Analysis
- user interaction
yes - max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
29/08/2026, 22:20
Static task
static1
Behavioral task
behavioral1
Sample
model-picker-redesign-plan.txt
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
model-picker-redesign-plan.txt
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
General
- Target model-picker-redesign-plan.txt
- Size 16KB
- Sample260829-188tlsep21
- SHA256 7489a92d680786c0f541c5c0c670eace9b37a50e9da4e346545c7e1979ce5ad9
- MD5 5a0de0e3f99accaf73681b82cceb5c60
- SHA1 820f55fc6c6e4bc8daf405da3600430201583f43
- SHA512 f8cfe8e9fc7a7b87b2b167486891b7a12c2943401cb53b443a14ed0bbe2edee7e51cc27a13a080c3c5bc0af7cef79e551424e5080697821924fc10523a17df6f
- SSDEEP 192:WY+sV3Ssb9yRr3GrgKf4zAPr1VXK3suBJtCR7YM+8PO7WVpWHVWdPhC97rR8Je1x:tB9yB3GKz+csktUVPrK6pwOo6G
- TLSH T1B372E6573E0017352FB7C173768941C2C73691AAEA32B5307DDE806C2B5A37899BE2D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- SilentNet is a stealer written in Java 1 IoCs
resource yara_rule sample family_silentnet - System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 768 chrome.exe - Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier chrome.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe - Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134325156329198562" chrome.exe - Modifies registry class 57 IoCs
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\Mode = "1" chrome.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}" chrome.exe Set value (data) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 chrome.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0 chrome.exe Set value (data) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\MRUListEx = ffffffff chrome.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2 chrome.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{44B3BFEE-CB3F-441D-B446-2B71B5FAB397} chrome.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell chrome.exe Set value (int) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByDirection = "4294967295" chrome.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ chrome.exe Set value (data) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 = 14001f50e04fd020ea3a6910a2d808002b30309d0000 chrome.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\KnownFolderDerivedFolderType = "{885A186E-A440-4ADA-812B-DB871B942259}" chrome.exe Set value (data) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1 = 3a001f44471a0359723fa74489c55595fe6b30ee260001002600efbe100000004fe594f939e3dc016d184b4442e3dc01280678ea0438dd0114000000 chrome.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\ chrome.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1 chrome.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg chrome.exe Set value (int) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1092616257" chrome.exe Set value (int) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupView = "4294967295" chrome.exe Set value (data) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0 = 14002e8005398e082303024b98265d99428e115f0000 chrome.exe Set value (data) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\MRUListEx = ffffffff chrome.exe Set value (data) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202 chrome.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3} chrome.exe Set value (int) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1" chrome.exe Set value (data) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0000000001000000ffffffff chrome.exe Set value (data) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff chrome.exe Set value (data) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0100000000000000ffffffff chrome.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259} chrome.exe Set value (int) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1" chrome.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:FMTID = "{B725F130-47EF-101A-A5F1-02608C9EEBAC}" chrome.exe Set value (data) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a000000a000000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 chrome.exe Set value (int) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\LogicalViewMode = "3" chrome.exe Set value (int) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:PID = "0" chrome.