ae9405b9556c24389ee359993f45926a895481c8d60d98b91a3065f5c026cffe

Analysis

user interaction
yes
max time kernel
1050s
max time network
1012s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
09/08/2026, 20:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Monoxide x64.exe
Size 330KB
Sample260809-zhst2acd59
SHA256 ae9405b9556c24389ee359993f45926a895481c8d60d98b91a3065f5c026cffe
MD5 692361071bbbb3e9243d09dc190fedea
SHA1 04894c41500859ea3617b0780f1cc2ba82a40daf
SHA512 cfdd627d228c89a4cc2eac27dcdc45507f1e4265eff108958de0e26e0d1abe7598a5347be77d1a52256de70c77129f1cd0e9b31c023e1263f4cf04dbc689c87e
SSDEEP 3072:7/yvAAdLz9aha9RMXtdf+IBC2nQ4oUehONFlT7vJ333AlOi9E3AAqgm:z6dLzgiMXzBTJTDqlOi9E3AAqgm
TLSH
T13174C3027151DA99D8214130CC2ECAF67E227CE4C6B149E736F2BF7F7D7524269AA720
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3424	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307818408853529"	chrome.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1741132852-2793423776-1557670484-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1741132852-2793423776-1557670484-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1741132852-2793423776-1557670484-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1741132852-2793423776-1557670484-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4452	chrome.exe
4452	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe
Token: SeShutdownPrivilege	4652	chrome.exe
Token: SeCreatePagefilePrivilege	4652	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe
4652	chrome.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 4652 wrote to memory of 4248	4652	chrome.exe	88
PID 4652 wrote to memory of 3424	4652	chrome.exe	89
PID 4652 wrote to memory of 4444	4652	chrome.exe	90
PID 4652 wrote to memory of 4444	4652	chrome.exe	90
PID 4652 wrote to memory of 2156	4652	chrome.exe	91
PID 4652 wrote to memory of 2156	4652	chrome.exe	91
PID 4652 wrote to memory of 5108	4652	chrome.exe	92
PID 4652 wrote to memory of 5108	4652	chrome.exe	92
PID 4652 wrote to memory of 548	4652	chrome.exe	93
PID 4652 wrote to memory of 548	4652	chrome.exe	93
PID 4652 wrote to memory of 1052	4652	chrome.exe	95
PID 4652 wrote to memory of 1052	4652	chrome.exe	95
PID 4652 wrote to memory of 2860	4652	chrome.exe	96
PID 4652 wrote to memory of 2860	4652	chrome.exe	96
PID 4652 wrote to memory of 340	4652	chrome.exe	97
PID 4652 wrote to memory of 2508	4652	chrome.exe	100
PID 4652 wrote to memory of 2508	4652	chrome.exe	100
PID 4652 wrote to memory of 4480	4652	chrome.exe	106
PID 4652 wrote to memory of 4508	4652	chrome.exe	107
PID 4652 wrote to memory of 4100	4652	chrome.exe	108
PID 4652 wrote to memory of 4480	4652	chrome.exe	111
PID 4652 wrote to memory of 4480	4652	chrome.exe	111
PID 4652 wrote to memory of 2416	4652	chrome.exe	112
PID 4652 wrote to memory of 2416	4652	chrome.exe	112
PID 4652 wrote to memory of 4916	4652	chrome.exe	113
PID 4652 wrote to memory of 4916	4652	chrome.exe	113
