813c1bde8827250c64afc07c5d57d367136278185f9d940a50b41f572e4f8468

Analysis

user interaction
yes
max time kernel
1049s
max time network
1051s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/08/2026, 22:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Текстовый документ.txt
Size 71B
Sample260820-2v13aagb65
SHA256 813c1bde8827250c64afc07c5d57d367136278185f9d940a50b41f572e4f8468
MD5 7c557521a107c13e22d9bdb252c7cc27
SHA1 e7c330468f8208ff90c0ceff990b6423553fd305
SHA512 b4e48e072316dc909fd772da99725860afbeba6b087ab383e1f65ccc498804a8549e915f27c860e4f687f514f4cbe44a761ce32d723b1e57a7137e05500e2279
TLSH
T144A022BF0330C0C82ACC80CE800E320C8823C02AFCF2CA00CC0C0A80220003008A08B0
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4548	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134317401291338982"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
4924	chrome.exe
4924	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 36 IoCs

pid	Process
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe
Token: SeShutdownPrivilege	1964	chrome.exe
Token: SeCreatePagefilePrivilege	1964	chrome.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe
1964	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1964 wrote to memory of 3848	1964	chrome.exe	87
PID 1964 wrote to memory of 2308	1964	chrome.exe	88
PID 1964 wrote to memory of 2308	1964	chrome.exe	88
PID 1964 wrote to memory of 4548	1964	chrome.exe	89
PID 1964 wrote to memory of 1824	1964	chrome.exe	90
PID 1964 wrote to memory of 1824	1964	chrome.exe	90
PID 1964 wrote to memory of 648	1964	chrome.exe	91
PID 1964 wrote to memory of 648	1964	chrome.exe	91
PID 1964 wrote to memory of 3728	1964	chrome.exe	92
PID 1964 wrote to memory of 3728	1964	chrome.exe	92
PID 1964 wrote to memory of 4984	1964	chrome.exe	94
PID 1964 wrote to memory of 4984	1964	chrome.exe	94
PID 1964 wrote to memory of 2588	1964	chrome.exe	95
PID 1964 wrote to memory of 2588	1964	chrome.exe	95
PID 1964 wrote to memory of 1256	1964	chrome.exe	96
PID 1964 wrote to memory of 1256	1964	chrome.exe	96
PID 1964 wrote to memory of 2752	1964	chrome.exe	98
PID 1964 wrote to memory of 880	1964	chrome.exe	101
PID 1964 wrote to memory of 880	1964	chrome.exe	101
PID 1964 wrote to memory of 4864	1964	chrome.exe	102
PID 1964 wrote to memory of 4864	1964	chrome.exe	102
PID 1964 wrote to memory of 5016	1964	chrome.exe	105
PID 1964 wrote to memory of 4572	1964	chrome.exe	106
PID 1964 wrote to memory of 3216	1964	chrome.exe	107
PID 1964 wrote to memory of 3048	1964	chrome.exe	109
PID 1964 wrote to memory of 3048	1964	chrome.exe	109
PID 1964 wrote to memory of 1972	1964	chrome.exe	110
PID 1964 wrote to memory of 1972	1964	chrome.exe	110
PID 1964 wrote to memory of 1920	1964	chrome.exe	111
PID 1964 wrote to memory of 1920	1964	chrome.exe	111
PID 1964 wrote to memory of 3160	1964	chrome.exe	112
PID 1964 wrote to memory of 3160	1964	chrome.exe	112
PID 1964 wrote to memory of 2992	1964	chrome.exe	121
PID 1964 wrote to memory of 2992	1964	chrome.exe	121
PID 1964 wrote to memory of 2036	1964	chrome.exe	124
PID 1964 wrote to memory of 2036	1964	chrome.exe	124
PID 1964 wrote to memory of 4416	1964	chrome.exe	125
PID 1964 wrote to memory of 4416	1964	chrome.exe	125
PID 1964 wrote to memory of 2644	1964	chrome.exe	126
PID 1964 wrote to memory of 2644	1964	chrome.exe	126
PID 1964 wrote to memory of 4060	1964	chrome.exe	128
PID 1964 wrote to memory of 4060	1964	chrome.exe	128
PID 1964 wrote to memory of 4924	1964	chrome.exe	129
PID 1964 wrote to memory of 2992	1964	chrome.exe	130
PID 1964 wrote to memory of 2992	1964	chrome.exe	130