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg chrome.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU chrome.exe Set value (int) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\LogicalViewMode = "1" chrome.exe Set value (int) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:PID = "14" chrome.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings chrome.exe Set value (data) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 00000000ffffffff chrome.exe Set value (data) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000 chrome.exe Set value (str) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\SniffedFolderType = "Downloads" chrome.exe Set value (int) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\NodeSlot = "2" chrome.exe Set value (int) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1092616257" chrome.exe Set value (int) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\IconSize = "16" chrome.exe Set value (int) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Mode = "4" chrome.exe Set value (data) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots chrome.exe Set value (int) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\IconSize = "48" chrome.exe Set value (int) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupView = "0" chrome.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 chrome.exe Set value (data) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff chrome.exe Set value (int) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\NodeSlot = "1" chrome.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags chrome.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1 chrome.exe Set value (data) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0e000000ffffffff chrome.exe Set value (int) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByDirection = "1" chrome.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell chrome.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ chrome.exe Set value (data) \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02 chrome.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4940 chrome.exe 4940 chrome.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2892 chrome.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 20 IoCs
pid Process 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe Token: SeShutdownPrivilege 4800 chrome.exe Token: SeCreatePagefilePrivilege 4800 chrome.exe - Suspicious use of FindShellTrayWindow 43 IoCs
pid Process 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe - Suspicious use of SendNotifyMessage 32 IoCs
pid Process 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe 4800 chrome.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2892 chrome.exe - Suspicious use of WriteProcessMemory 56 IoCs
description pid Process procid_target PID 4800 wrote to memory of 4496 4800 chrome.exe 87 PID 4800 wrote to memory of 3080 4800 chrome.exe 88 PID 4800 wrote to memory of 768 4800 chrome.exe 89 PID 4800 wrote to memory of 3080 4800 chrome.exe 88 PID 4800 wrote to memory of 4732 4800 chrome.exe 90 PID 4800 wrote to memory of 4732 4800 chrome.exe 90 PID 4800 wrote to memory of 1780 4800 chrome.exe 93 PID 4800 wrote to memory of 1780 4800 chrome.exe 93 PID 4800 wrote to memory of 4632 4800 chrome.exe 92 PID 4800 wrote to memory of 4632 4800 chrome.exe 92 PID 4800 wrote to memory of 4964 4800 chrome.exe 94 PID 4800 wrote to memory of 4964 4800 chrome.exe 94 PID 4800 wrote to memory of 4976 4800 chrome.exe 95 PID 4800 wrote to memory of 4976 4800 chrome.exe 95 PID 4800 wrote to memory of 4360 4800 chrome.exe 101 PID 4800 wrote to memory of 4972 4800 chrome.exe 104 PID 4800 wrote to memory of 4972 4800 chrome.exe 104 PID 4800 wrote to memory of 1064 4800 chrome.exe 105 PID 4800 wrote to memory of 1064 4800 chrome.exe 105 PID 4800 wrote to memory of 4608 4800 chrome.exe 111 PID 4800 wrote to memory of 3888 4800 chrome.exe 112 PID 4800 wrote to memory of 4632 4800 chrome.exe 113 PID 4800 wrote to memory of 3908 4800 chrome.exe 117 PID 4800 wrote to memory of 3908 4800 chrome.exe 117 PID 4800 wrote to memory of 2332 4800 chrome.exe 118 PID 4800 wrote to memory of 2332 4800 chrome.exe 118 PID 4800 wrote to memory of 3836 4800 chrome.exe 122 PID 4800 wrote to memory of 3836 4800 chrome.exe 122 PID 4800 wrote to memory of 404 4800 chrome.exe 125 PID 4800 wrote to memory of 404 4800 chrome.exe 125 PID 4800 wrote to memory of 3384 4800 chrome.exe 126 PID 4800 wrote to memory of 3384 4800 chrome.exe 126 PID 4800 wrote to memory of 3996 4800 chrome.exe 127 PID 4800 wrote to memory of 4592 4800 chrome.exe 128 PID 4800 wrote to memory of 4592 4800 chrome.exe 128 PID 4800 wrote to memory of 1020 4800 chrome.exe 129 PID 4800 wrote to memory of 1020 4800 chrome.exe 129 PID 4800 wrote to memory of 3636 4800 chrome.exe 130 PID 4800 wrote to memory of 3636 4800 chrome.exe 130 PID 4800 wrote to memory of 4872 4800 chrome.exe 131 PID 4800 wrote to memory of 4872 4800 chrome.exe 131 PID 4800 wrote to memory of 4940 4800 chrome.exe 132 PID 4800 wrote to memory of 4424 4800 chrome.exe 133 PID 4800 wrote to memory of 3932 4800 chrome.exe 134 PID 4800 wrote to memory of 3932 4800 chrome.exe 134 PID 4800 wrote to memory of 4784 4800 chrome.exe 135 PID 4800 wrote to memory of 4784 4800 chrome.exe 135 PID 4800 wrote to memory of 4000 4800 chrome.exe 139 PID 4800 wrote to memory of 4000 4800 chrome.exe 139 PID 4800 wrote to memory of 4872 4800 chrome.exe 140 PID 4800 wrote to memory of 4872 4800 chrome.exe 140 PID 4800 wrote to memory of 4808 4800 chrome.exe 141 PID 4800 wrote to memory of 4808 4800 chrome.exe 141 PID 4800 wrote to memory of 4780 4800 chrome.exe 142 PID 4800 wrote to memory of 4780 4800 chrome.exe 142 PID 4800 wrote to memory of 2892 4800 chrome.exe 143
Processes
-
C:\Windows\system32\NOTEPAD.EXEC:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\model-picker-redesign-plan.txt1⤵PID:1444
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4800 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffa9c37c728,0x7ffa9c37c734,0x7ffa9c37c7402⤵PID:4496
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1752,i,10224599088255136054,4665762709018487115,262144 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1940 /prefetch:22⤵PID:3080
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,17532914428976669221,1373647163424424679,524288 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2212 /prefetch:32⤵
- System Time Discovery
PID:768
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2412,i,7486399045860027760,6077947683696756127,524288 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2580 /prefetch:82⤵PID:4732
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3260,i,2746812346093535425,10510091966474727985,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3272 /prefetch:12⤵PID:4632
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3104,i,5587859749439044092,10711728259396633548,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3284 /prefetch:12⤵PID:1780
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3852,i,17930364878750622557,7396721856379141822,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4512 /prefetch:22⤵PID:4964
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4720,i,16741809229829919145,3723125159617532733,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4788 /prefetch:12⤵PID:4976
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5128,i,14192773704692976523,13606875121136595143,524288 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5548 /prefetch:82⤵PID:4360
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5796,i,1807896778226361528,11959060062034207480,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5820 /prefetch:12⤵PID:4972
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4744,i,6446962867072788048,12801087699199371791,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5944 /prefetch:12⤵PID:1064
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6068,i,2905026542069003311,10727462488172525072,524288 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6080 /prefetch:82⤵PID:4608
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6072,i,7620151617114899933,9262466740440153216,524288 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4840 /prefetch:82⤵PID:3888
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6076,i,8574695614079300450,527086631417765428,524288 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6040 /prefetch:82⤵PID:4632
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6080,i,15184426684931398767,16643521119441317135,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3624 /prefetch:12⤵PID:3908
