cca804dbe619c6c1a5dc53dc86e1b7c146bcf3ca3473e9e99ea1edc8756d83d2

Analysis

user interaction
yes
max time kernel
899s
max time network
900s
platform
windows10-2004_x64
resource
win10v2004-20260513-it
resource tags

arch:x64arch:x86image:win10v2004-20260513-itlocale:it-itos:windows10-2004-x64systemwindows
submitted
28/08/2026, 19:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
astermail-recovery-codes-1787816610040.txt
Size 818B
Sample260828-xtfbzadn2s
SHA256 cca804dbe619c6c1a5dc53dc86e1b7c146bcf3ca3473e9e99ea1edc8756d83d2
MD5 f165b7565822c439a17295c6785b865a
SHA1 d80cfd3ecb7d0cc0bcd7649e917e46c63a8198e9
SHA512 335ed39de4f1005e60a0c161b591273e39d1de1fa6c33ff1185902d9b4b48be72ad26e2fead287dcf744d20506aaa525ee42a55c85b7877c653bb040582ffd8b
TLSH
T1C801895A2A9DB808094534BE6547EE5F35773499D642249C28B2234C22E3C094907886
MD5 SHA1 SHA512 TLSH

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 5 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
127	discord.com
26	discord.com
32	discord.com
48	discord.com
49	discord.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1812	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134324177307430205"	chrome.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{E935232A-1F24-4C41-AF2F-D695C8263B7D}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
5512	chrome.exe
5512	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1196 wrote to memory of 3128	1196	chrome.exe	87
PID 1196 wrote to memory of 1812	1196	chrome.exe	88
PID 1196 wrote to memory of 4936	1196	chrome.exe	89
PID 1196 wrote to memory of 4936	1196	chrome.exe	89
PID 1196 wrote to memory of 2772	1196	chrome.exe	90
PID 1196 wrote to memory of 2772	1196	chrome.exe	90
PID 1196 wrote to memory of 2032	1196	chrome.exe	92
PID 1196 wrote to memory of 4692	1196	chrome.exe	93
PID 1196 wrote to memory of 2032	1196	chrome.exe	92
PID 1196 wrote to memory of 4692	1196	chrome.exe	93
PID 1196 wrote to memory of 4672	1196	chrome.exe	94
PID 1196 wrote to memory of 4672	1196	chrome.exe	94
PID 1196 wrote to memory of 1912	1196	chrome.exe	97
PID 1196 wrote to memory of 1384	1196	chrome.exe	101
PID 1196 wrote to memory of 1384	1196	chrome.exe	101
PID 1196 wrote to memory of 1856	1196	chrome.exe	105
PID 1196 wrote to memory of 1856	1196	chrome.exe	105
PID 1196 wrote to memory of 3076	1196	chrome.exe	106
PID 1196 wrote to memory of 2860	1196	chrome.exe	107
PID 1196 wrote to memory of 2860	1196	chrome.exe	107
PID 1196 wrote to memory of 5404	1196	chrome.exe	109
PID 1196 wrote to memory of 5412	1196	chrome.exe	110
PID 1196 wrote to memory of 5420	1196	chrome.exe	111
PID 1196 wrote to memory of 5888	1196	chrome.exe	113
PID 1196 wrote to memory of 5888	1196	chrome.exe	113
PID 1196 wrote to memory of 5072	1196	chrome.exe	114
PID 1196 wrote to memory of 5072	1196	chrome.exe	114
PID 1196 wrote to memory of 6096	1196	chrome.exe	115
PID 1196 wrote to memory of 6096	1196	chrome.exe	115
PID 1196 wrote to memory of 5512	1196	chrome.exe	116
PID 1196 wrote to memory of 3732	1196	chrome.exe	117
PID 1196 wrote to memory of 3732	1196	chrome.exe	117

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\astermail-recovery-codes-1787816610040.txt
1⤵
PID:5040

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0x100,0x124,0x7ffb8655c728,0x7ffb8655c734,0x7ffb8655c740
  2⤵
  PID:3128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=it --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2136,i,9921444903678736309,3365236013192409653,524288 --field-trial-handle=2212,i,2022352605291788579,70050772783033178,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2240 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1700,i,819154181720410787,16201578977916350170,262144 --field-trial-handle=2212,i,2022352605291788579,70050772783033178,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2204 /prefetch:2
