94291d5690a0ced7fe7da7f380fdbdcbe03cdac8ad4227a037866ba7455eff8b

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/08/2026, 22:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
krypton-0.2.10.jar
Size 263KB
Sample260822-2brphazerd
SHA256 94291d5690a0ced7fe7da7f380fdbdcbe03cdac8ad4227a037866ba7455eff8b
MD5 f804ed489b36dd0b011b92b50e5c2119
SHA1 94ddaeeae6ca7fecc79e54a0aa02a5438a775a99
SHA512 4dcd7228d1890ddfc78c99ff284b45f9cf40aae77ef6359308e26d06fa0d938365255696af4cc12d524c46c4886cdcd19268c165a2bf0a2835202fe857da5cab
SSDEEP 6144:Sj7w1m3bYNkiJow/hdB8VsMfp1pjEcirVUvId7r1HkXRwGe6ZBa37cTs:+73ENJpMXRMRTd7rgRwGe6ZBEcTs
TLSH
T1364412377EABE32EC54B00755B628AE17FB5426C502749AF23540FAE85D029F075FB88
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5004	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134319111446573059"	chrome.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{5E427A43-5BD9-41D5-97F1-FEA0DBFD56DF}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe
Token: SeShutdownPrivilege	4852	chrome.exe
Token: SeCreatePagefilePrivilege	4852	chrome.exe

Suspicious use of FindShellTrayWindow 48 IoCs

pid	Process
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe
4852	chrome.exe

Suspicious use of WriteProcessMemory 39 IoCs

description	pid	Process	procid_target
PID 4852 wrote to memory of 2096	4852	chrome.exe	105
PID 4852 wrote to memory of 4256	4852	chrome.exe	106
PID 4852 wrote to memory of 4256	4852	chrome.exe	106
PID 4852 wrote to memory of 5004	4852	chrome.exe	107
PID 4852 wrote to memory of 1192	4852	chrome.exe	108
PID 4852 wrote to memory of 1192	4852	chrome.exe	108
PID 4852 wrote to memory of 3868	4852	chrome.exe	110
PID 4852 wrote to memory of 3868	4852	chrome.exe	110
PID 4852 wrote to memory of 2428	4852	chrome.exe	111
PID 4852 wrote to memory of 2428	4852	chrome.exe	111
PID 4852 wrote to memory of 3260	4852	chrome.exe	112
PID 4852 wrote to memory of 3260	4852	chrome.exe	112
PID 4852 wrote to memory of 4188	4852	chrome.exe	113
PID 4852 wrote to memory of 4188	4852	chrome.exe	113
PID 4852 wrote to memory of 3896	4852	chrome.exe	115
PID 4852 wrote to memory of 2784	4852	chrome.exe	117
PID 4852 wrote to memory of 2784	4852	chrome.exe	117
PID 4852 wrote to memory of 4160	4852	chrome.exe	118
PID 4852 wrote to memory of 4160	4852	chrome.exe	118
PID 4852 wrote to memory of 4644	4852	chrome.exe	119
PID 4852 wrote to memory of 4644	4852	chrome.exe	119
PID 4852 wrote to memory of 648	4852	chrome.exe	120
PID 4852 wrote to memory of 648	4852	chrome.exe	120
PID 4852 wrote to memory of 1236	4852	chrome.exe	121
PID 4852 wrote to memory of 1236	4852	chrome.exe	121
PID 4852 wrote to memory of 4680	4852	chrome.exe	122
PID 4852 wrote to memory of 884	4852	chrome.exe	123
PID 4852 wrote to memory of 4680	4852	chrome.exe	122
PID 4852 wrote to memory of 4148	4852	chrome.exe	124
PID 4852 wrote to memory of 4408	4852	chrome.exe	125
PID 4852 wrote to memory of 2236	4852	chrome.exe	126
PID 4852 wrote to memory of 3328	4852	chrome.exe	128
PID 4852 wrote to memory of 3328	4852	chrome.exe	128
PID 4852 wrote to memory of 3736	4852	chrome.exe	129
PID 4852 wrote to memory of 3920	4852	chrome.exe	130
PID 4852 wrote to memory of 376	4852	chrome.exe	131
PID 4852 wrote to memory of 376	4852	chrome.exe	131
PID 4852 wrote to memory of 452	4852	chrome.exe	132
PID 4852 wrote to memory of 452	4852	chrome.exe	132