PID 4652 wrote to memory of 5096	4652	chrome.exe	114
PID 4652 wrote to memory of 5096	4652	chrome.exe	114
PID 4652 wrote to memory of 2684	4652	chrome.exe	115
PID 4652 wrote to memory of 2684	4652	chrome.exe	115
PID 4652 wrote to memory of 4452	4652	chrome.exe	117
PID 4652 wrote to memory of 2252	4652	chrome.exe	118
PID 4652 wrote to memory of 2252	4652	chrome.exe	118
PID 4652 wrote to memory of 1480	4652	chrome.exe	119
PID 4652 wrote to memory of 1480	4652	chrome.exe	119

C:\Users\Admin\AppData\Local\Temp\Monoxide x64.exe
"C:\Users\Admin\AppData\Local\Temp\Monoxide x64.exe"
1⤵
PID:4712

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x228,0x22c,0x230,0x204,0x234,0x7ffb1251c728,0x7ffb1251c734,0x7ffb1251c740
  2⤵
  PID:4248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=2044,i,8631925365625236224,9972555448409773749,524288 --field-trial-handle=2168,i,13767195679820201700,3637479330907611359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2200 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1752,i,13786205727972465695,2559742772410717864,262144 --field-trial-handle=2168,i,13767195679820201700,3637479330907611359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2164 /prefetch:2
  2⤵
  PID:4444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2412,i,14515005598805206799,15002685431938551646,524288 --field-trial-handle=2168,i,13767195679820201700,3637479330907611359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2584 /prefetch:8
  2⤵
  PID:2156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3268,i,13533482682561509672,8014086493301124500,2097152 --field-trial-handle=2168,i,13767195679820201700,3637479330907611359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:5108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3284,i,4074303753653495776,13806481625834988396,2097152 --field-trial-handle=2168,i,13767195679820201700,3637479330907611359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4344,i,13985943052541200835,10701067910042393194,2097152 --field-trial-handle=2168,i,13767195679820201700,3637479330907611359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4356 /prefetch:2
  2⤵
  PID:1052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4776,i,8704042706523754364,11826647869176774312,2097152 --field-trial-handle=2168,i,13767195679820201700,3637479330907611359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4780 /prefetch:1
  2⤵
  PID:2860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5452,i,10778379326710915782,895314367582388288,524288 --field-trial-handle=2168,i,13767195679820201700,3637479330907611359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5432 /prefetch:8
  2⤵
  PID:340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5428,i,626045059174374748,14182237853201595592,2097152 --field-trial-handle=2168,i,13767195679820201700,3637479330907611359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5712 /prefetch:1
  2⤵