  2⤵
  PID:4936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=it --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2428,i,18150955265457251264,8095214461160393089,524288 --field-trial-handle=2212,i,2022352605291788579,70050772783033178,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2260 /prefetch:8
  2⤵
  PID:2772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3256,i,1676366308983751675,17962347312115444178,2097152 --field-trial-handle=2212,i,2022352605291788579,70050772783033178,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:2032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3276,i,305514026315767281,7238674123911041224,2097152 --field-trial-handle=2212,i,2022352605291788579,70050772783033178,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:4692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4480,i,1788662924602677061,15068188588976256090,2097152 --field-trial-handle=2212,i,2022352605291788579,70050772783033178,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4508 /prefetch:1
  2⤵
  PID:4672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=it --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5396,i,231682589361615376,11668227448182190544,524288 --field-trial-handle=2212,i,2022352605291788579,70050772783033178,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5400 /prefetch:8
  2⤵
  PID:1912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5416,i,6182474026870379747,6521775460658004981,2097152 --field-trial-handle=2212,i,2022352605291788579,70050772783033178,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5452 /prefetch:1
  2⤵
  PID:1384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4444,i,283282025483761389,12659574317127363565,2097152 --field-trial-handle=2212,i,2022352605291788579,70050772783033178,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5856 /prefetch:1
  2⤵
  PID:1856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=it --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3524,i,329923807851561198,194215945397139102,524288 --field-trial-handle=2212,i,2022352605291788579,70050772783033178,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  - Modifies registry class
  PID:3076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=it --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3532,i,15149452416234779827,8875770082303257206,524288 --field-trial-handle=2212,i,2022352605291788579,70050772783033178,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3364 /prefetch:8
  2⤵
  PID:2860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=it --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6120,i,5456832119338824589,6520690473471446155,524288 --field-trial-handle=2212,i,2022352605291788579,70050772783033178,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5976 /prefetch:8
  2⤵
  PID:5404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=it --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6104,i,9016756120660751434,15647691037780727329,524288 --field-trial-handle=2212,i,2022352605291788579,70050772783033178,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6108 /prefetch:8
  2⤵
  PID:5412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=it --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6112,i,12472476761888064668,7690168181975911226,524288 --field-trial-handle=2212,i,2022352605291788579,70050772783033178,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5972 /prefetch:8
