db8f17e83555cbcc559fe53c1de7d7a5f71ad31d82871174f492cb5705768364

Resubmissions

05/09/2026, 18:59

260905-xm4e8a1apf3

05/09/2026, 18:53

260905-xj3phsgq616

Analysis

user interaction
yes
max time kernel
100s
max time network
101s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/09/2026, 18:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
nfa.exe
Size 12.9MB
Sample260905-xm4e8a1apf
SHA256 db8f17e83555cbcc559fe53c1de7d7a5f71ad31d82871174f492cb5705768364
MD5 5dc44df5c65903f73762f4557e8e6265
SHA1 da3c9e82187ffe28e8e7ed51f3f39aaebef848f7
SHA512 0da38393aa033135bacc211424a56b65f9ab15eecdb2f832324c49d777c9c666fae0c3b0e386225a8acf252c60b56899e661a84c86566fcf9164acc7374b2c2f
SSDEEP 98304:5jt0wdlBoNuffH7SbFm/RLT0BvnUFjabNXram4wGG+kp4QbqK+ufbjBKH1P:NtD/uwH79ELb/pZZUK
TLSH
T102D67B12BB5A99ACC45AC4B0835A86736A3174CB0B35B9FF45C486383F69AF01F3C759
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2036	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134331083866640153"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{B39F1B8F-6646-4297-B5F6-DA57CEDEAA87}	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs

pid	Process
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe
Token: SeShutdownPrivilege	4812	chrome.exe
Token: SeCreatePagefilePrivilege	4812	chrome.exe

Suspicious use of FindShellTrayWindow 37 IoCs

pid	Process
3432	nfa.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe

Suspicious use of SendNotifyMessage 34 IoCs

pid	Process
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe
4812	chrome.exe

Suspicious use of WriteProcessMemory 49 IoCs

description	pid	Process	procid_target
PID 4812 wrote to memory of 536	4812	chrome.exe	89
PID 4812 wrote to memory of 4444	4812	chrome.exe	90
PID 4812 wrote to memory of 4444	4812	chrome.exe	90
PID 4812 wrote to memory of 2036	4812	chrome.exe	91
PID 4812 wrote to memory of 3512	4812	chrome.exe	92
PID 4812 wrote to memory of 3512	4812	chrome.exe	92
PID 4812 wrote to memory of 3500	4812	chrome.exe	93
PID 4812 wrote to memory of 3500	4812	chrome.exe	93
PID 4812 wrote to memory of 4776	4812	chrome.exe	94
PID 4812 wrote to memory of 4776	4812	chrome.exe	94
PID 4812 wrote to memory of 1832	4812	chrome.exe	96
PID 4812 wrote to memory of 1832	4812	chrome.exe	96
PID 4812 wrote to memory of 996	4812	chrome.exe	97
PID 4812 wrote to memory of 996	4812	chrome.exe	97
PID 4812 wrote to memory of 3680	4812	chrome.exe	98
PID 4812 wrote to memory of 2652	4812	chrome.exe	101
PID 4812 wrote to memory of 2652	4812	chrome.exe	101
PID 4812 wrote to memory of 1028	4812	chrome.exe	103
PID 4812 wrote to memory of 1028	4812	chrome.exe	103
PID 4812 wrote to memory of 3568	4812	chrome.exe	104
PID 4812 wrote to memory of 3568	4812	chrome.exe	104
PID 4812 wrote to memory of 2372	4812	chrome.exe	105
PID 4812 wrote to memory of 2684	4812	chrome.exe	106
PID 4812 wrote to memory of 1512	4812	chrome.exe	107
PID 4812 wrote to memory of 4076	4812	chrome.exe	108
PID 4812 wrote to memory of 4076	4812	chrome.exe	108
PID 4812 wrote to memory of 1084	4812	chrome.exe	115
PID 4812 wrote to memory of 1084	4812	chrome.exe	115
PID 4812 wrote to memory of 1264	4812	chrome.exe	116
PID 4812 wrote to memory of 1264	4812	chrome.exe	116
PID 4812 wrote to memory of 4456	4812	chrome.exe	117
PID 4812 wrote to memory of 1696	4812	chrome.exe	118
PID 4812 wrote to memory of 4456	4812	chrome.exe	117
PID 4812 wrote to memory of 4932	4812	chrome.exe	119
PID 4812 wrote to memory of 4932	4812	chrome.exe	119
PID 4812 wrote to memory of 1840	4812	chrome.exe	120
PID 4812 wrote to memory of 1840	4812	chrome.exe	120
PID 4812 wrote to memory of 4860	4812	chrome.exe	121
PID 4812 wrote to memory of 4860	4812	chrome.exe	121
PID 4812 wrote to memory of 3516	4812	chrome.exe	122
PID 4812 wrote to memory of 3516	4812	chrome.exe	122
PID 4812 wrote to memory of 800	4812	chrome.exe	123
PID 4812 wrote to memory of 800	4812	chrome.exe	123
PID 4812 wrote to memory of 2852	4812	chrome.exe	124
PID 4812 wrote to memory of 2852	4812	chrome.exe	124
PID 4812 wrote to memory of 4312	4812	chrome.exe	125
PID 4812 wrote to memory of 4312	4812	chrome.exe	125
PID 4812 wrote to memory of 3848	4812	chrome.exe	126
PID 4812 wrote to memory of 3848	4812	chrome.exe	126

C:\Users\Admin\AppData\Local\Temp\nfa.exe
"C:\Users\Admin\AppData\Local\Temp\nfa.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:3432

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffbe38cc728,0x7ffbe38cc734,0x7ffbe38cc740
  2⤵
  PID:536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1756,i,3679449034867834904,1633462186836373340,262144 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1880 /prefetch:2
  2⤵
  PID:4444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2320,i,4435213739776374236,17679735238405377389,524288 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2444,i,10783062119722712560,1829315145164492909,524288 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2332 /prefetch:8
  2⤵
  PID:3512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3264,i,5822801944682427312,13639100882588794347,2097152 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:3500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3296,i,13184535547095304682,17979510343945894057,2097152 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:4776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4452,i,2107826129970964420,10323565924934925040,2097152 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3824 /prefetch:2
  2⤵
  PID:1832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4576,i,6130332715640118644,7910289379682637651,2097152 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4636 /prefetch:1
  2⤵
  PID:996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5524,i,13874158616390299323,18173983196586011720,524288 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5532 /prefetch:8
  2⤵
  PID:3680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5828,i,3999304562453404139,7435914723597927658,2097152 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5976 /prefetch:1
  2⤵
  PID:2652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4396,i,7815723902647178178,1272203361813522425,2097152 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:1028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5552,i,11990241192603818625,15271036596230293975,2097152 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5784 /prefetch:1
  2⤵
  PID:3568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3336,i,1677643941390052435,2866956371518706191,524288 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3340 /prefetch:8
  2⤵
  PID:2372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3508,i,12259073690105673659,9950411459549820974,524288 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3364 /prefetch:8
  2⤵
  PID:2684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3504,i,11632360556531612904,17262484750375785553,524288 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3496 /prefetch:8
  2⤵
  PID:1512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=3244,i,11425890798484692311,4254493417529668426,2097152 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5596,i,12668713958139014830,13442513585416541640,2097152 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3136 /prefetch:1
  2⤵
  PID:1084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=3248,i,12877285748783722652,13568074368600272146,2097152 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4852 /prefetch:1
  2⤵
  PID:1264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5528,i,5158515743732106745,15118308055462621962,524288 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3356 /prefetch:8
  2⤵
  PID:4456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5660,i,9836155601977380754,9091920655930297920,524288 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5788 /prefetch:8
  2⤵
  - Modifies registry class
  PID:1696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6096,i,6655347041285041945,16704089276767455346,2097152 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6152 /prefetch:1
  2⤵
  PID:4932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6384,i,17821010599507399535,17380698247961258488,2097152 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6400 /prefetch:1
  2⤵
  PID:1840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=3488,i,6376559079468554159,3502150826191562699,2097152 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6528 /prefetch:1
  2⤵
  PID:4860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6696,i,9838102045226433261,12816955004077325693,2097152 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6164 /prefetch:1
  2⤵
  PID:3516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6860,i,386084258376400417,287377571119347484,2097152 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6216 /prefetch:1
  2⤵
  PID:800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6364,i,7082625947017168299,18081455715940348940,2097152 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4600 /prefetch:1
  2⤵
  PID:2852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6692,i,13622786658611519263,10007602957039849299,2097152 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6416 /prefetch:1
  2⤵
  PID:4312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=3500,i,10663041253796827560,7054469999786662659,2097152 --field-trial-handle=1884,i,4679505387767798911,14559418353369140968,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6348 /prefetch:1
  2⤵
  PID:3848