PID 1964 wrote to memory of 4272	1964	chrome.exe	131
PID 1964 wrote to memory of 4272	1964	chrome.exe	131
PID 1964 wrote to memory of 3388	1964	chrome.exe	132
PID 1964 wrote to memory of 3388	1964	chrome.exe	132
PID 1964 wrote to memory of 4544	1964	chrome.exe	133
PID 1964 wrote to memory of 4544	1964	chrome.exe	133
PID 1964 wrote to memory of 2404	1964	chrome.exe	134
PID 1964 wrote to memory of 2404	1964	chrome.exe	134
PID 1964 wrote to memory of 3900	1964	chrome.exe	135
PID 1964 wrote to memory of 3900	1964	chrome.exe	135
PID 1964 wrote to memory of 3328	1964	chrome.exe	136
PID 1964 wrote to memory of 3328	1964	chrome.exe	136
PID 1964 wrote to memory of 1760	1964	chrome.exe	137
PID 1964 wrote to memory of 1760	1964	chrome.exe	137
PID 1964 wrote to memory of 4656	1964	chrome.exe	138
PID 1964 wrote to memory of 4656	1964	chrome.exe	138
PID 1964 wrote to memory of 4592	1964	chrome.exe	139
PID 1964 wrote to memory of 4592	1964	chrome.exe	139
PID 1964 wrote to memory of 464	1964	chrome.exe	142

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE "C:\Users\Admin\AppData\Local\Temp\Текстовый документ.txt"
1⤵
PID:4128

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffc1a90c728,0x7ffc1a90c734,0x7ffc1a90c740
  2⤵
  PID:3848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1696,i,10238012942545405340,9188875810389406362,262144 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1896 /prefetch:2
  2⤵
  PID:2308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2028,i,3831662572374146844,103951188341001392,524288 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2432,i,1421793900458517162,3150635068356087099,524288 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:1824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3196,i,15341348029829272685,13632817389869121098,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3208 /prefetch:1
  2⤵
  PID:648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3340,i,3757752338022903630,4006073077423370744,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3396 /prefetch:1
  2⤵
  PID:3728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4052,i,6893548023624109237,7368112565340548291,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4500 /prefetch:2
  2⤵
  PID:4984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4776,i,10519715763785696731,12340353776047584779,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4664 /prefetch:1
  2⤵
  PID:2588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4964,i,7109406978143710966,17074430844939803198,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4940 /prefetch:1
  2⤵
  PID:1256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5664,i,8362859704738295412,2795832925414472978,524288 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5648 /prefetch:8
  2⤵
  PID:2752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5648,i,316162541167392449,3687789962808287617,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5644 /prefetch:1
  2⤵
  PID:880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5664,i,5484152140195588254,15039086188001855105,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5844 /prefetch:1
  2⤵
  PID:4864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5988,i,6885015249564505567,347335766949510818,524288 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3604 /prefetch:8
  2⤵
  PID:5016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5996,i,1742900480800113945,17636476253734052914,524288 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6060 /prefetch:8
  2⤵