  PID:2508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3532,i,11489646675236131921,12465748354029771866,524288 --field-trial-handle=2168,i,13767195679820201700,3637479330907611359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3516 /prefetch:8
  2⤵
  PID:4480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3948,i,14873176010482735169,5934954695596151345,524288 --field-trial-handle=2168,i,13767195679820201700,3637479330907611359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5460 /prefetch:8
  2⤵
  PID:4508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3448,i,11495897951729767511,16376778018846478229,524288 --field-trial-handle=2168,i,13767195679820201700,3637479330907611359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3404 /prefetch:8
  2⤵
  PID:4100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5480,i,6101844323942928593,8330723871163102650,2097152 --field-trial-handle=2168,i,13767195679820201700,3637479330907611359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4436 /prefetch:1
  2⤵
  PID:4480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5680,i,8668980652686256257,15760836811344611782,2097152 --field-trial-handle=2168,i,13767195679820201700,3637479330907611359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:2416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6076,i,14590189147688640218,10703965725828329809,2097152 --field-trial-handle=2168,i,13767195679820201700,3637479330907611359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6016 /prefetch:1
  2⤵
  PID:4916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5992,i,1532304223071432030,16609743210778764689,2097152 --field-trial-handle=2168,i,13767195679820201700,3637479330907611359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6064 /prefetch:1
  2⤵
  PID:5096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5912,i,12872996880412724111,12652161329094353067,2097152 --field-trial-handle=2168,i,13767195679820201700,3637479330907611359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4644 /prefetch:1
  2⤵
  PID:2684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4872,i,8230216124139047523,11869691905632253683,262144 --field-trial-handle=2168,i,13767195679820201700,3637479330907611359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3456 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6116,i,437065764845692070,4022020611531748210,2097152 --field-trial-handle=2168,i,13767195679820201700,3637479330907611359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6096 /prefetch:1
  2⤵
  PID:2252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4644,i,4333089345333900058,2802474239766402158,524288 --field-trial-handle=2168,i,13767195679820201700,3637479330907611359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4720 /prefetch:8
  2⤵
  PID:1480

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1292

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2812