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4576,i,6128145244427443751,3452359638687400743,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4548 /prefetch:12⤵PID:2332
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5896,i,6041992398516142541,15228283723896487886,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4804 /prefetch:12⤵PID:3836
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5816,i,8256238142638846920,688114543954212439,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4856 /prefetch:12⤵PID:404
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3424,i,4983582390882821323,15391865049985921604,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3936 /prefetch:12⤵PID:3384
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3716,i,7767115171996756279,5361832005009988677,524288 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4744 /prefetch:82⤵
- Modifies registry class
PID:3996
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6008,i,3214121229513924726,11018933043761643583,524288 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6012 /prefetch:82⤵PID:4592
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=3960,i,1319225189780128382,12224110720956351250,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4836 /prefetch:12⤵PID:1020
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=3636,i,3245057049790623627,15299689182279764005,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3408 /prefetch:12⤵PID:3636
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=3384,i,2180421050191471477,13626274556220862191,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5796 /prefetch:12⤵PID:4872
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6272,i,16888776039213354642,14913539151996528591,262144 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6280 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:4940
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6504,i,13380502071592279394,14475677125346051768,524288 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6516 /prefetch:82⤵PID:4424
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6504,i,6876516611074415335,5726186961289258529,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4824 /prefetch:12⤵PID:3932
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6560,i,17056044604972937158,15541127628212382709,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6248 /prefetch:12⤵PID:4784
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=3288,i,4663117453584646621,12582613485507836597,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6676 /prefetch:12⤵PID:4000
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6536,i,7177922734930311061,6809471721691896534,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5980 /prefetch:12⤵PID:4872
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=6160,i,275709523190560782,6730379679489932749,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3376 /prefetch:12⤵PID:4808
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=6840,i,13590257418637689063,1772880327876309180,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6888 /prefetch:12⤵PID:4780
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=7036,i,7167956043870028395,12404447949868568680,524288 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7040 /prefetch:82⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2892
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵PID:2240
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:1488
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
- Size 414B
- SHA256 8162f47fadc0fd5fb28c8755ba46560057b66b8314fb4318ebfaa76bf1f55349
- MD5 c58d7252598149877bef5f220be93456
- SHA1 5a2cb212f998751543d6d2018a2868d15e3ea72e
- SHA512 6cc6b14c854564122e4a61535a2701323fdf7103797076f245bb4ae616b36b3e4fdb0e58493a6739f18d9fa7f3e0ad10a0d91da9bbb54fd821d011a57bbddea2
- TLSH T16AE0E5A9C821AC270DF91B2860104646E744031B2E91890F3A3E86198FB5A2A466682C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005
- Size 72KB
- SHA256 3ca847c98e57cbac8e40711634967a7758b8e960064a3c76fc8fa76232b7a2fc
- MD5 715bf19e847184c24024af361eb46b42
- SHA1 9972a63f74cfc45c93be3fa4203b495c8cae7ee2
- SHA512 0bbc27b5c5d5640c44ff2a2908bd4e744e1fdb4a5272c410f8177bee6eb3e32fc5352b5ae3d731f508a6343b9d880ffa4d904731dc48f066bae5e70af9e670ad