  PID:4572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6008,i,13831472384573842885,7236326966639158102,524288 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6044 /prefetch:8
  2⤵
  PID:3216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4880,i,2056880211012754442,7561259482949974569,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:3048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5840,i,16424271252457301190,14266932747179322393,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5892 /prefetch:1
  2⤵
  PID:1972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5644,i,14268581123100364170,10689650845527325490,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:1920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5952,i,13698672724864358340,17502889582877267448,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3404 /prefetch:1
  2⤵
  PID:3160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6048,i,12832438641925957691,2435009270469053882,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5932 /prefetch:1
  2⤵
  PID:2992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=3208,i,9540445707782608999,12861749999709235776,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4968 /prefetch:1
  2⤵
  PID:2036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=4940,i,11637566504125655669,3983083545483064358,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5928 /prefetch:1
  2⤵
  PID:4416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5024,i,12393977762590811670,9943158018762377824,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4972 /prefetch:1
  2⤵
  PID:2644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5972,i,1669936571330587870,4749071769156871153,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4904 /prefetch:1
  2⤵
  PID:4060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5792,i,10916422003047169749,2730947520995327894,262144 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5736 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=4972,i,13119974327316784972,6314424346992664638,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6364 /prefetch:1
  2⤵
  PID:2992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=5880,i,8082878841095021615,12055953153986067145,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5836 /prefetch:1
  2⤵
  PID:4272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4972,i,3950785436472350392,8569456114048343573,524288 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5780 /prefetch:8
  2⤵
  PID:3388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6360,i,3452548960142629402,18163683655490079750,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:4544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=6168,i,5190970487041008791,11207582405499602959,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6004 /prefetch:1
  2⤵
  PID:2404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6432,i,4842771968989953912,14429028356771340580,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5544 /prefetch:1
  2⤵
  PID:3900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=5056,i,862607139726589349,3211590123956104319,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:3328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=5920,i,7468765520553586426,7998890958279500192,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6292 /prefetch:1
  2⤵
  PID:1760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=6376,i,2894534184786905580,9626584479279993093,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6340 /prefetch:1
