hxxps://www[.]mediafire[.]com/file/4ma6ntxdqkdwacq/TheChoicerVoicer+0[.]5[.]1+(Windows)[.]zip/file

Analysis

user interaction
yes
max time kernel
110s
max time network
183s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/08/2026, 14:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.mediafire.com/file/4ma6ntxdqkdwacq/TheChoicerVoicer+0.5.1+(Windows).zip/file
Sample260822-rhd2wavfpc

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5028	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134318815281366293"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings	TheChoicerVoicer_0-5-1 stable.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 17 IoCs

pid	Process
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe
Token: SeShutdownPrivilege	1380	chrome.exe
Token: SeCreatePagefilePrivilege	1380	chrome.exe

Suspicious use of FindShellTrayWindow 55 IoCs

pid	Process
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1264	TheChoicerVoicer_0-5-1 stable.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe
1380	chrome.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1264	TheChoicerVoicer_0-5-1 stable.exe
1264	TheChoicerVoicer_0-5-1 stable.exe

Suspicious use of WriteProcessMemory 45 IoCs

description	pid	Process	procid_target
PID 1380 wrote to memory of 2396	1380	chrome.exe	84
PID 1380 wrote to memory of 1172	1380	chrome.exe	85
PID 1380 wrote to memory of 1172	1380	chrome.exe	85
PID 1380 wrote to memory of 5028	1380	chrome.exe	86
PID 1380 wrote to memory of 392	1380	chrome.exe	87
PID 1380 wrote to memory of 392	1380	chrome.exe	87
PID 1380 wrote to memory of 5004	1380	chrome.exe	89
PID 1380 wrote to memory of 2792	1380	chrome.exe	90
PID 1380 wrote to memory of 5004	1380	chrome.exe	89
PID 1380 wrote to memory of 2792	1380	chrome.exe	90
PID 1380 wrote to memory of 404	1380	chrome.exe	91
PID 1380 wrote to memory of 404	1380	chrome.exe	91
PID 1380 wrote to memory of 2688	1380	chrome.exe	92
PID 1380 wrote to memory of 2688	1380	chrome.exe	92
PID 1380 wrote to memory of 516	1380	chrome.exe	93
PID 1380 wrote to memory of 516	1380	chrome.exe	93
PID 1380 wrote to memory of 976	1380	chrome.exe	94
PID 1380 wrote to memory of 976	1380	chrome.exe	94
PID 1380 wrote to memory of 3520	1380	chrome.exe	105
PID 1380 wrote to memory of 3520	1380	chrome.exe	105
PID 1380 wrote to memory of 4860	1380	chrome.exe	109
PID 1380 wrote to memory of 4356	1380	chrome.exe	110
PID 1380 wrote to memory of 4356	1380	chrome.exe	110
PID 1380 wrote to memory of 4944	1380	chrome.exe	111
PID 1380 wrote to memory of 1136	1380	chrome.exe	112
PID 1380 wrote to memory of 4288	1380	chrome.exe	113
PID 1380 wrote to memory of 2708	1380	chrome.exe	117
PID 1380 wrote to memory of 2708	1380	chrome.exe	117
PID 1380 wrote to memory of 4524	1380	chrome.exe	118
PID 1380 wrote to memory of 2676	1380	chrome.exe	119
PID 1380 wrote to memory of 2676	1380	chrome.exe	119
PID 1380 wrote to memory of 1680	1380	chrome.exe	120
PID 1380 wrote to memory of 1680	1380	chrome.exe	120
PID 1380 wrote to memory of 4944	1380	chrome.exe	121
PID 1380 wrote to memory of 4944	1380	chrome.exe	121
PID 1380 wrote to memory of 2688	1380	chrome.exe	122
PID 1380 wrote to memory of 2688	1380	chrome.exe	122
PID 1380 wrote to memory of 3276	1380	chrome.exe	123
PID 1380 wrote to memory of 3276	1380	chrome.exe	123
PID 1380 wrote to memory of 4720	1380	chrome.exe	124
PID 1380 wrote to memory of 4720	1380	chrome.exe	124
PID 1380 wrote to memory of 2208	1380	chrome.exe	125
PID 1380 wrote to memory of 2208	1380	chrome.exe	125
PID 1380 wrote to memory of 4808	1380	chrome.exe	126
PID 1380 wrote to memory of 4808	1380	chrome.exe	126