C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
java -jar C:\Users\Admin\AppData\Local\Temp\krypton-0.2.10.jar
1⤵
PID:2112

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3416

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffa98a2c728,0x7ffa98a2c734,0x7ffa98a2c740
  2⤵
  PID:2096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,6788982030363101468,1100837674116683982,262144 --field-trial-handle=1924,i,17173731523296458447,10542926505435234273,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1908 /prefetch:2
  2⤵
  PID:4256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,6242614885398421009,14649959465546445345,524288 --field-trial-handle=1924,i,17173731523296458447,10542926505435234273,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2380,i,9774846652665131691,14930183646790711210,524288 --field-trial-handle=1924,i,17173731523296458447,10542926505435234273,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2444 /prefetch:8
  2⤵
  PID:1192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3244,i,6848176496421422096,12924128587193537786,2097152 --field-trial-handle=1924,i,17173731523296458447,10542926505435234273,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:3868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3340,i,8741836894485550206,13987394824603689893,2097152 --field-trial-handle=1924,i,17173731523296458447,10542926505435234273,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3384 /prefetch:1
  2⤵
  PID:2428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4484,i,18132619296226689059,15741454949242084339,2097152 --field-trial-handle=1924,i,17173731523296458447,10542926505435234273,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3944 /prefetch:2
  2⤵
  PID:3260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4696,i,1489859324178212539,11852783644814170388,2097152 --field-trial-handle=1924,i,17173731523296458447,10542926505435234273,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4704 /prefetch:1
  2⤵
  PID:4188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5484,i,3136533756717101656,4711125083067186839,524288 --field-trial-handle=1924,i,17173731523296458447,10542926505435234273,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5500 /prefetch:8
  2⤵
  PID:3896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5772,i,1883216242242576279,14345028319375971726,2097152 --field-trial-handle=1924,i,17173731523296458447,10542926505435234273,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5528 /prefetch:1
  2⤵
  PID:2784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3392,i,17820772608212368661,17401644592576648122,2097152 --field-trial-handle=1924,i,17173731523296458447,10542926505435234273,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:4160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3544,i,6532590250328213042,3231701330814692060,2097152 --field-trial-handle=1924,i,17173731523296458447,10542926505435234273,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5940 /prefetch:1
  2⤵
  PID:4644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5836,i,12756462516317897428,1129900075949904051,2097152 --field-trial-handle=1924,i,17173731523296458447,10542926505435234273,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5812 /prefetch:1
  2⤵
  PID:648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6096,i,4467129078773655942,8451003163679197952,2097152 --field-trial-handle=1924,i,17173731523296458447,10542926505435234273,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6128 /prefetch:1
  2⤵
  PID:1236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3568,i,14271519534837026016,3114144136675072876,524288 --field-trial-handle=1924,i,17173731523296458447,10542926505435234273,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5732 /prefetch:8
  2⤵
  PID:4680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5912,i,2373318864789914533,3553930797651872221,524288 --field-trial-handle=1924,i,17173731523296458447,10542926505435234273,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  - Modifies registry class
  PID:884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6152,i,5170848087273338996,12245361738631421105,524288 --field-trial-handle=1924,i,17173731523296458447,10542926505435234273,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=240 /prefetch:8
  2⤵
  PID:4148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6156,i,3821341420411517637,1001197547498340297,524288 --field-trial-handle=1924,i,17173731523296458447,10542926505435234273,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6212 /prefetch:8
  2⤵
  PID:4408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6164,i,6443206984992080052,2843685276653357490,524288 --field-trial-handle=1924,i,17173731523296458447,10542926505435234273,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6256 /prefetch:8
  2⤵
  PID:2236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=4536,i,4892439919131181345,503555804013147654,2097152 --field-trial-handle=1924,i,17173731523296458447,10542926505435234273,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3948 /prefetch:1
  2⤵
  PID:3328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5808,i,18267515126471500685,3625224928967059662,524288 --field-trial-handle=1924,i,17173731523296458447,10542926505435234273,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4800 /prefetch:8
  2⤵
  PID:3736
- C:\Program Files\Java\jre-1.8\bin\javaw.exe
  "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\Downloads\KryptonClient (1).jar"
  2⤵
  PID:3920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=3344,i,15093542366507004888,4535654627800455715,2097152 --field-trial-handle=1924,i,17173731523296458447,10542926505435234273,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5776 /prefetch:1
  2⤵
  PID:376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6444,i,934677615371716637,16645794870068962124,2097152 --field-trial-handle=1924,i,17173731523296458447,10542926505435234273,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6328 /prefetch:1
  2⤵
  PID:452