  2⤵
  PID:4656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=4964,i,7593006812056668673,16176011771617414881,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=5108,i,9157821564760538540,12873770020130293937,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6324 /prefetch:1
  2⤵
  PID:464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=4852,i,7460781336430660777,7686790433055680776,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4660 /prefetch:1
  2⤵
  PID:2060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=5820,i,2642461158826132130,15290948620017557398,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5900 /prefetch:1
  2⤵
  PID:1576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=4808,i,1129164302405198067,7204214460126940117,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4664 /prefetch:1
  2⤵
  PID:4164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=3068,i,14311129332403415187,2618152380632591234,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5000 /prefetch:1
  2⤵
  PID:3672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=4892,i,7855601042776558816,10104097370415911403,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4804 /prefetch:1
  2⤵
  PID:3856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=4848,i,3171881448860675222,1402241718183296203,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:3288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=5676,i,6554666897435311112,8615739715948769961,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=240 /prefetch:1
  2⤵
  PID:4220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=5784,i,16301411744566485461,10926659641994590025,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4776 /prefetch:1
  2⤵
  PID:5056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=3196,i,16136759828713673219,10209236425645221838,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4448 /prefetch:1
  2⤵
  PID:3824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=3608,i,17727868596482030533,11705682529096283526,2097152 --field-trial-handle=1900,i,7744331129857442089,4418537381487130531,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5000 /prefetch:1
  2⤵
  PID:956

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1612

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3512

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3488

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 2ff409ad467b2b85ce2fade20c2f27089cda676e48508280252e1c8db99764e3
MD5 f59b25c0a554c8212838ba795bcd8a6d
SHA1 f5d09b57f708730c15825c0eb59665ba4a71b020
SHA512 5330ca919cb6837cce91331068fb7f52f54d911113ee138aa04e3894b3f60051b9fc5472ef83031962d82ac2937a0d1ac9862c1ed70aeff00f6555a5c4905324
TLSH
T129E0AB9AC974AC3729FD1B5800950B06EF1213062A80895F3A3CD20C4FB063A0086C6C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 192B
SHA256 658d315aaf61eee822a80579da379a23cf6924fa705fb4b8c92bed63103ecef3
MD5 5280bbc73affca3fd0545d0d4d01368f
SHA1 56c29886b0c031932617167780fbeb578eed0bbd
SHA512 a6c6102045362c241e8717830ba448db6c37df22a7d1a3a03ed9c09c5764bdb8b099dbe2edaf6325a7594459af11da4c2dd56f8f5a10b1071d1d0a9447f2429a
TLSH
T174C08C402A4E5402CF030CB8B8FF6DD02131DC7BC3122E02A3489E5078B1F418001DC0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 216B
SHA256 4c2058eb8a2140ce18663f9c861247a74fd5f0dfedbfde24a48e210af1bb9aa1
MD5 7a148f49a025f71e14bea7228a341f47
SHA1 41d7549196fee3493cf6280558cda923e1d6305a
SHA512 67c4e2883f2e4bc9808d64db7a5ce7a10317c3f1a1332ff304ac222f03c6204357830fa522a36f24a1a4fc5a5c79cbf3ad9d203eb1f62defee8b9a4ac6a7d261
TLSH
T190D01204224EA506EF0A1C7474FEAEA17131E8ABD7132F16634C6E6178B1A908109494
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 b9ef7c3e9db323a61cd0bb297f9805dfc9e598a3c8a5f7d1c9fa6e393d580a03
MD5 111a9c4106e02a4ed86bf0aa8a8ee478
SHA1 0826ef97e1e0b8d8c79421fa8938b80f6e9ae4fc
SHA512 c6d02363b556292336f98c3e63ff11e29a5caccc7e70376d6730d8557cf249514995d631fd0022e14f98ca286b789a647a4e05fe9b2e66f6e638cdea1d2aeb5f
TLSH
T1C461AFF7D3E8856DC51196F4AB217E1FCE6D0924422C3C6688D4AF5F93E2872D24178E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e02e8c548b843ee82f3ba1ffad570e948ae90b345e504312b84a494fcf929189
MD5 a4d5c09b52c42603cee6005c28d52dea
SHA1 4f84aece4aa257032655f0dfe5c0358c52059f44
SHA512 2c5039d45f3dc0689f971745568b7fc893ba34e0ddb536efd82ea5d0647f1700ae0454e5f4f7129d00e816dc829009c6e510e501ceaf15f88fcaccaf5f589072
TLSH
T131518CF7D3E4866DC51192F4AB217E1FCE2D0A24521C3C6689D4AF5F93E2872D25138E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 0f9ab33afef598bf004e78776d2a9545b0fa3658bff98344585a4d58c3f584d8
MD5 1f51ed2ec6c653d37528c9bc0e14a9fa
SHA1 ffb81ed252689c7d40e14935f2233eda6ff38409
SHA512 a7cff021644f2c9c403e995bcb77939b8de0d7f9dd173e8e329a608308c2a7137400e802d8481c89e7b6a0f0adf174a20578cc13be078501335630f19bb225e3
TLSH
T16051ADF7D3E4866DC91196F4EB116E2FCE7D0924032C3C6689D4AE5B93E2972D24078E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 83a43de8a1bfb706569c16a472c233a97973c3d194ecdf4a4f38bcc438bf1038
MD5 632a5a22db81022709ed56964962ad36
SHA1 ff451fb6240b0765da13e1942a83bb9bf9b949ef
SHA512 60e1568e06be5f5c068c6eb369dfe17566e64ff63831ecea4ea7b2dbedbf055689fb8be6a864acd3b74a728969f9da043176ad73abe95d0d7eed9e74a5db869a
TLSH
T14F51ACF7D3E4866DC91196F4EB116E2FCE790924032C3C66C9D4AE1B93E2972D24078E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 523B
SHA256 543936af98a8953f615b03a8f6cca04af044fbdd1b21dc3fadf88210c08050c5
MD5 f698ddd20a13f7293caef5c3e89510e4
SHA1 bde8f1a0b710bec384fb85ff8363ee9a3103f414
SHA512 bda3eeefd32ea3a722b419ca13956dc905c0595866d068f7beffc39133c9881e884ba543865efc5ff6b99263ea0efd3cefa3acd0cfbf0c51256596836249b82f
TLSH
T1A1F050B7D67A742721FD856B1D05FC09A577743002911CF0CEBA516DF0825E30B42057
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 a16b503dfefebe9dfcb71c0b3f2efee9412bea3f7b4210ea938cc16aabb0f819
MD5 ac0bd7275ee077a2dd66e6e1381adf60
SHA1 ba9f2c21719e35bbd1366f5c87aafbd8f62ed8c5
SHA512 0c13e3ca279bb1152e23fbeff900e6db9fe9945c530b5bf877c5c0bbdc1abd3618cdf506f66f072c70b996a5f60e29ca2c5c53beb8888c3d48c4ddc83e906676
SSDEEP 192:jRmYL9RCOrv7hVAPRp2rW95Hsb+WNn9L0LJy9z2AZEkw0aW8xVyIsnAUgraJ:jRmWbT9gXzrwxec2bUarXe
TLSH
T17852E92EB910757B9CCAD229FD267B57D7F6142121902E84EFFC8A6C15EB6CC2217027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 3e19fcfda224e14472920280e0d0ac4dbb8f5f95f7ca74054c210ecbc1eb01e0
MD5 f2b318e20c231abee8d4e9c2e8ce09c7
SHA1 364debc993c9586968ac6148b3759c126acae9f1
SHA512 fd2328720a5a58621ccfb767cfb63a95a370ea0942718767d5aa5f5efc6f6ebb8952040d05cbdf8cd2576e9dd1a9e63c4cb01b603394b1e599fd37f13bc5b5fa
SSDEEP 192:GRSYL9RCOrv7hhAPRp2rk95Hsb+WNnjhY9z2AZEkw0aW8xVyIsnAUgraJ:GRSWbT98X5rw9q2bUarXe
TLSH
T1BA52D92EB910757B9CCAD229F9267B53D7F6142121D42E84EFFC8A6C15EB6CC2217027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 2dfffc59c1c767e2e3f3dcc74e55261f2201807ea0f371e23d28466a6019ea59
MD5 e34fbda502158190c6c137f795a2e0bb
SHA1 6a882f97267e3f40623c4d674e45f2b5b67b8d3c
SHA512 1e7e4003d567d2793c4bea61231d4c763f15679189af025bc7c51efd92e7e9e487b225492f83815de5fba269159ced28d4a415234cb0e2a3884255cd03f489fb
SSDEEP 192:GREYL9RCOrv7hhAPRp2rm95Hsb+WNnjhY9z21ZEkw0aW9xVyIsnAUgtaJ:GREWbT98Xbrw9q2gUaqX8
TLSH
T1A652D92EB910757B9CCAD229F9267B53D7F6142121942E84EEFC8A6C15DB6CC221702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 df70bb8dfb51030850c63a41d9d7b5b9c5db5abe961db08c8ddc871ba41b13da
MD5 55ea64f972f42bba03866e5e23360b0e
SHA1 2cdc0e3632f5fa02c1943c382e2ef13db7cadc1c
SHA512 f2368bc62f17c60e58e531751812362c6c3649d4792261c4d5637c3aceca8ebde9b8804f12da01c1e0240c5fa95b67c168b04e6a2f285234f316c8582b0849e6
SSDEEP 192:GR7YL9RCOrv7hhAPRp2rQ95Hsb+WNnjhY9z21ZEkw0aW9xVyIsnAUgtaJ:GR7WbT98XFrw9q2gUaqX8
TLSH
T19152D92EB910757B9CCAD229F9267B53D7F6142121942E84EEFC8A6C15DB6CC221702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f1998faa17939f9af52a7283f1ad62b13b8b6218e68646c802584ec13ed72201
MD5 8d87ae077c31cffeb481dc59151f5b60
SHA1 9ec723f8884729cc60ce71e49626281e89f63e67
SHA512 6a132a6affb08384b4b2b05c60ca299ef3d3b214d885f2d1713aed1eac505b626a012cedc1d90745917941329d05b140d63c3616ea7841f93000ff5d5039b8eb
SSDEEP 192:jRmYLlRCWrv7hZcaPRpIrZ95Hsb+WNn9L0LJy9z2cZEkw0aWgxVyIsnAUgraJ:jRmWXT9ZvX+rwxec2HUa9Xe
TLSH
T10E52D82EB910757B9CCAD229F9267B57D7F6142121A02E84EFFC8A6C15DB6CC3217027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 2a08ed4ae51f3d6c3a3a38c0dc582385d20b97b26c150e999defeafb84bd1de2
MD5 27aae99288c8896d9475042591f31da8
SHA1 9b3b743f9d8dc366b430c73f6550f0d58757f95d
SHA512 e4f3887f868835bb13cf16afea3d2a1881f06966f0d2fca6061315ad561887cd05ecbe37bf26cd08c57a698a297a746ce9d8476f69d1bfb9bd9b5075cc52afe4
SSDEEP 192:jRmYLlRC77rv7hZcaPRpIrK95Hsb+WNn9L0LJy9z2cZEkw0aWgxVyIsnAUgraJ:jRmWw7T9ZvX5rwxec2HUa9Xe
TLSH
T17552D82EB910757B9CCAD229F9267B57D7F6142121A02E84EFFC8A6C15DB6CC3217027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 15c062d65b86f5fbe498cdffa61fbdcbb80da2c24886774496a2a18e1a7b8d8a
MD5 cb1e01b0fe1fd48361350b65beb7949f
SHA1 868eed30e42ce3516ecd1344a39b5e93ae32b097
SHA512 b505cc01f72f8bed9b82f90f8df72f8f1f81ca5227c342e922a37e1c4db74de75d80974bff1d214b8d2d11a70397f473a4ac8c081893059988fabaa5a1d369ab
SSDEEP 192:jRmYL9RCWgv7hZcaPRpIrZ95Hsb+WNn9L0LJy9z2cZEkw0aWgxVyIsnAUgraJ:jRmWf89ZvX+rwxec2HUa9Xe
TLSH
T15852E82EB910757B9CCAD229F9267B53D7F6143121A02E84EFFC8A6C15DB6CC2217027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 98cdff650e89e1e34340369c3bcb31c308ea19d0eeecabf5a076245770aa61d0
MD5 a88b5687dbf343a51f0c7545cb159967
SHA1 b3803bd78be5a4a7b8d8da5153de06cecbad0f07
SHA512 51a44adb99575fb0525e6757da83941f951f6858fc001e4f72a5199372466245240db50902a03a5f7b7e27afca919a5311a7a7f3804f1f4637cb2c09be1a1701
SSDEEP 192:jRmYL9RCWrv7hZcaPRpIr895Hsb+WNn9L0LJy9z2cZEkw0aWgxVyIsnAUgraJ:jRmWfT9ZvXLrwxec2HUa9Xe
TLSH
T1A052D82EB910757B9CCAD229F9267B53D7F6147121A02E84EFFC8A6C15DB6CC2217027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f91cfa0d3f8698608adf8481e61a19dbb7a6b81bc9a700b6d920b05a4174f9fc
MD5 cdf5a52b7633521ba2e5ca1b5642c2ad
SHA1 b8098ef96e7e3a78493e8ba392f1cdec33bfcc60
SHA512 df1b9eb68cedc056d9b5d3144d17ce0356d8ec21458bdfc7cff4d6f024f5df17e3387792ed4426c2108ba5dd81c822a7f81b2946c624c1756f8c7ebbc837995f
SSDEEP 192:jRmYLlRCkrv7hZcaPRpIr495Hsb+WNn9L0LJy9z2cZEkw0aWgxVyIsnAUgraJ:jRmWRT9ZvX/rwxec2HUa9Xe
TLSH
T1BD52D82EB910757B9CCAD229F9267B57D7F6142121A02E84EFFC8A6C15DB6CC3217027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 7f2c3bb0b002e4d7d49e8ebd780daefdc42e5000eb8a51c5ee9d65c53ca14658
MD5 238ecb1a3e1c98f2912f099b0b7b8a1c
SHA1 8ef41ba79237b6d6468df95cd855e11fa292bdcc
SHA512 ce27ea08a3f6036dcdccaf5606f131bfeaa96a34cb88aad7fdbbef444d0eb669f860c23142443bbec8334482763511fadcc152f5ae3ac7f75fcb910a49c20877