  2⤵
  PID:5420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6176,i,12508669062344982861,12206540985506892310,2097152 --field-trial-handle=2212,i,2022352605291788579,70050772783033178,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:5888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5856,i,13684814533626209833,5031275053165819544,2097152 --field-trial-handle=2212,i,2022352605291788579,70050772783033178,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4704 /prefetch:1
  2⤵
  PID:5072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6228,i,10491793566518209881,10313104325061129655,2097152 --field-trial-handle=2212,i,2022352605291788579,70050772783033178,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5828 /prefetch:1
  2⤵
  PID:6096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=7000,i,12682752512644001136,13044640262834164391,262144 --field-trial-handle=2212,i,2022352605291788579,70050772783033178,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7016 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=it --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5904,i,3547497103567790056,1356916029955120935,524288 --field-trial-handle=2212,i,2022352605291788579,70050772783033178,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7040 /prefetch:8
  2⤵
  PID:3732

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3896

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1628

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 e3fdc391c6d07127e9a83e6fb5383058e8454f1177512959ea55c5291ef6b14e
MD5 a722edd6363842a063f99cb0f86cf4b6
SHA1 fccc14531dea25d1197e2983dbd611c9a6037537
SHA512 008fa2f35917689b45ca63ecd7b948b51b859869177dd8ec7ed0b51b80d72c25902d592f3d3bd38ec07cbb4e028b7da0b129cfa8cf4d0e8895918e8d3621b35e
TLSH
T159E02BAAD935BC6B1CFA477C51401B46E74013573B80894F7A3D810ACFB6B37014AC2C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00001c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c
Size 185KB
SHA256 25d2995679794f050da8b3a637f10fac9c16012773870e62ad34355ab75e03b1
MD5 92b2c99d83ede1596a7effc2b8cbc150
SHA1 b0dcb3c8cb63e438f2326eccab20555a112a6a24
SHA512 30754225d96e911b0e7060d0b2b8b2b2e31d578cf91f41269cdd88401cd4bad8d0f1c52ad976edd98ef455f31911d2fee4b879facb56066506e136e87ee7a7cf
SSDEEP 3072:dQmh9p4BJXf0XYi7FqX12Bq+endfZOVDDvxaIQyFeIcWPdoFCstjciCei:K8SJv0Xpql2BqntZOVxahgdoP4iCt
TLSH
T15604131882FE306134114DA928BE7C78DA9578B9C1EA917E47627C5D8B311E5CC327EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d
Size 565KB
SHA256 03081b4e27086994270bda993f038e0b794447b04e8fddfaaeba81e97e38dfdd
MD5 001b2d3a2aa79af0f436e1270859212c
SHA1 3afd8770cfe22b9c5c3fb3fe6fafd3084c063b68
SHA512 03bbb5a244add084f3a27c11b3b2edb769019c2c8d85deb55d564e48b7113c9893bac7d04839c2ebdc353752cb307c2e8a90cac9a4092fef45d0f400293b7b1e
SSDEEP 12288:MvxG4Ioex4jyaVcryCObxqB0SX0E9DX3jpy/N3FNinaj+Z:qk4Ir4jFVcryNSX0EVX3YNrU
TLSH
T1D8C423DA23E36ECF0C5797B1E5A3A4B9404C711F106790D6BC62F754AE1DBB328A016B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 17KB
SHA256 e686130783909070bd7decf26d8c8235790b4f54e37560357a613219032383b0
MD5 6c3a0c52cecaffa451365042803cc087
SHA1 f5426701a6952f27d2236a2a2a4cf2649e2a21e8
SHA512 b669669c967e633426bb13ea64b97161c5e929c7956a4be776af2a90557aa843663950091752eaf59c92eb6ce1ae84fb83fc15c13af18978821faa1cd17a54e4
SSDEEP 192:nhKE8/XPHUDw+uJqA4AMwVVPUUbFf8vhMfyFnnThoX8qgbneNJJC:nhKE8f0Dw+O4AM0PUgFf8JqqnT6MbsC
TLSH
