hxxp://spidersmartsystem[.]com/

Analysis

user interaction
yes
max time kernel
120s
max time network
122s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/09/2026, 22:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://spidersmartsystem.com/
Sample260908-2bxwhsysfs

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2632	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134333799184430853"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
5224	chrome.exe
5224	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe
Token: SeShutdownPrivilege	4340	chrome.exe
Token: SeCreatePagefilePrivilege	4340	chrome.exe

Suspicious use of FindShellTrayWindow 44 IoCs

pid	Process
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe

Suspicious use of SendNotifyMessage 42 IoCs

pid	Process
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe
4340	chrome.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 4340 wrote to memory of 3368	4340	chrome.exe	86
PID 4340 wrote to memory of 2632	4340	chrome.exe	88
PID 4340 wrote to memory of 444	4340	chrome.exe	87
PID 4340 wrote to memory of 444	4340	chrome.exe	87
PID 4340 wrote to memory of 4132	4340	chrome.exe	89
PID 4340 wrote to memory of 4132	4340	chrome.exe	89
PID 4340 wrote to memory of 1872	4340	chrome.exe	90
PID 4340 wrote to memory of 1872	4340	chrome.exe	90
PID 4340 wrote to memory of 1816	4340	chrome.exe	91
PID 4340 wrote to memory of 1816	4340	chrome.exe	91
PID 4340 wrote to memory of 1056	4340	chrome.exe	93
PID 4340 wrote to memory of 864	4340	chrome.exe	108
PID 4340 wrote to memory of 864	4340	chrome.exe	108
PID 4340 wrote to memory of 2588	4340	chrome.exe	109
PID 4340 wrote to memory of 2588	4340	chrome.exe	109
PID 4340 wrote to memory of 2120	4340	chrome.exe	110
PID 4340 wrote to memory of 2120	4340	chrome.exe	110
PID 4340 wrote to memory of 2460	4340	chrome.exe	111
PID 4340 wrote to memory of 2460	4340	chrome.exe	111
PID 4340 wrote to memory of 4680	4340	chrome.exe	112
PID 4340 wrote to memory of 4680	4340	chrome.exe	112
PID 4340 wrote to memory of 3128	4340	chrome.exe	114
PID 4340 wrote to memory of 3436	4340	chrome.exe	115
PID 4340 wrote to memory of 3932	4340	chrome.exe	116
PID 4340 wrote to memory of 3724	4340	chrome.exe	117
PID 4340 wrote to memory of 3724	4340	chrome.exe	117
PID 4340 wrote to memory of 1460	4340	chrome.exe	118
PID 4340 wrote to memory of 1460	4340	chrome.exe	118
PID 4340 wrote to memory of 5412	4340	chrome.exe	124
PID 4340 wrote to memory of 5412	4340	chrome.exe	124
PID 4340 wrote to memory of 5500	4340	chrome.exe	125
PID 4340 wrote to memory of 5500	4340	chrome.exe	125
PID 4340 wrote to memory of 3740	4340	chrome.exe	127
PID 4340 wrote to memory of 3740	4340	chrome.exe	127
PID 4340 wrote to memory of 4644	4340	chrome.exe	128
PID 4340 wrote to memory of 4644	4340	chrome.exe	128
PID 4340 wrote to memory of 5224	4340	chrome.exe	130