SSDEEP 384:Kkj+F7KxkXqKf/pUZNCgVLH2HfgsloD7pLuLcSjsNXOD+F+ErU3qsHGZ45hUeHD:Ko+F7KxkXqKf/pUZNCgVLH2HfgsuD7pY
TLSH
T16D72F9677C4C9A3B0F94C6CCEC277B4FADB6024B65E9886542FA581503D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 5240fb6a10800464b06795a95a46999b615d94d7cd2af10bcbcd30f8e82068e0
MD5 406a29e9e273ac1be9fdb2d8708876df
SHA1 521523c80229174e226cc6fffa0505d5a79dec08
SHA512 ad50c8c5541e7637834555eeac2fc8c8862e17f8e110681d50b720a08599dce6efbe9c88b938797af8dc109a46fe6ff6c6d5c2fc817797664afdf247a17aa57c
TLSH
T16AB0124180415111C44212B01152548871586F19970A1B0143E06D62C8265B28415091
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b8db.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58b8db.TMP
Size 96B
SHA256 74bca65f1d912194ce8708aa952f749691aaeee3b919547f707524c352d71ba8
MD5 a5e1c973be39f3329f1b2587abf2fa6c
SHA1 47f78402646d64834bb167a187b42c9091a0bd33
SHA512 ab47ad3491d76a915edc9b58ac190d082125eeed96ef39c7fec963a1c20f6cf10bc14c6d0be0f9935c6eb5eba6a074b25532ae0e1a3b6e274edb29e7352c55a2
TLSH
T123B02200C0033202C80203B0208080C830A0EF2BC30B3222A2E00E22CC20BB300300B2
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 d194a2eb045a7a043a6ba0f3d0beabf8026290b2d52719fd82c0d42c8c6318c0
MD5 c67a4e8b46394e313bd41bf2f11c2a34
SHA1 5f12fa76faaf3d43f629e498c37f5456e1507ad0
SHA512 71e59db37e6a9a297ddf512ded7fea7a59ffd78564b501309afb9835b9db1fc873fd91f854aa11769a6d197a48e273498ec1cba972948115324fb61fc7222a77
SSDEEP 6144:rm6YeHps/4uhJPiYnMm60tjSeqZ/ZLW3ExZ:pTps/4uzznMm60tueqZ/piQZ
TLSH
T13E341233DE867C235E83EBA071130F435EBA48D684B8570DDEEA2F37B51BB814952865
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 a661f91959955c9529ae65e7baa7d3879349e86a0f94e90665753c211cc05a82
MD5 1b3ae8897bc4dfb7995bedadfe6c8861
SHA1 2380f602359854f3a8c6d31344d13d504b0bc1f4
SHA512 f104dc5c3dc32fd720fd11effb9508a5183184792078aaa1e1c594ee47d795f8219606e4684d1f352f287cfa538b5e43c8946e2f7288f86796679c84518c7805
SSDEEP 6144:Xm6YeHps/4uhJPiYnMm60tjSeqZ/ZLW3ExZ:VTps/4uzznMm60tueqZ/piQZ
TLSH
T1F2341233DE867C231E83EB9071130F435EBA48D684B8570DDEEA2F37B51BB914952865
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 977e46833b1410b950e0c9f38f048686b6f7d3a99bd5c11128ae5178dbb4c3e7
MD5 a705b1cb0a74ba8121ae8425645d3be6
SHA1 4bdfa70a887901f3dfec6a42d07dee26b1063fb1
SHA512 be439b30bdfa6f5e2b572092458f5e4b12ff40e4ff8ee06ab63ec696d0d6dc3ec6cf8b5ad32d13cbaf1c4d4e658f4ad32715b78aa4071cf55e4f07fc05e94c8d
SSDEEP 1536:6FyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:Kqfd7NtZL8cHQRZEQ6Sps9
TLSH
T199C30237EBC25F335D82CB64BA534FD6A7B644A99030D301AABD3BFB6C93851644249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 cc89fc656d4d29546bbd2a1d66f55876b73a291ec91633c0442fb488640e09f1
MD5 dce4948d6cf35c8758a3003627ff56c1
SHA1 e8e63dd62a216bff86e202e3c616cc99e66f53e7
SHA512 88e0f5b203b0b7daa3a75bb8a9cde1043bf972c9a7dcadebd402f57a68bce612b677b333729981f675c6af0a0b4fe8925ff59f96a54d6a37f046f70b81f62db7
SSDEEP 6144:r6YeHps/4uhJPiYnMm60tjSeqZ/ZLW3ExZ:uTps/4uzznMm60tueqZ/piQZ
TLSH
T176341233CE8BAD235A87EBA031130A83967A48D480B84749DFEE2F7BB557F850552865
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 d187ff182865ab5cc0c1e6bc26581e548ae5b2b56c9a14a1a470b7a72cfa41b4
MD5 f4b9de1eae550cc8c5bf0dd124f1b18d
SHA1 db95717eaff86a55a82f6e1afad4750e4289f9c4
SHA512 f8108bb0e3b7b11e54720074f7a607bbd444ac009d27e65ea1e35d23b77042bad99970e4417dcb7fa6f53dc20bd331cc28ba4c6bdd6fd6064bdf107e7669c0bd
SSDEEP 6144:o6YeHps/4uhJPiYnMm60tjSeqZ/ZLW3ExZ:zTps/4uzznMm60tueqZ/piQZ
TLSH
T1DA341233CECBBD235A87EBA031130A83967A48D480B84749DFEE2F7BB557F850552865
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download