T1CB82C7A1215E5613F7C14FB871F0105672BA12D032ABEF0D83BA913E8F6FB895F5A611
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 adf3d80f4c7b81430e02cab4cf9492eb0c3124c4512a0a69603170e73f148e4f
MD5 90e1900efbd2d2ce58d030b8051453c0
SHA1 b5498112f862fd26b220c7db6e8b17a08c1ad787
SHA512 45354b4e2c6155558375f4dbcdb5d4d8b16a07b4e618429fa513279b9ca0b535644867e932f2890d8beb0c3ca1ab95e5e5348aaae858c16099f4a0840e42b080
SSDEEP 96:gUNH1hhEvXqsPN1Y4e+wtGwmBje8GLyp5IzrSNn:1NLvsTY4xaGwGe8f5crSNn
TLSH
T109E1269058AD5605FB511FBCB1F18187783E82D4229B2F0E15F7D53CE8963866F23352
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 7ed61d3f6d28e8d02493bfdbc8372ddacfe40ab2b6b43ae27452e9c11f66104a
MD5 3242c78b215deec03b58d9c995e22537
SHA1 5bda8ce78437b836fc572bb90962eca748f74e7e
SHA512 0423755f4d6845d579a8be47661fe3451b0456dce5687da39e8510f4cb5013c0a867275d148234c7d972af7cc16c7fbc054f500a40183ff2409be71459603075
SSDEEP 96:vUNH1hhEvXqsPNw1Y4e+wPGUmBje8GLMEp5mzrSNi:MNLvsy1Y4xUGUGe8y5urSNi
TLSH
T193F1268258AD9615FB511FBCB1F04187783E82D422972F0E14F6D53CE8923866F23352
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Size 96B
SHA256 d7379d69876548545228773d68a5c90c00541375ff56801059a97b53419766f3
MD5 721bbca58c7695ed1e68f29c292b52f4
SHA1 c7c58064608e62864fb346273f5669a8278241cf
SHA512 b24885a0d8ce00b46aafcf69ac1a3844ed32ba4b845ff10d3ac859a29a58c53dfd71d6d949db78c58f44c4984f644502f3e04b540d2dcf97be8fac6f927abc76
TLSH
T1D8B0019898891487C325CBF61E9620C67671ADA523B31B4142E439B68966B54BE43A44
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 4f290ebaf104eb13f9a9f1979b2ea78be35e1ea1b1b429042c4f4e273d9954cc
MD5 86b59997e93d1c29db40629859da92f6
SHA1 7eb8883568d7889016dcaebc14d230e2bdbf3b92
SHA512 048af649069dcf55b6ead5647c3f22c2746168f4090873eed9088f1490bdee317215308b62ec52ae3de0634dffc6fcd13268c6bd4620c2122a5bc50a5c8bde4d
SSDEEP 96:DuVuAuKusuguyuRGaI5zEE/HuLuCuutu+4Xu++uhuzjhDueJ:DINLxblqGaI5zEE/HEAOr4XB+4UjhDrJ
TLSH
T19DC18CB3C3D8866DC91156F49B153E1FCE290D6443283C6AC8D5AE5FA3E2571F28168E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 912e9c4605587c8f5d17344b6334feb5e8c1b75f9d24d9c43fbe36b704181c99
MD5 0a21f57a938016928cefed3264f8fc24
SHA1 c6398880cf730f21dece0ee87ac32fa228f1abe6
SHA512 d47df79afa6419517f36e65443d64f6d66321e6c54e58d48f7712cff3b9ec80a8d1974cff0ca5ac4acbffaae7b50cc97547ef8998f83cdeba8144a311edf60c7
TLSH
T1EC4148B7C7D8897D890156E8A6156F2FCD690E14531C3C1A88D8BE0F93E6876E20059E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 59d209678cbeddd6f34b9d0309979abbc22c2f7328d4fc2c76bcabe16f0fef20
MD5 900144960187e8febf3230b7b4cf935b
SHA1 7f7269e256c7aaac1165b6632bc8602334dcc32b
SHA512 4426c11dc938d436d6f5332d9bc5b0126828f41a0c127bfa8a87c2a384e67d12172cf6e97c099f2dcc4580fae964e5a4a978c91ae80fb8cc9e39ef129686a0ed
SSDEEP 96:DuVuAuKusuguyupaI5zEE/Hu0HujuCuutu+4XuKue9uM:DINLxblSaI5zEE/HXHeAOr4X5r9x
TLSH
T1B2B188B3C3E8866DC91156F49B143E1ECE290D64432C3C2AC8D5AE5FA3E25B1F18168E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 3903958469f10ec5386d4df68a255d977defce07e29304c309ab82cf7ce8addd
MD5 72c575775eeeec7a91831309f91bf6cb
SHA1 661266a102a30f80b2410d0f11877833547b7be0
SHA512 a7d77dd43cbb1a1c7a1b8357f3ce654e8c569d1cf50154819be77298691b85bf0b2e24806657693106be6fa60c41d12a0ee2a0ae7b62168d6c911d1f1e4ce0ca
TLSH
T1FD7169F7C3E8866DC91156F4AB153E1FCE391924431C3C2AC8E5AE1A97E2572E18168E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 82c94f80ec51ea0310703251937c1491c6f3337577965893b670395046eed9b6
MD5 cfd775e116dc6d38191737a3791a74ec
SHA1 a2d0c61409f8057f912bd1f0a6bc3698fe6d3b23
SHA512 091212d5bfb4af1d3077ebf5db64e7fa76044d8a4488d5be1cc25c6737820500580e67658614d31ba258fad006af102a794621543f8e8ffcc8355d01fa350e81
SSDEEP 96:DuQuiuquTu9luouIaI5zEE/HuiuCZuDu+4iubujhnueaujud:DNLfA6lpjaI5zEE/Hdn8r4i8ujhnraM+
TLSH
T111A17BF383E8876DD91156F49A142E1FCE390924432C3C7AC8D5AE5B97E25B2F18168E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 18c29e2b7842fae311dd1e06d6728824271d2606d4ffdccfcce5577cbddfb80a
MD5 509bd069d1b7decf7c7f52ee6339b031
SHA1 fe245741bc099147915c310ec2b8c32df93318b8
SHA512 dfd65a12488e532541d9f70fc7bb82ed7759f325c3a7e1cf9e7c09987caa93831adeaa9846c999e897b7b06638ff9813051277a66de2cfbe77c25a1b56f5e9f2
SSDEEP 96:DuQuiuqu9luouMu2aI5zEE/HuiuCZuDu+4iubujhfujuaueJ:DNLf6lp/haI5zEE/Hdn8r4i8ujhfMXrJ
TLSH
T14FB17BF383E8876DD91156F49A142E1FCE390924432C3C7AC8D5AE5F97E2572F18168E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 02ba83b0d6f11ae4cafd8022873b57e45cd1812395e51b0c85d36362324de6b4
MD5 fb1dd2999af2a69f8dc6c2a834ddcece
SHA1 6abb7ec021a0c22ca6d0ec3f6b8a1f25d36b8757
SHA512 a8e3b4631fb3c94d894a6f231d774022106a7536b8067cb33ba1a79fa19664383606c712c40038c21bb770ec932a2a66892add0b4c847820588f843fe2b45aa9
TLSH
T1C2319E73D77FB417506C8CEB0D8ABC093D79A4350292A8F4DEA7806DB0865B74B13453
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 957b0ee6367918bbf8ab658a57edb213c591a5abada39666f8480948f75e3805
MD5 a84db790a50c7b66bac26e8d796d436c
SHA1 482edde353dfb2c1b702dca2501e667c4c42c2ad
SHA512 e2e6363c016143f68c0caa6af32f5ea580d22b02c5ea06f85487a7e942f488ea59301cbbebf4c598faf829a9fb6fd35af3575e05eb46df9736c94671ace1b667
SSDEEP 192:hR0yxHkkv7bpAPRp2v19DHsb+WNnhdOCiYMG2LebmaLVyIsnAUgraJ:hR0yaAvUXu5wPiYD2JaNe
TLSH
T1F642C92AAD20793B5CDBD319FA667753E3F6102261D42E80EAFD8A2C14D76CD321711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 244997b6a719d3c9009077d2f0d68c0be4f4983e72093787fb05e288d09a7316
MD5 72caa5a320f7f126a19a445fd8ed408b
SHA1 53834e49f787aa91a020d595235751f17bca10e5
SHA512 483930686bf22e4a1128465c96d6c9b17167c856ef3a30bcd6c9a3b7e1eb60efd1f0eab4cf39f0bc3bdd0199c63b963fa3294251462b4f7622da057c3adffd11
SSDEEP 192:hR0yxHkSv78pAPRp209DHln7b+WNnhd0QG2Lebma8VyIsnAUgtaJ:hR0ya+4UXD57P0f2JaY8
TLSH
T11242B72EAD20793B5CDAD319FA657753E3F6102261D42E80EAFD892C04DB5CD321711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 0b6ba8ae26fc29f2b1ce80a697e7f927db037998c459dd27be652909691a7aed
MD5 e4b471a4ebb062cc2ebb5d95ee11975c
SHA1 13df8d17ffb94271f509d7dc6445beeaed917d4a
SHA512 2f7131aa3d22a8aea43b1c048b9a881e7b88efd6d4211b4c71069b58a17420f87a2745036d1173c6ed5a68917162acf8c9fb34de9aecd522ee151666a76509e6
SSDEEP 192:hR0yxHkkv7bp5PRpJv19DHsb+WNnhdOWrEeG2LebmaRVyIsnAUgraJ:hR0yaAvzXL5wPLEN2Ja3e
TLSH
T17352C82AAD2079375CDBD319FA567753E3F6102161D02E80EAFD4A2C05D76CD321711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 1823c866dc69b69ab8b34bf8e4e3bec02750333cc79a57aa516e1e3b749717db
MD5 6a425b2545095256ae6374a0fc1d717e
SHA1 df61e2126796d0ad3a88f71391e4c716459635a9
SHA512 9461136c42670bba58ac348f098a548573d40c8700b638ebe35101ded79bdcc3cc29ee9c58a79b2e8029f33e5f33f67520b2a6547dfe8a4af6f8550d7f346629
SSDEEP 192:hR0yxHk5v7bpAPRp2v19DHsb+WNnhdOZ12IG2Lebma8VyIsnAUgtaJ:hR0yaZvUXu5wPK2X2JaY8
TLSH
T1F042C82AAD20793B5CDBD319FA667757E3F6102261D42E80EAFD492C04DB6CD321B11B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 dbf36e039203dd386cb808ae5081ef8524f9676eec40d4ffa0d5ee90bbed0477
MD5 07477daff0840a7767aed50dcab1dcc5
SHA1 ad244ba1fff95d79868b51003b56f95cbf87fa8f
SHA512 4d13c5d15609f9def8fa70155ba0fe3920e722a7d16ceaec23a61e6001d9c1237d257c272290e4628a339c6fba2d3d4473997bca6a6efac0f9c813d96b2a08bb
SSDEEP 192:hR0yxHk0v7bp5PRpJv19DHsb+WNnhdO45g4G2LebmaRVyIsnAUgraJ:hR0yawvzXL5wPngn2Ja3e
TLSH
T1E952C92EAD10793B5CDAD319FA667753E3F6102261D02E80EAFD4A2C14DB6CD321B11B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 1fe2244ec60c11d18cf4a31027aeeac0117ce1d9bc23f34aba52553a5bfc176e
MD5 f9dc140e603be9347524cc1e5b4980a8
SHA1 1bfa5b904da5c451a6de43f493870c8e119b15e5
SHA512 ec16ee79257bbc08e6b0f7d8f3bdf8fa95acff9eea85ba7ea179c4289277a2e17c415d6e9d81a731d72be76dbb96ad9dc8da89d6c29c61888a611d4e5bd4bc5e
SSDEEP 192:hR0yxHk8v7bpAPRp2v19DHsb+WNnhdOZ12nG2LebmaLVyIsnAUgraJ:hR0yaovUXu5wPK2G2JaNe
TLSH
T17F42C92AAD10793B5CDBD319FA667753E3F6102261D01E40EAFD8A2C14D76CD321B11B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 19559af8fa9ddc86446896bb05a88b7266ab4bfdd2e9d36de4c285e20ddc1b70
MD5 11bb2fb2f66ec9204e8b0854a612fff7
SHA1 2d9ffdd6a4c566f90fb4485ce6693ffe1537965c
SHA512 5ee040a9bb634bed3b28bd87f3c30eb4119d5dcf482173789aa7b730a0a4bee9f3e54575b7c93e70abf79fb5d5c5847b9429578840358bbe4870e4bd4190820c
SSDEEP 192:hR0yfHkWv7bp5PRpJv19DHsb+WNnhdOHPy/G2LebmaR8yIsnAUgraJ:hR0ycivzXL5wPyy+2Ja2e
TLSH
T1D752C82AAD1079375CDAD319FA667757E3F6102261D02E80EBFD8A2C14DB6CD321B11B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 13KB
SHA256 5102894c8fdffe28be8c5e7adfa2eb6b5857b03724e77c60db6e901ca00bb314
MD5 82bde4f525ac0c0009696912ad3965be
SHA1 ad2b314ae15228621540aa9ce413225c430dea90
SHA512 0d76ea2d0581f8dd644c07306f932c27972cf5e3352d4c32198072e10ef4afd79ac81557474634f27544902d474deb7d6f1fb9af75808ae3eaa2606c2162900d
SSDEEP 384:6QjOp7KxkXqKf/pUZNCgVLH2Hfgsl9RXODOB+ErU3ykHf/5UtevtEC:6UOp7KxkXqKf/pUZNCgVLH2HfgsL1OSg
TLSH
T15552F967688D9A3B0FD8D54CDC16BF4FADB6014761780C6853FA5C0803997CB114A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\4607e27b-aa01-4447-95ad-7911591cb82a\index-dir\the-real-index
Size 72B
SHA256 4805008915a9a47bb82d3eb7af16c2d6a5032674a3e902a9862b01071100c0a2
MD5 123769887df2ab8e08c4d9551026de70
SHA1 3ff014b552735827c41117f5cce4b7bb5f2dbd35
SHA512 2935b74556225da2c1e4887d05f62867c0dd08cb41b4418bbce99a5dd0dc500349ab395418f01a6a2e817553529c48e4630808cca89d3bcbcc14d1eb4f31711f
TLSH
T13EA002319D54B403F06127F0346781C423344EF91961221641D9164AC95F2D15D85040
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5aa3b3.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\4607e27b-aa01-4447-95ad-7911591cb82a\index-dir\the-real-index~RFe5aa3b3.TMP
Size 48B
SHA256 89d894a0d15b6eb84eb6039b5dada75f2584672cf31d38946806a8482f7a4a67
MD5 ce1385f5dea51eaf9cbec6042b8d2f7a
SHA1 1c7f84d029ca70e0a4f56c6b3986dc4ea2d856a5
SHA512 53668fff20160e720d79b9d14b804c9d7c30b04cb69b9c039e18d8c724281600cbf414720e52a90150ea479b2a84a48fe64f6cbc7a1c16745f321f94b9681d46
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\50f032f8-da1f-4269-a783-0bc5a52966d1\index-dir\the-real-index
Size 72B
SHA256 eb457ae0e2b281b5b74e8860493826605fee21e17b89ed6f24a589676705baa2
MD5 05e7d199c1bb92ef0b2ce5fe11eaaabe
SHA1 c0fb03ffc8c97242c6dd768e310e4778941b840f
SHA512 4cc95ee747825c9791485eef40a340d87ce9a900c31fe9b5de6aafd7380194435214950f665e20cd52db8220b4facef77f1b23e8f1256cc4cb7a41749b9844ec
TLSH
T1D8A0021491500106D1141F71147341907B21D9154601576351B01049ACE52989A02400
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a79b5.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\50f032f8-da1f-4269-a783-0bc5a52966d1\index-dir\the-real-index~RFe5a79b5.TMP
Size 48B
SHA256 a7738735991ec5883e904aebebe966aa83ea18f71f0070f7b1ce2ce7e5399370
MD5 537a8bad9d686c4701ac0a987c1ed277
SHA1 7626ba99d7ea3c57ffb10d6531ad1ba468211ae4
SHA512 cf584d1e795ea65ce16e9af7cf521a9cdaab1cec9b3d437f7251decc54f30e1740eb0fc8852b08189fb8a09c21c8d7019bb79b01b3455b929615ffd4faa44fb6
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 fad60db088ab274d6d410318aa25c11c9bae0c0c549613a7f447562dd0853e49
MD5 693e9b21ff0f56e507a83ef0948227aa
SHA1 2087ebc335b5a442a43357256f79e833a327953a
SHA512 a6b818682d1f11086d83cb8ac35f2a7b3c4dd130a57548b1df9b77a93d4b3d74a38321d09012da037738aafd067f670f05f18f04699188934c7546d510328f4e
TLSH
T158D097DBA0110592F7BF0BC68735244A82202C841088A09DC012301E1878B43E232E92
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 229B
SHA256 97f1ad2291f1db3c0fc0de16b08bb179f85bc51001e835a24ad2bf68dd073d64
MD5 f5325a68158b337b384ed71cceabfb77
SHA1 9542b3dfdd3805cdbbc41c4033488c48e27e26bd
SHA512 94d56ca00b682c6fe26a4216974e5fa6a98db7dcd7a8b074774d7d5b043189d919f1229450d8e0068997e54224871cb55517edcd88130b897198d9569474cbad
TLSH
T17ED097DBA0000592EABB4BC9477534198630388810DAA18EC022000E1858B43F123EE3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 226B
SHA256 819aa6f89a9d1721cfa035b40c18e85512368b2cbaa4b3030aa23bfc8b937185
MD5 fa59484fbd646c6fe74ebbf0da7f9fa7
SHA1 a625e65512ee1e435b66493ddbbb954383bf040d
SHA512 c8d7d41ed46d4dacd6174f9a993f5c3f3156c86f5ba7ea5d4461eae25a8bbdf38b25cac398bba78a0412e6c725c984b97aea51d65f1cbfbc36b2fe273283b7d7
TLSH
T1DBD097DBA0004592F6BF4FC54775241A82203C841098A08D9012011A4C48B53E222E92
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58e598.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe58e598.TMP
Size 138B
SHA256 c311c5ded35e5b0ab5e709f5460d790a6c552a4a23bb90585887a44bcf8dfb00
MD5 f8059203c3184feddfca9f83dcd24bba
SHA1 d72e8b2dbc2e07a984269a3fa67da8acfadc9035
SHA512 c57810f2245902e5505dd407983331f74cdf79eecaf88e592616626196f72a7e17175917c3ce78709d4db1b88cca698ad0200d238d44fa28959c80a0bda70840
TLSH
T1E1C02BF7B0004513CB2F07910732A11C87063CCC48C5C08D611334192038F133102FD1
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\26daa9ae-4f63-4920-8abb-a59ff9b6ad68\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\f33efba3-4ac3-4376-a046-3a8d3675f227\index-dir\temp-index
Size 72B
SHA256 f61bacdcccf145d0e2054fd0e3556ae3310e59aa4bef3dd79d8ddd71c1a9d35a
MD5 b494035297179a05397ea29df4a61520
SHA1 73092822084dd8e59379c34a1fd2539a207cf3a6
SHA512 1e7ffe1c570474edf3f7e7b81e910262810df6a831600a0e43e35d9a6595a2ec4dc96d272585e2fdd0c1aff113bf68c62ebcb95af8c77ece7b08b4a63f214b00
TLSH
T103A0025083D91550E454537870450BA12354D850040307034995078C8C505D45E29015
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 178B
SHA256 3576a3a02b3cf3a76ac4a8de201092242a5c3275b3ec8f189ff9e6b3cbbb38ca
MD5 885f62ef8ef5595568c82497b3642261
SHA1 185f50ba5cd5516c38086e0c43219fe3a9cca6b1
SHA512 cd25623d5775b09950b41bc836c0c75931e40231e9cc5eb6dcfabfdc034e17e5dc9d286717a79bd85bf5e71418060e78f211a679249ca864921303136466fc16
TLSH
T197C012B700A556913E3464E6931231CCC5363FC85C84968C44713459227493B1501D74
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 91B
SHA256 b5ac12376878718d3accc7ed17f9d3350bcd6e6924328ed81d69eb1b250f83a7
MD5 471b1d93ed8d51f89e63ed5fb3908826
SHA1 7eb6ceead5c1abf3c63bd654f1021303916cf35e
SHA512 435ceaa9bc23e45012e6c72d0c3437862945f0a2a4cddd2458b12a7a04a6d63ac30fcc7e7f470d0c0ec7dc6c38796f7adec849b6ecd006fccb61f12f0b656825
TLSH
T168B002BB504259D55F7534F7014731DDC56633CC9C85DE8D9472205C321457F2001D65
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 178B
SHA256 6d10f43cf1a1534fb19c8469763599df9c9a26dfefd01e06a509d0a7cc50bc2a
MD5 b896f5c861fb12b27c7c682f4a839a60
SHA1 ff4c8558dc52d3825bf560796753363c3eb1af41
SHA512 f5cc2c85de01760abafb69328b7a2f6eb64c71e3fc93e99f235bdd59a0d078706356a9365d8043d8c68426e12d337d19516876c5ad5dd0856564ea27ed1c5dd8