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 bed7e5a5bbb741d9aabed71892c90141b334ea46c64607e89f7aecefc4c6224d
MD5 7efbf79972afe8d86c6c3b39d4090d4c
SHA1 403b4da80ca8c22741087e51fa0088b87ab58f00
SHA512 36de7f0fee3b73d00e19c2ab5cbe7af06a36c4a941ee2e2e99c97e3213f159a5ebed4c77c901dd4df91c32ceaf9ea882bf6748a98a2a7840973d7285fee9a4a2
TLSH
T11EE022AACC31EC7B58FC072950094F86E79013562A80894B7A3C910C8FB073B559681D
MD5 SHA1 SHA512 TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 331KB
SHA256 db4ffbf0ec662620013dc14bc1268bdad6256d19d7d511ec7eff8446887e6900
MD5 05ef8155cf66131654d3bb9c9cba5853
SHA1 e79d53fcb604921222dd1dbc2f1c10c631ff6075
SHA512 ee38793245d91683ddb1f847e5b56a09864fd32ec059055459b3ebe101abed79683ee59c80f30b8f6249d2bbd83fbf7bca83dafb4ef2b634ceff6969c80fed23
SSDEEP 6144:FljUD58FLTW53eaLkNv+Ps0dj1fpqaGjYf0NIcB3bM1rJZ24:FDm5uaLcv+PFj7ajJNImbM1rD
TLSH
T1247423A9B50E3C8AC94F9473827EAFD2A4356FF38D47BAA3634241F401874342E4676D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000015

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000015
Size 436KB
SHA256 0b320d2cf00e9215763a5377904e2301b2edb7a5d299bd319259714cf8bcd9a9
MD5 38e965609b7e0769e6754549cfa3c2fd
SHA1 8ef9e62fa3ae6d8b371f5a9e9344a6cdf31515fe
SHA512 18cff962b979abf3e3d06261422f35502463a0e196aa0cf801cadcff8833a83f20c9e9f22fb3133041e406fdf2304088a0a5eaa4bbb8aff07ab15a0c1b46b0e4
SSDEEP 6144:HT+7EhQjYpz+XUGr9+7Km54TxcjJJEWv6p0qOJ7kuKtAiDL6GnkES7+S8HBWzDi2:6vj0iUI9EKFEJdU0p7riDxw7L8oviJ3c
TLSH
T147942367DF08D99BDA158361EA30EBDD1158EB6EE00A3CC844BB462CE54C0F9F6913C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000049

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000049
Size 51KB
SHA256 d328a5d59c6f973a2427a40fcd6ce4e4e94095e358b8fe9d68907155b053c049
MD5 5536007c176e07f1e3cf9af573a0a3ba
SHA1 1695eaa276fbbf65d98b02b788546858962b31df
SHA512 4544ffce530f4415f1e137ba8264e41ba1ff844c4534e3d8267fe2c4d2c1d397446d698c77eb709706ebacec5af0791fe3507ca7873bd061bb494eabdbfdb0e7
SSDEEP 1536:UcLobQAiXrI8vWj3kJ6hzJUtwi2ULXhAZK:UX8A6/69JUtYIXhA4
TLSH
T1C833012AD30692B496AF2CF0612BA1C52C0EEBFCAFE954711E4D2AC74BA5C5BD553120
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 cf25ffc572f538941ecc8f98e7ca867d8901a7cdc75be37ff0e00ae93dda57f6
MD5 cae2cc98ce7907b168ace7a4f2311cc9
SHA1 e5c25de994e82bb6265cce756cae75f227111580
SHA512 c4c355feabdb6c52f133e1eeb5ac505aeb14fff8ebed716fae4a27948e38d78294d6bc15b5a8d12ef921c67f4dfd5ffabe286c0f457f5779b19fb05f1c825b1d
TLSH
T1A7C09B2450443408D33843F51166C44592507A314162C5D24157555D546266D412295D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 8eb81fb3ee83f1dacee86c8dd2eba2b61268e7819c6d3ed80083de378c3557e6
MD5 f7a0ffa08353ffa1e159ce75b9745db2
SHA1 55d915fbc29e18d4c374e1f00f246f9f31aa5214
SHA512 197c3cb3b8dd7cceaabb4d7c5aa5b116a93398b97f13cd3b0e7d3aeafe247dc13654024286b4226aa27b4d2088cfb0b2f09832228617036e7f5c55bd38ede902
TLSH
T147710B1358C84509CB6C347176EBD8E8BCFB567A9783CE0A0B2F9CB9E64B36D544260D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ba7ed8756c4bd0b913cc84d8431c01de3f35ee3194c40afaf4b58bca8df7b3c5
MD5 38413bec51f8c80d6feeec74f7f15e2e
SHA1 323fe8d76afe14951940b5bbab4d1dbc8974a6fd
SHA512 288e2d2ff1ea0f3c5ebd0c3ba7838ec1229936010af0a8afa7fbd6466b50c67f8a95a916384b70fb949286217be5f440f656778dc87293d8aaae73de09e9ad09
TLSH
T1A3813F0328C54409CB6C3471A6E7CCE8BDFF5A769783CE0A1B6E9CB9E64732D548261C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 d10c3d322af6bc509ccd14071bc86592863c486f5b6e9c767f09d6ebc6952e9b
MD5 5ef02fc765ef21d8c35cc73d243c0bc1
SHA1 9a2508792f0c77dadd647db75a5a8ff9f7722257
SHA512 4d1ddd27e1d1edf80bb6b7df79902abd40acd234b15cd456d53b48b83df328ddf576e3194bdae7e8e4555ed1844192e0dac2e30c4318aa371abcd107bff3bd4e
SSDEEP 192:D0uLuwWtGmwqFuJtJKaIGOEdVUtmtmDmzmrmommcaPIJkqvefPiZcImNPiRjh1xK:D0uLuwWtGmwqFuJtJKaIGOEdVUtmtmDx
TLSH
T1DEF1BAF783E5C62D890156F4AB15AF1FCE291628432C3C66C8D4AE1BD3E2872E25175F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 79ffecad82ee128f54602469ad31ef723eaed9ffb43f1b1ce1b109701fd6a44b
MD5 ad8eaf6aab5169b0143e6f0e12972f3c
SHA1 74a002201f481b71bdfdf5f7f9b47a25850da770
SHA512 e26c5a25fd8eff729c5824a8ba3178a28679f8cc5b949b0acfff2abac22edf93c8c2b339de938a0df8c0d324846f840972a6189972b2e2462458fb1a035c8b85
TLSH
T154719CF7C3E8957D890156F49B116F1FCD2A0A28531C3C66C8D8AE5B93E2972D25138F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 9847ac2d6bc62ed4b82b80b207a960ea50ca46732090d994d63cdfabc7c98e8d
MD5 66de0cec54e6cd104f30fd52b8deead5
SHA1 a1d83fe09341be8e88b3a6f947591dc0f1187899
SHA512 4e340b3be8a8965f410e3b2fa793733d3d1000291487bec49442c5629c32c0978d04f64cf7211e0a4cbdbf653de4650bfe7c893a512a1c656d7a6b648bd994da
SSDEEP 192:DkVnZH30omBvFuJtRaIGOt9O1Utm6mDmzmrmomLUB7DaPiv6fPTNPXrSE:DkVnZH30omBvFuJtRaIGOt9O1Utm6mDQ
TLSH
T1AD02ACF7C3D9852D890156F4AB15BF1ECE2A1A28431C3C26C9E8BE5B93E2871D25174F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 eabd124cf883b0d1ade84e57cd594cb30a0bdedf53ecef0ea81ad6247c06dae5
MD5 5f82e9d1af05f7964860859ed4fe013c
SHA1 13246cb602eb842dc53f98661c5db9ab95002ede
SHA512 7fe80c146eb3083d6f564f7de758346ad10e40047264084d46d0114ea68f085dd5978dd3494ac27c5ad868815485fecee15f2f95809b107926943256e06ea7fc
SSDEEP 192:DkVnZH30omBvFuJtJKaIGOt9VUtm6mDmzmrmomLcaPX2tJ9qvefPUCcImNPQR:DkVnZH30omBvFuJtJKaIGOt9VUtm6mDl
TLSH
T159129BF7C3D9852D890156F4AB15AF1ECE2A1A28431C3C26C9E8BE5B93E2871D25174F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 3f2bab2425d8f16c3e5627380af8cd0f72bce05b12a5415060f71f3060f83046
MD5 b7b8259803e7459b17db5e417a081212
SHA1 80536fb1d525f3558fae3db438c464618dabffde
SHA512 cca312815dbd3de359fafe4263e9caff0702d15f0a4cad7d39bb65b6cd7dfcea1fb659dbf862bd1268cb62869597bac77b2c8e3dd0559ba504771936af46963c
TLSH
T17121AABB86BB702B107C59AF1D00B8097CBAAC760141B8F1CBD6906DA0C56FB5B12017
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 69fb35bff4a68bf0d48ef33a3a849a4618a706f1ed15c9dbdaeb2cc850fb4952
MD5 f289ee7387364a49d12cb751d12defcc
SHA1 106d1c300011562b7bccf28ff8bdc1c3fbd6cd18
SHA512 8715215ffcc26b6687999ff67e8e6cf58346bdb0b3553f183892c7e11da5eabad1454b43da3737fb6968dc1716c8b766e6657d99cf6d9a65bffcf28ceded85e8
SSDEEP 192:6RAcBhEtruOVv7PhXPRp0QucnL9YHsb+WNZ5eAY43sOVxesZQtuDVyIsnAUgraJ:6RAmhE5ljBXNWwKbO1Aule
TLSH
T12962B56BA914697B5DE6D21DF9237B67D7F1202261D02DC0EAFC9E2C14EBACD2213017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 83fccff789d1b65c841644e698ee9b2ba88f1beff0e39a7a4a929cdc435c88cc
MD5 f9f96b9a43dc1ef379c9ad722d7ab275
SHA1 dedff6bff464a0f4260ea8b0f0b6b45d382b6b68
SHA512 1614cfb4ccf64a3d5f87381f537ad4fca03b9c88f083bffb63ee460f0861d0cc1d34a49673f6f728e4d6fbf3cd6b38e40d4180bfe8895a5408ff8414778de645
SSDEEP 192:6RoEtrus2v7PhAPRp2IIo9YHsb+WNnAY4Lf2exesZQt1DVyIsnAUgtaJ:6RoEjCj8XXWw/c20A1l8
TLSH
T1B952B52AB924693B5DDAD219F9237B57D7F2103271942DC0EAFC9A2C14EB9CD221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 51e42cbc468fadcb3ad52f0367386635cb164c4ce60881b8a56050e045a9c816
MD5 6110189b70ddd358689ca51a5b5ac4f1
SHA1 6c90ba02a290dcdd6f512134366fafb80a1603bf
SHA512 47591d5dddcb62032cb38535636cb8b7b555fb3602dda7dc07ac70c592d8779b8ce29146a5dac6bd9755640f8607eccc9ad0332942107a8e30910e3eafe22721
SSDEEP 192:6RoEtrus3v7PhXPRp0IZbx9YHsb+WNnAY4UdcCxesZQtuDVyIsnAUgraJ:6RoEjfjBXLWw/VcgAule
TLSH
T1EE52C72AB914693B5DDAD21DF9237B57D7F5203222902D84EAFC9E2C14EBACD3213017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 38ffe529fbd7b7bb5bd5fca0efe1d9a6cbf43dd9b30b2d8bae0a31900a669912
MD5 20831df9f9143c90f4ffbc5f3b0e7a4c
SHA1 168feaf0b51746661c75694cc34858b8e01e5be5
SHA512 76680fb5f8bf121ebed2aedd5c81c72289c25c4db711d72531cb6be08c314dc4cb7c18ac5ed55624cdc9da04c8a30ea45a51fa4d116e8e3a2a6a6099e277f507
SSDEEP 192:6RAcBhEtruO2v7PhXPRp0Qu1nA9YHsb+WNZ5eAY43sOVxesZQtuDVyIsnAUgraJ:6RAmhE5CjBXRWwKbO1Aule
TLSH
T1C562B56BA914697B5DEAD21DF9237B57D7F1202261D02D80EAFC9E2C14EBACD2213017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 a7c9a92cc0b51d614c3d8a17c5c0bd6f948180ac3a40898d8db86abb0cccd24f
MD5 d343777349a878c10a46dfd9e9fe91ab
SHA1 2d942d775c62bb246e108550de4095661e60375e
SHA512 ccd087d77750b8205ea31636338c4a7b28dbb6f48a943ace383403a681ca80a32615bd12ca43ca0d71be4b0e1c81f69dbf3e684bdf931042dc86f65d1a30f2c1
SSDEEP 192:6RAcBhEtrus3v7PhXPRp0Qu1nA9YHsb+WNZ5eAY4UdcCxesZQtuDVyIsnAUgraJ:6RAmhEjfjBXRWwKVcgAule
TLSH
T12062B56BA914297B5DEAD21DF9237B57D7F1202265D02D80EAFC9E2C14EBACD3213017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 621ac232d81e5231108ff2f259202370c9f0e7b4fd8180cc9ffac9dda27a4770
MD5 e78552e4551a9ba90db0c1f5513340e6
SHA1 60f908631907f9b903d93ee872617eaa141ddc7d
SHA512 356ac41d89c790199a7b1609ee72a64318d586a52ea9a0eb5c794f718fa31b8487a16f6d9c6f90aa270811617dc57d300ad95f73516579fe816b0fdb64bb5a82
SSDEEP 192:6RoEtrusJv7PhAPRp2IIo9YHsb+WNnAY49lYhxesZQtgDVyIsnAUgraJ:6RoEjJj8XXWw/cY5Agle
TLSH
T1CA52B72AB914693B5DDAD21DF9237B57D7F2102231D42E80EAFC9A2C14EB9CD221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 edb4981fb6528d204dd81e2c95bc35e8a2fcf7503fe0616809d1078973d3ce9d