- SSDEEP 1536:4ZE7sIlGJwlz/wGfsh2hjDWhTq+FYc/ACxkCytKapQIdIFH:WElDlDwAsh2h/DTwA62/2Idc
- TLSH T1BD730281DAD6A5243DCAB4B2621797B3A04F6E327D1CD93F8237112E83614358B79B3C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b
- Size 165KB
- SHA256 8200b78c7e364fcb96cdd00dea617b8858c73aaaa8f5648199ecb29f7fecb8a9
- MD5 89aa44290a18fd6fbef881bd77cb4a7d
- SHA1 311586ab1876d7695184ca02e3fe95ed1099616e
- SHA512 f0bf7329a3ef803a545ed975aad114f06e3bbeb93a350f5f72aedca1757e57e8878b33110c476d6f728d3c86d7d78a683572a7f751e42ac73f9b36fbfc33f8e8
- SSDEEP 3072:9rOiD8Pu08SV5fxqV2zX083vcQsjyYZFyybGk0uLIE8ZuI9vsOPgZu5xDgJn8:JjGfx1X/9IZFyIGTTE2HN9PgALR
- TLSH T1CCF312A84BA556AEFCA260774E331FC42768B39D5224DF6C221BCB0857213FA1D03D67
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e
- Size 343KB
- SHA256 07afd00bc6b13e35f702104aebea04e61d7f90b8447559279895e5f72cabd471
- MD5 f39ab38ee79b1eb354356116d49017c4
- SHA1 b97e8c1d90d46d372791af31561daa69e132d7c0
- SHA512 01217bff1fb5b28e6d1e5e02473ea3154c97f36f87b8973da56e8ca84b636e0de2c318cedffaedf0c76ee90d3eb2e26e6689d5a973538b6f0f91bda10c7a5253
- SSDEEP 6144:nQbTrYgHjNyXvc/D0GyVq9bk72B3QM/lUs7Jv2zjWriqGfkMzZh1RqXOzKY:nmTsgHHLlq72iM/mPzjWrykMzZhXqXSV
- TLSH T1177423D43C829CDEB5717D27911A93A6C213B4052D40E39377DB808A7E8B5E852FF86B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d
- Size 437KB
- SHA256 a451b8791f9183f16a2b30959f9f69e20f35117f8ca6e34e463916869328f3c8
- MD5 15d9ce7fe8b446c91cc0598983dde50a
- SHA1 b2ad1e9b11a41f5176e3cc495dac68aa26e0955f
- SHA512 39e14f23bbde8278b586057eeb648777afc1e6d11b71f3e5529688341f7868b61d0d7ef43cc925189a70def4a6b53e863a06fc8d36e7551c9a50745be6607529
- SSDEEP 12288:9SyJNj5Vy52pw6eyroMIW3/dJhlzOH7pVUa0Uiku:9vJzV1pw/yroMfCIUfu
- TLSH T10B9423CFDB2108E7FE76C411CDAD9FE8049BA554056D8CB35BB6066D825A0808636FEF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000027
- Size 21KB
- SHA256 0035839f97544723c93fdc2a16786821bccbe601d1009453acb3742d59b5e60f
- MD5 8f15f59cf80ea13e8b585a05e66a6435
- SHA1 16fe03500f9595aded49c3b2f649c811f29622c0
- SHA512 cba3f9c335b03a1a76a3ad0a189a493a0420245d8d711d4f6fc21ea2ab00983f13ae597dd1942d04188861f05e9cec0a25d5c139c9536aef312912bf067c93f1
- SSDEEP 384:/DuGGYyI/z/OXV17UPmt1SSdto+laUW6YrouZynsHgq3ba61M1Djk:/DRGYTqD7Smtjdto+laJXrou4nfsQ1DA
- TLSH T1A2A2E1F003DE9F6342365F1B71A359BB2F697C06DE0C8F51868932D8F4AA18A8F04395
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004a
- Size 39KB
- SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
- MD5 9a01b69183a9604ab3a439e388b30501
- SHA1 8ed1d59003d0dbe6360481017b44665153665fbe
- SHA512 0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca
- SSDEEP 768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO
- TLSH T13703023A5E3CCF1A84157A703950F6D9A8481E548E9D143B4F1AC7BF085DDE2209B6D4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 216B
- SHA256 8b6dbed96b918bd2a10c57ec38a2e41b22e7bf61aafc10de36ce1848e8d0c8ca
- MD5 1206d967d4273b3f6801463fb2ff1af8
- SHA1 f7088c9802bf9ae07698f0c87246088c9022b011
- SHA512 39e03ecd039d4a0bbb52d51b8f89ae546382d6a460b6ed7eb003e685e8c545e41ae5c557da5790a3cbf133b70e9a605217f8ca8d2ad0615370d71ccb69d5dc80
- TLSH T119D08C41A08F0206FB6A3EB0BCE430887A780E431C03AF23098320B40520BA77426B0B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 3KB
- SHA256 8c4bfc157c3fb225fd8eba74df9b7c6aab4c385b1e9f812d9fa7f32ac3f2a936
- MD5 eb91eaa386be2e3c0caccf407c88dc77
- SHA1 a4e0ee2d7301356b6ac3069971ef76ae7ad233ff
- SHA512 f9c630d4478fa56cec1442739ecfdda97b808a80ca00f42971d8aff3ac603a77ab2d4e71fb6d64d37849a13aef3bdc9e28dfcda1922061797ddaaa8aa4bb2590
- TLSH T1A261CCF7D3E4D6BD891156F49B256E1FCE290A24532D3C66C8D4AE5B53F2872D20038E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 12KB
- SHA256 344345c9e695f590ac7067902f2ca3b7475835126b757aa57965a8b6ecd26822
- MD5 fb61a6e77c87035e104fa976c0d9ea47
- SHA1 e816861c7c546ba11a61d12c0f799bde64acfd41
- SHA512 813a7a8a64e503e4c0fb5af7aeb0320dcdeb5910be99c0a257dae97f2fb1494afcde7c807c3b5aec38a8cdd00cd7d4cd6d37a1b2755818e9713fe8e7b57b25b4
- SSDEEP 384:Dl2d24qDFUZB2J1e4Jw3KetGaaI8GTA6qSmzzFIJIV+aGE22DrE1gYwoPEfxXNC/:ZNuFyv1RvE5
- TLSH T1C442AEF7C3E8D56DC91165F4AB256F1BCE1E0928432C3C2AC9D8AF5A93F2531D21264E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 5bae86cbe1b8e82f9f3836365624b90f0595f31215cfeb30579d5299fdc10d2a
- MD5 74eadb94eb44b403a6cbbf73fab8b42b
- SHA1 c65d6064895c55366fbc6c3e38e9b10ee5dd06ae
- SHA512 3bc039cab04b197fe9e52132bc2ca3100099b64c831e87679d0b2981727bd77b37b822e43736d36d2a3bf4b4908a3bc4e71f1016ae500204660cd681b1cd6049
- SSDEEP 192:IRaLX/2UTS7TEv7cpAPRp2qSx09BHsb+WNnqRUWyh2kljSkw7x6MNVyIsnAUgtaJ:IRwXCgwUXlSmrwYUN2kjSbPb8
- TLSH T11942E92EAD10697B4CE6D619FD25BB43E7F5102229952EC4E7FC8A2C14E76CD321B01B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 14KB
- SHA256 936f1b67b964b406f580547b5185ff42a178e592be3dd872780805453b8dda8d
- MD5 45bb0fabfaf6d8a0cd821252f8d20c34
- SHA1 2cf8107191a32e4d5bfdca376c77abcfabe2f477
- SHA512 80302beb3f68da7b42abfec40e1b26590c9627a408e02c476c0814fc83ff8856c75390848255adef2fb9a1b36afe82ee9af79f02f7e408edf3ff85335a3116dd
- SSDEEP 192:zRa3cBzX/2UTS7Cfv7Uw+PRpoqFgax09BHsb+WNbonWNxWFSWeDYVljSkw7x68NM:zRYmzX33QLXHjmrwbdxRvYPjSb5be
- TLSH T1BD62E82AAD1069BB4CE6D619F915BB57E3F1102229D41EC4E7FC8E2C15E76CD321B01B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 428f445fa33cdd6d2af817944f014500cbaea3fcc97f82a2d94ef9552afccfab
- MD5 7d0a6e0c89edad6c57b5aedce729040c
- SHA1 a006eaf4661a7e663c99c35fca85ce15e14ab005
- SHA512 7a921766b29db2c30dcd55cc7656c0d4ff327519fb1df93c5c9ccf137c9f6a90d5f0327e4b30a6d4377023e14861c8191cd422bd724d3f1c3d7492be45d50ada
- SSDEEP 192:IRaLX/2UTS7Tfv7cpAPRp2qSx09BHsb+WNnqRUWyh2kljSkw7x6MNVyIsnAUgtaJ:IRwXC3wUXlSmrwYUN2kjSbPb8
- TLSH T19642E82EAD10697B4CE6D619FD25BB43E7F5102229952EC4E7FC8A2C14E76CD321B01B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 14KB
- SHA256 68d349fc1797b24aea61f9b56aae2a167585496822724ca70646c0d084344fd6
- MD5 050e424e0e6fdaa6d6f846a32fd212c0
- SHA1 d55faf01fb9eca5802f9b705fe9ba3270a8be042
- SHA512 36ca261536d237cfc81d2ff19c3c6753d71bf344fcd8b55a4a61e9eb2a545deab9b7f39d67684cb40ab63ea97886495558a9aecb078c0d7c1ff7c8f4269de4f5
- SSDEEP 192:zRa3cBXT/2UTS7Cfv7Uw+PRpoqFkTxaYA9BHsb+WNbonWNxWFSWxuE+ljSkw7x6r:zRYmXT33QLXHekprwbdxRzEqjSb5be
- TLSH T10B62F82AA91069BB4CE7D629F915BB57E3F1102229C41DC4E7FC8E2C15E76CD321B01B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 13KB
- SHA256 2185f6a234180486211bff7977e34fc489700d130bfc272a8e557d62b81ba589
- MD5 e09a12c32077a8039a633f7442fdc689
- SHA1 efc6d3cf0fdbcc8a46f54d37dbfa96c8ef135bbb
- SHA512 62d1dea275644b84a9f2302da250b6011c7e7e97637714b49794d26e183d6d5fb825bff5488ddaa1f1ec8bca5fa8386b6e26b008604aea9ea276124a64131bd2
- SSDEEP 192:IRaLX/2UTS7TBv7cpAPRp2qSx09BHsb+WNnqRUWFSeQljSkw7x6ANVyIsnAUgraJ:IRwXCRwUXlSmrwYUReIjSbvbe
- TLSH T13052E72EAD10697B4CE6D619F925BB43E3F5102229852EC4E7FCCA2C15E76CD321B01B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 14KB
- SHA256 283898322687c9ff48e76549636fb68c8d3512b6652b70e576e76ab703959a28
- MD5 1855fd07cb4f953c3f99e347cd028a8a
- SHA1 333ad301632c0df5c8df43be05148bbda8f37a92
- SHA512 f6832cb8ad1a1438352e8f7ed479b9ca50be2b79e6f8010519ccf100be9b9d828e88b8d4b3c00244e83b53a938d81e39e540ec04a547e1e473e0338c425e32ef
- SSDEEP 192:zRa3cBXX/2UTS7Cfv7Uw+PRpoqFkTxaYA9BHsb+WNbonWNxWFSWxuE+ljSkw7x6r:zRYmXX33QLXHekprwbdxRzEqjSb5be
- TLSH T1E962E82AA91069BB4CE6D629F915BB57E3F1102229D41EC4E7FC8E2C15E76CD321B01B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 14KB
- SHA256 cc693b45f26b842f8c76eb2462f4ac8e182a7fd909819ce6c80829cd3589c625
- MD5 edf11c90cc15c41f12c726a068ffb30f
- SHA1 8330c372c61e65a09145dccabf35b57f5d7f973b
- SHA512 d415d3ec6af203852ede7aeebbf09e82c67e97dae7fa5dae3bc79da4ab48a1213b711673678e093cd9fca4ae8351ac347e6cc37eec342aeec52455e82c2905ee
- SSDEEP 192:PRa3cBzT/2UTS7Gfv7Uw+PRpoqFJPxaYY59BHsb+WNbo/ZRXUWFSWrZ+EljSkw7A:PRYmzTf3QLXHfkBrwbmURI+EjSb5be
- TLSH T1F762E72AA9206ABB4CE7D615F915BB57E3F1102259C41EC4E7FC8A2C15E76CD321B01B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 13KB
- SHA256 db78f6117022aa7e3a5d949cb4393f1cceae3048c91518763ffb715a58b8db76
- MD5 0f9dd91e38cd859cfc3265c8368cca42
- SHA1 b0262487eb7160813e47459b86b3dcf2edfa332d
- SHA512 2d99bc8d936695a4db1ff583e0af74af35cd30d5f612183452fb1d56597439f50a0c1df4e0e7213f599f2cbd395488850513e8a3943df7a8ecbf8b81f8b509b0
- SSDEEP 192:zRaLX/2UTS7Cfv7cw+PRpoqSx09BHsb+WNbonWNxWFSetljSkw7x68NVyIsnAUge:zRwX33wLXHSmrwbdxReHjSb5be
- TLSH T19052E82EAD10697B4CE7D629F915BB43E3F5103229942E84E7FC8A2C15E76CD321B11B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
- Size 17KB
- SHA256 844d3ec03467232c0b0b31852592e1d5bfd1b998c353219bbfd11d0dd2534c85
- MD5 248039e3512518ae98cef47428956f17
- SHA1 6b50102f479957e0c5bdc48e63949ea63a96eae7
- SHA512 56f6fa2b67411fc0644fb1c73d9ea2b6838fd695e4701b9f0083f58780d47178025347ce2472b1dab91a02f1555f53e8546aeb65ea769478c186dc3b4f42e72a
- SSDEEP 384:dXjRs7KxkXqKf/pUZNCgVLH2HfgslKR7pLuLcSjzOXODR0+ErU3DTHGENMAYw:dzRs7KxkXqKf/pUZNCgVLH2Hfgs8R7p4
- TLSH T13872E9676C4C9E770F94C6CCD8267F4FADB5024B66E9886483FA582503D5BCE110A2FB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 120B
- SHA256 0b60373be06993fc74162bf9f2ad3f3a88f1178a486ce8398310abc507dd1e87
- MD5 403dee5bf458974ee1666565aaf91527
- SHA1 8efa4cb5dafddaf1d160e67a09c66903d394f07e
- SHA512 2bdf6ce8a38725f3bf639366b4c4472523d91620117891d843f3692d7b584c24a3848df7af34405558a9a65ca1f0ce5cb97fc8fa543a5a6e6208764b558e77c4
- TLSH T1C4B01250800153A2E80B02F41182248C72549F50960E1B1643F07A22E8362608018050
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58c251.TMP
- Size 96B
- SHA256 a2583aaa696432af5342ad599ae0940c6fa309768616a5a75b2609c31dc21000
- MD5 e24ea388a1b93a7560f946bb0c0f94ff
- SHA1 2c039c01b669d6f809ee53be51e8cfbe046cd30f
- SHA512 5aa0a184f5b9aae7103bafd4a7ac5075e69f4ed64f4fab6539217fcb2e066a00c0f949f210d92e0b57b2ecf1d2d67381c13d4eeed6ca1bee8cd580cc8cc841e3
- TLSH T129B02208C0032302C08323B0AC80C0C83030CF32C203022382E02BAACC2C22000282B0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
- Size 96B
- SHA256 0d91d74f182c95196dd901c135e7e433501637fc3bffebb08304e9ad44d42eb8
- MD5 c6686e842f68e40af28efe01464ea8bf
- SHA1 bcbdf3bf6119a90e79e3e2160b5d63b8aa59e256
- SHA512 51f9afe7066fc45a3485796c93bb2ffe3f7cc115b917502df2f3cbd9677adea14e17292e81a71ffa9f5c365fce896d94e0ad8714dfc22b1a40933db68043b47a
- TLSH T15EB022C00C002CC2EC0003F082C2C8803B38BE00A303BAB2E3E0C03C8C832C8328E300
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
- Size 150B
- SHA256 a2fbd56f0882c51c64471c95e619b0336e2e240ce62b6de8ecae6517452b4776
- MD5 a75af68a2965d6c51244072062060a08
- SHA1 001d8a1af6c10dda5b516febe8ffb89f4a57afc7
- SHA512 d0fe5d26d581e5982d3afcd1f248ab31744475e0cb516dd18ea97cfb92dfef904a2178016dac6f0031d4516d2ac39aed4422da93618b61885346ee4e9ea9e552
- TLSH T135C09BD329559D6B4675EDDA303C762DD55783CC8CD4CEEC980895072178E37440167C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe5a28e6.TMP
- Size 157B
- SHA256 e974842aad083232ca43eca1783b96c5c760cbf2a0f5a8868dcf2fd5e5ec309d
- MD5 12d51b794b722d41605e9aa6dcf79aa8
- SHA1 3bf0fdb3d72d164d600fbd16d2338837725ea893
- SHA512 494a599c5673473b21256db5db3df2edca57464287cf573371a1121a6ae45c689337080f9333ea98aa448128cccc2bf34217598c422c0b206b155cf8be6a4d90
- TLSH T151C08CD3292418674731E8D62038761DC1278E8C8CC0CEE89808B1022078E23840063C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt
- Size 157B
- SHA256 7e33e099606cf8265bcd7692d6fb6a981fb7592c00cc8a0538ee7285598fa013
- MD5 a488814fac4cd3624f3be77dbf7ef035
- SHA1 5e735ddf13dd208816baee20212d7b9512f848a7
- SHA512 c5012c2a228a43c475aba22c1027e253c12ab6a657044216a8723be42431baba4ea15865d1a35bf56476d5f56fc53000c7355fba60ee7103337557cd706be730
- TLSH T1E1C08CE3201282AA0E78AFE96424BA4CE627808D88D2CCA8CA04540A28B8816090392C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt
- Size 241B
- SHA256 1c7b1d08ea607ddee2fdee872d90665ad2e1a2f7e604098e75dbea2deb9ce1d8
- MD5 f260ed66e4becba7068e01b058f6b3bd
- SHA1 44efe3ff66c7334e465de61e531429d0b2cd0796
- SHA512 266490740a2b6d573705036a60aa37b3a0bef213723fce3c013c2b835ae6b151232296e1e469c24a169d006471acc31ef26431fc3893e13806547048f84305e7
- TLSH T150D0A7DB51328A6A2B74AFA56434788DA127988E9CA2DC95CF44B08B28F8503890793C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt
- Size 241B
- SHA256 a32395f1ecc797727ae9a81c0efd4530d00233d36f5bbe278e88a535104dc974
- MD5 a6b77e813d93ed0c9c5400a3740a3ab9
- SHA1 6bc7fe65d6bdd92b04f9fc92f622bed01c8cafc2
- SHA512 faca5af686df4c5965b5539262b2128b1cb46646bd7018819b58d5f1e74abb33fb913b6d23cc71cbd5aae968b0f37252dd01827782539d6cc131da88cc56b1ee
- TLSH T11BD097D7403381691A389B98A428708C90238C0A88C7DC888900B01A34F8106850392D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt~RFe5a3990.TMP
- Size 164B
- SHA256 0146b44cddecefb3589c7c875415192fdc27aa5e949c16c5259b410dbd718ec7
- MD5 b18baf6889ad38deb6c1794bf8934df6
- SHA1 6413b51a1cfc00cd2e8bc91a18457a97cfcaaa04
- SHA512 1c3d5cfe4d1d4c6b579bc32429fc8a19e6923f476b8bccaf51e4d9188d36944ecc659bd969a516a71af6887214b6fe7cadff33bfd57e31f4d5352eb58c9482e5
