5e43bfbdb455d849e4add13e1ed6b387562acfc389bd3d6d63a4b434d5cd645c

Analysis

geolocation tags

cacanadananorth-americatoronto
user interaction
yes
max time kernel
1049s
max time network
1045s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/08/2026, 22:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
venSS-v3.0.2.rbxm
Size 126KB
Sample260814-19tfbasgnf
SHA256 5e43bfbdb455d849e4add13e1ed6b387562acfc389bd3d6d63a4b434d5cd645c
MD5 95e18428eee95fe6578344447f066ceb
SHA1 2414cdc1806a93dd4083913ef02817fd88bffe5f
SHA512 763fd21587009c747063fbbc854c691495abc00c6b69a1d9b23b6802c7c9743eb28254097be041b488c59d6b41bf7903d0bbbe43a087f042cc6fd4485501a0b7
SSDEEP 1536:8CFNqfF7UHSzcJlT8hS8AhJpitW8sttI2tyqCgEgPGbdhb35k3AzA4qFc:8CH6F7UHm2xhGtW8GtFtyfXg+bT5KBc
TLSH
T1DCC3BEF6FA14427AD16A313738E305112B315E6D0384C31AF3EC757BBC7A2992B6B649
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
3612	cmd.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5092	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134312197276143344"	chrome.exe

Modifies registry class 7 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
2744	chrome.exe
2744	chrome.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5792	OpenWith.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 17 IoCs

pid	Process
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe
Token: SeShutdownPrivilege	5340	chrome.exe
Token: SeCreatePagefilePrivilege	5340	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe
5340	chrome.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5792	OpenWith.exe

Suspicious use of WriteProcessMemory 47 IoCs

description	pid	Process	procid_target
PID 5340 wrote to memory of 6084	5340	chrome.exe	96
PID 5340 wrote to memory of 5092	5340	chrome.exe	98
PID 5340 wrote to memory of 3980	5340	chrome.exe	97
PID 5340 wrote to memory of 3980	5340	chrome.exe	97
PID 5340 wrote to memory of 5532	5340	chrome.exe	100
PID 5340 wrote to memory of 5532	5340	chrome.exe	100
PID 5340 wrote to memory of 6056	5340	chrome.exe	102
PID 5340 wrote to memory of 6056	5340	chrome.exe	102
PID 5340 wrote to memory of 3852	5340	chrome.exe	101
PID 5340 wrote to memory of 3852	5340	chrome.exe	101
PID 5340 wrote to memory of 984	5340	chrome.exe	103
PID 5340 wrote to memory of 984	5340	chrome.exe	103
PID 5340 wrote to memory of 6100	5340	chrome.exe	105
PID 5340 wrote to memory of 6100	5340	chrome.exe	105
PID 5340 wrote to memory of 1448	5340	chrome.exe	112
PID 5340 wrote to memory of 1324	5340	chrome.exe	114
PID 5340 wrote to memory of 1324	5340	chrome.exe	114
PID 5340 wrote to memory of 3288	5340	chrome.exe	123
PID 5340 wrote to memory of 3288	5340	chrome.exe	123
PID 5340 wrote to memory of 5440	5340	chrome.exe	124
PID 5340 wrote to memory of 5440	5340	chrome.exe	124
PID 5340 wrote to memory of 5352	5340	chrome.exe	125
PID 5340 wrote to memory of 5352	5340	chrome.exe	125
PID 5340 wrote to memory of 5484	5340	chrome.exe	127
PID 5340 wrote to memory of 5484	5340	chrome.exe	127
PID 5340 wrote to memory of 3084	5340	chrome.exe	128
PID 5340 wrote to memory of 4716	5340	chrome.exe	129
PID 5340 wrote to memory of 5324	5340	chrome.exe	130
PID 5340 wrote to memory of 1268	5340	chrome.exe	132
PID 5340 wrote to memory of 1268	5340	chrome.exe	132
PID 5340 wrote to memory of 6044	5340	chrome.exe	133
PID 5340 wrote to memory of 6044	5340	chrome.exe	133
PID 5340 wrote to memory of 1168	5340	chrome.exe	134
PID 5340 wrote to memory of 1168	5340	chrome.exe	134
PID 5340 wrote to memory of 1032	5340	chrome.exe	135
PID 5340 wrote to memory of 1032	5340	chrome.exe	135
PID 5340 wrote to memory of 2760	5340	chrome.exe	136
PID 5340 wrote to memory of 2760	5340	chrome.exe	136
PID 5340 wrote to memory of 1148	5340	chrome.exe	138
PID 5340 wrote to memory of 1148	5340	chrome.exe	138
PID 5340 wrote to memory of 2744	5340	chrome.exe	139
PID 5340 wrote to memory of 6020	5340	chrome.exe	140
PID 5340 wrote to memory of 6020	5340	chrome.exe	140
PID 5340 wrote to memory of 1096	5340	chrome.exe	141
PID 5340 wrote to memory of 1096	5340	chrome.exe	141
PID 5340 wrote to memory of 5492	5340	chrome.exe	144
PID 5340 wrote to memory of 5492	5340	chrome.exe	144

