Resubmissions

29/08/2026, 22:23

260829-2a7pbswbla8

29/08/2026, 22:20

260829-188tlsep2110

Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    29/08/2026, 22:20

General

  • Target
    model-picker-redesign-plan.txt
  • Size 16KB
  • Sample260829-188tlsep21
  • SHA256 7489a92d680786c0f541c5c0c670eace9b37a50e9da4e346545c7e1979ce5ad9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Family: SilentNet

    SilentNet is a Windows stealer written in Java.

  • SilentNet is a stealer written in Java 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 57 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 20 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 43 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 56 IoCs

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\model-picker-redesign-plan.txt
    1⤵
      PID:1444
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Checks processor information in registry
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:4800
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffa9c37c728,0x7ffa9c37c734,0x7ffa9c37c740
        2⤵
          PID:4496
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1752,i,10224599088255136054,4665762709018487115,262144 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1940 /prefetch:2
          2⤵
            PID:3080
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,17532914428976669221,1373647163424424679,524288 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2212 /prefetch:3
            2⤵
            • System Time Discovery
            PID:768
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2412,i,7486399045860027760,6077947683696756127,524288 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2580 /prefetch:8
            2⤵
              PID:4732
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3260,i,2746812346093535425,10510091966474727985,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3272 /prefetch:1
              2⤵
                PID:4632
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3104,i,5587859749439044092,10711728259396633548,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3284 /prefetch:1
                2⤵
                  PID:1780
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3852,i,17930364878750622557,7396721856379141822,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4512 /prefetch:2
                  2⤵
                    PID:4964
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4720,i,16741809229829919145,3723125159617532733,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4788 /prefetch:1
                    2⤵
                      PID:4976
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5128,i,14192773704692976523,13606875121136595143,524288 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5548 /prefetch:8
                      2⤵
                        PID:4360
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5796,i,1807896778226361528,11959060062034207480,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5820 /prefetch:1
                        2⤵
                          PID:4972
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4744,i,6446962867072788048,12801087699199371791,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5944 /prefetch:1
                          2⤵
                            PID:1064
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6068,i,2905026542069003311,10727462488172525072,524288 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6080 /prefetch:8
                            2⤵
                              PID:4608
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6072,i,7620151617114899933,9262466740440153216,524288 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4840 /prefetch:8
                              2⤵
                                PID:3888
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6076,i,8574695614079300450,527086631417765428,524288 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6040 /prefetch:8
                                2⤵
                                  PID:4632
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6080,i,15184426684931398767,16643521119441317135,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3624 /prefetch:1
                                  2⤵
                                    PID:3908
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4576,i,6128145244427443751,3452359638687400743,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4548 /prefetch:1
                                    2⤵
                                      PID:2332
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5896,i,6041992398516142541,15228283723896487886,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4804 /prefetch:1
                                      2⤵
                                        PID:3836
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5816,i,8256238142638846920,688114543954212439,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4856 /prefetch:1
                                        2⤵
                                          PID:404
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3424,i,4983582390882821323,15391865049985921604,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3936 /prefetch:1
                                          2⤵
                                            PID:3384
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3716,i,7767115171996756279,5361832005009988677,524288 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4744 /prefetch:8
                                            2⤵
                                            • Modifies registry class
                                            PID:3996
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6008,i,3214121229513924726,11018933043761643583,524288 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6012 /prefetch:8
                                            2⤵
                                              PID:4592
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=3960,i,1319225189780128382,12224110720956351250,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4836 /prefetch:1
                                              2⤵
                                                PID:1020
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=3636,i,3245057049790623627,15299689182279764005,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3408 /prefetch:1
                                                2⤵
                                                  PID:3636
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=3384,i,2180421050191471477,13626274556220862191,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5796 /prefetch:1
                                                  2⤵
                                                    PID:4872
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6272,i,16888776039213354642,14913539151996528591,262144 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6280 /prefetch:8
                                                    2⤵
                                                    • Suspicious behavior: EnumeratesProcesses
                                                    PID:4940
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6504,i,13380502071592279394,14475677125346051768,524288 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6516 /prefetch:8
                                                    2⤵
                                                      PID:4424
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6504,i,6876516611074415335,5726186961289258529,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4824 /prefetch:1
                                                      2⤵
                                                        PID:3932
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6560,i,17056044604972937158,15541127628212382709,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6248 /prefetch:1
                                                        2⤵
                                                          PID:4784
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=3288,i,4663117453584646621,12582613485507836597,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6676 /prefetch:1
                                                          2⤵
                                                            PID:4000
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6536,i,7177922734930311061,6809471721691896534,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5980 /prefetch:1
                                                            2⤵
                                                              PID:4872
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=6160,i,275709523190560782,6730379679489932749,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3376 /prefetch:1
                                                              2⤵
                                                                PID:4808
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=6840,i,13590257418637689063,1772880327876309180,2097152 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6888 /prefetch:1
                                                                2⤵
                                                                  PID:4780
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=7036,i,7167956043870028395,12404447949868568680,524288 --field-trial-handle=1952,i,13664281907236904297,7752251791295338544,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7040 /prefetch:8
                                                                  2⤵
                                                                  • Modifies registry class
                                                                  • Suspicious behavior: GetForegroundWindowSpam
                                                                  • Suspicious use of SetWindowsHookEx
                                                                  PID:2892
                                                              • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                1⤵
                                                                  PID:2240
                                                                • C:\Windows\system32\svchost.exe
                                                                  C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                  1⤵
                                                                    PID:1488

