f5cb3c487c439df9f06030a21f05b9361cb4aabbdf53be595c52692ce6c93896

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
user interaction
yes
max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-it
resource tags

arch:x64arch:x86image:win10v2004-20260513-itlocale:it-itos:windows10-2004-x64systemwindows
submitted
24/08/2026, 17:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Chronos-Nuker-main/src/main.py
Size 8KB
Sample260824-we853aed54
SHA256 f5cb3c487c439df9f06030a21f05b9361cb4aabbdf53be595c52692ce6c93896
MD5 efd1dff3f23e6c55afcb382fa36d52c5
SHA1 aea9382b8aa97db054f19e87ef8cd73e1b9e8e6a
SHA512 f074058fc634cba077bae36436604569e3c336ec4e9097c4d0c5dafef1f84ede0cf96c7f4f12674c82c3b6c2f5dd0c30a0a2fea3fe7de4e6490b2835eac4d77c
SSDEEP 48:Zd1cGu3BoPP1xmk+9O8eUUsfeXNMZiAVvYcaz3BoP2LHbfSp:Zd9mo3bE9O8rUsfedjAVAvo+LHbfSp
TLSH
T1F502DD1149103420070FACF54DB6DC6C755A2527C708107877EE8AEC8FBABB1DFA6E6A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4940	cmd.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5536	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134320675420012769"	chrome.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{05AAEE49-48A8-40DD-9398-EC9F0B1FB54C}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
3748	chrome.exe
3748	chrome.exe

Suspicious behavior: LoadsDriver 3 IoCs

pid	Process
668	Process not Found
668	Process not Found
668	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs

pid	Process
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe
Token: SeShutdownPrivilege	5732	chrome.exe
Token: SeCreatePagefilePrivilege	5732	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe
5732	chrome.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
6108	OpenWith.exe
6108	OpenWith.exe
6108	OpenWith.exe

Suspicious use of WriteProcessMemory 50 IoCs

description	pid	Process	procid_target
PID 5732 wrote to memory of 5968	5732	chrome.exe	98
PID 5732 wrote to memory of 5536	5732	chrome.exe	99
PID 5732 wrote to memory of 3504	5732	chrome.exe	100
PID 5732 wrote to memory of 3504	5732	chrome.exe	100
PID 5732 wrote to memory of 5848	5732	chrome.exe	101
PID 5732 wrote to memory of 5848	5732	chrome.exe	101
PID 5732 wrote to memory of 3304	5732	chrome.exe	103
PID 5732 wrote to memory of 2976	5732	chrome.exe	104
PID 5732 wrote to memory of 3304	5732	chrome.exe	103
PID 5732 wrote to memory of 2976	5732	chrome.exe	104
PID 5732 wrote to memory of 3624	5732	chrome.exe	105
PID 5732 wrote to memory of 3624	5732	chrome.exe	105
PID 5732 wrote to memory of 4432	5732	chrome.exe	107
PID 5732 wrote to memory of 4432	5732	chrome.exe	107
PID 5732 wrote to memory of 5156	5732	chrome.exe	109
PID 5732 wrote to memory of 3780	5732	chrome.exe	111
PID 5732 wrote to memory of 3780	5732	chrome.exe	111
PID 5732 wrote to memory of 5172	5732	chrome.exe	115
PID 5732 wrote to memory of 2884	5732	chrome.exe	116
PID 5732 wrote to memory of 5216	5732	chrome.exe	117
PID 5732 wrote to memory of 1956	5732	chrome.exe	118
PID 5732 wrote to memory of 1956	5732	chrome.exe	118
PID 5732 wrote to memory of 2748	5732	chrome.exe	119
PID 5732 wrote to memory of 2748	5732	chrome.exe	119
PID 5732 wrote to memory of 2588	5732	chrome.exe	120
PID 5732 wrote to memory of 2588	5732	chrome.exe	120
PID 5732 wrote to memory of 3060	5732	chrome.exe	121
PID 5732 wrote to memory of 3060	5732	chrome.exe	121
PID 5732 wrote to memory of 2496	5732	chrome.exe	122
PID 5732 wrote to memory of 5156	5732	chrome.exe	123
PID 5732 wrote to memory of 5156	5732	chrome.exe	123
PID 5732 wrote to memory of 4864	5732	chrome.exe	124
PID 5732 wrote to memory of 4864	5732	chrome.exe	124
PID 5732 wrote to memory of 5084	5732	chrome.exe	125
PID 5732 wrote to memory of 5084	5732	chrome.exe	125
PID 5732 wrote to memory of 4652	5732	chrome.exe	126
PID 5732 wrote to memory of 4652	5732	chrome.exe	126
PID 5732 wrote to memory of 1800	5732	chrome.exe	127
PID 5732 wrote to memory of 1800	5732	chrome.exe	127
PID 5732 wrote to memory of 5112	5732	chrome.exe	128
PID 5732 wrote to memory of 5112	5732	chrome.exe	128
PID 5732 wrote to memory of 4660	5732	chrome.exe	129
PID 5732 wrote to memory of 4660	5732	chrome.exe	129
PID 5732 wrote to memory of 3464	5732	chrome.exe	130
PID 5732 wrote to memory of 3464	5732	chrome.exe	130
PID 5732 wrote to memory of 6020	5732	chrome.exe	131
PID 5732 wrote to memory of 6020	5732	chrome.exe	131
PID 5732 wrote to memory of 2764	5732	chrome.exe	132
PID 5732 wrote to memory of 2764	5732	chrome.exe	132
PID 5732 wrote to memory of 3748	5732	chrome.exe	133