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.mediafire.com/file/4ma6ntxdqkdwacq/TheChoicerVoicer+0.5.1+(Windows).zip/file
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffc388ac728,0x7ffc388ac734,0x7ffc388ac740
  2⤵
  PID:2396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1632,i,16670744866024108675,6726427684790893238,262144 --field-trial-handle=1976,i,5467471196543481292,15833665164090074893,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1972 /prefetch:2
  2⤵
  PID:1172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,8621660599000902572,13302040260048650467,524288 --field-trial-handle=1976,i,5467471196543481292,15833665164090074893,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2376,i,10418999069859946758,9043094529918990992,524288 --field-trial-handle=1976,i,5467471196543481292,15833665164090074893,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2544 /prefetch:8
  2⤵
  PID:392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3224,i,14875706536014320963,17304145107403154662,2097152 --field-trial-handle=1976,i,5467471196543481292,15833665164090074893,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3236,i,5139408990733103033,307671396154397419,2097152 --field-trial-handle=1976,i,5467471196543481292,15833665164090074893,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:2792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4316,i,16260838234915009843,6619477249628628423,2097152 --field-trial-handle=1976,i,5467471196543481292,15833665164090074893,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4440 /prefetch:2
  2⤵
  PID:404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4740,i,8761822001618245874,9439609553213111160,2097152 --field-trial-handle=1976,i,5467471196543481292,15833665164090074893,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4708 /prefetch:1
  2⤵
  PID:2688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5140,i,895379889950106806,6265249358012144935,2097152 --field-trial-handle=1976,i,5467471196543481292,15833665164090074893,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5144 /prefetch:1
  2⤵
  PID:516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4992,i,14039975547108385793,5205551739388640761,2097152 --field-trial-handle=1976,i,5467471196543481292,15833665164090074893,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4940 /prefetch:1
  2⤵
  PID:976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5276,i,18389864978454299147,5998933401022536720,2097152 --field-trial-handle=1976,i,5467471196543481292,15833665164090074893,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5768 /prefetch:1
  2⤵
  PID:3520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6864,i,11901247208472233974,15474585666022094087,524288 --field-trial-handle=1976,i,5467471196543481292,15833665164090074893,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6872 /prefetch:8
  2⤵
  PID:4860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3952,i,17797436850309454057,4189763378605446402,2097152 --field-trial-handle=1976,i,5467471196543481292,15833665164090074893,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4832 /prefetch:1
  2⤵
  PID:4356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=7056,i,3085606379653299993,15982995954644514721,524288 --field-trial-handle=1976,i,5467471196543481292,15833665164090074893,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7020 /prefetch:8
  2⤵
  PID:4944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6984,i,3398323122007452135,8692192434089390128,524288 --field-trial-handle=1976,i,5467471196543481292,15833665164090074893,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6996 /prefetch:8
  2⤵
  PID:1136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6992,i,17344868987212195917,10778030919146086952,524288 --field-trial-handle=1976,i,5467471196543481292,15833665164090074893,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7016 /prefetch:8
  2⤵
  PID:4288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=7080,i,1690707943690111137,5172003521210521641,2097152 --field-trial-handle=1976,i,5467471196543481292,15833665164090074893,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7044 /prefetch:1
  2⤵
  PID:2708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6984,i,17098885924285293778,17932537477164604518,524288 --field-trial-handle=1976,i,5467471196543481292,15833665164090074893,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7100 /prefetch:8
  2⤵
  PID:4524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=7076,i,605937555824459498,801784258451398216,2097152 --field-trial-handle=1976,i,5467471196543481292,15833665164090074893,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6988 /prefetch:1
  2⤵
  PID:2676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=7020,i,5667015736017255092,14160572159693886096,2097152 --field-trial-handle=1976,i,5467471196543481292,15833665164090074893,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4428 /prefetch:1
  2⤵
  PID:1680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=4848,i,13488411490218257607,11076827294336979658,2097152 --field-trial-handle=1976,i,5467471196543481292,15833665164090074893,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5540 /prefetch:1
  2⤵
  PID:4944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5148,i,16911061099588660956,14994207580755569574,2097152 --field-trial-handle=1976,i,5467471196543481292,15833665164090074893,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5548 /prefetch:1
  2⤵
  PID:2688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5204,i,4818668890526655529,17419217582863292093,2097152 --field-trial-handle=1976,i,5467471196543481292,15833665164090074893,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5224 /prefetch:1
  2⤵
  PID:3276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=7196,i,5900204660801552002,5916776256882192636,2097152 --field-trial-handle=1976,i,5467471196543481292,15833665164090074893,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7208 /prefetch:1
  2⤵
  PID:4720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=7372,i,12654164397976384222,5690119114911564113,2097152 --field-trial-handle=1976,i,5467471196543481292,15833665164090074893,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7344 /prefetch:1
  2⤵
  PID:2208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=7528,i,13629037372967938568,14560616322788993070,2097152 --field-trial-handle=1976,i,5467471196543481292,15833665164090074893,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7504 /prefetch:1
  2⤵
  PID:4808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6016,i,18321597113575553846,3939123515482706666,262144 --field-trial-handle=1976,i,5467471196543481292,15833665164090074893,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6028 /prefetch:8
  2⤵
  PID:4508

