fb2283105efd42dcb2c85f7443f1444f28329d
SSDEEP 192:wOR3krJE18F1ev7ApAPRp2l9qHsb+WNnHd0WJ2N6kw4+VyIsnAUgtaJ:wOR3kqiakUXmkw9062N6Y28
TLSH
T1A042C76EEE10693BECDAD229FA257B63D7F5103521842EC4EAFC992C15E75CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 e2d65ab47f8080bcc986cf68afe992ada5e3645222e4bdf38d616c516f7c79db
MD5 3539a79142784e03ba0c5f1a22d9f31f
SHA1 8a7ee6902fa1e908174ba1e95c1e69fc91480db3
SHA512 239275fbd196a51c40f092bb95f7f8b9278acaee804b48e1e952388ca991bc9a9bfbfd93ac9ba3ba912bbb79c69611ae632cbf55a489a9136ebe40b54ee3ea76
SSDEEP 192:6R3krJE18FJxv7ApmPRpMOywjMvW9qHW3b+WN5lM96mUWu0tQWWUo32VYJ2N6kwF:6R3kqAhk6XG+kU5WGEXf02V82N6N2e
TLSH
T1CC62C66EE9102E7BACDAD226F9257B67D3F1203560802EC8EAFC9D2C14D75CC2217497
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 1cb9541f9a933b37f8aa374d41e0e220219afe451c1a05b951c731238df05c2d
MD5 2525118a05f98c5a89251d63a16ce7d9
SHA1 b29a84fc80eac034e986535dd53f204fb329050b
SHA512 2a3dfbfe1e31338bfa52c43dc301dd375d8cb22c010b20dea10df80df97cbc67447c3caebb3314cdbbead671c15e27cb0ff38438a28c6c314fcdd4f49b5c5a8a
SSDEEP 192:6R3krJE18FJxv7XpmPRpMVlywjMwqW9qHW3b+WN5lM955mUWu0tQWWUo32VYJ2N0:6R3kqAhj6XJgkU5WbEXf02V82N6N2e
TLSH
T1E262B66AE9202E7BACDAD225F925BB6BD3F1202560801DD8EAFC9D2C14D75CC2207497
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 fc3c065600a32b3a3114b9fb5d76ee75d513e42587c5cf6e99e5d5d934a74984
MD5 123d6d402748eea0de9b19f7f5d6714b
SHA1 056a843c5417db570b0ce007202d2406b82ef9da
SHA512 16623bf1ba576062e81f3b0057cee6a88adc59f0b88f21dab2ccd8fad8781ff93b39b94f4fe29c37d753299ccb3b45ca45f19a45232770750d38073fe4826f80
SSDEEP 192:wOR3krJE18F0pv7ApAPRp24i9qHWHb+WNnHd0WJ2N6kw7+VyIsnAUgraJ:wOR3kqJpkUX6kc9062N6b2e
TLSH
T1F952D76EEE10697BECDAD229FA257B67D7F5103521802EC4EAFC892C15E75CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 8dfe3da9109af469b58c0754e91e5d4875cf1f05baa9f964c5f2cd2fc5bcdb70
MD5 e90c609872c8d13ed70d60c24ce632c0
SHA1 8f540dc80901a888ed785c2bf61e4e25387f3cb8
SHA512 5cec35c679ba527fbd04a4bf32c01c009fd674290a91cf968be8fef8c7349f8533fcabdd31f4f17c346c10bbcb0596fe35c806f068eddc3496d9ef3e28ad0e35
SSDEEP 192:wOR3krJE18FxS0v7ApAPRp24i9qHW3b+WNnHdFu02fJ2N6kw7+VyIsnAUgraJ:wOR3kqclkUX6kU9v2R2N6b2e
TLSH
T1D152D66EED10697BACDBD229FA257B67D7F5102521802EC8EAFC892C14E75CC221705B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 670731f19745265778b4c8aa562c536fef76a912b8bc263c7e427481f11c48a2
MD5 a69e60605031b51cc01b9a46c26b0ddc
SHA1 481ceec1047c8f73e9f8d37ce55de14b6bc7cee6
SHA512 3d49b231bb34a2ff601934fa90610288437839ab6e320644d732e07a11619cd4c2d2b4d2021ded7209fab66e86858c5388aabd3dffce827c69ad9030dc53c385
SSDEEP 192:6R3krJE18FJS0v7ApmPRpM4i9qHEl13b+WNnmUWu021J2N6kwt+VyIsnAUgraJ:6R3kqAlk6Xwko9E232N6N2e
TLSH
T17A52D76EED10697BACDBD229F9257B67D7F5203521802EC8EAFC892C14E75CC221705B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 13805701603dbbca9403b94e006c712edafb4f98a8e0ae4ce0ad1b025b835f93
MD5 28aca1b912d001e337a9e715a111a353
SHA1 177a8b35a6fa74a15deedffd79dc9066169fc496
SHA512 0e554b40f873ea651a22f9b91cf52ad45cc99b35e2db0e34845d695aa13aaf61497b6646f39f5b0ba26fc4a43100e92a0aff8ad949d0289fb397cfe00b0cede5
SSDEEP 384:V7jxY7KxkXqKf/pUZNCgVLH2HfgsluX7pLuLcSjvKXODx4+ErU31PHG0pdpS8gfp:V3xY7KxkXqKf/pUZNCgVLH2HfgskX7pf
TLSH
T1A4720967AC0C9E374F94D6CCDC277B4FADB5015B61E9886483FA981903D5BCA110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 eccbeb663b040f4f25f37a2ef185e1523a3ed53327aa7948c96fd4d1f5c50ba7
MD5 aecba765c729626dbad0934ea0fdae40
SHA1 46ea59447e9d37780222835a1e612b373c414639
SHA512 a92aa0766b165440b94d37e653a8513652afba98b8b0a573155e498ac14b27f524d0676a4b43084469e4b37d666d61367ef30c77a93767add06deae5ff0ec291
TLSH
T129B0121180019122C44603B861421C88B1146F14965E170293E06EA2D8371728855050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c493.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58c493.TMP
Size 96B
SHA256 d8d0b1163b6595a69206434ded07963c5cc3c574b2c22b3a9d08382fddeb4ae6
MD5 6cd31d212aba03619b7989090e0c405b
SHA1 88b9473de5f3bb149bc76060a9d4e0f5220a09f8
SHA512 62da9c9300648dd606e1a188dde7a79ab1d040261580b8d266298191f76048e1122593b545415df82e06054bf103b2263fd9363a625c491788ebefe9048b716c
TLSH
T12AB00256C1026322C0820BB07D9A99DC71E5DF2BC6071227DAE06B67DC356F14566564
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 237KB
SHA256 d640ef4a37ff302b797262bcab1837a56e697ee305ae214398b9c9cdda019eff
MD5 d86f8294d32b955d047a32b95ab4d4ea
SHA1 a38abdc5202a3616339ff8df2f4029fb06a3baa7
SHA512 c82fca17a8c5cdd3a6a9abf4a3891b2099137b06a6e5c9b9c92bf637529e406224f6d66ec607628e79bed3859d5642a4e06e20dcdbb04d6005cac256495a8f25
SSDEEP 6144:wDhxNPRW2PYddqmY7U52FHm7Rkm1tYpBeh2BAoi:SXPRW4Kq97UAY9oBGcAoi
TLSH
T1463423326CB16D394C99FE1D304E3D2E1EF28FE9D4A4AEC6D8C86F0426AF9445852D74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 77d8b37766dcfb7509b183d2c50b2f9563207fdad6ac90ec050fd6053a852cea
MD5 c2e9e4d99d0d43c4ea4d9148b2d57efb
SHA1 e8424e9a02d2c8442d94c7707fc1921435232580
SHA512 d2265e22d0b7525068823e8317eca0a44dd7ac828da93d5d27d503e45c094112529f88c04dee7f7c6312ac46bc0f79bb5c9eea07bee85adbc57af6409796e68b
SSDEEP 3072:AhGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:jm7Rkm1tYpBeh2BAog
TLSH
T1ECC3023B5D75ED3B5CB5A74EB08E0F1E2EF149A6C920DE9288D85A0437F97CD0A44A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 715714cf583d9919044a58ffc629dc7d7ab8360ea75c612bfa19563e9f85443e
MD5 b812878d22921e31c36c5155c10f01f1
SHA1 15b4a493d8eb963e2f6626afbc9a80daa35ccfdf
SHA512 e28f0d123adbcca52a3e209f216c9141da581c8c6ad7b0c58cb4d9494f38c94d57a23a6a92cf7f352f8de0c5fdc379b6aba87185a5a470d12c3ed951e56834b4
SSDEEP 6144:9jhxNPRW2PYddqmY7U52FHm7Rkm1tYpBeh2BAoi:vXPRW4Kq97UAY9oBGcAoi
TLSH
T1FC3423226CB16D394C99FE1D304E3D2E2EF28FE9D464AEC6D8D86F0426AF9445C42D74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 ba7fefd337d75ffc85430bb79a7a37eb2f24ca6dab40e52f797f5b511a76d82e
MD5 de5dddd1b690af2d191c5ba416722ada
SHA1 de40b838088dfa527863553a8cc61c12c659e5c6
SHA512 cfab1a12a7eddbdf556057134ef648579eec0f6a374c6b43d585bcc4c6b25a0d1cd2bf33c3ac65350df544341ca4102413631971dcedc314f1cf86ce5431ab2e
SSDEEP 6144:shxNPRW2PYddqmY7U52FHm7Rkm1tYpBeh2BAoi:sXPRW4Kq97UAY9oBGcAoi
TLSH
T1983423126DB4AE394C59FE1D318F2D2F2FF28EE494A4BEC2C8D45F0827AAD841551D78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 8b1b973d7cf7e008eca06e289380dc7f125225310d1b02c9490210e27e3982cb
MD5 ef911a2f8ba897c632e7b15fbc95ca24
SHA1 89a8312e3c831e610bc7b05f014cf73a981dfcb8
SHA512 47fe563e15784f2f1422f112ce3233aea43c83727e74ba88e4ecab3957671cbefc56ba776f851bdc1f18d8b8eaf30d58d92ae968ed1642e1ba0ff3ae0e27f9ed
SSDEEP 6144:zhxNPRW2PYddqmY7U52FHm7Rkm1tYpBeh2BAoi:FXPRW4Kq97UAY9oBGcAoi
TLSH
T1983423126DB4AE394C59FE1D318F2D2F2FF28EE494A4BEC2C8D45F0827AAD841551D78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download