MD5 39ac5c12ce442ca8cc9afcdd30441b5f
SHA1 57c4982f3518029ff1e8a0cee9509812dfb58739
SHA512 a6d5acfc2f7cd8af2a01ccf711164e77b24d09e21e19edfa901b9dca6d1fe0c8a5d6d3e2b4895f8b11aafca1d3abca18fa6c78a5dc543970102a45ff474b967d
SSDEEP 192:6RAcBzEtrus3v7PhXPRp0Qu1MnT9YHsb+WNneAY4UdcCxesZQtuDVyIsnAUgraJ:6RAmzEjfjBXHWwyVcgAule
TLSH
T1B862C62BB914697B5DD6D21DF9237B57D7F1202261902D80EAFC9E2C14EBACD2213017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 db5872f27af87135bf944f9dffba0cbd2ebaa11a40caecbe527093be9c837952
MD5 eebfb2fd9c54856188bc1470ab7f50c0
SHA1 2fb3841b806cb86cd758da3faf1b3dde2f0d3978
SHA512 f51de535435da5c22f22193d68a6f056143b1e5e7d7d6ae529a43a7509e54c58355ee5c1cd2564b6a79c06821367f13e1f152d3319417c34e57514fb64ab7c1e
SSDEEP 192:6RAcBhECruOYv7PhXPRp0QucnL9YHsb+WNZ5eAY43sOVxesZQtuDVyIsnAUgraJ:6RAmhEWEjBXNWwKbO1Aule
TLSH
T1D662A56BA914697B5DE6D21DF9237B57D7F1202261D02DC0EAFC9E2C14EBACD2213017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 4438812d966e1d11c2f4b4dcd5703934145668a842e5f18c309b93e6cd0ba09c
MD5 1386314059085d62a9101bbf1a039b65
SHA1 c0c9d9db0103f0aa592eb50b557e1c7af59924f0
SHA512 f7b9944b5b23df4170a875adebfb1950f8d576c4adda2b26467f584019e888c6a674a0a567adcf681cb9c5f7c120924ecf6d54fd0463d975b4fb31a520df19c2
SSDEEP 384:bxj3K7KxkXqKf/pUZNCgVLH2HfgslcP7pLuLcSjlAXOD3u+ErU3KMHGu/g2kRm:bR3K7KxkXqKf/pUZNCgVLH2HfgsmP7pS
TLSH
T1FF72F967784C9E370F94CACCD8177B4F9DB5015B65E9886483FA581903D8BDE11092FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 dd661ea24fccc24c28e79a000f8f2ba014c49b7a76700a1ba4553892755760a6
MD5 1dcb19ef3050863c3710175c35915281
SHA1 834b0a612a2acd7d16a0429c06869661999fddb3
SHA512 c89fe8418748f47d5f9f82a8b8450f2f8b36c97f4128435f10227b353944d3fc8661288be63e82a75dae8b52b60c9ee3f24796d3f642175a09393e7602502a68
TLSH
T1E2B012508001B581C01206F4214294987114DF20960B1B0543F46D768C26964801C160
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58aa93.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58aa93.TMP
Size 96B
SHA256 64977e9e0ecb73c333661937a7749c8ddd0e5bc666ac7fe8f49d7c450be7f6f3
MD5 04fea6dfcbb183ecc1888fc4acd7becd
SHA1 dbbc91058ee6fe28c4e3c6b7dee0c462618c34dc
SHA512 223185ef72f6811919ee698dfbdbce3c688036873d426b333152181da76d907d8c84579f3731bfdb1d6de8a25afb2e296a386690b0e881c97111923271265a92
TLSH
T120B00256C1037222C85643B129DEA9E87560DF35C603121692E02A7ADC366E58935960
MD5 SHA1 SHA512 TLSH

Submit Download

662cd60f8fadba17_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\662cd60f8fadba17_0
Size 255KB
SHA256 b30e4f164cd6cf361c519aed0923c04cc3c3e5c5f39f641b9bdaf4b5e2631b16
MD5 6aaeacf61785685a156a1d7baebe7a2f
SHA1 834f9ef05700be95df71500312c991db0d1ddc48
SHA512 06e27fb55d96eb92e14a1aa8da5d84368752abd42f12d6b900b2f20db41498ad78eeac2c3cd953034d18b97c54ad09fe5d83ad4a95bcdf009949ad45e0a14521
SSDEEP 6144:KOfvnFSg9vbMu0aE/61An3G38/ZEnX2H5c5X5w5fnQkIC7wKIIqRG8:KOfvnF3toRaaZEieJ6fnQkIQwKII8G8
TLSH
T1A4447D723300A53FB8278EA1E67E7F4D3825E217DD2706B8D6E4E9358BD2DFA1412548