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4972

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3388

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3903daac9bc4a3b7.timestamp

Path C:\ProgramData\Oracle\Java\.oracle_jre_usage\3903daac9bc4a3b7.timestamp
Size 46B
SHA256 8985f134349f0f3dfbc443e602d1f316361396e8da2e6ccdc2894216b4d1293a
MD5 863b68ecddb5129def8ed6a22f1231a0
SHA1 8ff53d16c2fa68ae1435791e74ec0c7d3c2aea45
SHA512 78586289dc87b256c1e07e9c8916a45a644556496623e3f3abb1684a8064c0d73bfcfe6e5bcc4a679ecafc42da65fa13f67e8ce26ee1c81ee9d535c5e8e170d5
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 363c054c9f916ad7526649e351c7dc38808dd60ccd32840e3286e36123470d8e
MD5 61068c43dcb0f161d7ed841696db8c1c
SHA1 cc3b1496d6859d39c5416ca57015996d2585cad5
SHA512 dc9f120038107ec1b3a507f6f8c4664ff6394f7666f61474d39e34970316497fc8d2e2c8af449cbce2e5b948863a3dfde989c287494541ae57abb1afc10ca47b
TLSH
T1CDE02BA9C922EC371CF91718A4658705E641635B2A80D84F373D810C4FB473B858AC5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008
Size 117KB
SHA256 c573a1adb1e5d3fc3c9c56a2d7ef6b7d2f4415e7be8f436169be0391e28e4c49
MD5 dc66381c5fae7e0183756aaa8f9dca4c
SHA1 7ce50689233d4b8d6f1f3ea5a5f23c84c0d2d5e5
SHA512 7f4beb4d5f86011555c7ec8211b950da34e81c5bf83e6bba4ac52298f35e9fb29e68a943da3aadf304ed219810bd421a1852b16665c93a050a211bb6b1c7a17f
SSDEEP 3072:Um6wBFZofiWQf6g19akgXdoE+njIGa+biGaynUCEw0ZR/ltZfOiOY:8wrZga9aklE+njI6bpaynUCERN3fOiOY
TLSH
T16BC3121B0EBCDC6460D19C08990551ED3C4A8EF281BE6BDEBC2CE3636E47562E21E5F5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000018

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000018
Size 165KB
SHA256 8200b78c7e364fcb96cdd00dea617b8858c73aaaa8f5648199ecb29f7fecb8a9
MD5 89aa44290a18fd6fbef881bd77cb4a7d
SHA1 311586ab1876d7695184ca02e3fe95ed1099616e
SHA512 f0bf7329a3ef803a545ed975aad114f06e3bbeb93a350f5f72aedca1757e57e8878b33110c476d6f728d3c86d7d78a683572a7f751e42ac73f9b36fbfc33f8e8
SSDEEP 3072:9rOiD8Pu08SV5fxqV2zX083vcQsjyYZFyybGk0uLIE8ZuI9vsOPgZu5xDgJn8:JjGfx1X/9IZFyIGTTE2HN9PgALR
TLSH
T1CCF312A84BA556AEFCA260774E331FC42768B39D5224DF6C221BCB0857213FA1D03D67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000022