                                                                  Network

                                                                        MITRE ATT&CK Enterprise v16

                                                                        Replay Monitor

                                                                        Loading Replay Monitor...

                                                                        Downloads

                                                                        BookmarkMergedSurfaceOrdering

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                        • Size 6B
                                                                        • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                        • MD5 SHA1 SHA512

                                                                        BrowsingTopicsState

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                        • Size 414B
                                                                        • SHA256 8162f47fadc0fd5fb28c8755ba46560057b66b8314fb4318ebfaa76bf1f55349
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        f_000005

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005
                                                                        • Size 72KB
                                                                        • SHA256 3ca847c98e57cbac8e40711634967a7758b8e960064a3c76fc8fa76232b7a2fc
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00000b

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b
                                                                        • Size 165KB
                                                                        • SHA256 8200b78c7e364fcb96cdd00dea617b8858c73aaaa8f5648199ecb29f7fecb8a9
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00000e

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e
                                                                        • Size 343KB
                                                                        • SHA256 07afd00bc6b13e35f702104aebea04e61d7f90b8447559279895e5f72cabd471
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00001d

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d
                                                                        • Size 437KB
                                                                        • SHA256 a451b8791f9183f16a2b30959f9f69e20f35117f8ca6e34e463916869328f3c8
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000027

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000027
                                                                        • Size 21KB
                                                                        • SHA256 0035839f97544723c93fdc2a16786821bccbe601d1009453acb3742d59b5e60f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00004a

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004a
                                                                        • Size 39KB
                                                                        • SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                        • Size 216B
                                                                        • SHA256 8b6dbed96b918bd2a10c57ec38a2e41b22e7bf61aafc10de36ce1848e8d0c8ca
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                        • Size 3KB
                                                                        • SHA256 8c4bfc157c3fb225fd8eba74df9b7c6aab4c385b1e9f812d9fa7f32ac3f2a936
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                        • Size 12KB
                                                                        • SHA256 344345c9e695f590ac7067902f2ca3b7475835126b757aa57965a8b6ecd26822
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        SCT Auditing Pending Reports

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                        • Size 2B
                                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                        • MD5 SHA1 SHA512