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\venSS-v3.0.2.rbxm
1⤵
- Executes a command shell one-liner
- Modifies registry class
PID:3612

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:5792

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffcdd3ac728,0x7ffcdd3ac734,0x7ffcdd3ac740
  2⤵
  PID:6084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1720,i,845641988385842900,5004772339250625546,262144 --field-trial-handle=2072,i,194463210275416991,5734453519550934849,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2020 /prefetch:2
  2⤵
  PID:3980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,12045508362798683406,15628480384056731728,524288 --field-trial-handle=2072,i,194463210275416991,5734453519550934849,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2228 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2460,i,15420852634570056562,18112539047426916734,524288 --field-trial-handle=2072,i,194463210275416991,5734453519550934849,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1808 /prefetch:8
  2⤵
  PID:5532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3232,i,1275909044911963146,5754756330140499688,2097152 --field-trial-handle=2072,i,194463210275416991,5734453519550934849,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:3852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3256,i,10526603204692726293,2848186782260435387,2097152 --field-trial-handle=2072,i,194463210275416991,5734453519550934849,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:6056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4420,i,2145156835813926574,4004549462809967873,2097152 --field-trial-handle=2072,i,194463210275416991,5734453519550934849,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4424 /prefetch:2
  2⤵
  PID:984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4652,i,1720010456597526917,14924170910906918585,2097152 --field-trial-handle=2072,i,194463210275416991,5734453519550934849,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4616 /prefetch:1
  2⤵
  PID:6100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5532,i,13339771569789987841,16149271035614900091,524288 --field-trial-handle=2072,i,194463210275416991,5734453519550934849,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5540 /prefetch:8
  2⤵
  PID:1448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5772,i,2018051848222192250,12564071412271942055,2097152 --field-trial-handle=2072,i,194463210275416991,5734453519550934849,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5612 /prefetch:1
  2⤵
  PID:1324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3608,i,2254668847900477751,5423368712765205571,2097152 --field-trial-handle=2072,i,194463210275416991,5734453519550934849,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:3288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5892,i,11086108532449752490,8897080565495973269,2097152 --field-trial-handle=2072,i,194463210275416991,5734453519550934849,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:5440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4700,i,801365929738773720,13274227842595993228,2097152 --field-trial-handle=2072,i,194463210275416991,5734453519550934849,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5544 /prefetch:1
  2⤵
  PID:5352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3816,i,10352315125020738973,8767078271053330421,2097152 --field-trial-handle=2072,i,194463210275416991,5734453519550934849,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4612 /prefetch:1
  2⤵
  PID:5484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3380,i,14038541592879869188,16252863528817145555,524288 --field-trial-handle=2072,i,194463210275416991,5734453519550934849,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3652 /prefetch:8
  2⤵
  PID:3084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5928,i,6751840458382369255,12166365653615636227,524288 --field-trial-handle=2072,i,194463210275416991,5734453519550934849,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3384 /prefetch:8
  2⤵
  PID:4716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3676,i,3458713782747992146,9842917871574351453,524288 --field-trial-handle=2072,i,194463210275416991,5734453519550934849,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3936 /prefetch:8
  2⤵
  PID:5324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4752,i,2364150548236794779,11783456000855736903,2097152 --field-trial-handle=2072,i,194463210275416991,5734453519550934849,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:1268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3672,i,3627767138117488166,1704273526248535455,2097152 --field-trial-handle=2072,i,194463210275416991,5734453519550934849,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3396 /prefetch:1
  2⤵
  PID:6044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=4760,i,9282818895400139333,2143307641191517255,2097152 --field-trial-handle=2072,i,194463210275416991,5734453519550934849,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:1168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=3608,i,12421093298664505538,12228678778006352200,2097152 --field-trial-handle=2072,i,194463210275416991,5734453519550934849,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5932 /prefetch:1
  2⤵
  PID:1032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=3232,i,17624568785808495767,208243326006906924,2097152 --field-trial-handle=2072,i,194463210275416991,5734453519550934849,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3400 /prefetch:1
  2⤵
  PID:2760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6004,i,18401486554870894372,11636071792367515258,2097152 --field-trial-handle=2072,i,194463210275416991,5734453519550934849,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:1148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5080,i,5947880369419995622,6912229489070052020,262144 --field-trial-handle=2072,i,194463210275416991,5734453519550934849,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=3112,i,17910984603871942340,5120703602876736623,2097152 --field-trial-handle=2072,i,194463210275416991,5734453519550934849,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1536 /prefetch:1
  2⤵
  PID:6020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=3200,i,17810942642284318054,5169020506415235449,524288 --field-trial-handle=2072,i,194463210275416991,5734453519550934849,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3236 /prefetch:8
  2⤵
  PID:1096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=1528,i,9235436768104356994,11861389036444261846,2097152 --field-trial-handle=2072,i,194463210275416991,5734453519550934849,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:5492