- TLSH T1ADC080D3101243550F755BD56424B54CD5278C5D8CC3CCA4850574062474417450292C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\IndexedDB\indexeddb.leveldb\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 242KB
- SHA256 b552b1b777ac4c00a53382d4e1e37e7dc4a2d4258a3f563016c1255a70484c38
- MD5 04bc8e8d993bfa0c0515064ff89dbaa2
- SHA1 959fa3fc9e4af57d871bd1d6229fd1dee45fb525
- SHA512 3db6aeb70b730ef2f2ff8ae80d898021bc0c3100ecd283b6aa522a9c30a68e0d337f9c3e442b6c96a29ee0f7ff32b739600d985fce92cfed0d90ce6162894823
- SSDEEP 6144:UifuSNaHjImHUYpRs333pqFmUi21rSm8uUVNSlzYg:9DojImZ7s3sfi21b8j8zB
- TLSH T17F3422152C5AA8B3CF9F72089A6E27564F680E6110C6D048863B7F4268DF3E1D75BF78
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 115KB
- SHA256 15c0516a335d1bea63cc4a51763553de67e7cbe114a14b8f43d1bcef4525cc3a
- MD5 bee63115d76e827f794569d136f96704
- SHA1 0b97355f5aeee943f33b9d74cf31f42052e02689
- SHA512 8c225f36e7b9bcab2147db6d127252c1950de33a900c248a687b2c311dcdb4864601c6e3fbd9b1f95d8b2a47ffe42a76bf85d80c29616e461c79de7fcfc0ba1c
- SSDEEP 3072:SnFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:6FmUi21rSm8uUVNSlzY/
- TLSH T1BFC313007AE3E8F2EE5930447BEE2A149D6C4D818191C64157739D419DEF3C72FAAB39
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 241KB
- SHA256 9560a5f93feb3cc38ef21465a098f0e2c6a0404d0f99bfae965750d2c18bcd99
- MD5 6524f5256f716219d7ba3295836579a2
- SHA1 2730ca8c3d7215d00f858571c3c7f4a3f383af0d
- SHA512 a40f0d5cd2601f7891d992f178b9f7b8a9b37a93ac4e06f19ad646c6bf925352afd5f77ee39cef44b153f7ce8eb98835f674dccc33da5490033afa3446c875ce
- SSDEEP 6144:OSfuSNaHjImHUYpRs333pqFmUi21rSm8uUVNSlzYg:OeDojImZ7s3sfi21b8j8zB
- TLSH T1673422052D5EE876CF9F6208AA6E26564F240E6010CAD094873B7F45A8DF3E1875BF7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 242KB
- SHA256 68fb34d8d22ba42e86bda5999498fd87530ddd22d629b0a6639f485d8eabb659
- MD5 8cb9a66ad170151078a1c771b19a9848
- SHA1 414390321b14d1dc802e283ed465958f1d69062e
- SHA512 520075547af2dfdb01524bc4201bf2fcf4c031c5212b1ad39fb8e68c79cd3a4688e2721a9fca9f18a3b093c7aefee74adc744d6e63479ace1c9acf1aab14c8a4
- SSDEEP 6144:+EfuSNaHjImHUYpRs333pqFmUi21rSm8uUVNSlzYg:TDojImZ7s3sfi21b8j8zB
- TLSH T1A33422152C5EA8B7DF9F72089A6D27164F680E601086D048863B7F4268DF3E1D75BF78
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 242KB
- SHA256 9a2c03b94a4fc4335202d6bbe84695cd04264475c3df9715187bba21dfa663c3
- MD5 ea94ed0a80c2fe31cb8a4d783795130a
- SHA1 e6f53e309d203adf6111610787a7379a53daf14a
- SHA512 864500813e915383c897c71f4b6f77c824375e5e1ebf0df922ae974ba72e4d45ee1646d6421cb142fce05499c0a11ca77fe88842bf7292fafa592a55fc9af223
- SSDEEP 6144:XEfuSNaHjImHUYpRs333pqFmUi21rSm8uUVNSlzYg:gDojImZ7s3sfi21b8j8zB
- TLSH T1A23422152C5EA8B7CF9F72089A6D27164F680E601086D048863B7F4268DF3E1D75BF78
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 241KB
- SHA256 608a4cedcd61c735e86636562cd80afb60ed1cc5b420f4c56da9cf1c7a5385d1
- MD5 8d1c3664fe02c82cf016184c4619f0fe
- SHA1 ad9be162d1615346bc10615e40407cccbfc3daaa
- SHA512 ce8697ddd39cfe1e9e85118fe73c6fa82aaa0c5c09c65b4400d733a528254e5aabdbb02e45733d6a6d1914174ec5865c46d5af5306447f8d016c80672c17b2ac
- SSDEEP 6144:JSfuSNaHjImHUYpRs333pqFmUi21rSm8uUVNSlzYg:JeDojImZ7s3sfi21b8j8zB
- TLSH T1ED3422052D5EE876CF9F6208AA6E26564F240E6010CAD094873B7F45A8DF3E1875BF7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 242KB
- SHA256 ee4d455c59e89193a53cbb879358ba2656edef26484eb110f242a0b5be4b6f3c
- MD5 de0552aee06819e5100f560363821657
- SHA1 4d8828d2aad782dd59e0f9aca78e8e8ce35f5682
- SHA512 b00cea5aaf3dadc5eb101f35b36bc69e577b5fcd2518a855e752e8b807bab56c1f67896f6bd241e5f53a05d6af2701ecf08fdeede18b827d33f07123638bc6dc
- SSDEEP 6144:XEfuSNaHjImHUYpRs333pqFmUi21rSm8uUVNSlzYg:gDojImZ7s3sfi21b8j8zB
- TLSH T1363422152C5EA8B7CF9F72089A6D27164F680E601086D048863B7F4268DF3E1D75BF78
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Downloads\krypton-1.21.11.jar
- Size 848KB
- SHA256 1e8668a783aa82c45f2a70599f9576dec1b774a1d0ce0127a97f1af08b0cdb83
- MD5 11cdafebe480109110eab3aadfcf1dde
- SHA1 d0baafbce063b0009af23e4fa4e15f793197c0a3
- SHA512 0d907494f8f458b469f34c42e505a0d48fb84c655bb64662e22181f9298771ee3ee60774e44c928641f0910a3e863ff1f4b8f1a0642f7be30fa4d24d6a7832f8
- SSDEEP 24576:ALQx67RDARl6quP9M2j2hWS/vMFfef5Kcnh0:2WRl6tdyhZfYb
- TLSH T1FB051276B34D1136D887B23531115F156A2A63F0A417E17B6BB808962EED8BE1F0F32D
- MD5 SHA1 SHA512 SSDEEP TLSH