be89826f078245b0a2e69459ba462af2377a8580c797e4a24f815db8faa2c239

Analysis

user interaction
yes
max time kernel
899s
max time network
895s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/08/2026, 18:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Screenshot 2026-08-17 8.03.35 AM.png
Size 144KB
Sample260817-xmpbasdc39
SHA256 be89826f078245b0a2e69459ba462af2377a8580c797e4a24f815db8faa2c239
MD5 6ea417d0d6249007f7fc61ceed03f567
SHA1 31ce9b4245ca1adfc092604aa5fe84756277db59
SHA512 1c3eb3f76d7521694de5fd817713bfa0388c9bf46dd0b38f4e8dfb461c21e6712f84a36f59937de0c1f5c37d7a2e1e7a69ba24af8332c7a246ca1afd4eec2a69
SSDEEP 3072:9OfgmG+9bt4v8b+Fte0qjI3mG4tGur9L2P7fPlz/IJzps7VCI6:ZUNxyDzmtGurN2P7HlLwuVU
TLSH
T1A1E31300DE3A99CCDA93A33DAC6187031E75949242752727F356F811DCAF036EED6276
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
224	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134314667333959069"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
2028	mspaint.exe
2028	mspaint.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
5796	chrome.exe
5796	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 23 IoCs

pid	Process
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe
Token: SeShutdownPrivilege	2256	chrome.exe
Token: SeCreatePagefilePrivilege	2256	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe
2256	chrome.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2028	mspaint.exe
2028	mspaint.exe
2028	mspaint.exe
2028	mspaint.exe

Suspicious use of WriteProcessMemory 59 IoCs

description	pid	Process	procid_target
PID 2256 wrote to memory of 4768	2256	chrome.exe	93
PID 2256 wrote to memory of 224	2256	chrome.exe	94
PID 2256 wrote to memory of 116	2256	chrome.exe	95
PID 2256 wrote to memory of 116	2256	chrome.exe	95
PID 2256 wrote to memory of 2624	2256	chrome.exe	97
PID 2256 wrote to memory of 2624	2256	chrome.exe	97
PID 2256 wrote to memory of 5060	2256	chrome.exe	98
PID 2256 wrote to memory of 5060	2256	chrome.exe	98
PID 2256 wrote to memory of 2152	2256	chrome.exe	99
PID 2256 wrote to memory of 2152	2256	chrome.exe	99
PID 2256 wrote to memory of 3760	2256	chrome.exe	100
PID 2256 wrote to memory of 3760	2256	chrome.exe	100
PID 2256 wrote to memory of 3052	2256	chrome.exe	101
PID 2256 wrote to memory of 3052	2256	chrome.exe	101
PID 2256 wrote to memory of 2232	2256	chrome.exe	102
PID 2256 wrote to memory of 1484	2256	chrome.exe	106
PID 2256 wrote to memory of 1484	2256	chrome.exe	106
PID 2256 wrote to memory of 4352	2256	chrome.exe	107
PID 2256 wrote to memory of 4352	2256	chrome.exe	107
PID 2256 wrote to memory of 4512	2256	chrome.exe	108
PID 2256 wrote to memory of 4512	2256	chrome.exe	108
PID 2256 wrote to memory of 2948	2256	chrome.exe	109
PID 2256 wrote to memory of 1128	2256	chrome.exe	110
PID 2256 wrote to memory of 4804	2256	chrome.exe	111
PID 2256 wrote to memory of 1096	2256	chrome.exe	116
PID 2256 wrote to memory of 1096	2256	chrome.exe	116
PID 2256 wrote to memory of 748	2256	chrome.exe	119
PID 2256 wrote to memory of 748	2256	chrome.exe	119
PID 2256 wrote to memory of 4020	2256	chrome.exe	120
PID 2256 wrote to memory of 4020	2256	chrome.exe	120
PID 2256 wrote to memory of 4124	2256	chrome.exe	121
PID 2256 wrote to memory of 4124	2256	chrome.exe	121
PID 2256 wrote to memory of 4116	2256	chrome.exe	122
PID 2256 wrote to memory of 4116	2256	chrome.exe	122
PID 2256 wrote to memory of 1540	2256	chrome.exe	123