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Chronos-Nuker-main\src\main.py
1⤵
- Executes a command shell one-liner
- Modifies registry class
PID:4940

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:6108

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffc1d3fc728,0x7ffc1d3fc734,0x7ffc1d3fc740
  2⤵
  PID:5968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=it --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,15307576504310248206,638072068311497823,524288 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2096 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1776,i,8029252988033915297,15540713710354275503,262144 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2044 /prefetch:2
  2⤵
  PID:3504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=it --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2432,i,3174935061359111745,7495538676542059031,524288 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2596 /prefetch:8
  2⤵
  PID:5848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3248,i,12711799824068422084,12875839580829803592,2097152 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:3304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3284,i,10470947474878418218,6261049931198917764,2097152 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:2976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4468,i,17659383297146531401,6077118254695542592,2097152 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4484 /prefetch:2
  2⤵
  PID:3624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4780,i,13789108894712565216,8256911731734634956,2097152 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4756 /prefetch:1
  2⤵
  PID:4432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=it --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5288,i,15717506435340695673,2285971673177223180,524288 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5524 /prefetch:8
  2⤵
  PID:5156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5548,i,8325266781745100933,4142412995650895643,2097152 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5756 /prefetch:1
  2⤵
  PID:3780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=it --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3480,i,15019663804378245912,13013284581087276673,524288 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3268 /prefetch:8
  2⤵
  PID:5172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=it --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3504,i,9256183656966572508,1018428537027192433,524288 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:2884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=it --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5908,i,1119277708377387606,15728094599726887363,524288 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3452 /prefetch:8
  2⤵
  PID:5216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3344,i,12284123294179089148,433245509325528938,2097152 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:1956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4484,i,303804646132587246,15667909309186241552,2097152 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:2748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5848,i,4713369578650966437,1900082097497922480,2097152 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5572 /prefetch:1
  2⤵
  PID:2588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3384,i,9821145829997250875,3310716048354312247,2097152 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3360 /prefetch:1
  2⤵
  PID:3060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=it --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5972,i,8964664017338753043,7215246111855201712,524288 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6052 /prefetch:8
  2⤵
  - Modifies registry class
  PID:2496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=it --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5952,i,9516775351821003831,18001059689950254207,524288 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6024 /prefetch:8
  2⤵
  PID:5156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=3252,i,2892696212129975441,6774755088165026390,2097152 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5860 /prefetch:1
  2⤵
  PID:4864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6236,i,3118632421087359685,7114379985702945003,2097152 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6276 /prefetch:1
  2⤵
  PID:5084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=4576,i,5030887756348709073,10488604191282519147,2097152 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6384 /prefetch:1
  2⤵
  PID:4652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6492,i,8656714239032897561,16845314313798428209,2097152 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7020 /prefetch:1
  2⤵
  PID:1800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=3100,i,7211392038386698682,16061361496345893537,2097152 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6348 /prefetch:1
  2⤵
  PID:5112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6856,i,4583399977874030637,7649734673357426741,2097152 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3360 /prefetch:1
  2⤵
  PID:4660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6732,i,13381691031264024249,14833859070173852452,2097152 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6716 /prefetch:1
  2⤵
  PID:3464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=5960,i,13833859479858680800,657415157867966471,2097152 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7076 /prefetch:1
  2⤵
  PID:6020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=3348,i,12992431283369722628,1953530275063045976,2097152 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3100 /prefetch:1
  2⤵
  PID:2764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3340,i,12699653342911751204,10586036260631011136,262144 --field-trial-handle=2036,i,8202028565674864716,2131351494251203255,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3368 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3748