TLSH
T1D0C080F741414A912F747CF7515731C8CD363FC84CC4D54C441930592130C6B5100D50
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt.tmp
Size 178B
SHA256 055e89ab1c999e3b44b61d35227d2490b6ff0b892809493e393d226f4e732184
MD5 c796167c8fef6f5a71d7705a324c3511
SHA1 65a87f9f692a4276547ac0bf8b69d356826fcfd4
SHA512 599fde2134242fa18284483f876670d967d4acaaf0ebd87d784b65805b0dcd5212d11814c0160003c0210598450c3e696bc7bee9a6a7735d93119c21c4c9ae39
TLSH
T1E4C0127B50A155923BA514E7424233C8C5363FC94C80954C4872305A2230D6B1805951
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe596d08.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe596d08.TMP
Size 178B
SHA256 d501d54d0a9ca049642c478fbd55a898b5e4e6f7220f92ba245df0adc265533d
MD5 fbea7a108b559f7fddc626075305e7d5
SHA1 f1e9e5779b60c8ca4f54a521c369afb520235551
SHA512 f05671b81f17f5dadc506a4f07454afb71f4fed06d8afc48b52cbe350225f24998330d9fe7014d3d3ce6319e29ae6f6541adfb400cbe1668e2ee991fef80cf1f
TLSH
T144C08077108555E13F7554E7114333D8C9753FCD8DC8994C4426305D31309273505E25
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 242KB
SHA256 b0ac583eb4f0666d106b43d73b1e81bb4e65d10100c1a6289a8b4441952f97dc
MD5 44591ea77ddec1b62556b67e8c5902fa
SHA1 10661a3c53580c70ba4bf833135088ee4db58d9c
SHA512 3ad55e8c5a2e9e34d345da485886ced2e097ebf22124c79cf7a9175ad4a323a678284a97b3b0c8151096b6e2fbdf8069a444507a1193c6d64bf281a83fd09d2c
SSDEEP 6144:q1osWoVh7JePbgDlpjnbmUcom7Rkm1tYpBeh2BAoU:+XtVdJePbwlpDY9oBGcAoU
TLSH
T12C34123B6C259877CDB9B71E61423E1E0DF31F25CD20A9D9CEA8660066DFAD81F06934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 78c2a0633431cbe54bde26fe5eff8e542f736ee8beaa732c9009a990fac3647a
MD5 ea813db30c3630a298de21f910bdd97a
SHA1 fa018a6f456eb61469197ad693fa9e2ef420273b
SHA512 a6ae99a78ff7e71fceea2f81446048c60fae1ffeed2395122a7de627634b5271d6e467cc6c9a3336b999a4d65f7795ae1a42845b6c74910dc45752d4f5a75a57
SSDEEP 3072:1Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:cm7Rkm1tYpBeh2BAoO
TLSH
T190C3123B5D65E9375979A71EB48E0B1F1EF249A6C930DE42C8D46B0437FA7CC1904A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 71779867730840506fc320963a570d0b61494d30e3bb96654419cb562c423e0a
MD5 5ec9bb9bade231a91fe877f00e73561d
SHA1 4bff8073ed45f5ac989346ada004681fca1ac3f3
SHA512 cedfc17a02d1d2b2fe68c56c178a862bfc3ff6de7838087a0bc7e403f67df074a6e62a063311a5ec88b9f960554b1f4fc0b1a33075911f6d153f3623ab157b13
SSDEEP 6144:HAsWoVh7JePbgDlpjnbmUcom7Rkm1tYpBeh2BAoU:HftVdJePbwlpDY9oBGcAoU
TLSH
T1CF34123B6C29987BCDBCB62A61472E1E4DF30E24CD2069D5CFB4960167DEBD81B06934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 242KB
SHA256 bed2b0143637272c948ad32cf7f042ae1385107e651377d76775bd4844548032
MD5 9b83a1752534f8e105212cf27a59ccff
SHA1 015e09fe014d1d945de588f4c9957d6700048362
SHA512 1639ad471e1282a277b8b285058a2f50057bf5a41b92675b561c5e81d9126bc12464a209f4290c73a3983664827d5f8ecba398b703abc073ec89cddb7ea4b59e
SSDEEP 6144:O1osWoVh7JePbgDlpjnbmUcom7Rkm1tYpBeh2BAoU:SXtVdJePbwlpDY9oBGcAoU
TLSH
T14F34123B6C259877CDB9B71E61422E1E0DF31F25CD20A9D9CEB8660066DFAD81F06934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 ac61f51cfabe56207482f0b0a2f7c80e13f6db734a7b40659f693dc5d19ef277
MD5 cb63775f9f398ae7df541e3315b877b9
SHA1 70c829e09c569267e857369551e6ba10616eb4b6
SHA512 03dfaf2337a5d0029b32c90d0f924a8ebf792de0a746ec181962fd824eb1f8dc12096e78df3414bf0e1c9e4a61ccdbb62392adb0d2f19b6dafb6d21e6a576f9a
SSDEEP 6144:IAsWoVh7JePbgDlpjnbmUcom7Rkm1tYpBeh2BAoU:IftVdJePbwlpDY9oBGcAoU
TLSH
T14A34123B6C29987BCDBCB62A61472E1E4DF30E24CD2069D5CFB4970166DEBD81B06934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download