PID 2256 wrote to memory of 1540	2256	chrome.exe	123
PID 2256 wrote to memory of 4224	2256	chrome.exe	124
PID 2256 wrote to memory of 4224	2256	chrome.exe	124
PID 2256 wrote to memory of 4132	2256	chrome.exe	125
PID 2256 wrote to memory of 4132	2256	chrome.exe	125
PID 2256 wrote to memory of 3888	2256	chrome.exe	126
PID 2256 wrote to memory of 3888	2256	chrome.exe	126
PID 2256 wrote to memory of 1136	2256	chrome.exe	127
PID 2256 wrote to memory of 1136	2256	chrome.exe	127
PID 2256 wrote to memory of 432	2256	chrome.exe	128
PID 2256 wrote to memory of 432	2256	chrome.exe	128
PID 2256 wrote to memory of 3044	2256	chrome.exe	129
PID 2256 wrote to memory of 3044	2256	chrome.exe	129
PID 2256 wrote to memory of 4528	2256	chrome.exe	130
PID 2256 wrote to memory of 4528	2256	chrome.exe	130
PID 2256 wrote to memory of 1484	2256	chrome.exe	131
PID 2256 wrote to memory of 1484	2256	chrome.exe	131
PID 2256 wrote to memory of 5444	2256	chrome.exe	132
PID 2256 wrote to memory of 5444	2256	chrome.exe	132
PID 2256 wrote to memory of 5452	2256	chrome.exe	133
PID 2256 wrote to memory of 5452	2256	chrome.exe	133
PID 2256 wrote to memory of 5796	2256	chrome.exe	135
PID 2256 wrote to memory of 6028	2256	chrome.exe	136
PID 2256 wrote to memory of 6028	2256	chrome.exe	136

C:\Windows\system32\mspaint.exe
"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Screenshot 2026-08-17 8.03.35 AM.png"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2028

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:3952

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffbbd3fc728,0x7ffbbd3fc734,0x7ffbbd3fc740
  2⤵
  PID:4768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1656,i,8794460972846378600,13479835406897421399,524288 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2176 /prefetch:3
  2⤵
  - System Time Discovery
  PID:224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1764,i,11000652648840979383,8019052939006857287,262144 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2120 /prefetch:2
  2⤵
  PID:116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2448,i,1728704228829201608,5591455811347452062,524288 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2424 /prefetch:8
  2⤵
  PID:2624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3232,i,18157977411809148627,7874619170458842099,2097152 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3108 /prefetch:1
  2⤵
  PID:5060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3244,i,1293497283324704508,13731379205332104107,2097152 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:2152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3888,i,12908301506976149790,14392150697646063560,2097152 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4484 /prefetch:2
  2⤵
  PID:3760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4744,i,6337063285652859035,657916267603488487,2097152 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4752 /prefetch:1
  2⤵
  PID:3052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5512,i,4987402178630013258,7592908982324162537,524288 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5516 /prefetch:8
  2⤵
  PID:2232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5932,i,2915727293504862372,9808876971244522332,2097152 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5676 /prefetch:1
  2⤵