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4828

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4844

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 1b183f8eeb452caa2ada47244d4aea7ca129b10b577bd7185da6262d7ebe42a1
MD5 3e306abccaf391609c3ca93b019877de
SHA1 00aef408736b96860dfaf18af299072192bfb55a
SHA512 aff85effdc9266152270bf55c041462c620099cb452f1b38d8f81df2d83ea356ddfbaac52029c77feef23f2094e3350c66008899b6b4a77ace90df02819304fd
TLSH
T18DE02BA5C962EC6718FD075CA0151742D754139B3A44894F7A3DC00D8FB2A368586D5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b
Size 437KB
SHA256 a451b8791f9183f16a2b30959f9f69e20f35117f8ca6e34e463916869328f3c8
MD5 15d9ce7fe8b446c91cc0598983dde50a
SHA1 b2ad1e9b11a41f5176e3cc495dac68aa26e0955f
SHA512 39e14f23bbde8278b586057eeb648777afc1e6d11b71f3e5529688341f7868b61d0d7ef43cc925189a70def4a6b53e863a06fc8d36e7551c9a50745be6607529
SSDEEP 12288:9SyJNj5Vy52pw6eyroMIW3/dJhlzOH7pVUa0Uiku:9vJzV1pw/yroMfCIUfu
TLSH
T10B9423CFDB2108E7FE76C411CDAD9FE8049BA554056D8CB35BB6066D825A0808636FEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001a
Size 21KB
SHA256 b9e3d011c7087541d4918703e43435f9407b8113fef5bd6d60220438acb27210
MD5 ce8f091c5ea755b9c78dd50566e30240
SHA1 4483642b912a881350ce30b7f38f977a702b5bb2
SHA512 6d6a1a708d38d8caab4373e4e4b8eec25e7f816d530c832fcbb808e1ffa906dba65449c179a6d3f476d2e5a0015b521647256d2a96f068cf0f8f7d03e15de9fa
SSDEEP 384:k8n66HhfttS14euHakg0UlKBlHl3R3w/QfIOWPWEysKed7nFYg6gMzAz0R8F7rGF:k8bhft+uQ05FhAYAXuwxOgmArGF
TLSH
T188A2E1D1E0C64866E113015E7D9F57A7C5FAC8A13467C1E88F2978CADC563FD12B0832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000029