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3584

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5672

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 0b84e17f27f56234afdaecbf09a962f5aab64eb0baddbfc4fe4f15dc0c8fca01
MD5 0cd2f7f0867bc147ef5272e7a90965d2
SHA1 d9c1edcc6291375789c12787e20f9807fb2baf7e
SHA512 fb7a8ae0e9e1ab5182ff943ed74d0317322896ba91f9268cff548aabae5baf1b66c6a0988aedf3c36f59fe22ae6e4d56c3442021c194b714b1f4f7a1b662cda8
TLSH
T190E02BAACC21FC275CFD471D94900B46EA1013572760855F7A3C81088FB06770A8985C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Size 312KB
SHA256 0b6251fd38152a7a7319d54a8e993417dfe359650a9581c135c3950fe5704861
MD5 932d4b5eb7460fda1f102de6f7149790
SHA1 fadbac31c043b89a72bf3abf502f9ee53ccbf86c
SHA512 eaad89143b37482972189a3ff86698a7ae3332c42248d177fc74e0ec6aa9e1756a0699cb77d3b83cd815e2651df267c0cca4e9866d7a59a26d0dbeadb060189d
SSDEEP 6144:Y87U1JYBYrHsCcjPUrsgrwz9Ot6mjoSF7SI/5Czsl/sfz+IeJqJi:REJYqaQ8QN7p5Cz0jqJi
TLSH
T1786423C8B9A7916BD9F3FEECE0C64958B3FE733433C684798421915B87122D882E45D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000020

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020
Size 39KB
SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
MD5 9a01b69183a9604ab3a439e388b30501
SHA1 8ed1d59003d0dbe6360481017b44665153665fbe
SHA512 0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca
SSDEEP 768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO
TLSH
T13703023A5E3CCF1A84157A703950F6D9A8481E548E9D143B4F1AC7BF085DDE2209B6D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003e
Size 32KB
SHA256 04c7f19e1ae294cc641f6c497653b5c13c41b258559f5f05b790032ccca16c82
MD5 b582b2eca79a750948dbb3777aeaaadb
SHA1 bf0ea1c8a7b4a55779cbb3df1f1d75cc19910e9f
SHA512 35cfd88afe4e4e8091d3a5c53f0f3e2dcd92aa58b7544b94d4d9d7cdf508d429c5292aa97b813c9c8ad18e4d121d4e6595c49f5ddafbeab7b39f3a7c9d0b58dd
SSDEEP 768:S5rsd4sFCihE6OYoEs/5pn7A8o690DW1d3zt0OG:+4d4CbdOjEQp7ho6x1djPG
TLSH
T143E2E2F9A6319A3CC9E9F3C983459F40F75EA449A50C11CA70A8FCE465824CD5F7AA0E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000045