  PID:1484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3508,i,8270585004389097290,209048569759209354,2097152 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3376,i,4321198446791455483,6074573295430295738,2097152 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3372 /prefetch:1
  2⤵
  PID:4512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5844,i,12173237759579648393,2370770020316515057,524288 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:2948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5840,i,5399961479826336188,5460631407714850200,524288 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5516 /prefetch:8
  2⤵
  PID:1128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5832,i,11675189820184360042,5120738054515113891,524288 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:4804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4932,i,6135632921508537348,16956252358864723497,2097152 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4536 /prefetch:1
  2⤵
  PID:1096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3484,i,5719634468184050914,6951707960624308648,2097152 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6132 /prefetch:1
  2⤵
  PID:748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5976,i,11518433739520775349,147817383670824341,2097152 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3888 /prefetch:1
  2⤵
  PID:4020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5868,i,2464503953274824588,1915627810877925634,2097152 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4596 /prefetch:1
  2⤵
  PID:4124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6228,i,9943166711535579623,716184252803908781,2097152 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5844 /prefetch:1
  2⤵
  PID:4116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=4572,i,10400817064351297749,2736251681735915932,2097152 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6064 /prefetch:1
  2⤵
  PID:1540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6276,i,2054863918266715565,8484517549100148298,2097152 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6284 /prefetch:1
  2⤵
  PID:4224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6420,i,5506640127860054364,1885386204073795947,2097152 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6436 /prefetch:1
  2⤵
  PID:4132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6580,i,8114850876674266589,843981973243915610,2097152 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6588 /prefetch:1
  2⤵
  PID:3888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6724,i,16069979932465462858,14483373935556526690,2097152 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6740 /prefetch:1
  2⤵
  PID:1136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6884,i,2307027829144909588,6704483445630970353,2097152 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6888 /prefetch:1
  2⤵
  PID:432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=7032,i,9028421694320703331,13331890830680795070,2097152 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7040 /prefetch:1
  2⤵
  PID:3044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=7192,i,6483070774024498242,13942920019834559013,2097152 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7200 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=7344,i,9246980562300562690,1740035507315311097,2097152 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7352 /prefetch:1