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://spidersmartsystem.com/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffb8e8ec728,0x7ffb8e8ec734,0x7ffb8e8ec740
  2⤵
  PID:3368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1720,i,13462312142006988260,16991917459990449736,262144 --field-trial-handle=1912,i,7115591691402276612,8269806564497668276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1908 /prefetch:2
  2⤵
  PID:444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2060,i,15400965679674229799,17779229574666389897,524288 --field-trial-handle=1912,i,7115591691402276612,8269806564497668276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2044 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2404,i,1580185524528917464,12442881798905806003,524288 --field-trial-handle=1912,i,7115591691402276612,8269806564497668276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2552 /prefetch:8
  2⤵
  PID:4132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3104,i,16765475751563199817,6994826756792451303,2097152 --field-trial-handle=1912,i,7115591691402276612,8269806564497668276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3100 /prefetch:1
  2⤵
  PID:1872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3120,i,18230629052233137801,177709995364939771,2097152 --field-trial-handle=1912,i,7115591691402276612,8269806564497668276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:1816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5128,i,6572208296174196520,4105279102848537238,524288 --field-trial-handle=1912,i,7115591691402276612,8269806564497668276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:1056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=5200,i,10578142329344814206,16869162846244845438,2097152 --field-trial-handle=1912,i,7115591691402276612,8269806564497668276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5604 /prefetch:1
  2⤵
  PID:864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5272,i,13104210726367646725,11546855022039495561,2097152 --field-trial-handle=1912,i,7115591691402276612,8269806564497668276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5288 /prefetch:1
  2⤵
  PID:2588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4036,i,12930947861434644177,9593915895409604258,2097152 --field-trial-handle=1912,i,7115591691402276612,8269806564497668276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5316 /prefetch:1
  2⤵
  PID:2120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=6044,i,18427672186638370847,16509107253074643537,2097152 --field-trial-handle=1912,i,7115591691402276612,8269806564497668276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6048 /prefetch:1
  2⤵
  PID:2460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6108,i,18421258537806407579,7171829341606800219,524288 --field-trial-handle=1912,i,7115591691402276612,8269806564497668276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:4680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3300,i,17217885781794936477,10998936479565912684,524288 --field-trial-handle=1912,i,7115591691402276612,8269806564497668276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3288 /prefetch:8
  2⤵
  PID:3128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3316,i,7229384106935871899,17917830550249615852,524288 --field-trial-handle=1912,i,7115591691402276612,8269806564497668276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6080 /prefetch:8
  2⤵
  PID:3436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3264,i,12511699739033984448,6626366925365528143,524288 --field-trial-handle=1912,i,7115591691402276612,8269806564497668276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3296 /prefetch:8
  2⤵
  PID:3932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=3316,i,7124155579066569106,18193816935060665971,2097152 --field-trial-handle=1912,i,7115591691402276612,8269806564497668276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6084 /prefetch:1
  2⤵
  PID:3724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6060,i,16127853238611805608,4040651597239696163,2097152 --field-trial-handle=1912,i,7115591691402276612,8269806564497668276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5904 /prefetch:1
  2⤵
  PID:1460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5756,i,5802612851345583305,5423162541864821449,2097152 --field-trial-handle=1912,i,7115591691402276612,8269806564497668276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5712 /prefetch:1
  2⤵
  PID:5412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5952,i,404402187544437443,15337422099654169098,2097152 --field-trial-handle=1912,i,7115591691402276612,8269806564497668276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6132 /prefetch:1
  2⤵
  PID:5500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5732,i,2569325190754833837,14948851502183825451,2097152 --field-trial-handle=1912,i,7115591691402276612,8269806564497668276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5316 /prefetch:1
  2⤵
  PID:3740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=3076,i,11722080605932904620,12476055750807621640,2097152 --field-trial-handle=1912,i,7115591691402276612,8269806564497668276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6044 /prefetch:1
  2⤵
  PID:4644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5316,i,15079951831269888091,5874156204902512756,262144 --field-trial-handle=1912,i,7115591691402276612,8269806564497668276,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3272 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5224

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4896

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2568

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 a7069d283914dacdf20f4c4e0d13f06b61277416aee72d22ea2c8621bc90c81a
MD5 bd21477dd9dc92ee9bb875e29ef788c4
SHA1 88ca371e025faaba4b61f7e61dfbd43aa2c5f5c2
SHA512 b92c31df60f0ee10c82992119f9654047ea7ec6cfbf0ea17484837fb859ccd8a4e5ea1234159b0e12b9f0b13192e6fcaca05c34ac1db0a04f503eafcf3723337
TLSH
T15BE02BBAD931AC6728FD172D60540747DA4013573B40C94F3A3CC10ACFB563A0546C1C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000021