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000045
Size 66KB
SHA256 274befc7b39609fed270e69335bc92b3d8251545594636eb408d5d93e0ae1a4f
MD5 33411bb179575dfc40cc62c61899664f
SHA1 d03c06d5893d632e1a7f826a6ffd9768ba885e11
SHA512 dc830766c928ac84df16d094fc92586b9c2c25f819123dc9b5ec259220b4b1c45e2af28c89a710f047c00c9dcf7df8dd859a9a7a2d2228703f616df13caef2c7
SSDEEP 1536:DQFVtT8CbB1R8u7uT2yW7tLkpVmWYK9XoTEPnq0K+XeooPpcmgK:6gI1kT2PiiuXoBSuoohKK
TLSH
T1706301B43270DBF4E089C49924E62B1CD4D3606FEABF94E4B146DEDD922BC773198848
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 8782db31091b3c5233896953acb3184d37d2ece40babbae643eebf7b08d5de50
MD5 efb9d2c1bebccaac78c18ea15661f61b
SHA1 9d665607cfb66a0b5ea6f23e11a214e18d82b63c
SHA512 e182e73d7908cd51c7d2aa1e2ea1c439227b4ae2d5e1d404147a3595eaeb2daf941318029d9859f58c9e402ccbbac0cc48f91a668d9489d300a54bb339293521
TLSH
T12821EAA3B7819413FFB7797362E32E38B4730A99130B3E1F0020616DA0173BEA1C604A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 4a39290213b3b95ea9de3028686cfda5d896bebc340ccbfbaa0e970c54a958ce
MD5 43aea96e6b0d363954f2637f02145790
SHA1 a8a5d2fd1493d8b531021e18e79d114b6bf75503
SHA512 d980c76edcf987c060ae08e27133316e25b1bc754af3d1a46b43e18023de593555f8f3765c4efab78bb3fb496e89a633f9eab35d7a7ff2458c68b081137f5cf8
TLSH
T1454122A1779DB412FF76753A25E11F3A313E39BA020B3ECA007044686003FBED1950C9
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 842afbddd171143f1be92a39c62d7c2d742a3c9406cf7d90eb20633766b133b7
MD5 cd65166fe21a5c89898c6cfd281d08aa
SHA1 c24819173ef632470764bb400d0ec70e7c37582b
SHA512 c97971aff756159a38dec0804c8a0517bc1e28fe261c8f762bfc0f790717d7862b8049d5c87d869924f80348ad496949d20ed89e760b096bfc2296591844ef4d
SSDEEP 192:D6RHveN1d+yftgJEJNedjaIDTLu1RmfttoIP5V2zI6IxaP6xEvvbEfPmDrr1VNPR:D6RHveN1d+yftgJEJNedjaIXS1Rmfttg
TLSH
T14F32AFF7C3D8C52D891156F4AB257F1FCD1A0A18431C3D6688D8EF4BA3E24B1E251A5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 d215d650b426df1c76f9c8337e653dc09e8fafe16277b18b71d0e0805c2f260a
MD5 f1f9936bc89ba8cbcd26f1a96a9c6535
SHA1 2d3bc51087558e89d7bc7d1b7831ee67dc437bd9
SHA512 d8a321b589b45fddff772a43847ea8b76626e80c45ecf6e9461ac5028cd4eb3225e9368587c58e68445130caa002a571bf59311392dfbf5621c9e73ff51452c1
SSDEEP 192:ER8wwp/Q8uzxv7AhAPRp2PS9qHsb+WNn5m4of2u+23OEekLnnena9VyIsnAUgtaJ:ER8wwFohk8XLkw8r2h23O+noaL8
TLSH
T14A52CA2EEE10697BACDBC215FA557767E7F9102631842EC4EAFC892C25D7ACC211B017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 88547af4a2ef8bc6c96c2b6c4374e22f4d7f23e26fb6987d1010231ef120d0f0
MD5 1f761284db977bc8658eb305609e5d8f
SHA1 499b3b645291233a2a836ec3ab0dadf00544ba42
SHA512 6f8311672ac2f7e68a83673a2f1e8039552a73d5d78532e1be755275042726821b20028697292e7312876ad7301c1a61edcbbbbf73315aa41edd961e844052f2
SSDEEP 192:rQR8YcBzwp/Q8uUxv7FIbPRpe+MMEeG9qHsb+WNIjs+DYy+NTEW+23OEekLnnenB:rQR8YmzwF7hBAX0kwwdkE523O+noa/vg
TLSH
T10962DA2EE910697BFDDBC219F9517B27E7F9102621942E84EAFC892C25D7ACC311B017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 21b6f754546197b8b623bef4b3d5d08c374ca44c13627f070156b66085f5a752
MD5 0316de2d1a57cb59c9a4acc69fbbfd61
SHA1 cd073c9178cee0519054d56f9201aa351a4e3d2e
SHA512 32004070671f5211f0495fc8c55550329c578bee9fc59ee2ca329d3a3f186fa12a3c76a8b807b8cbed28056b51c0fbc49efe27c5d38cab3a0c1ccbe592d8c618