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000029
Size 94KB
SHA256 75beca22e3be691f68d73f511153c194b7cdae12357fe47f291606ff1ac0c1da
MD5 b23bb576db46d0526f4181ba916d330d
SHA1 66a84535490a417e310aaa6f742284d26aad0346
SHA512 9c4f69273638fabf9c1779f56e4f517d6fb8e112e09c4376cd48a9bf083aa46dd4a7ab3280118dd14d993d96c65a2027bac860a3d13fce94ebc1594e546aab6d
SSDEEP 1536:gQuU6Ef9+yWw3OleX+eQOqrGNZAjgzjBZZ4Dof6rIzLxWoJBH2s0FMChJA5fBt4T:5n1f95WKkeXiSZtFf2IbH2s0FMChihC
TLSH
T1AA9312BA192B22D7F2461F0E23672772F2BB64C85626650B0E16142B4BFF1FF4C5D486
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002a
Size 418KB
SHA256 4fc0822d4ecf5b32ecbd67840a6500e30a1945b3fa836daa941905aa9fcf4c59
MD5 53f382a02d0823addca37bca65293879
SHA1 ff5aa350108cda556a096da98f494d00cc27eb62
SHA512 8f024d07754a6bc40bf9107782b4a87e8aa8ff96b068e54f16a42cdc311c8b93a0038988edadcc12a70d86db83caca25caf3a2403990bdbad8ec2d2bc14ccdb8
SSDEEP 12288:9w2Rppj3AfqAJveXxRu2sc4JrbFMjBDAa:9wSpl3AyPRu2sc4JXuH
TLSH
T1FF9423A37D62EC14EE8BB0C10A5A140F9F5D482739BDDFE7D824CEF530456A4DA0B4A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_download.cnet.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_download.cnet.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 16KB
SHA256 6b2aba7a77d56a9e895989da18100194f2b7a2deaaca3a27be0e9862c95b756b
MD5 9c0f26e33ae893cf8e05c7035d785aad
SHA1 c930892b5fd9728da8d6050f578b3861b834be91
SHA512 2fe9d8ba8f27366d89539e862b24776d359b0650eed510861ae40ec2d09a266ff0912339dee8202076cc5eeb63b1f77a18d72b6182057f713e1ba3eb54f2ce2b
SSDEEP 384:Dm7P1YGtJdJZ5aym+eTPhRH2aIf2Xq25as79zIiph4u2OfmkDrYNqt1KNEfoNnfN:KjT5MbkfKGi7i1
TLSH
T16672CEF7C3E8867D891252F49B256F1FCE190A14432C3D1BC9D8AE2B93E2471E25169F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 d42ad5dc8c8bc9185400b4811994088ae48b4818f6a4db007b29e2d3acff3f1a
MD5 40cf94552569c9531b7a2fd50d0da11b
SHA1 9f7f1e49a3c9e63e70ad2c3d62545d5f06fd3feb
SHA512 75373157ade98109e85cbb8112a9b59d0d49dd724e475f86e3945f4d323613b99cc95299f3ec00d680aae723070e72500beedf5a7d0cfa482d201d7fb29fdd59
SSDEEP 192:9RAKcBzBkW9VvSv70pAPRp2dAuS9+Hsb+WNnmV4QHeJXeq2y3FgaaVyIsnAUgtaJ:9RAKmzBNf+gUXp8wQ7ep2Siaa8
TLSH
T15F52A52AAE50797B5CDAC22AF9517763D3F5102125D51E80EBFCCA2C15D7ACC322B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 584a773b2e5fc7438378244ca30f7cac393bf919985fd494a664f66ea5cf38c3
MD5 ca48e9b3fbffc617f9a939b268f239be
SHA1 25a7895dfdc50b3bc16fc26c339f9a202b4404d6
SHA512 dcefc762c16fc065ebe0463ce9d1d4f8ea1a8911bb9d46639c3bd569102df45e3cf500e7a54b86e477742fd0aa2529f769086902c90455c852758ba46b522a34
SSDEEP 192:9RAKcBhBkW9VvSv70pAPRp2dA/r9+Hsb+WNnmV4F6ETXeq2y3FgaGVyIsnAUgraJ:9RAKmhBNf+gUXH8wQLEH2Siaee
TLSH
T19352B52AAE50797B5DDAC22AF9517763D3F5202125D12E44EBFCCA2C15D79CC322B01B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 7ffa089cf5bc2c56ebc586842674c4a6f20e92b4ca905fbb9a627db5264aca7a
MD5 a1304dcde6d31467eab1b94ba5b24104
SHA1 53e01287987c44820b3b0013c19bcd3465e6ae70
SHA512 2f767e8ad8a86590b782191ebee5121e5806b067590b5561a61bfea7b2f6698c2336b253ef37fb5330271b20830479d21c91e87fcd968952d1e9c0764060d18a
SSDEEP 192:9RAKcBhBkW9VvSv78pKPRpodAnvB9+Hsb+WNUXmV4eFsaXeq2y3FgaCVyIsnAUge:9RAKmhBNf+YCXb8wRLsc2SiaCe
TLSH
T1B752C52AAA50797B5DDAC32AF9517767D3F5202126D02E84EBFCCA2C05E7ACC3217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 c34d51c9c5d52d3843d8fc8e54a0216772f03f23f21a27df96bfdf1172dd613f
MD5 a64ef8759e1b0b1afc269e5d1da3b5bd
SHA1 5aff7ffeabbc731eb5054789fedb08040a13a070
SHA512 d4db86c7f9cd9f9251600a78da9ebd4f9760971d809ff66c9fdf953407c42bd527ac73bf30abc777f4590511c45651bf337df0bd82d58dd07ce42acdba5ee549
SSDEEP 192:9RAKcBzBkW9V7Sv70pAPRp2dAuS9+Hsb+WNnmV4Vi2uXeq2y3FgaaVyIsnAUgtaJ:9RAKmzBNr+gUXp8wQf2Q2Siaa8
TLSH
T1D252B42AAE50797B5CDAC22AF9517763D3F6102121D52E80EBFCCA2C15D79CC322701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 9a63a02af86b793bc7723ea8579017000fbde21723150ca89cdaa0102d54150d
MD5 3db4d2ed90c53237037f403d9b6c10cf
SHA1 91febd0c861f52fac9b9c081f7e738838423da4a
SHA512 20a5acab3273b075187518ff1d84bdfb24fb19e0881b09c9805647d3b805dc5e2037a9ee22124705cac465e1ac8b91972117ed00cd2d49a563818ec658fd5de0
SSDEEP 384:W4jyR7KxkXqKf/pUZNCgVLH2Hfgsl/97pLuLcSjIpXODyJ+ErU3MrHGRxVJZU:WMyR7KxkXqKf/pUZNCgVLH2HfgsR97p9
TLSH
T183720A676C488E7B0F98CACCD8267B4FADF5024B65E9886453FA582903D5BCF11091FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 a6651be58eaacc9e51e8d24171824f2e79005edf504d6100db5d1a5a70540574
MD5 c21f2005730424bbee3b432dc25f1ef9
SHA1 849b642b8b4ce8457a1600a6d80d5e87f43cc96e
SHA512 94c3bc51a6ce825d5ab1b5f95f47c7a0cf60154fc503ef68f54d0d10446cb4012da6d8c16403092fc23f818124e06c3f72b07ab2e4327c25bfaa7907aa4cec94
TLSH
T1BFB0120080015153C04202B02546148871149F15D70A274543E0A926CC2596180240A2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ef4d.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58ef4d.TMP
Size 96B
SHA256 1717a58bb9f5bca3be7f905aad5e962cc235b701a2c5cc37f992c53a65f5dd91
MD5 09b1b8497161415606bcf30eb5555300
SHA1 eba6678ce1c316d41a7a4c535ede3356258f555f
SHA512 8d1e3c6f3f2e67cddc572ae80701a45c6deeb4e7348f2a1188e2bd7e4586ea6981e9a38808519a392b0b49fb8bcd169407de3cbb425cf5108224ccd57f432629
TLSH
T136B02202C2033203C82303F02C8C80EC3020CF28C303020283F2CA22EC20B3000202B0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 e97ecfe4e851a640efb51d959d4e7e1a5ddc8229c533948356f6ad4687274399
MD5 20c7c4e6b766fa0397bdef8fc8d9f323
SHA1 0a6efbfe2127b4dc96cc8c15fc7af96211149add
SHA512 d142a0223e520c7bf451475e5d52e93ce4375f54b9b660d7a80543fb5da067552ac0245269a514d0a6842ccb8a34610080921140b3d1aa2fdbc97c55578c93c7
TLSH
T1E4B012042400C103D10503F111C2424662112D1C030306134198C2A0580A90086152C1
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 150B
SHA256 8d3ff2f0f9f16682ec942541ce9d679d8bb46d297ea4c712a4633a78724d471f
MD5 8fdb4ae405986da223b74e41674cebe3
SHA1 246c615b61c4ac1351a7da0de05cc6cbb4c69b62
SHA512 9eaa93a4ca2920ab696f5af8230b7dd46ddbdb298dd79b848601f785e69a5cdc46af0f9b8ec5850d2263bf3ab6ba049626bb86aebbc09f280ac11a60fb27f03c
TLSH
T132C04CE31410859F4BB09EDC2019B25DD62B554C9CD5CCE8D94865462574A278406B2D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe59bde7.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe59bde7.TMP
Size 157B
SHA256 100691ff537b8888b4e0082fec549550f27a944dea21c1b903dcd0050acab993
MD5 fca058e86069f93f59511d4f624d3dd4
SHA1 9798160478963ec7a6d065244fc7cbf83ecc418e
SHA512 4c6807494f2c90d47c870d1529a4fe2285f097f3255d7cda3358c63bcf812460a9f99b4f4924454bec3df26d372da36b730b06ac0d87d41b87b8f83cd174bb9b
TLSH
T145C08CE30410459B4B709EC82028B28DC63F4C4C9CC5CCE8D80835422134A278005A2C
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 f6f85dd6e3fbec0edee8ee97de96d80a4fe68f7b5bb84abab94eb503be92b712
MD5 0a4118b6d9c36477494062a94776ad60
SHA1 797b7051957935fc404dfebd5ac6abdb83133d6b
SHA512 92a6cb25c0729a4f2557d6e79b0731783a8e73420bc868cf21aff54499e2004c7907c4b427e427afc797ff561605e01a9ee87a5eb0108ade02a816884f717bd8
SSDEEP 6144:/gyHdua++A6CsEoU/+Zn26tbtYqZ/ZLW3Ex7:BHllCjWZNYqZ/piQ7
TLSH
T1DA3423B3DFC50E33AD46C7F8391B46C5D7F204D2A06892409B6276DBBB93DD22406DA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 5e8657490e54b846f82db3ac561387d8833925635535faea7a042907edfd563f
MD5 5aa22dccc961feb83a5eba291e4487cb
SHA1 16b47961b9860b5055818eaa9e8adbdd71b36dcd
SHA512 904515745406b5ab261c117dc1aecab8c6c905a417791c14876718d9173c8193dba2ce4787199628c029276a32338dc8dd58daa2d738fb9f2d228a192ffe6e41
SSDEEP 6144:YlgyHdua++A6CsEoU/+Zn26tbtYqZ/ZLW3Ex7:sHllCjWZNYqZ/piQ7
TLSH
T139342373DFC10D23AD86CBF4391B4AC5DBF214D3E528E2449A617ACBBA93D912406DA4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 4150e561101a2b4a7985e434fd26ae1ea097ff33ce3a26098bb1efa5b3faca09
MD5 df98fb00bedb1be672092314bc5a7d3b
SHA1 92c2e551a23c068e0f881492106c171fe6691950
SHA512 c41e1ee8ad1bc5bc7c739a8404a28e37ac2f207aed9fb687ba52fe530682a2b1c31d5c98bb6f53f6e2b88a1414334e1d70615d5de5747dcffc37a112669117b1
SSDEEP 1536:bOLyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:Kqfd7NtZL8cHQRZEQ6Sps3
TLSH
T1F3C30237ABC21F379D92CF64B9130FD667B644A99030D301AAAD37FB7C93591684249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 36be8344ce2c797111afddf1bef61c0cf66c25f3d5af5a00ef10a7c17d3ddb34
MD5 b1074bc028b49ad7157b517b744712b4
SHA1 6b8a3c4074d8c27e9b64c726b82bcd6217f618ce
SHA512 3294123a52b504da428e28abb9f24dbe5663de8c1a55d5c5d9febec59b1679051a11acce68a04068ed3898ee04e0d6efd578aaeea05d265186ce0a1bfbe72073
SSDEEP 6144:+gyHdua++A6CsEoU/+Zn26tbtYqZ/ZLW3Ex7:gHllCjWZNYqZ/piQ7
TLSH
T19A3423B3DFC50E33AD46C7F8391B46C5D7F204D2A06892409B6276DBBB93DD12406DA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download