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000022
Size 2.7MB
SHA256 7e26baf048540004b0348368a43d358059cdfacd03a0bc770480cbb5456a7b7c
MD5 3edd63b1e76ecd7e61cdcd9b17989db3
SHA1 6aaa9ac51b47b02b0c137b94724c652ee422465f
SHA512 748dd425efbf43f3a48832b8d3d41368841cb1fab34b8d5774069f340ae7572caa4268bf00b2bdb10f4779610b3b51f3c8276846804d15567a1cd5facca8cf9c
SSDEEP 49152:tPu/FhV8k5GfFQITikp1UOxw1IFPCzlO4XlHEn0uZpS9aRhwzzPpRYAlVTLmjy:hu/FhVDY8kp/iIJChOySv09aRhMPpiYt
TLSH
T17ED53356E4D8B104DF41EAEC2EBA09FA651838A26719E62F65F10B5FCDCFF093344186
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 8b7305afcb0e8ffd2c291743d9c82aa85aedfcfeb75213befdd01d7cf3949afa
MD5 f3c91791192a730305b94f61f33240d6
SHA1 7bebf7a11ba28a93bf6c1515a719f24f719a3183
SHA512 fbb58e73a1b78299d6e15509c4bec4baad633dc2c864f1c8282d13ba6d1c1f82cad7e44a7cee970a3d75494cddacb12d4cbb7cdb8109f192edcf7db4101f16be
TLSH
T15621DC47528B0507D3C508327CE8C539BD309ABDE063064D025169FA37ABB747F7724A
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 815573dc90b8b7b1ddc0516e11d6930fbba39435c83bcf3a5658c9961e82b077
MD5 1f18ff541bd3d512b5c401bad4849812
SHA1 a04a07fa23c5f27bc949d0bd133d1f055e7d7ed2
SHA512 2a1e0cb6b2c0e8a64736641cfe6def0484b82b69d2e904ff2f15a58ba2ff6b83a768060eff3d37ac12bfdabe0576111ee0fa435963f978373abb00730c4a37c1
SSDEEP 192:Dxqd6TqUjcJwCRaaVVtV2xEA6CFVOIUI+IUxaPkvSqfPqeNPhsTUG9Ij:Dxqd6TqUjcJwCRaaVVtV2xEA6CFVOIUR
TLSH
T1E712DFFBC3E8C52DC90156F4AB156F1FCE2A0A64431C3D26C8E8AF5B93E2871D25164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 499107fa0dec92c81577b462feace4f328305c7d26e221148b509a80334e6c88
MD5 d0c5bba41fe298771b26a6d57a116c99
SHA1 6b937874ad8397691afd486453639194e75d6a71
SHA512 1c664d710a29439656fd7b1e58312c0063563711266ee960d914411c4f7324e19b466df52ddd923770acfe3d0a4421f329e39937fa6916b8bee92f6e59f6f133
SSDEEP 192:SRLghzShLx3Dv7MF+pAPRp2S9HHsb+WNnA/03D26ukwoaVyIsnAUgtaJ:SRLghg7goUX91wY0T26u78
TLSH
T19642D62EAE15697B6CCBD229FD127B57D7F5103521D01E84EAFC8A2C15E76CC221B01B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 a5c1e30e23b09259a09cea4e04f6bceb00bb10729d94dccdfce8ba702d8efaa2
MD5 532dc0443c819813f7847e5ca8e7dc35
SHA1 1eb8c31619268ec27fe14fe3d9f2f9fec60ec1a9
SHA512 cbe929720443c9c56253646288b1bda9a300311e40496bdd7e18d30572e7aa383c9e663d27c66c4ade65faaa1ab4f9ad337e193e6e589d407b16f49438e9cb06
SSDEEP 192:SRLIcBzhzShLx3Dv7HF+pAPRp2zXBx+UR9HHsb+WNbuhQA/4et2iD26ukwoeVyI6:SRLImzhg7joUXisI1wbGj2026u3e
TLSH
T18C52D86EAE20297B5CDBD229FD11BB57D3F5103561D01E80EAFD892C15E7ACC221B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 2547f1b4ded148a2c1463e20e52e2cd7f895003c63beff95cfffc3d1227b85d8
MD5 8ea532d0f75c3fa84714c70e2f98a4bc
SHA1 48a01d7a6914a6038c9d65dcc710357232b53aa7
SHA512 169b57901ee1e16369bf1a465eead67465a089664a66b767d18571777058bbfc4f6df57fd804d24deb89ef7fd95b624a014d07cb60d8682b43703ad276a8b5a1
SSDEEP 192:SRLIcBzRzShLx3Dv7HF+pAPRp2zXBx+UR9HHsb+WNbuhQA/4et2iD26ukwoeVyI6:SRLImzRg7joUXisI1wbGj2026u3e
TLSH
T13152D86EAE20297B5CDBD229FD11BB57D3F5103661D01E80EAFD892C15E7ACC221B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 a38a30d7fc6f06004681dff3799ce090d037bbef1386f4013f86c99bc7488949
MD5 303c6d9e35050f31eec74d3477f84496
SHA1 aac897f6064cb11e05830c3ab6ce4e89fa8ef593
SHA512 8aac2bc4df2acad4e457675974144ab5200396ade75e5b5006f78016534edcf05a1dc2008d564d4d72990d28db19b44f1ca575ebeb043202e055b43137dd1388
SSDEEP 192:SRLIcBzhzShLx3Dv7MF+pAPRp2z45xY9HHsb+WNGMA/4et2hD26ukwoaVyIsnAU/:SRLImzhg7goUXp+1w0j2J26u78
TLSH
T1BD52D76EAE24697B5CCBD229FD12BB57D3F5103621D01E80EAFD892C14E76CC221B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 96eb86b0f82378b9cca055845b528010ef195635f60d68aed3a7364fbc97e30a
MD5 d1472d308b10ea393fa37eeeac8d86eb
SHA1 f8a994bad1f2c8193de33f8091eb38e5387222d9
SHA512 48889d985506fa47347dcc8aaf5f24c6cf4de1e4d36f34c127cea1e8f63ab1828985f16bfe16c8cf4d692a6353fbead865dd4dfc5e1b8d82d611f709a15c489f
SSDEEP 192:SRLIcB7RzShLx4Dv7HF+psPRp931G+1Xb6x+UR9HHsb+WNbulCF5A/4ethDml2z3:SRLIm7Rz7joQXwsI1wb3sjhQ2X26uze
TLSH
T14962C66EAD2029779CDBD229F911BB5BD3F5203661D01E81EAFD8D2C15E76CC220B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 64b6c18794313976379d6c186e34ea9d6105810c82b4c959efecc018950322f5
MD5 dfdbca8eae40c2006b1e162f9fee60dc
SHA1 07388c53c7fc04a4039d58c3fe75f95444dfa78c
SHA512 9fb030ec38c1349a580c8a39016578a13c78fda28cb2b1cb0d21158970d681b20c9c5cff6ba05a1b2f52e542cc9a4e03a9913173075c7d3311f827ea78308495
SSDEEP 192:SRLIcB7RzShLx3Dv7HF+psPRp9zXbjx+UR9HHsb+WNbulCF5A/4ethDml2zD26uS:SRLIm7Rg7joQX1sI1wb3sjhQ2X26uze
TLSH
T1EC62D66EAD20297B5CDBD229F811BB57D3F5203561D01E85EAFD8D2C14E7ACC221B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 34d3b150d9ebc3413240a436dcd8cc4d2da0e46d00a681d2118263aea9d32f3e
MD5 73285efb9f7ee0bd384426865ccccf8e
SHA1 51903f2b7a36fa90857257254c2bebdfe5da7eef
SHA512 e9bab3e8a04453bd7ca516137298f57170d38058ccd5df170108532fdb6eefb2d5ae94de47967a5242cb07be597050bef4f69d7f740877c626e131f01424e28d
SSDEEP 384:TRjPq7KxkXqKf/pUZNCgVLH2HfgslT37pLuLcSjFgXODPO+ErU3voHGjBm2oR0h9:TxPq7KxkXqKf/pUZNCgVLH2HfgsV37pM
TLSH
T1287219676C4C8E7B0F94CACCDC167F4F9DB5025B65EA886482FA582903D5ADF01061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 b5f80a93cd0629c822b4138631d899db8cf4d1ead5bbb00d1cbef3997d629086
MD5 56add4dd880ff681a28e47b206d18be1
SHA1 72bf9f765426119f888a4c12e2643444b2136744
SHA512 3610e68b5c43aa6693cfa76948096ba651b11e679fdab55c0f288f9fe13be6e6212ec06b57826fa8181d931aa3ad6d01a0d5ee7c546605301c896ced27702313
TLSH
T165B0120484035101C04203B4154614C8B3187F10A60E270253E07D2FC829161C555150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591999.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe591999.TMP
Size 96B
SHA256 7b9d86de77649ef2a6b8f8eb4677fea91855cbdaf348d974687c9fcdc47fa998
MD5 07369ac8790116ddbd7879a927423693
SHA1 758989b805d9b7b24682b717fe45e596869ff71d
SHA512 2e1e4cd97fe5c7ba2bcbb90d91eb805774fea387c211a8c3ae101dce62975139e514540431b95d132d1a22d876f3e823597069f057acd5eefb0af59cdc7eff63
TLSH
T16EB00259D1067262C44647B0259E96E87260DF26C6035322A3F02A7EED29672993D161
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 7b1c4d750d2fd79cf2cf0c3608f76c21f6d37a269a0357a89602de2b9e69b5e8
MD5 2994ccdcbe4d18fabd6db9175c8d0412
SHA1 55fd8bedf45e9f3f1256c9e9d113928cecd4c162
SHA512 78ad28202571b812d67d6e644d67f92bd4d4ae7f0ae16ce68fa2b055619c33f1812cdc30071d6314d492d43e046727fb550551a9bbf398cb7f9aad0fb2b1478c
TLSH
T139B0022842446073C50413F179F31194B7E01D6027579732C0F26555B5152E1416AA15
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 3a278e02c7aa56eb09fe288311b381d35214e8278687ec1b529dddee08b49b5f
MD5 36a1a05d93de0b576bb7f3da8d6c5f9d
SHA1 c6f6abd1895c32d3f66721883311280086e7cd11
SHA512 e7a3123c1eed1bf5946c3660eab1f2a16371086de9eaf0698a0b9921a8f70c3e2f0bd3d908e8e67b8ca183a6f39f4272b4525b413881f47ac54bd2b60901470e
SSDEEP 6144:FH5PoycD6S3l/31Xksp91x5m7Rkm1tYpBeh2BAo6:FHhoy5s1Xke1a9oBGcAo6
TLSH
T1A03423163D74EE3A4E6BE72D808F180F0DB38452C824FDBA8ED69F4871D65D80716671
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 d9ee04b57fb02a4ae33e452ad79b45f243ea82c6307fe607cf88a3b661b7998e
MD5 6a688a3c4be6ff34dbca32143e76e07e
SHA1 f7ccae22a21b4cf0d8b8316d7bdabf2c36ff7e43
SHA512 7577ec4883a2c77d236fb8221da7f87212a8c13de13bd49a176515d02cd6ef9c9c987dd3b460c1ed4cedcd5b3e45249bc139b548b776eb9c08b2687af308a774
SSDEEP 6144:MH5PoycD6S3l/31Xksp91x5m7Rkm1tYpBeh2BAo6:MHhoy5s1Xke1a9oBGcAo6
TLSH
T1393423162D74EE3A4E6BE72D808F180F0DB38452C924F9BA8ED69F4872D66D80716671
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 2b811d668d301ee78a0555d8c71d097cb175f5a03cc9a29c8ebf7db334c6a476
MD5 f419d5119129035af54ac0859e96a609
SHA1 46e59b4afefc5bb36c63301c8b33ce3dfb92559c
SHA512 2bb0c5f1c9dad5008fe7bdab0d679125fb64ad7ac3e673c7e413d199855f7cbd4ea1473083a0842e95ce2752e89f76006e02114b1a56940f9f5a4c4664aaec0d
SSDEEP 6144:FZj5PoycD6S3l/31Xksp91x5m7Rkm1tYpBeh2BAo6:Fdhoy5s1Xke1a9oBGcAo6
TLSH
T19A3412363C74ED3A4E6BEB1D804F240F0DF3C856C924EDBA9DD9AE44B1DA5D80A16670
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 b362ebb7cec7b5baa6b89bea8fdf14e00a1fb79a342856e8ed3dad867f1962e2
MD5 765c10ccda5737b8abe3432055b8cf91
SHA1 ccc9ffe7606e15b3606c18e87a3275aab312d129
SHA512 3f83dad43412c90144605493f6dfb1969b5dba23cffddd294281bc85750e833a8af1a08fd74a3c3fa8d7f343feb8ad9017ccc523bd67d6b3839d4fbdd9aa54b8
SSDEEP 3072:/jGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:/am7Rkm1tYpBeh2BAoM
TLSH
T13AC312275E75E9375879BB0EB08E0B1F1EF14AA6D830DA92C8D86B0467F97CC1A05D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2112-12-0x0000026407760000-0x00000264079D0000-memory.dmp

Download

memory/2112-2-0x0000026407760000-0x00000264079D0000-memory.dmp

Download

memory/2112-11-0x0000026407740000-0x0000026407741000-memory.dmp

Download

memory/3920-361-0x000002645C380000-0x000002645C381000-memory.dmp

Download

memory/3920-364-0x000002645C380000-0x000002645C381000-memory.dmp

Download