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                        • Size 12KB
                                                                        • SHA256 5bae86cbe1b8e82f9f3836365624b90f0595f31215cfeb30579d5299fdc10d2a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                        • Size 14KB
                                                                        • SHA256 936f1b67b964b406f580547b5185ff42a178e592be3dd872780805453b8dda8d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                        • Size 12KB
                                                                        • SHA256 428f445fa33cdd6d2af817944f014500cbaea3fcc97f82a2d94ef9552afccfab
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                        • Size 14KB
                                                                        • SHA256 68d349fc1797b24aea61f9b56aae2a167585496822724ca70646c0d084344fd6
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                        • Size 13KB
                                                                        • SHA256 2185f6a234180486211bff7977e34fc489700d130bfc272a8e557d62b81ba589
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                        • Size 14KB
                                                                        • SHA256 283898322687c9ff48e76549636fb68c8d3512b6652b70e576e76ab703959a28
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                        • Size 14KB
                                                                        • SHA256 cc693b45f26b842f8c76eb2462f4ac8e182a7fd909819ce6c80829cd3589c625
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                        • Size 13KB
                                                                        • SHA256 db78f6117022aa7e3a5d949cb4393f1cceae3048c91518763ffb715a58b8db76
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Secure Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                        • Size 17KB
                                                                        • SHA256 844d3ec03467232c0b0b31852592e1d5bfd1b998c353219bbfd11d0dd2534c85
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                        • Size 120B
                                                                        • SHA256 0b60373be06993fc74162bf9f2ad3f3a88f1178a486ce8398310abc507dd1e87
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index~RFe58c251.TMP

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58c251.TMP
                                                                        • Size 96B
                                                                        • SHA256 a2583aaa696432af5342ad599ae0940c6fa309768616a5a75b2609c31dc21000
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                        • Size 96B
                                                                        • SHA256 0d91d74f182c95196dd901c135e7e433501637fc3bffebb08304e9ad44d42eb8
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
                                                                        • Size 150B
                                                                        • SHA256 a2fbd56f0882c51c64471c95e619b0336e2e240ce62b6de8ecae6517452b4776
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt~RFe5a28e6.TMP

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe5a28e6.TMP
                                                                        • Size 157B
                                                                        • SHA256 e974842aad083232ca43eca1783b96c5c760cbf2a0f5a8868dcf2fd5e5ec309d
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt
                                                                        • Size 157B
                                                                        • SHA256 7e33e099606cf8265bcd7692d6fb6a981fb7592c00cc8a0538ee7285598fa013
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt
                                                                        • Size 241B
                                                                        • SHA256 1c7b1d08ea607ddee2fdee872d90665ad2e1a2f7e604098e75dbea2deb9ce1d8
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt
                                                                        • Size 241B
                                                                        • SHA256 a32395f1ecc797727ae9a81c0efd4530d00233d36f5bbe278e88a535104dc974
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt~RFe5a3990.TMP

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt~RFe5a3990.TMP
                                                                        • Size 164B
                                                                        • SHA256 0146b44cddecefb3589c7c875415192fdc27aa5e949c16c5259b410dbd718ec7
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        CURRENT

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\IndexedDB\indexeddb.leveldb\CURRENT
                                                                        • Size 16B
                                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                        • MD5 SHA1 SHA512

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                        • Size 242KB
                                                                        • SHA256 b552b1b777ac4c00a53382d4e1e37e7dc4a2d4258a3f563016c1255a70484c38
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                        • Size 115KB
                                                                        • SHA256 15c0516a335d1bea63cc4a51763553de67e7cbe114a14b8f43d1bcef4525cc3a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                        • Size 241KB
                                                                        • SHA256 9560a5f93feb3cc38ef21465a098f0e2c6a0404d0f99bfae965750d2c18bcd99
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                        • Size 242KB
                                                                        • SHA256 68fb34d8d22ba42e86bda5999498fd87530ddd22d629b0a6639f485d8eabb659
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                        • Size 242KB
                                                                        • SHA256 9a2c03b94a4fc4335202d6bbe84695cd04264475c3df9715187bba21dfa663c3
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                        • Size 241KB
                                                                        • SHA256 608a4cedcd61c735e86636562cd80afb60ed1cc5b420f4c56da9cf1c7a5385d1
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                        • Size 242KB
                                                                        • SHA256 ee4d455c59e89193a53cbb879358ba2656edef26484eb110f242a0b5be4b6f3c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        krypton-1.21.11.jar

                                                                        • Path C:\Users\Admin\Downloads\krypton-1.21.11.jar
                                                                        • Size 848KB
                                                                        • SHA256 1e8668a783aa82c45f2a70599f9576dec1b774a1d0ce0127a97f1af08b0cdb83
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH