hxxps://cheatlab[.]app/

Analysis

geolocation tags

eueuropefrfrance
user interaction
yes
max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 17:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://cheatlab.app/
Sample260809-vtbbxaaq7v

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2912	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307694069775152"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{0448561C-C437-4339-99B4-320E34C0922A}	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
3140	chrome.exe
3140	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe
Token: SeShutdownPrivilege	1292	chrome.exe
Token: SeCreatePagefilePrivilege	1292	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe
1292	chrome.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 1292 wrote to memory of 2620	1292	chrome.exe	86
PID 1292 wrote to memory of 1088	1292	chrome.exe	87
PID 1292 wrote to memory of 1088	1292	chrome.exe	87
PID 1292 wrote to memory of 2912	1292	chrome.exe	88
PID 1292 wrote to memory of 2428	1292	chrome.exe	89
PID 1292 wrote to memory of 2428	1292	chrome.exe	89
PID 1292 wrote to memory of 2432	1292	chrome.exe	91
PID 1292 wrote to memory of 5084	1292	chrome.exe	92
PID 1292 wrote to memory of 2432	1292	chrome.exe	91
PID 1292 wrote to memory of 5084	1292	chrome.exe	92
PID 1292 wrote to memory of 2496	1292	chrome.exe	93
PID 1292 wrote to memory of 2496	1292	chrome.exe	93
PID 1292 wrote to memory of 2180	1292	chrome.exe	94
PID 1292 wrote to memory of 2180	1292	chrome.exe	94
PID 1292 wrote to memory of 3192	1292	chrome.exe	95
PID 1292 wrote to memory of 3192	1292	chrome.exe	95
PID 1292 wrote to memory of 2720	1292	chrome.exe	98
PID 1292 wrote to memory of 1356	1292	chrome.exe	103
PID 1292 wrote to memory of 1356	1292	chrome.exe	103
PID 1292 wrote to memory of 2276	1292	chrome.exe	107
PID 1292 wrote to memory of 3960	1292	chrome.exe	108
PID 1292 wrote to memory of 1032	1292	chrome.exe	109
PID 1292 wrote to memory of 2948	1292	chrome.exe	111
PID 1292 wrote to memory of 2948	1292	chrome.exe	111
PID 1292 wrote to memory of 3744	1292	chrome.exe	113
PID 1292 wrote to memory of 3744	1292	chrome.exe	113
PID 1292 wrote to memory of 3904	1292	chrome.exe	114
PID 1292 wrote to memory of 3904	1292	chrome.exe	114
PID 1292 wrote to memory of 3720	1292	chrome.exe	115
PID 1292 wrote to memory of 3720	1292	chrome.exe	115
PID 1292 wrote to memory of 652	1292	chrome.exe	116
PID 1292 wrote to memory of 652	1292	chrome.exe	116
PID 1292 wrote to memory of 1844	1292	chrome.exe	117
PID 1292 wrote to memory of 1844	1292	chrome.exe	117
PID 1292 wrote to memory of 1356	1292	chrome.exe	118
PID 1292 wrote to memory of 1356	1292	chrome.exe	118
PID 1292 wrote to memory of 3312	1292	chrome.exe	119
PID 1292 wrote to memory of 3312	1292	chrome.exe	119
PID 1292 wrote to memory of 3148	1292	chrome.exe	120
PID 1292 wrote to memory of 3140	1292	chrome.exe	121

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://cheatlab.app/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffe8b80c728,0x7ffe8b80c734,0x7ffe8b80c740
  2⤵
  PID:2620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1664,i,15051189404152934001,11830330225499760955,262144 --field-trial-handle=1928,i,6001622609258501597,2047154236105239695,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1924 /prefetch:2
  2⤵
  PID:1088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1576,i,8096937859192480701,14250184581583234067,524288 --field-trial-handle=1928,i,6001622609258501597,2047154236105239695,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2348,i,9596465388750383227,8501058538546065605,524288 --field-trial-handle=1928,i,6001622609258501597,2047154236105239695,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2780 /prefetch:8
  2⤵
  PID:2428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3176,i,2315338596466753573,9352830986402585766,2097152 --field-trial-handle=1928,i,6001622609258501597,2047154236105239695,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3184 /prefetch:1
  2⤵
  PID:2432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3188,i,8863451991726176454,6110344216774875618,2097152 --field-trial-handle=1928,i,6001622609258501597,2047154236105239695,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:5084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4408,i,16876632004068419799,3346025152973810223,2097152 --field-trial-handle=1928,i,6001622609258501597,2047154236105239695,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4412 /prefetch:2
  2⤵
  PID:2496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4696,i,9770874767673813927,5283223789227383792,2097152 --field-trial-handle=1928,i,6001622609258501597,2047154236105239695,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4704 /prefetch:1
  2⤵
  PID:2180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4572,i,17328327758160840281,16811619428169156085,2097152 --field-trial-handle=1928,i,6001622609258501597,2047154236105239695,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:3192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5472,i,17138264933740381599,11452133518323199870,524288 --field-trial-handle=1928,i,6001622609258501597,2047154236105239695,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5484 /prefetch:8
  2⤵
  PID:2720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4736,i,8910930281186360013,2709310224211711489,2097152 --field-trial-handle=1928,i,6001622609258501597,2047154236105239695,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4708 /prefetch:1
  2⤵
  PID:1356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4920,i,17200477509359983681,14390808510763071235,524288 --field-trial-handle=1928,i,6001622609258501597,2047154236105239695,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5700 /prefetch:8
  2⤵
  PID:2276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3404,i,6435972127234903368,4095395345694344488,524288 --field-trial-handle=1928,i,6001622609258501597,2047154236105239695,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4572 /prefetch:8
  2⤵
  PID:3960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3236,i,9998651622256307289,10385457533801673604,524288 --field-trial-handle=1928,i,6001622609258501597,2047154236105239695,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4700 /prefetch:8
  2⤵
  PID:1032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4432,i,8525417797244177051,12428556892954531669,2097152 --field-trial-handle=1928,i,6001622609258501597,2047154236105239695,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:2948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5792,i,627367267900756163,11931282465818371569,2097152 --field-trial-handle=1928,i,6001622609258501597,2047154236105239695,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4524 /prefetch:1
  2⤵
  PID:3744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5904,i,5023726326174049478,7514481936160329196,2097152 --field-trial-handle=1928,i,6001622609258501597,2047154236105239695,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5984 /prefetch:1
  2⤵
  PID:3904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6128,i,12435171207303503934,15127817637508663915,2097152 --field-trial-handle=1928,i,6001622609258501597,2047154236105239695,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6100 /prefetch:1
  2⤵
  PID:3720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5500,i,11655620528319868832,14412410954784067367,2097152 --field-trial-handle=1928,i,6001622609258501597,2047154236105239695,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=4916,i,12496265710918329554,10771165116304625294,2097152 --field-trial-handle=1928,i,6001622609258501597,2047154236105239695,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5892 /prefetch:1
  2⤵
  PID:1844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5860,i,14880325814249414210,8037531040827073279,524288 --field-trial-handle=1928,i,6001622609258501597,2047154236105239695,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:1356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5580,i,560105362606941373,4908318248345924069,524288 --field-trial-handle=1928,i,6001622609258501597,2047154236105239695,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4432 /prefetch:8
  2⤵
  PID:3312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6164,i,11496855271125933319,14172593131643022069,524288 --field-trial-handle=1928,i,6001622609258501597,2047154236105239695,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  - Modifies registry class
  PID:3148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6408,i,15410018566076654106,7299069115704902475,262144 --field-trial-handle=1928,i,6001622609258501597,2047154236105239695,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6376 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3140

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4844

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3624

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 4c93f88c818ae0af9e2878d0bc2843a542efd43d18a90c35521830e58084c932
MD5 c775c02681953a314973a33db5f4983c
SHA1 62f9c24f1be6d403864c50ad2339cf5b913c1fe8
SHA512 04255363a5f0e7b2e650bc8a379826660d46385cd1dc405f046f517506836030fd6b64ad558e35ade304f10dadc045ea9526a53a543e6bc9aeb4035a3d1c5e7f
TLSH
T186E02BADC821AC2718FD1B2C20200646E78023163F90C81F3F3DE1188FF9A3B4566C2C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 528B
SHA256 9e7399e740a2d4eb79978c1dbcfcc7bea441a8a3fec3043a70553e7a697f6f32
MD5 56e1d53718665b107a7142912ee5b0c7
SHA1 aaa4724072cb9fafcfa66376073742ec48d97bd3
SHA512 b0e8dd846cf5e5c27c38956a2165c605a64c502a3a4d9502d31dcc27b60898911779fb84c96cb7d762b5a5a45a75ff7cba7bdd2676f86eec9a4b4de17ee20438
TLSH
T1DBF0681042D0E131DF82A2F4341A0C69009D1AD30E7F0B0785580FA73473AE043F5D70
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 20c8c602a07e0f586a2034ed1099ed54eb07e0d2e9f990269aa2e1cc847cb10e
MD5 0db656f7afdca20057286c7cf692c11a
SHA1 49688a0c6062839384ed74d5c41ecb88cb4e643d
SHA512 62db4a02b10364110a7332b6f36a7b6b233a653f8146e47e199c73f06c7c4f4d47d4c25d995b2648c0a0e7c5732597a28bf5dde0f284ba8537454d978d03df73
SSDEEP 96:DiGbucVuruXVu5u/aIVY8vs9LuluqujuguLugo1u/uP1u/:DiGbFo0qsaIVY8vs9LiX+Hic1gWm
TLSH
T1F9C17BF3C3D8C63DD81256F4E6247E2BDE691E2443283C6AC9D8AE5B53E5472D20068E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 ee3c4ebeb2d6f400a03b202fc3e33c41613903e5054c230985ef406453609700
MD5 d78996b63364540c36d20e0d8a98f828
SHA1 6385dc67ec44ba346dd630f947d1a1db64ffca23
SHA512 c81d2f1b0566f7bda77feb3a3a8672c28a43eacb1999db53f8f0842679ce129665d51bfd12ce60513883b934208876112ccc61e50c820ea07d1844ee603ab780
TLSH
T11A718BF7C3E8863E991196F4AB142E1BCE691E24432C7C6AC9D8AE1B53E5871D24058F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 32e5d920bf2d76b0c6a82160e649f287bc991d4b73615e0cb960f6a46fe4ffa6
MD5 454a0679c7d19b3acabdd6c74c4d4c77
SHA1 198105f0c783da47a3614ee639158f9cf38e13b4
SHA512 c7eb501d55244ed6d08f85390486912484e6ea41ae5816972fffabf3107943424a9cd755025a6a68979eb77dafe9b0a6e5bee853e15249227e47a93815af23cf
SSDEEP 192:4R+FtlZrynazPv7cpAPRp2q5N9BHsb+WNnRwPYeey2KxaPa7tjVyIsnAUge:4R+F5ry0HwUXljrwGPT20aS7Xe
TLSH
T19242C82EAD20797B5CDAD31AFA657B63D7F5102125902EC0EAFC993C15E75CC221B01B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 6c4579b0c2a463084f8f017f8b73d479c8e7296241038a7177f6008dbb56ba4a
MD5 c26257b6421f803e693ef55a03323346
SHA1 46d3c4cfb755565975fed113dcd227dd233092d5
SHA512 e93cea46a62671dacb7e4526e5a79b6039f80d94e0aa97e2375586c2d93f3204ddbdde91c32a742051f8600400aa081220ae8d2999014a6ee562f666c8d540fe
SSDEEP 192:vR+FtlZryna8ov7ipVPRp5qqsXNrerA9BHsb+WNn/9iFT2Qeey2KxaPautjVyIsv:vR+F5ry50GHX8vrwlQ2r20aSuXE
TLSH
T17952E92AA8206D7BADDAE31AF9657B67E7F1102165D01D80F6FC993C14EB9CC221B017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 844d3ec03467232c0b0b31852592e1d5bfd1b998c353219bbfd11d0dd2534c85
MD5 248039e3512518ae98cef47428956f17
SHA1 6b50102f479957e0c5bdc48e63949ea63a96eae7
SHA512 56f6fa2b67411fc0644fb1c73d9ea2b6838fd695e4701b9f0083f58780d47178025347ce2472b1dab91a02f1555f53e8546aeb65ea769478c186dc3b4f42e72a
SSDEEP 384:dXjRs7KxkXqKf/pUZNCgVLH2HfgslKR7pLuLcSjzOXODR0+ErU3DTHGENMAYw:dzRs7KxkXqKf/pUZNCgVLH2Hfgs8R7p4
TLSH
T13872E9676C4C9E770F94C6CCD8267F4FADB5024B66E9886483FA582503D5BCE110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\1f988772-d5c0-4212-b444-93fa23521b3f\index-dir\the-real-index
Size 2KB
SHA256 65185541ef737f9c6ea8c1307af9b8a6de45e095c1b9cf4c7743fa66bd2911b8
MD5 951a7feac592929d0e11d7cd14b1d28f
SHA1 4dd086ed05db6a750e065b017d0cce68ac97cf46
SHA512 0d3b164b34366a5855fcc9cbe49b435260d89dc072bf75c21231e73916e422e25bbddfb42f9bc04c143b42bc6be9f13e82c7d10db82b44580925807198c30f79
TLSH
T1BC41444CCC90ABADEC7551BA2DD415F657752D38FC58C29245A4B2B13403AA81B4B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a791.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\1f988772-d5c0-4212-b444-93fa23521b3f\index-dir\the-real-index~RFe59a791.TMP
Size 48B
SHA256 0781586c96ffb3f74840c9fdae83a68a288fedb2b2ee8a3b89148c91d50968f1
MD5 7086b07876d4cd55e858965437ef292a
SHA1 fe5b2719ab5e8db1c6e2f0877bccd52ca2c99ab5
SHA512 7122e8549aaa7d8e021bf422c96fd3ab5ebe2e713aff1a7ed7e03ff0efddd808bf6fa1d0af316d2d10a3b821e20f5a41cefa8387eacf1448c6f76015b8503fcb
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 a6ed1dc472baf237f29cf70a64995c482c19516cc8f5cda289b1c1921548bc71
MD5 999fd815bfe22908d55617294828d2b4
SHA1 9ab1bf61cf2ffbbb01c1a1e2b12496a6e3f54a2e
SHA512 470aeced3db9817a5f60ba247b3ac5d06d7c4a6aab4ff9a7d2322d1b0907fb92ed51a99be51464ba80bdd1622c312d4f9e77aaa9c1e42056c9c0027c78de4375
TLSH
T16CC04CD35A1089968A70A6C9302467ADE65E824A98C4D9A8A918A057316C9134415935
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 edf8830d3dce96ec09e344c999ca46b8a8df0e11d282850b84477565ddbadefd
MD5 73cdbc9d8aebe0bc60ae5ab753242a12
SHA1 32cdaacad83c206cfc0756e5e08e1efb2d002fa4
SHA512 814f79ad9992a57e87e9804b50040e75d6e115382db4c0291a04f26d868d59dc02421ba6859eff15fdc783549b2ef8f29427d795b5e564763d884dcff3c1eae9
TLSH
T1E2D023C683304C6756B0EEC2303522ED965E7D1F9CC0D89CBA05F067307C603C002935
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 129d80cef955253157b7c6334d8b5479f2f04291f90a2c57f1c0c07439f74c19
MD5 9d65d1251736f85c0eb8e271fe8332e4
SHA1 2da74dfd57f31b6d3f1a7a730f53b152737e81ca
SHA512 50af9db7d7ab452eff044ac40f01b70a8502243f3b7eb9b56eee19b4e7691fe0553653d3497cba4d1c8dd54ec4796e5f434b9a171a18e5cf342be5a954eef85e
TLSH
T1C2C09BD35610899B8A74FAC5203463BDF75F424E9CC4CDE8B518F057343C9134406935
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe59523d.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe59523d.TMP
Size 137B
SHA256 b7145587bce3284522504d72c604ec492782b94dacafb5f2599ae73e4e45c6cf
MD5 ed2efaf73d24aac9c91a321d99aa1012
SHA1 42cbfa0abff5e8cb945887527c25e7157f2e1845
SHA512 36b1f7f1872185e253f9c114a175a146c3401d1d20a6cf888ce5d09f0b914bea917c0959231d36e4f8726c19af70c71574f51d74e42e46ceff19cec70d61ab12
TLSH
T17FC04CD3961049968B60A6C5603462ADE65E4D4A8CC4C9A8B519B05630389138905A35
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 54175fd2d07a46b22f9068b19a21d8750bfd9c0e54f88087c9a15ab7e0ef2be4
MD5 85b0c2d712192041d7cf5511bb8cdded
SHA1 f49585f1025cc2f65247e1c1c1576988bc147f05
SHA512 496713b8f1962e4c09ba74b80270d97fc575e663a9044032368a481f258a645defafac513f2fffa3973f5c42f4c8b57544300b3f2ee5194c7597003818d7498f
TLSH
T1A8C01209C1096101C04F03F51842A89C71545F28DA4B338856E8D957E9362B5803B151
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 cfbd8d36e659b5aef62cf81ba12e7fe583257b8d9edcdac67dc31eae7519e9ff
MD5 497bef5ea937f3bb9452e6fe2ec7c3bc
SHA1 6d80b1c312080ecf61a5a36077b0f82d4ab063e5
SHA512 f2d2419431650d065f48a71a77f58c64eef7a64e0beeea83b1257653b7043a091409502e07e95d2834c81ab2701a04bbe98e5778d7ab690ffe8b1b91574b4dd4
TLSH
T146B0124080015151C15207B01157389872189F10AE0A1B01D3E06932D8251A38028290
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b64b.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58b64b.TMP
Size 96B
SHA256 e7e0fa6ce8b6b39871bbd943a2ca47585347a2a44bf230aba5d72a762ce392d6
MD5 3d1b1d43b65bcb86272a6cb9e54177fa
SHA1 b6fbd0fc39f5b141f32abf2c39094c543edf3c58
SHA512 1b72e95faf921dd6fa52e0e0816c4ddbe9c2a8956be1ec22e0a4725285970037a1f01b52ad887dfdba66f633386f785da221219134e5c1057fc442ad2b3a24f8
TLSH
T181B02200C3023A02C00203B028AAC0E8B020CF20C3030202C2E00E2ACCF0B328032030
MD5 SHA1 SHA512 TLSH

Submit Download

16.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir1292_1020732192\Icons Monochrome\16.png
Size 257B
SHA256 d52376c8b210b8003f5aed9f4555a7916b4640d4c42a36cc81d9864991c87a8b
MD5 6cc922565abd761f4039c816d86018c4
SHA1 05393c91529467f8ddec22a121fe482701365d6f
SHA512 8732f24ea85ab3fa845b3cfa2a354a85cab63a507947fb61bd8119c623e31c87d6f0735ce7f06119db597ec4fce4ad44c15046859b574cb11fb1306e489cf995
TLSH
T1ADD095F2E311DD34C52E96900533C473F433171B1DD56055664491DA4D9E90533C8D59
MD5 SHA1 SHA512 TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir1292_1599257658\Shortcuts Menu Icons\Monochrome\0\512.png
Size 4KB
SHA256 d345d2dbe2efd56ff9494cb31cae0e28cde5bdf176a22bca9aee27465b117c88
MD5 97193e4d969021cb6e6ad1b25bb7499a
SHA1 69cb3acd8bc0b31b63791efc9dc47d5657bbf40b
SHA512 1df06713846ea152089ea40434f3fcff250ba2d2c0b5afcbc546b82a65b68f3ad1cf503dbc4e8246765c01f191b4f8389c4c55efb7da507f443d858a8dfd704b
SSDEEP 96:TTcYKfambSQTNpzzBOWUjfRVS/TFm9BfyKhnaBS8ZP9jeLWfbOGp:SbSQTNh9gD+mLfB49ZILWfCW
TLSH
T1B0A1968E8CB5488E66658747D48538A2C5B030A7A7BFC3BE719D174851E32C6FF29B06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir1292_1599257658\Shortcuts Menu Icons\Monochrome\1\512.png
Size 7KB
SHA256 1e0b1b2e4dac49da1e2ce91a72e01f77fdb3bbb26ed3422e5d4037745cc307a4
MD5 cc525d60c0dc9696ddfe9524dc9abe82
SHA1 fc94cbd2a45bf2ff0fbe411f57a7cafa31126bfd
SHA512 09ab42f7dc3d6a08b9635ef229539a5c4c240506378a9de4eccf1f69d52b266222cdf084e9a567c6d21f19e61c4da7ccd98928870d6f10cd74e9158c64a4142e
SSDEEP 192:U3/tgbWgm8Xl2X+xqWwB3kUXPmv9rCywxAQU:2/rgXXExWKdXPa+txrU
TLSH
T159F1AF6F639B59EA3AF8493D4BD7A21FD62E108A2F275B71C5101045628A1C1FC69F0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir1292_1599257658\Shortcuts Menu Icons\Monochrome\2\512.png
Size 9KB
SHA256 ad08077126e7106674e4219f5f9cfac2305e8b3f627247c1d3e72136399e6fd2
MD5 660ae59d489be5b5e1e9036b88b4a033
SHA1 b1ebdb9421bf14b5c43a399b4dbd92288d91a604
SHA512 3bf52f4d1e92ececb7691bedf1f53dea75041615447eac2c1ec9f99d07417a571e08fbd2db58896506350e8af831e8fc943d35e35747a8cb6db9a03d880331f9
SSDEEP 192:uJTyU9sUZdxl59pfNK8EliT9Tjx/t0xM6LwZx4nwBmJH/Rr6O:g9sUxXM8iiJKMfcTJIO
TLSH
T1F022BE9744E4E7A3427CAEBF4684D914DF4E1B7384366E10020B199F0D7AA8268E8B93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 9926483f723f4b01a837911813fc3e992eff38dfe2f5567d16172e1df404b239
MD5 4311737b91412ecf9147a4dc036a653b
SHA1 8baba3c777beb0c0887efdfc7f1b0945b4256a55
SHA512 447636d70e80ef73f33f60e13c532c9c0a97a32d3497ad3b2cfdb4b5e6f6317b63ecc28d0be280008f0f9e2bef1d1e2829c2ae41dd13989d384eb48ea4134761
SSDEEP 3072:SXIFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:AIFmUi21rSm8uUVNSlzY/
TLSH
T120C31310B9A3FCB3EE99314476DB26158DAC0A428290C5415673AD415DEF3C66FBBB34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 d629b289cac86c484c905fbf85c24b2bf23c7714ec6523ea8a6f99e1273b1fd1
MD5 65e670f18f5a37d765784859b3eac6dd
SHA1 d12b0c45be85f2c9fec7891dea8a0c9da853711b
SHA512 25d7ee65911427597555a6ce7c8335dfd483ca1f13f9a5889dd7320a31633b4dfe0990763e704d2102c9c06d42421c0249b48e5a6fcdd4b6decfd002fbe07b8c
SSDEEP 3072:SXFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:uFmUi21rSm8uUVNSlzY/
TLSH
T134C31300B6E3F8F2EE5930447BEE2A149D6C0D818291C6415273AD419DEF3C71FAAB39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 96586759b724432ee54d363e7028c179a48a41d0501eec945498853d77d18032
MD5 e5ba04818cf5a07f8e0f7fd51222ecb5
SHA1 6684ff5e30593733ed5302d322b114171561f32c
SHA512 c252f2a39f701fa4c02e4d58035e8a736ad0fdedc467d1e503c8eafcc02ebb08b406b0b41ebeedeb7023a72244fbcf7316edd5913ad2c7f9b18cdf5c072f1ed8
SSDEEP 3072:SpFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:qFmUi21rSm8uUVNSlzY/
TLSH
T141C31310B9E7F8F2FE99304476EE2A158D680E818191C5415773AD419DEF3C61FABB38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 1f0f37c9b9594edb8694b2a76862bb3887f7b60466f65ba0324cd11c27244232
MD5 6be9ddc0fe0f91b14d2fc0fa53e8a784
SHA1 e16f8ba9ee60a374366f4f96158f1b10a4fbedba
SHA512 c600e9ab9c3e3823afb48d95f82e3b060a072f86296857f6dca25fe353056537b7bf652904a57c1fdb5c2842a830106589e8e7d1c40af46de2fc72be63d70eff
SSDEEP 3072:SkFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:hFmUi21rSm8uUVNSlzY/
TLSH
T1D4C31300B9E7F8B2FE99304476EE2A159D680E818191C5415773AE419DEF3C61FABB38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 30fb563c369e7e392867463c356b38f9cb2f00d2b05513f8cc31bc435c726b76
MD5 7331a09d34b276c4adab82ba306ac7b0
SHA1 7b01ddad55cdc243ed5e933f978b754c33317495
SHA512 42d0ff303aeded345efa03941e61a5f57b1f8811dc6a3a0574f7058c4f1bc8d418574d2ea9924c3a2f5b0c15dd92055812c9c450e3ef57acef6a1f97701b998d
SSDEEP 3072:SyAFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:TAFmUi21rSm8uUVNSlzY/
TLSH
T1E1C31210B9A3FCB3EE9931447ADF2A158DAC0E818291C5015673AD415DEF3C66FBAB34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download