SSDEEP 192:ER8YcBzwp/Q8uzxv7FhAPRp2G0uU9qHsb+WNn5m4dyee+23OEekLnnena7VyIsn1:ER8YmzwFohB8X8kw87ex23O+noa9vO
TLSH
T1C752C92EED10697BADDAC215F9517B27E7F9102531942EC4E6FC892C25E7ACC211F017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 c236eef19203c1b0d507ecd0b2e2acff7d9d9d1d5bd34a8dd0ae6fba292325f9
MD5 43d682ee1ed17318b739dac44cf76d10
SHA1 1df09d148469f6dd85f1bfab70b8651f01ffeb60
SHA512 d2d0e7646f7612003738916374b4c1b9fdab5c32b5aab18799fb57af37404b4d606576bcbd5a3d271298e7345e4ed19667a68c022b8f66a9926352700876c8a4
SSDEEP 384:rQR8YmzwFmhBAXxkwwdkQ2w23O+noa/vg:omzwFmrYkwzw2nHg
TLSH
T11A62DA2AE9106A7BFDDBC215F9157B27E7F9102621842E84EAFC892C25D7ACC311B017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 5663bad00edf66e64ef4d66758afa13954bee2e8d7e66ea560cd081d52cebc44
MD5 ad87a67b5904dd961235f4be2870a8bd
SHA1 79bf189c476bd6e481a80e9c005fb7f2d7ee0da6
SHA512 8687473ee5c0947d98f22b8753414c703155129a6943d715a4a21f30e8f1837162f86f2252e35977e70d90cec304d46a64826c27d2541da1f3fff05f4528a210
SSDEEP 384:V7jxY7KxkXqKf/pUZNCgVLH2HfgsluX7pLALchjvKXODx4+ErU31VHf0XKqdaZgl:V3xY7KxkXqKf/pUZNCgVLH2HfgskX7pg
TLSH
T1B6720967AC4C9E374F94C6CCDC177B4FADB5015B61E988A483FA982903D5BCA110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 4d1206fa06c30b000c7949e045397f4450d1008c762373141ad22d7218dd1a96
MD5 1662d4a0479e957f5eebb8e014c41f5c
SHA1 92502c751ff9a18c7ee8cc3af95b5fcab7f40092
SHA512 0f0eff51bf26a8322388e32ab25aafe65f4e8072af13d5cd13258968285b7fc105b0af27cc5f1b0f59832534ecc9dad7a3caaa089269b22a29d86c4000c75c5e
TLSH
T1F7B02280C002A223C00303B038A0C8EC3020CF20C2030A02C2E00B2ACC28BB80020230
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 9a1579ad4a9a25574900731a3cb387c0395fd8c3410dbbfffef929930f1bbfd7
MD5 d32a3f54fc845f514096698ea3b958c1
SHA1 e9e3825906af0a7f6e0057af6d28c803d33ca7a1
SHA512 40e90cb52e043bb62c51bfacec25ddc1567e70dc5d91dabd65fbd336f4ed07fa78854745304cfbb9d4504c327dc40306fe8b2953e44d95b215ac9a1b3b94bea9
TLSH
T14BB012449011D312C00206F412536C9871549F64AA0A170243F46A62A8391548019051
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 ea7b0a071b2e86200cd6b47ad8ce2ea2cb87ebb9d6eccc12fccd1a7bd323202f
MD5 b2b9c3da663dbb33926ad88a02c13160
SHA1 8637754698eea53855d3e0e50c451d055893805b
SHA512 75d68058d5251184eb03c08b6b4de58dafe7944221bcf27c3a45d6da50c5d67a8216433baa03f4b1b8d26d228e256b415c5d1e300f7705fbfbe6887125dc1d23
TLSH
T105B00216725098E3FE7403F067DAD8D439227E55178BB69671FC705C89537C8C3B1A45
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 234B
SHA256 10b574ba227aea907e15f92256b6ba3927a18028376d46b3929b07a02d0e8829
MD5 36451ffbef1a899863bcb9b1cf28c5c3
SHA1 f2837b7e53c121e83f60eaf98ecd2b5094739d7e
SHA512 56bffb671c69f7e2d5cca902aef83e6da536fe88d93be77ee233de2fba3bd4afe67b8683bca6e6b1de8bdea7be48cabd2d0defe830b5de9aa5b037d8fc5c69aa
TLSH
T113D023E751324C273738DEC95034352D81175E5CCCC0CCD94544F0CB74B4A23D245576
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 150B
SHA256 6dea89c90164b8672295a11ffe64b27d0a804d621b8726d2e302075c07c4bd12
MD5 53a93ed112754b463e5b881b5b521d21
SHA1 ea06a0cc26087e3a42bd45d7ba833a3bd291fbc3
SHA512 6c44985499bb8953cc974770832dfa7a58e061bd6e7d09252b6ca1008ca4c462017ca9d991e5395c333f10aea45dbf2ed1c95364c0ad203a77e844530885a185
TLSH