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2608

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3136

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1264

C:\Users\Admin\Downloads\TheChoicerVoicer 0.5.1 (Windows)\TheChoicerVoicer_0-5-1 stable.exe
"C:\Users\Admin\Downloads\TheChoicerVoicer 0.5.1 (Windows)\TheChoicerVoicer_0-5-1 stable.exe"
1⤵
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:1264

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 182dda8e2e900d9aaf7a22c9d02e5c0485786689f5f760c640179214cfc5bfd4
MD5 e4a3bd0c16ff77300eb7fa3bd65cda14
SHA1 c2ff474151739106ab1a8ff24e0b12d1adb987d7
SHA512 ff5cf51780f8d9a5801549459a7f5e1787a15225724226d22cb8f358078b2db0897c82cd57cde399737a8459e462caf19af5499a84caa321e2b38284f0d3bf80
TLSH
T1A6E02B69C922AC3B18FD1718A4654B15E64153172A81DC4F3B3D500C4FB5B7A4196C5C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 432B
SHA256 d12b6d1600b072ddfe43ef4a8dcaa7b68b015ec082576d6c20f41443390e9fb3
MD5 45c2068cf4b57498fe83ed31b4e65aa3
SHA1 2c313f5faf8d03815b5ace1f59add58bc267636e
SHA512 812da6428017e1b33d29307f7ab60b432f8f4b09b529f92183070e2006c04d8fb5c6426b7da341ccaafa464dce924e935b843d40c31789f0d95d7fc0699c2453
TLSH
T1B6E08C4161AD2090DF4D1E7E2AEB6C237130563C4163EF62438451F1C863FDDC12798D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 495c1682acee9ca4f49fdfbba7fb7b6802a5631ba662265e9eaa041971fdae36
MD5 1577448a2adf1167e10b1b802ceeb461
SHA1 c314430280f86e10d837ec08e7a4c02b39cc009a
SHA512 d68304c362c2d1e64e62771e810f5d236437b3945c7d200c740d9e74a43e6e324c62e50017be45d07ef93fa7ad702ca003fee3a7200a7b10d1a18a2505646edd
TLSH
T197418832268D1850FB892F7ED9DB9D073171A43C80A7CF967316A1F098A3B9DA11660C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 28KB
SHA256 6eafdb3b7248dad8b9af756f7d684ffadd374a37869117213db83df05078b853
MD5 5848b22049b9af30b5e23239ccf63b1b
SHA1 02a0add9f4d32bad73d666071c677f34a451a2be
SHA512 aa18b0560ec123be2d8e7c6365e2f6a1184c67583393633023777a801cdced425b4cc69dd807deac5d56a9a9f4d586b5f997d71edd4ed6e432558a990bc512b1
SSDEEP 384:DAiwbIXXue0G2mwHWWeySBeszu+HT6/iJirRaaIEd16N4Th4Vbx5YKYvWsYXvLjo:dzQReytSDOtAfbAYSsG50Q
TLSH
T175D287F783E5D52E89015AF85A14AE1BCF1C0729432C3C2689D5EE47E3E2432E16E65F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 739d34ce9f7faa165fdadd808e84c6fed97a571e42a2bd5f071a0b5f02bd3dd4
MD5 19db82d6d7cfea523fa627e183bf75e9
SHA1 baf9315e69662aa5c9241732d2f665c261818951
SHA512 092f8812d9eb5437ba31d0e7b77f6a6d4225538d527ed68c33af325453ecc80d358d8d2419ca91406df0c0267714b6c0c559540bb9058fbe4ed03c5f88c6fb5e
SSDEEP 192:FRenzpU1Bxpv7MF+pAPRp2dB9HHsb+WNn3loVoR2LYYca4xX2VyIsnAUge:FRenVgpgoUX41w1My2LQare
TLSH
T15D42C62AEE11697B6CCBD229FD667757D7F5103121C42E84EAFC8A2C10E76CC221745B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 87e787f8346ef788610f20f17240ca85ea3b0d0fa8d286c3a1afaedb860bf31f
MD5 89033d9977e853f977bee1cedd4f678c
SHA1 9d204350d6bb68f49de24879cfb1ff0d8b32ef95
SHA512 69e2d446a545d1689d757508eb0dad95f9e46c693b52061a82f945ae60100ef4bd5c96a5e4eeee3176bb0682cf7d3cdc466c7d7130ca4417199f00bdf2b7a6ea