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:912

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:6076

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

02951207-a082-4c1d-b7c9-1427b695d818.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\02951207-a082-4c1d-b7c9-1427b695d818.tmp
Size 239KB
SHA256 831b8f708c4dcc84efcc6945c033acd85e997d2412a6093c772d70b5b2be3b76
MD5 7c9b47c5e0cc29f79fc1ca55c07a2477
SHA1 1169153034219806b2caeb0b996b7eacc32f4953
SHA512 7df62e15199ab749b0b278efaec4eae9c11c62678e1d6b0663148961899593b8c02d3dfa05aa5fd462b9646c74a65e37ef999f33d2b83ae46125a167453805a4
SSDEEP 3072:t3mvJqRV4zRLEzdguSFqMCIpI1gl5R/Kf+LGm7D5Lk17ox1tIpud63U8BehbCBi1:ovqV4z6Zn2x3Sm7Rkm1tYpBeh2BAoI
TLSH
T1B63423375F31A77E1EBCFA68E08D471B6AF64DF28454AE5384C96E0427FA7841412D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 7ad842f098fc958f8c0c0f5dd4a984793185d7229c51ed1361aa53086072670d
MD5 f7f5f13e7a5144ce8b3df4cfcecb0087
SHA1 657f0c4013b0d61c0310c2fe87c0179a0fb4391a
SHA512 947e9c558edd420538197b9863108e081440c6fe783514b33fa69c3955cc2b6d011a2a3c6715e276b3d479538f86b85e55ed12d867360bd35dea8a8da71f3d9e
TLSH
T1FCE022AACA72EC771CFD175DA2504749EB6413473A90888F3E3C891D8FB673B429685C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Size 335KB
SHA256 510937c81cb1a502119ab143419709b78c971a487406b87287e5d0e818995e9a
MD5 9f9c9ac1a584487d0961c6af2cac057c
SHA1 dbe3f8ded8c2390dbf7263da9aae9c7dda1cd828
SHA512 5fd4adbc586cd8110325eac005eb71792205e8e0f0132971d0758747baa058290e23daa9d1fa4574982f227c4ef0f3eae2055873bdb293fd404cc753bec05421
SSDEEP 6144:1EYK/wn749QJWZHyBE3FQ8Buo3Faz9J0ze/79bZJQ6PXmMo9uLUz:1EYK/wn70h5sE3F4oVaRmzWJT3obz
TLSH
T1F6742325C2DDFB139B531A01147E5975C638E876E4C01FB28B3CE026AF26E2D1468DEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008
Size 39KB
SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
MD5 9a01b69183a9604ab3a439e388b30501
SHA1 8ed1d59003d0dbe6360481017b44665153665fbe
SHA512 0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca
SSDEEP 768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO
TLSH
T13703023A5E3CCF1A84157A703950F6D9A8481E548E9D143B4F1AC7BF085DDE2209B6D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 960B
SHA256 116715126f71c3cc45bdccd6693dae7bb38ddee0996a841d6dd7a1786590b76d
MD5 115eaa17ebf75b912a22245d1d180a4f
SHA1 8be9f44403e9d82bc4d5ec88a691ddcdea757746
SHA512 1c354a7e17e23fdccd691d9ab7f32d2d31bf891cb3d0adc273dcb534ca8245a4e4d2027ed22d9c8c21d956d009faf1098d0805f79991fe65d74f78d1b7a6f923
TLSH
T18111DCCCF8A26024FF381930ECA08989E6435F4802D1302A8E4DDFC4755F1F2C642932
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 951f3bf4b3f2b13e06cba60cd804484a954bbb1553c304c17e370c43f49e3c42
MD5 b092c4ade22d4cfcb5041345bb5b81f0
SHA1 93475cb33e7102227e30f06df8e033622c9f7712
SHA512 1085feccfa283a3d699db0865c79e6778a23f574b64646763a2e0231a40409dcfd480859c96e76112fa5aab9787e93b546f1ec012e5a57c976c905bec1e32304
SSDEEP 96:D0cuuZtxGJJ5JEuOaaUNEd7pxkq9aPiZaVrbqfPiNPiNNbjhGK:D0cuuZtxGJJ5JEuOaaUNEd7pxkq9aPiD
TLSH
T1D7C1A9F7D3E4C62D890196F4AB15AF1FCE2A0528032C3C7289D4AE1BD3E2472E15535E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 32b124dbea08043eb0ff541a94fbcdb10e1f977f04799932f6053c9843c6b56f
MD5 a096f0f2f3765b1a2d5a74c752409f63
SHA1 28f548abae747faf23aeeebf270cd7a6f2015a11
SHA512 ece314fff200035c9fd12dd50412f8186ff697de8907109fb9d117eda621a37025da96e1681e90da20386beed18a91ff9ae0398afc96e1b190411436031dface
SSDEEP 192:DB1wd6xQnU4C+JTRaaUNza/Spx5P9aPXtaVvtfPYNPtE:DB1M6xQnU4C+JTRaaUNza/Spx5P9afty
TLSH
T1B6E1BFF7C3D8C52DC85556F8AB25AF1FCE2E0A18431C3C66C9D8AE1B93E2471E21524E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 124d46900de03757140898bf776b98a679a8d38600adad21ea3e1d05f5725771
MD5 21f84e74038cf32948ec919b0e0d6162
SHA1 a22eb1f40e7b5b2fe4a36afb8b1e8f167e2859ba
SHA512 b418a92b1149b28a3e2fee4b5054d5780dc14d44fe9e04016041288d94acebdf267d334eca531b240d16b05e7a7587bac517557efe9a13eda4ef2bb4c1a63952
SSDEEP 192:DB1wd6xQnU4C+JTJmaaUNzaWpx5P9aPXtaVvtfPYNPtrAK:DB1M6xQnU4C+JTJmaaUNzaWpx5P9aftx
TLSH
T1DDE1B0F7C3D8852DC85556F4AB25AF1FCE2E0A18432C3C66C9D5AE1BD3E2471E21524E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 03be3274e0cb94128f44c46ab1321f8aac8d9eb4ae666aa4ef6fea52f3f79558
MD5 02b7cafd619acc428dab2e303a796ef0
SHA1 cf23dbdf329409e3cc8ed0c4bc5d2ccd7cf65cbf
SHA512 3e4e7df5321cdb6b2c4c7dbe1627ef1c51d2dc57845c30f09b3a7172e34eb7719b9fe97ca93bd7d5afb600a534c6ecd14206cc3ef999ee2db597870cb17bf5f3
SSDEEP 96:D0cuuwZtxGJJ5JmaaUNEd7pxkq9aPiZaVrbqfPiNPirNbjhZK:D0cuuwZtxGJJ5JmaaUNEd7pxkq9aPiZq
TLSH
T1C8C19AF7C3E4C62D895196F4AB15AF1FCE2A0628032C3C7689D4AE1BD3E2472E15535E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 484baa76f43fad30e4f730bdb3d5a430dfbd6c15e129d7ee8d86fdf866b319c3
MD5 997fc3bb417826cd271a71bb83eb8629
SHA1 ddb8eeab4f3329ccc8a2cd828dbec27e4a5ff365
SHA512 c4ba4b46e5289beedd6d0e5c1cac72f0868a4ac83c452156633414d8cbf97a4d3a2fcae09f1293c72e3209244598919f10fbb9a971a74094c86f9b0331033b2b
SSDEEP 192:DB1wd6xQnU4C+JTRaaUNzaWpx5P9aPXtaVvtfPYNPtI4W:DB1M6xQnU4C+JTRaaUNzaWpx5P9aftU/
TLSH
T12DE1C0F7C3D8C52DC85156F8AB256F1FCE2E0A18432C3C66C9D5AE1B93E2471E21524E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 523B
SHA256 94f0a67e2b127135dbb30b3224e4031bfc96f3485d55c6ed54cc84854c293335
MD5 b4e6208a5e57dd1c65059618596a5d59
SHA1 0ed2597f7eec3da9c95ea860ae116b2d34680cf3
SHA512 83977a36d520911f9229bea4b55740e6fdd3680898525d9966f566275e7672294d2a6c4c0b3062497ead7f220f5c9073738e83f12d819cb4a55e0e147d31f925
TLSH
T10CF09EBBA679783314BE55FB2D04BC09657AA43202805DF0DF5B42ACE1C11F32F12453
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f61f55b3020b6f9112661af054722009607272814935627ee407ea88c7df1eba
MD5 58b1098914757191fd3a1ec42d1a4b29
SHA1 c079be97f6f22943536e567e67f802548b8d1855
SHA512 fec8fbef62b571266afbc61e9a170f6ce56598db951d51ec36101e98ffdfb8631eaca03b6a3dad88731dd6aa5eb20ca23040a1f8a78f268427665029cfa247aa
SSDEEP 192:N+RgcBz7AxfJrpv71hpAPRp2Fo/F92HRdb+WNnRm4SxWPueE2aUaVae5r8qiVyI6:MRgmz7UVpBhUXJQ9wvWA2aade
TLSH
T10952D86AF960697B6CDBD21AFA117713D7F5102521E01E80EAFCCA2C05E76CD222B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 f6a4bfd19a8e4e4a0f6ba32575afe99de8555a768440eb461906bcf400621f5a
MD5 2382d6f3987da4f0ef055e6588ed56ac
SHA1 0ca5bc4715682ff0a4604563721f5af146e37191
SHA512 1d199e87b2aadcbf3630a51823786af7573cebab061be739151f53b417099529259bc61778bad7e62e0526fb9fdbb8a3e2e6354effb8925921bb4176010ef187
SSDEEP 192:N+RgcBz7AxfJPpv71hp6PRpAFob+F92HRyxb+WNnRm4SxWMueE2aUaVae5r8qiVK:MRgmz7UNpBhmXwQgwvW52aade
TLSH
T11A52D7ABF960697B6CDBE25AF9117713D3F1106521E01E84EAFCCA2C14E76CD222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 f94495ace323a71d1da4134356303066d096e70722911f99d057acb81e1ded7b
MD5 95e34cf7c8415238521a6115ae88cd43
SHA1 fb6e1fcecb13b83aad03bd7b23987adf1822006a
SHA512 e7826c1db0b14f5e31026fab722d61177e46f8b42cbbd92f5f3151174136657a37ed7af38c33104b05d0cad6d90f8b98e2ca0b0ba37b199e0b4ada7a098cc304
SSDEEP 192:N+RgcBz71xfJPpv71hp6PRpAFob+F92HRyRb+WNnRm4SxWMueE2aUaVae5r8q+VK:MRgmz7DNpBhmXwQIwvW52aaTe
TLSH
T1D652D8ABE860697B6CDBE25BF9117B13D3F1106521E01E84EAFCCA2C05E76CD212741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 13e54a289192598f2635a2e99e333032dd71fe88f211c6f1ce815987742710c1
MD5 09cac370c8c15acbe89b27babe0385fd
SHA1 8593f8136121b1ceeff5c161d012d466b79750e3
SHA512 167a6e44f14d67366be3a09e77510ca2f5ce1fdd586f884817efb54451b8f060d2d5420abb60f6a5bc6bd2d7a4a3897d4e7b582f074f0b7cd2f0abd16874e6c6
SSDEEP 192:N+RI7AxfJypv71hpAPRp26592Hsb+WNnRm4KB22ueE2aUaVae5r8q7VyIsnAUgtK:MRI7UEpBhUXrQwwz2D2aaK8
TLSH
T11C42E86BB920697B6CDBD21AFE613753D7F5102521E42E80EAFC892C05E76CD223741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 1b159e3d7d23b709e2f2d9c72db219cdb23a8eb97fe32ef462b3340d15ab5e0f
MD5 70104d21f267faf79fca44ab9f93c302
SHA1 d9e75f80d3dbc9fea8eaf41b36bd0d6d386a574b
SHA512 cc4450b42600767b52aff8aa4f9fb0d10c9404761614b397b5b4f845c9e448dcd2131323f8e1c4e749307fb48ebe91176ffcdb804f5c4238dd1644cc0cd5956e
SSDEEP 192:N+RI7AxfJrpv71hpAPRp2Fa/392HRdb+WNnRm4KB2uueE2aUaVae5r8q7VyIsnA4:MRI7UVpBhUXVQ9wz2L2aaK8
TLSH
T16C52D86BE960697B6CDBD21AFA117713D7F5102521E01D80EAFCCA2C15E76CD222B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 b0594200296b16ed91086150a15fa46a6746de623ecf375e4d27e0b05dd52bf2
MD5 675bc50a4f18ffdb939722c6f29d0977
SHA1 53f79d67fc95da500be39a59b1370130ffe5f080
SHA512 326b68340b0bb21a83c4e95a9a1f8c3286b4b750922467ee2a94fc1f37e52205b3b2b1066ca3e62dd7d8409acde4eeb2434095a2e5c137dce1af88de09505b3a
SSDEEP 192:N+RgcBz7AxfJrpv71hpAPRp2Fob+F92HRyNb+WNnRm4SxWPueE2aUaVae5r8qiVK:MRgmz7U1pBhUXGQ8wvWA2aade
TLSH
T11552D86AF960697B6CDBD21BFA117713D7F1102521E01E80EAFDCA2C15E76CD222B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 c54836683d23f9fee57c69a9d42002f448a01bbb5b6b38437c5fcac9744adcc4
MD5 97aacfb3977979cfbf9d8a6c4d36d689
SHA1 28c462804fa985bea43aac67e658ae60025ec226
SHA512 ac229055b177234c91f43061b9900ff41ba000713f4120fbf08cb18c16d47d484d5415a198c6f1896335d53e2a7e2f4dc407a06b90151f49d9994124c8990d05
SSDEEP 384:+wjKJ7KxkXqKf/pUZNCgVLH2HfgslU697pLuLcSjwxXODKh+ErU3wZJHG/A1YTPB:+0KJ7KxkXqKf/pUZNCgVLH2HfgsG697U
TLSH
T192720A676C488E770F94C68CEC177F4FADB5024B65E9886483FA982903D5BCF11462EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 fd47f015ad36c5a494e4b060a0245db58a209de505e17c986ac37dd39cdce3f4
MD5 807de9a7bd9badfbe749d40417d5c71c
SHA1 876f7c2b256ba0683b03fe3468034903f77f51ac
SHA512 b921816ab71002beab49e63eca259b106b905d29e1970b9d60e7bab6d20693364ea88a238ed7a64494eabdfa3df27357a36264e235278695708b0dd5c168da37
TLSH
T1E0B0125080025502C04202B425465488B1647F21970F570953F06A27D8271A18014050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b87d.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58b87d.TMP
Size 96B
SHA256 4a98a7ad1d47ac6669fb38aca45b869995686b99553383cd024e42d0f1897285
MD5 995c74ecb2cad951a8921a5f2b82916e
SHA1 a82e6b400bd4626aff17382f97c6361e39ff512a
SHA512 1ca02d2118cef77c7ec55a865fa294b12e188680477b46583168d02751da6d562ea79e074cc07ca05b77c387007679dceec0114353c7a82daa72b945ac7e7ea8
TLSH
T138B00279C2226212C08203B037D6D5DD7774DF2AC783171292F01B67EE2677286352A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 120B
SHA256 1bfd4ddac38ca68f56499f2c40c02a3a66811ad00c8ef034c4fdae2d007c5f12
MD5 8be1733d767aaedd23b7ad3f18d92ff6
SHA1 b4e372cc659cd6198541b577abfd54b43442d795
SHA512 2c48a6eafe7f8fc7619aeb2379715f6bdff951e51395389f26efcede11a1c30634d1c13aee084023c4ab2efcb7f8ef7c1c6a9c45d04235d138390a4d32f679ef
TLSH
T128B0125011D0D804C457527127C90198FB104C0033D0024B81405681F442681D715550
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 314KB
SHA256 10fd5b90e54aa5c41e4572870bbdf1d918eeca2980a7147af03aec953fd43421
MD5 ff28eb2f335887296d97f0ae040a4dd1
SHA1 aa7ee12eb4ebeb3ca7454b2df60aca64287283e2
SHA512 cd68ec1d5e4a9c66e99b3a60d26f4d7040b5da2c5374776ae9ad1a114a36c2c59c4677a1394ae99556a1ea4f521957cb7c2c49ba372084a7f89bb24a653cb4fb
SSDEEP 6144:rmfA4PA6vpMGBvqV4z6Zn2x3Sm7Rkm1tYpBeh2BAoI:+A4PAcpdvi09oBGcAoI
TLSH
T1D86423734F215B7F0BB4EB3CA08A072B2DF445F39449EE9740CA6E0966BD7C512A5A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 877d6026c77d981709e73c9dce82390000590827ed9856add07a69f76b19c703
MD5 43a79abcdc7e09a1406eac69a93e9e58
SHA1 cd423fcd7a75bcc23f2e575d44991e901cf47d3c
SHA512 351a73828eae43610ef7915529561b210152e222744599ce0f4b975e384b3e79e1bccf7a8f0df6c11f1154676a4f0f4d990cfbe75f7f5be08b82cd568fc16d6b
SSDEEP 3072:UGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:Xm7Rkm1tYpBeh2BAo3
TLSH
T12CC312275E71A9375D79BB4EB08E0B1F1EF14AA6C930DE92C8D86B0437E97CC1A05934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 f04a64d83ab28784c385a64f38f1333f66ff9aa9c83d4eaf725076934d933d80
MD5 e1e215f20e32978039edead17639b748
SHA1 50be0be08c48a17b021b0c10888dc6350390a5b1
SHA512 4e838d611c7d186b1415d577697cc1369fcd3148e191be1ede6c0e3cd50f968c980e77ca103902206e77eb01a0fb3ff2b44437da7b05f48240b5260115305919
SSDEEP 3072:E3mvJqRV4zRLEzdguSFqMCIpI1gl5R/Kf+LGm7D5Lk17ox1tIpud63U8BehbCBi1:RvqV4z6Zn2x3Sm7Rkm1tYpBeh2BAoI
TLSH
T1553422375F22977E1EB9FA68A08D031B6DF689F3D818DE4784CD6E0426FA7841912934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 239KB
SHA256 b44366c8f984d1ed17f1d5dda133c48af05b9e764f989b8b7e0c33c8e037216b
MD5 68ff57da421f719f12ae735841580424
SHA1 42760d0fbff629578e8412436c1ac79d262358ab
SHA512 9682d9127ea4a15b53c18e5602bd34cd1a7d6fd622db176eff0885695819a244722f14bde319cf638e3544abf52c9a94b4d2c75af80687e6598c0b72fafc2b65
SSDEEP 3072:K3mvJqRV4zRLEzdguSFqMCIpI1gl5R/Kf+LGm7D5Lk17ox1tIpud63U8BehbCBi1:7vqV4z6Zn2x3Sm7Rkm1tYpBeh2BAoI
TLSH
T1C83423375F31A77E1EBCFA68E08D472B6AF64DF284589E5384C96E0427FA7841412D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download