T17EC02BD31400414B0734DECD1018322CC207836CCCC0CCF88048C0431034D33810163A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe59bc90.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe59bc90.TMP
Size 157B
SHA256 81e0a5d813614b7715a580b0fb78e3a923697eca82823bb6f3b053ab04891034
MD5 cf7b951a8e1239a5de87bd455e95207b
SHA1 7673f0cafa738bef2fbc94e588cde825a9a70fcb
SHA512 cf3af9663873b90b793441a6e4b542a0446aa988c131d43de48762b3d36e7b4b93dde1053145a3f84cc3da5fec85843e0994fb9dc3f134c6fa0a80d5685a59e9
TLSH
T144C08CD3141001470B3095CA2028321DC2178EAC8CC0CCE88049B0832034933820063A
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\FileSystem\t\Paths\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 280KB
SHA256 6b8de0ee5be5d32cfa7bcac86f7d9ce1b398e21df399552dc084ff7131ffbca2
MD5 dbbe6addcbf3893368092ab721bc80da
SHA1 116de5b1b82d7f7badd9b2238aab25aaa42ccee6
SHA512 5be5573ff188a1c3cf372becc6c60cd55b207e7c53c5e813ee40d91de9601c93cbc7f6fb3cb1c98d76113fea1962448423186d1fdc9eebf83f58a137e731bd43
SSDEEP 6144:cxIxx78xqy/WwnA4FFLge6m7Rkm1tYpBeh2BAoV:rx+zACNt9oBGcAoV
TLSH
T1135423278E69DC772DBD976D500C492D2EF0471B82059C81ECED2E0853EB6E25B5EE34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 1563d408297bb3d62f57856b74c4fd498cab39bbe17e4cf3faf334e563ad033e
MD5 90e13f4110b5d7fb09d216befd6ba268
SHA1 769f9ae924fd60aeef3dd45c039a5426ef014d79
SHA512 5575f65b8cc8c6470aea5092f733851e0fc59b0a7ac3868e493df99ba1810b9f34f17feed8a5160b62c6a2300bf88196d053043c6abce98191f5bd0ef1149309
SSDEEP 3072:AAGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:cm7Rkm1tYpBeh2BAog
TLSH
T1EAC3023B5D75E83B9CB5A74EB48E0F1E2EF149A6C920DE9288D85A0437F97CD0A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 25e145499401f0405006d0055860ccc54249f94332f505e38dc666273f7707e3
MD5 1e79b6092fe98f1660d56f9dd5ab6104
SHA1 4467a9f73e5c69769213caff33ffb7d1c952a5d5
SHA512 043c2844196c38fe1fc87a3cfde3350ebdc59b0216b3bf179a388a02adc489ca1ac89d6b1fd2a781464c3cadb456d381e0ce1902fb6ecbb1578e47923d169a11
SSDEEP 6144:cnqy/WwnA4FFLge6m7Rkm1tYpBeh2BAoV:kzACNt9oBGcAoV
TLSH
T1703412338D74E8372E7DA76D410C5A2E2EE1872F45059D82ECED2E0863EB6D44A59E70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 239KB
SHA256 8fcc02542606e5a430a61503c2b523bba194c226aa177cc000a8a513d644de90
MD5 64079e7f22e5cf952f5459b693b5f8ed
SHA1 9e633253e8b3b9170a17727c1bc4429d3de4f5ef
SHA512 2c7b7fab129041ddd390522cc96414808b16137946cab996edcb63f6b1ca5eed08c7f2c16a51349147fd0d053aae0b5dc8b6ee77e866c004ab0fd6af0b66b872
SSDEEP 3072:4rqJIFcQInLb5P8ykbnSM+2eKYlT68mWV8vLngS9DGm7D5Lk17ox1tIpud63U8BF:8qy/WwnA4FFLge6m7Rkm1tYpBeh2BAoV
TLSH
T1D83422338D78E8373E7DA36E514C4A2E3EA1462A45059DC2DCED6E0863E7BD50B59E30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 239KB
SHA256 1f37e5610937fc927781210ab5495ef5b10b73308c2d754e31246b08e9738502
MD5 76c03a4b3db023c833b97b5be6045468
SHA1 578cb0c4143e6a61b62a3d2ef2e6e7f0cae7806c
SHA512 a92fdab0c6c982cfb0347ecfb5eafedb7447a84a2499677d967d894621ce6c267250f253bc3f47f2696844d71fdac6479ae89ceec119d66c474106a4d18c9520
SSDEEP 3072:7eqJIFcQInLb5P8ykbnSM+2eKYlT68mWV8vLngS9DGm7D5Lk17ox1tIpud63U8BF:iqy/WwnA4FFLge6m7Rkm1tYpBeh2BAoV
TLSH
T1DC3422338D78E8373E7DA36E514C4A2E3EA1462A45059DC2DCED6E0863E7BD50B59E30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download