  2⤵
  PID:1484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=6924,i,1111399397054798516,1327075744739127842,2097152 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6768 /prefetch:1
  2⤵
  PID:5444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=7688,i,4697486696828008892,5518451622913621699,2097152 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7696 /prefetch:1
  2⤵
  PID:5452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5520,i,14798111631007034787,15117956451335563331,262144 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5740 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4688,i,4574670917225135172,3331724162839490216,524288 --field-trial-handle=2124,i,7739461195469250305,14443933617950547767,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3472 /prefetch:8
  2⤵
  PID:6028

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3272

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4252

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 949f0a2cabc567e97a7a472dc71389e4a595c15be02fb1f0a2280fe113d96b30
MD5 97c0d1e55b63c28984741f9d5cf1a235
SHA1 1ea860a4b21a5a61e38d4b5576059345ebce258f
SHA512 f3e5082c7147fbbeb83020b46aa658e13b50a3eb453aafba19a22f63bb0eb0e2bd71b87acb72cf4c30da6ca3fa2e4e4eac0d912df343754f8b795e9c8c5441c9
TLSH
T1FCE02BB9CA20AD2B18FD175CA4580A4AE75423DB3B80855B7A3D920D8FB96760586C1C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 bfe690692e6e5c3417fde09e38ec7740cf6b4a32155e564c1875ebc9fa074f95
MD5 fdb60207d27aa6b8f844ba3c2900d020
SHA1 2861daae6410599c71b03f94e3d5f9c6ae97262a
SHA512 05b1657e654d786503ddb98e088ca4c4731a8eacff1b3eae81d0c9b4f4f63e0c4e37d235ab16b595ce478665095f783282438705141283e79d5776f735bc7689
TLSH
T1DD21C0409A5D0F14D33468F5B4E2588E713126498CBB7F48C7E99E7519DFB2B06F0827
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 504B
SHA256 2364e1e5cbfeafe8c373e97f72eae1511e3fdf15d9004eb14f9d80f2bbe54366
MD5 514bee9f5b8295804d7b964e17fd7b2a
SHA1 b57ec66674689e46e318bdfdf54b5237dbcd48a6
SHA512 f75a8eafba0646e8f47a30f252d79a10d0c53cc10abc16f43a2f8ba292cd53b72e1b8c7ea36988a398dbb0a010a74da8ee2bac2974c85f3ee3c327c59b00af5c
TLSH
T136F0681C8D6E0F71CB6415F09595088FA2012A2C0F329A0AD0A50CA909CFFBB5940C93
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Size 72B
SHA256 aab5241244c65b84d1def9591630b0544d581a6183d117cbb393ebab889c7715
MD5 a4ba85bb9e0cd175635cd51d3475bc7e
SHA1 f535e076477fb48bc6619b2810884364b26eb625
SHA512 1f7ef991ce377536c5773285480350ccc4b7bc8e05c1e0b7a94aecca37577b3c28c63498d49a3f83e97f9241777bcfb9a9cb5e210b1a978608a676673a15bd13
TLSH
T15AA0023582480441C18043F4604B1956769098551F32434144E50644DD9979E9252211
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Size 120B
SHA256 7162dbc63761ec915e4ec0cf9a325b12bb97f8676b0b42c47361ae0f59d3037d
MD5 ea70cda5106de92c83a2a1a6adebc624
SHA1 41cab10d603ea1da14763fdee05d4299be4fe17c
SHA512 2744dee5bf3d2e948fff7d8d8d19022438e5bbd106f7c33fd28a9de766ddb1d1ec701cd28f33a24d1c9712463fc471c92c82e361ea0387e3775f08d79abcfdfc
TLSH
T16FB01220305C3601DE1493B0505B0912B0116F001F082383005D0DE9C705AB6C823605
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Size 72B
SHA256 59bda3d595950cbb8455ddc3e8efeee70c8c792d3ea6aac0ff517b8f77e19a99
MD5 c60c811cae93fa0dca5887adcf181449
SHA1 12a772243589024f845f437bd910ceda3093d10b