SSDEEP 192:FR2bzpU1Bxvv7MF+ptPRpcvWyqCyM9HHsb+WNmOnEt3loNKehYca4xXMVyIsnAU3:FR2bVgngoXXa1wUnLelaHE
TLSH
T12B52B66AE91429BB6CDBD229F952BB17D3F5103261D02E84EBFCC92C10E76CD221745B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 4c13fba2455e46e8fb36d6b53fbb3e6da243024f69f5c33a19130673b8da0470
MD5 5bef7052983e437081137ccf9005ce72
SHA1 8d0756a35e7601629451be92371c59c2715c43bd
SHA512 409832abfd7522ff9cecca96ecfde896bbaa59801a54a5d116687f61e99a896c63017bdaa294037d0fdcda694d7cb878c50a19b870240e116b7dcea1a9ed778c
SSDEEP 192:FR6nzpU1Bxav7MF+pAPRp2dB9HHsb+WNn3loNKeRYca4xX2VyIsnAUge:FR6nVg2goUX41w1Le1are
TLSH
T10E42C62AAE1529BB6CCBD219FD267B57D7F5102121D42E84EAFCCA2C10E75CC221745B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 03f577b7ba17224a580266b57e86d65751f4e6125c2fe9ad9617602e53ef5de7
MD5 212d5e0141a272dac1e5af6125276a6b
SHA1 41beedc166594e7468978b4fd2acfefa25ae1f2d
SHA512 b542e38f4d219093be532bbd92e7aafd663e3243cefbac56329ca10e0a4159963f28d917c259580bc3b9434fa57ca5d42b28a0f4ebdf0d306dcc755fb7f33176
SSDEEP 192:FR2bzpU1BxGv7MF+pAPRp2WyqB9HHsb+WNPAP13loNKeEYca4xX2VyIsnAUgE:FR2bVgygoUX51wcfLesaTE
TLSH
T12452B62AA9112ABB6CDBD219FD56B717D7F5103261C42E84EAFCCA2C10E76CC221745B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 34d3b150d9ebc3413240a436dcd8cc4d2da0e46d00a681d2118263aea9d32f3e
MD5 73285efb9f7ee0bd384426865ccccf8e
SHA1 51903f2b7a36fa90857257254c2bebdfe5da7eef
SHA512 e9bab3e8a04453bd7ca516137298f57170d38058ccd5df170108532fdb6eefb2d5ae94de47967a5242cb07be597050bef4f69d7f740877c626e131f01424e28d
SSDEEP 384:TRjPq7KxkXqKf/pUZNCgVLH2HfgslT37pLuLcSjFgXODPO+ErU3voHGjBm2oR0h9:TxPq7KxkXqKf/pUZNCgVLH2HfgsV37pM
TLSH
T1287219676C4C8E7B0F94CACCDC167F4F9DB5025B65EA886482FA582903D5ADF01061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 c3b0c19e0b25f657ea292c9e0e81d3ec200631586317165399df56e315f0c932
MD5 26b0800b518163754d7f85e297707b68
SHA1 13882bea423d4e03abac93b1556fb789dfb4f049
SHA512 1dadeb93560273337fca0719f67c27c4e2348af2bc0fe48a1df8cde94055bfc080d3fa00af89d4e8242ef9318a4b940fe04857d93afdc36ee2ae2fbb10912c6b
TLSH
T152B012D0C0019502C89202B42287148871145F209E0A1B0193E46D62C82A171C514054
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe585222.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe585222.TMP
Size 96B
SHA256 bacdda3050ca08ece959b50fdb06afb49534ccb49c5c1c2379461a5a3f7f49af
MD5 7d5279b544d0988d7422dc62319e68a1
SHA1 0ba4b393b4bda25cd87bc4bdd64df37c8c128144
SHA512 2c8b810a2db5f4d5fb0fb194addcfc176dfbeaae0336cb29d65724c684a98de445a90bac649312fd9a7db53395020a65b76bbbc0d25e791863f2f934ddf10b88
TLSH
T1CFB00256C202A363C05203B529D995DCB160DF35C7035312D3E43EA6EC66A79D776164
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 632928944fe9374fca9fa6f0a5f21fd92d9525ee7fa67feb49f41e65150edd5d
MD5 753fcf0f4e5dc9071e54fc2f5646dc10
SHA1 d2698a88ef1b6e319cd45497bc046f5fefb90a7f
SHA512 9a9847dc73ad34bf321c25ed0d68b4efc2ea945f7a6c1e916137b3a4e6f17f6569c217fb0830ea2d9cf257c301fedaf30a5d1efcaa0796ba3386af42f99cbbec
TLSH
T145A0027061814115E44406F49081C540E254BC1586495316A1D6289F98A818C6559404
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 8457560306fb955a68087089a80dc0c40750ebc8ed11497351b34e9bc7c24f7f
MD5 1381897ea1dd78e04e6e3086e2acabc7
SHA1 2075f48d9fd3bbb0ac5cbb891fd8d817f7ca0f14
SHA512 a21614d101e014608e0e5b8e7381f0e1f7fced3720635dffe9271a6b907db190840a28a201cde5227aa144b725a64127ec7812f9345e6b39d067f81c8b1e2763
SSDEEP 3072:/9Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:/Um7Rkm1tYpBeh2BAoM
TLSH
T163C312275E75E9375878BB0EB08E0B1F1EF14AA6D830DA92C8D86B0467F97CC1A05D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 ae7a34f5e2391e6adcac724aa50423d30862fbba16ae3623695248c13727deb6
MD5 90ab21a552afaa115fc8db4f2aa86fac
SHA1 7b6ee07df3f193967af966285a54cf6ffe445871
SHA512 12c9970f67d8eda4c51147fd3fc37bcac7fbc7f3259822546dda848c275b9b0d9673fa42c5436ea4a7d55458113035d0c65551b354c4f6b860f5a3f265c0dea6
SSDEEP 3072:QEGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:Qnm7Rkm1tYpBeh2BAoM
TLSH
T19AC312375D75E83759B9B71EB08E0B1F1EF14AA6D820DA92C8D85B0423FA7CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 3943d4e093ca209225e93d36cea5d3502bd0fd6e810c9d8b913ec821abd2d34b
MD5 31609a14b49dfb5d4042b6a5b9f2c357
SHA1 2c64f995408693f5a74aebaf90a63761246f4641
SHA512 e2959e045ceafaf2fedbd3354f9e70322eebb0ac3f73bda3f094e980fe914c54e6235dcd8aa5b793aa0466bf73a96b3eefc7a9b62e23e1ae68d7e17b9be3a83e
SSDEEP 3072:jRGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:jAm7Rkm1tYpBeh2BAoM
TLSH
T191C312375D75E83759B9B71EB08E0B1F1EF14AA6C920DE92C8D85B0423FA7CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 c9f1ac2796ab0779f04e13de37ba762cb8cb82c9f99c9d3c5b15339f7a5883d1
MD5 c87fb3d81ae629491db03b57ea6264b6
SHA1 09693025da0375731660e591b8d4626511d81860
SHA512 8f8ed73d49654cb8e0a454ec6c5e6af9a6f4d64ec12481effa6514c5350fe59b95f18004fd236298c53aac5cee882bd45b2d6406086946fe651aed33b3f36e99
SSDEEP 3072:joGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:jDm7Rkm1tYpBeh2BAoM
TLSH
T137C302375D75A83758B9BB0EB08E0A1F1EF14AA7D920DE92C8D85B0433F97CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1264-402-0x00000213B8C50000-0x00000213B8C51000-memory.dmp

Download

memory/1264-404-0x00000213B8C50000-0x00000213B8C51000-memory.dmp

Download

memory/1264-403-0x00000213B8C50000-0x00000213B8C51000-memory.dmp

Download

memory/1264-484-0x00007FF66F950000-0x00007FF6757A8000-memory.dmp

Download

memory/1264-494-0x00007FF66F950000-0x00007FF6757A8000-memory.dmp

Download

memory/1264-499-0x00007FF66F950000-0x00007FF6757A8000-memory.dmp

Download

memory/1264-507-0x00007FF66F950000-0x00007FF6757A8000-memory.dmp

Download

memory/1264-516-0x00007FF66F950000-0x00007FF6757A8000-memory.dmp

Download

memory/1264-517-0x00007FF66F950000-0x00007FF6757A8000-memory.dmp

Download

memory/1264-518-0x00007FF66F950000-0x00007FF6757A8000-memory.dmp

Download

memory/1264-519-0x00007FF66F950000-0x00007FF6757A8000-memory.dmp

Download