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 6d3a6336b24c9adce0a3e54c91d819b7079c31ba0c7235988de5065162b0c985
MD5 792a25919421dbc8dc25f41cefc564be
SHA1 6fa122980cbb4e82c5893a8f3e649fb8472ba49f
SHA512 c5e03a7d031174a374c5415b546f0af4030c3988301ddb6865194775b6d93b65a01a535687c20bd27310f818d7808fb90fbf1b2c95404f55a87c27b1a89d9992
TLSH
T161B0120820050A49C508227000C680053221182136435117B1BA40D08042150D112C44
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 da5b0f162c8b633cf244fa1db1ee20f3da461a4e176510b418a813926cc6c3f8
MD5 1040445e555e8168506253732b57ba18
SHA1 021ad31d93efd22fa97a0c1c9a7cc6cddbaf7d46
SHA512 5663c0d3080c62fbb6d6ec503487ae1def77c068bfc444fa24bc83e00be78f5149a3b124b47d91fd34c183cd6929f895c8aa0a3c1a036b0388054879b8196f4e
SSDEEP 6144:UeDX4NwhgqKR4ILo59R57lOYo8Um7Rkm1tYpBeh2BAoY:noNweqYhLw/7l99oBGcAoY
TLSH
T182341272DD326BB95C79AFAF300D1E290EF1959EDA68EA42CCD47A04335D99C470893C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 4605168019e4d0bc9f90f325a627f5f96036266e0996290e19cb79f22394a11d
MD5 0781a417115b3ed13e31668dfcff3e06
SHA1 7341d721643f9a52c47ad946d038c03dd6b65f45
SHA512 9caa436470c8e38df244822fe1b51726dae29897827f74cc57d6252e24ed49a2cddb51464c7df2ee5b00be25e58861861b004a060deee46c3d2fe4e2f023daa1
SSDEEP 3072:2dGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMa:20m7Rkm1tYpBeh2BAoa
TLSH
T161C3123B5D75E9375978AB4EB08E0B1E1EF149A6D930DE9288D86B0477FA7CC0A04934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 681fb991e7b550d68a32c0ea51127e290899264f9154bdac4dec9edd8d66cb56
MD5 fb9f6feb1965e274c6da8938486d8c40
SHA1 513aaf6ebb9f5baf9b6b335ff7f8f2f2a7dbd75b
SHA512 03d2d7b2375b58e990a3142f6ec74ba8e3459bcc910e2c8588b5bcad0279fad28d4f87eb2bff3f3152d91b17ddb12e91eb436d067f30d12e0005d59c8491124f
SSDEEP 6144:du+X4NwhgqKR4ILo59R57lOYo8Um7Rkm1tYpBeh2BAoY:A+oNweqYhLw/7l99oBGcAoY
TLSH
T1DF342372DD326BB95CB9BFAF300D1E294FF19599D668EA42C9C47A48335D98C070893C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 2856b62db7357663f7ae5e04c26af2a4128185f73a4dece43f5f61423fce8fd5
MD5 abc9af6e230b346bf2d976385ebac8e0
SHA1 4c2050ca3de0cf2af0922c5e41f0ea0df53e5cc9
SHA512 0ac4f46747c399889572a80af536366e1c5f7742519d14959488780281817062fc0eb3c8d78b749b97f068a1a134e2ef3a1c729b93f20e610292b1713a70cfa4
SSDEEP 6144:cu+X4NwhgqKR4ILo59R57lOYo8Um7Rkm1tYpBeh2BAoY:t+oNweqYhLw/7l99oBGcAoY
TLSH
T118342372DD326BB95CB9BFAF300D1E294FF19599D668EA42C9C47A48335D98C070893C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 3ba1f51f28cf8726387376f0b34a1b9fdf50d77e80ba9f7cf868c057ce6d60de
MD5 86f3936b3ba38e8ffa73a9f59e61573e
SHA1 a11bc29de5705e48aff71dac6829bede923abc74
SHA512 260c6520e126c5ad4cb18d75d0b4d8aac74378cd21117c08dda180f469d9b9cd83ae674f440d988db1a5a6e9f420d5120edf0660e0e4f4d03d32d77c93ea19bf
SSDEEP 6144:ceDX4NwhgqKR4ILo59R57lOYo8Um7Rkm1tYpBeh2BAoY:voNweqYhLw/7l99oBGcAoY
TLSH
T1E5341272DD326BB95C79AFAF300D1E290EF1959EDA68EA42CCD47A04335D99C460893C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download