SHA512 0f1729a414a1f07ebc3e45fe7abf4f15e59b5851ff1863aa9e0f94530f80de5e3ec5478c4d1ccf611ab52b0d333aa60879ad39432ef01892aa1f9501a6b21d30
TLSH
T164A00224469C0A06D60087F06045265A76144A182F13074184A12547ED957AFA612069
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Size 72B
SHA256 d4e38a84811d2571d9e69af8590cdbdf0b439876ed4f4a59b1d6863f67a246e9
MD5 f09ef99dc74a737904612ea5a74ddbb5
SHA1 c284fe9e7a81b0c9b3a71acd9823c1c73d51ddd3
SHA512 072110466ab4d22a82cedc2a898703ec86103e785fc8b22a0b7032cac897400c09b795c3f6d039776d272df4291c8fad3f66d2a98ad6482e183a74b658164253
TLSH
T11AA0223080083002C30003F000080000B32C08228FC003A200B30080CAC83FBF2C2028
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Size 96B
SHA256 c0b1866d3f6f9a9ee3e7d23ad64b33193ad602bf8a1e70091dcbbbedaf609b3c
MD5 e5da0facbe2a050db0fba1e7481ef99e
SHA1 cbc48032f3e04fcbcecea5caa6d8c697298e7dc6
SHA512 344c93082d3744a638e9019410484b06e26333665cc2bd175d5908150690fe860c8e7eed54fdc6d713fe3eb2962c7437735ebf7b23eb0b5b451d4b6a596c62e1
TLSH
T10AB01222004C4002D908873010690510311099050F12124200590AE8C355F554912012
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 21KB
SHA256 640ae68ec90ebb2ad8f45f31a64169eff0b157a670d6a52ff5f889ddd6f7dc19
MD5 b44ad6f9eb40155cf0ca8cb9b839027d
SHA1 68eb1b350f2e7924c084433a81ff4bee398fef31
SHA512 0741b1f062256766ca6b5b3d61866dec1f87d6b2d0ccb72c0545f2a81180620ac4dd97f2e5205460af2f9256d07c0dbf4c99c15f78bf9a6a3d382625b40a9ab2
SSDEEP 384:DRAW5E6R5aLwGqDd/sNjTcaIYP/euMEhHeNQQ90ZctvpEQbYd3JbVbIvVb9J/mM5:K2roV2A0sS
TLSH
T1C8A2BBF787F4853C9A2166F1AB24AD2BCF6D0624471C3966C8D47E07A3F2571E201B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 18KB
SHA256 0a32ab1f1c997d8c713cd8ccd5947fa64119292c360f5b677200a4e90a810145
MD5 8e95d1391df598ac0522f3f998ef7ccb
SHA1 9212f37c5a25c65e6bcc5a9b4cb4d83a3b2df6b1
SHA512 fbb4dbe45e17b14522bf95681e7318a681aa7276f4b59ac14252248017168a118b8f313ccdc1cfefed54f6c26e9d5bac41bffc989ad97b688ef9e9679d175de4
SSDEEP 384:D0frqQdIlOEZk3lwdfPgxlacaIYP/EuMEhUeNqQt0ZctvpEQbYd3zbVbIvVb8/mU:5pFKV2X082
TLSH
T1A3929AF787F4863C9B2166F1AB14AD2BCF6D0620471C397689D07E07A3E2571E201B6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 21KB
SHA256 2a15971576b3b1a12be2f488617bd41490690763e689136c33b489941782fb2a
MD5 a3e25cc66d7702ccb5f3d3df2c48b32d
SHA1 3972d4828d066b3f4ecec821fcff0bef5e16392b
SHA512 443f30060b50dedb98ea9d2a2df4a3629472715bdecc65602ef7b7701780eb9971de5c40b1a55afc10663bca7256602dc7766826d06fb9acca5798cd1d3bf3b6
SSDEEP 384:DRAW5E6R5aLwGqDd/sNjTgFaIYP/euMEhHeNQQ90ZctvpEQbYd3JbVbIvVb9J/mi:KeroV2A0cA
TLSH
T1C1A2BBF787F4853C9A2165F1AB24AE2BCF6D0624471C3966C8D4BE07A3F2571E201B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 18KB
SHA256 a0232ca315e8b151cb4a17122840b564ad754492e44b130a66fb03cd123d440b
MD5 99ec7a680d2b8a73dd1af65cbab92285
SHA1 c05c8ea716ff6b78891fb1c8d16f845edbce5ea1
SHA512 2bdb62140d9a9b793933e2a32cbfeeb5e7afc53626362ae7bc3d1b89819561f81be6c1f5f1a4fa0c3bf26186cfe556ef289f7f491bd00099936b258a37f0067b
SSDEEP 384:D0fwrqQdIlOOEZk3lwdfPg9aaIYP/EuMEhUeNqQt0ZctvpEQbYd3zbVbIvVb8/m9:PAFKV2X0ar
TLSH
T1B1929AF787F4863C9B2165F1AB14AD2BCF6D0620471C397689D07E07A3E2571E201B6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 19KB
SHA256 a8a9635c35d0cff28663157cc1af50294e3eb5ce47a09bca357f31fc440988aa
MD5 cb1fcd9ec32445da6385775229c558d5
SHA1 5ef3504d43253781e18a872981aab08014ff93ed
SHA512 bf8b3e8afacb486b639380f6076e5a14db0357ffa3ae65918ba069989175edff9d5e3b05c7805907a51ce32c99a2dcc9a6a620d50df52d253cf47af2cda16f8b
SSDEEP 384:DRAW5E6R5aLwGqDdjaIYP/euMEhw4eNQQ90ZctvpEQbYd3JbSZPbIvVb9J/mMMwW:Vroej2u04
TLSH
T1F292ABF787F4893C9A2165F1AB24AE2BCF6D0624471C3966C8D47E07A3F2571E201B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 4KB
SHA256 03c415ac2c09be01b90fd6c815234f16e4a762b9803ca1d8d6388fdf3484715e
MD5 a72eef314b644efb354480fce0fd1237
SHA1 86c2df61e31b8b63fdf97c1f1b888b8d3ed0aad7
SHA512 e90b57212b37c8ba7727dbc86a2168672f12cd03bddfc55b498cd952580d8fbbd57b5c4bd208e8eecf3df9f6eb3c14b71656e06a9acabc33b6a6343d8f313c25
SSDEEP 96:R1UiAUHUemieU1eU6UDU3EUqUY1bUfUkebdUbzPU7UVgUO4pURUUvYjUrUGUHU/u:R1UiAUHUeSUUU6UDU3EUqUkUfUldUvUa
TLSH
T14B81AB63897EB46770388DFF0E46FC0659BBB435839194F8DF66C22DB0955B7061241A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 5412e3e4af724b56fd5e67a654a9a8d2bc5d0bbef5c0b85647871c0dd8856d60
MD5 ce5da7d400b71599781f084be6df2303
SHA1 4144e9276e6fe354fd3d22ec26a8fe67504f181c
SHA512 b5bad87174edef1c49ef6b6956744005ab7e88e7ede06123bb90eed41d2151892a62e0036c0e62f49a1fd15e9aaf95d4d9bbc5eaa7190665b043bbac2a9c8666
SSDEEP 192:cRNZ1jPASGvnv72ympAPRp2/95Hsb+WNntS0vrKAkwxEVyIsnAUgtaJ:cRNZN4vQUXo7wM0Dp28
TLSH
T1F142D72EAA10657B9CDBD21AF9127B53E7F5103225901E84EAFC8A2C18F75CC321742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 64a050b9222f590806dde371a971720fac872c8df258915cb9fba83a5cd7075c
MD5 eae1695e4d0c3373476589b5d9721ace
SHA1 4f8abaebbf313eed3eba3665fbe85bdc24cee6a7
SHA512 602bbba47bf4a278ac0b712b69f4cedc5b7503ad77c561868a3480c4d30474685f392d80cf0095d2ee5d8ffdbd9f880e74b3872763fec5fe39ec771cfd336214
SSDEEP 192:cRxcBzZ1jPASGFNnv72ympAPRp2MoL95Hsb+WNnIP/Ch2YrKAkwxEVyIsnAUgtaJ:cRxmzZN4NvQUXY7wUg2mp28
TLSH
T15652C62FBA106577ACDBD216F9127B13E7F1116626941E84EAFC8A2C18F75CC321742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 28a4426ba046492ab85bf3bea3b51931dc89408507ca98be3428192ed5b3d59c
MD5 2b57c01a45dc806ca3880f6a6a763c0f
SHA1 37df9c5295c7b86924e7a7bc17e27b385592a597
SHA512 a4e5efb1d4f8eaef926fbb65df3692054a3a932b6ae6efd9fb2239c0ac769c28dc8bd375fbe53b59661d46784715248721801bf191cd0857e54011642b9ba9d3
SSDEEP 192:cRxcBzZ1jPASGFN4v72ympAPRp2MoNp95Hsb+WNn1IP/She+rKAkwxvVyIsnAUge:cRxmzZN4NkQUX47wS0eQpne
TLSH
T19052B52FA9102977ACDBD22AF9127B53E7F1116669D01E84EAFC8A2C14F75CC3217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 3fb0d0404c59afe5beb7e2fead9206c853475e3ae396ac206327c3a018f64fe4
MD5 9f5a8d958e4ded9abbe7f93b5fc9ac1c
SHA1 4ad37261bc5fe13178dd90955868bf74e1410fc2
SHA512 b67f2966fe2f5d6c5a9e190e1fc4eeb0091b1251dc22ae311249bd82873d6bb1fe76a93c5e217bc84376674c7250c5a2b65009847e26951512910871363f3526
SSDEEP 192:cRxcBzZjjPASGFN4v72ympXPRpnMoNp95Hsb+WNn1IP/SheGrKAkwxjVyIsnAUge:cRxmzZ34NkQZXh7wS0eopDe
TLSH
T19452B72FA9106577ACD7D22AF952BB53D7F1116229D01E84EAFC8A2C18F75CC3217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 93a969d5494520a313d59c847d3ee10e51ce49e2c8cea4f6ea38850cfab527d0
MD5 65eaa0a57fc2a07c6f5f8e9c22429ba6
SHA1 83b5d3c038efb456e4191e45a08c6c1cf8b7d43f
SHA512 2f69609ebf02ccda7dd197a901863ecdf075cd94dce3ddcaf8f69f28aa522eed4a257c71ee04de563d2d250a18b8f7b4dfd5e90247d3586bee22fe519ccbce35
SSDEEP 384:Q+jM77KxkXqKf/pUZNCgVLH2HfgslAG7pLuLcSjW3XODM3+ErU3oPHGqkkpLtE:QOM77KxkXqKf/pUZNCgVLH2HfgsSG7pu
TLSH
T136720A67684C9A370F94CACCDC16BF4FACB5025B65ED886492FA5C1503D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 ea75016b3fe756de88fef80bc4bf5b4d47ebe84052901bd0f8512ca5a3b1bc7b
MD5 8f41420400835137bc87cbb58883b1a4
SHA1 51a4c32f46c51250a8eee270fd850ca7ce34d0d4
SHA512 93dbe0fc3eebe312943906cf445b7ba245d9a5b9146973ba7a96ac8667dd3140911ff512ec56c888d843f0bb3f62305bc6a81f830c2eb1895bb01c9f997b30e0
TLSH
T171B0120084455105C04307B01587548C71186F10DA0A271143F47962D8351619815051
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ed0b.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58ed0b.TMP
Size 96B
SHA256 accef7bc6840fc924438edfb6876cebb40f8839ec7bb61d39ae360b71b27794d
MD5 e8c1eb03993fa21834080e90a82f2a17
SHA1 f42dccca289653f0d2ab8e99c0c9e79bdb2d9734
SHA512 0a460aab1331a5917a3c1eedabec5f2cb7b90ffdd927e8bdbcff9fb7e8fdbc4a54c83d53c7e15dab2bd37578759dfaac6ed21e90da046476f9cee5dbb40dd198
TLSH
T16EB02222C0223202CA0223F0208080E83020EF20CA03032E82E00A22EE203F30028020
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 9d0b1817a6b2b42f662a0e9d80715e5e1e17f0f1b483d7ce5b59bd0ef9a19d52
MD5 9c23a95c36c8806992285e2c77c2ff79
SHA1 92943a488e41333deb7d5eea683303e8a9482789
SHA512 6c614396f2f761fb518fadf3843abd8c6a55c4123bd809bd7e0f5a1ecc5a6cab22e52248c041d33d67739e8fa067c9948323dd23404cf62bf482d35e07ec4023
TLSH
T1DDB00265841E8A2EE42DD77168DB84B432245C223B66165350D45174DA512D3A267847
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 239KB
SHA256 11f2634d0937aa3d0a48a676a9607ef52f95144ef06e76764154bef601df6ec0
MD5 ca8b94225bed551411225dd93b767aa4
SHA1 e1fa1ca3fddff154e546b76a842da1880c08e930
SHA512 a5cb22846ec7ea73d3ef2592f3e8be5df8d3cbdad23bd41b021b0f477adbc9a48c98f76b068ec8c8c7d2252d83740a74f223a4651e7bd24ab7e503ca9b69dc26
SSDEEP 3072:dyAdX3633S2w6PNLYqMfm3cdUlErqHhRe5QfDKSKH3eaVYGqfd7NtZL8cHQRZEQe:dya1ULym3cGlC+DGQ2SRGqZ/ZLW3ExH
TLSH
T136341273BFD71F370DE65B14A0032B561FB4859BC9709301B9AD2BBFB8835689D06868
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 239KB
SHA256 17ed85ba3644f6c5c1e7f10bfb87b8142acc9e6b3d40c56be4e0a16dcabb8132
MD5 5bcb323a4b7e9a1577e7a7d28bd1ad56
SHA1 a11195261d82248025fd2c8ff6eaaa4626a3fae2
SHA512 fd6283ad44ee05fabfadcb5e5ba480421526af3fef27094ea1c32306cb3b06c89a35d735b9a4dd84b903feccf4bf97e92cda004f0f51a5f02221852287a596e4
SSDEEP 3072:ByAdX3633S2w6PNLYqMfm3cdUlErqHhRe5QfDKSKH3eaVYGqfd7NtZL8cHQRZEQe:Bya1ULym3cGlC+DGQ2SRGqZ/ZLW3ExH
TLSH
T167341273BFD71F370DE65B14A0032B561FB4859BC9709301B9AD2BBFB8835689D06868
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 238KB
SHA256 bbfd37ce1401b76b4e3ae6e4129485e317881dc51c3c9329e94d4a34707493a6
MD5 cbb961f053bee287b9957b5fe446e8b3
SHA1 825130103b079e280c823f2334f234e8bd623843
SHA512 ff07dc14335b36d551146b3adffd01a30ecde02194eadf20deb68b034efa0b34ce5898a8be118716f7a9a3a69144709bee5e12c20f3818f4d0e1356715a55e49
SSDEEP 3072:GnAdX3633S2w6PNLYqMfm3cdUlErqHhRe5QfDKSKH3eaVYGqfd7NtZL8cHQRZEQe:Gna1ULym3cGlC+DGQ2SRGqZ/ZLW3ExH
TLSH
T1A2341273BFD71F370DE65B20A0031B975B74849789709301A9ED27BFBC83569AE06868
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 09ff61b584c5285e7cd3ef059616d9af533d7ebcc102588bbbe78eb251d0309f
MD5 046679f4b2a25212cb7b2b8f4dd49581
SHA1 2296b1d59dcbc486f62add44abfde15df70cc78b
SHA512 6ec80ce1a3eeb49b579009fb53473c114ca85386c53da122fc3758c9081731275fe38a3f4e62f70782a08f2fbc0ce4122de2df7611b4a2bf16f6fcf3bda6ad41
SSDEEP 1536:TUQyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjf:Fqfd7NtZL8cHQRZEQ6Spsk
TLSH
T1A3C30237DBC21F339D92CB60B9530FD697F645A99034D301AA6D77BF6C83491644289C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download