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000021
Size 32KB
SHA256 2fb8f8fa1bbfdc823ad8712c5ea51f747023d20361d456fb90bd61b0d5da79f3
MD5 5370b2d91bd00e3b54e8542c8a1c98e0
SHA1 9e827f9c2f0bfeeb8de68982311fbc816bd5f696
SHA512 19f68ea33b222fa7e27ab2ba1b72a9e4bcb8bb657fe537696fd652f9c468a908d52c2412a2621a4183d9e3cf95774a48d838ee73d3ba4554048f269e0d491746
SSDEEP 768:bHxmjVXWfRhE00RVUTGYk2Hq0WqFqemekpjs8uNQ9:lmJ2Tk2dQemekm859
TLSH
T192E2E1C0241A3D4351D87EB2A66453B55DC508EA31E95FBB0F355AF02A720C886EBFF5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002a
Size 21KB
SHA256 b9e3d011c7087541d4918703e43435f9407b8113fef5bd6d60220438acb27210
MD5 ce8f091c5ea755b9c78dd50566e30240
SHA1 4483642b912a881350ce30b7f38f977a702b5bb2
SHA512 6d6a1a708d38d8caab4373e4e4b8eec25e7f816d530c832fcbb808e1ffa906dba65449c179a6d3f476d2e5a0015b521647256d2a96f068cf0f8f7d03e15de9fa
SSDEEP 384:k8n66HhfttS14euHakg0UlKBlHl3R3w/QfIOWPWEysKed7nFYg6gMzAz0R8F7rGF:k8bhft+uQ05FhAYAXuwxOgmArGF
TLSH
T188A2E1D1E0C64866E113015E7D9F57A7C5FAC8A13467C1E88F2978CADC563FD12B0832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 8aaf9e09fd72c9f697b498af38165c3f10e8a7ee0aca02a2c80d18b17fab9ed7
MD5 4c801f5c7ed7f352ccd16661cbdef328
SHA1 e47bb291d5949d76713957964a3241326590bde3
SHA512 99999bb58b874880505719de429a1850147b5dc4884f977eaaf774490227875955b4a11a3ffc1a2288093807b1341e93e1cc78a547111041a2bd080c2bbb42b3
TLSH
T1C631CAF1D1D49620FF485970B4BD8A0AF52D00463F2F2A5B83B9C776A72B2E8198F106
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\http_spidersmartsystem.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 4bd9f7b0ab19f00360443a86503661df05597aeb16d3c4321cea019568475d91
MD5 53f5abc61f43e70a6ed32a7f5790f3e5
SHA1 c53614c5a0c12c4f990a24c8ea84ef802c3d1bee
SHA512 5be56338828c8eb04f7d5aaf65cacfdb64ee1f326812d2635067ff5dac1f801578db4b47c252a25475a57a3fabb6bd4dbc97d7ae78fc702ec69a54242e04c1f2
SSDEEP 192:DYgJ6eSoiJ4JxPTP3J7gcIaIaEdMbeVyyvxr+wPEqL6TJHRxNLsedP3HPvw7CrVb:DYs6eSoa4JxPTP3J7gcIaIaEdMbeVyyY
TLSH
T1FA12C2E7C3E8827E982293F0AE212E26DD29451503BC3D4ED5DDDE5E17F1071D1A1A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 ef97100d87cd13ba5cfd4cc57e0e1c8a311b5686308703cee6ecaaee4ab1871f
MD5 8e8ca212fa7deb618551111f15381857
SHA1 63f5076650fe6a5b769db6d36a5f3d44b71b9fa5
SHA512 c2c039fb5094a0dff21a92793cefe6632ebf4f321f79a7b4c49e62aea5980847b797fde3f8aed83021212f0f6cebbbe4caf16a0583599fdc8a4b4ff06969d393
SSDEEP 192:/RmUxZwPv78pBPRpyRz9DHqLb+WNn2huwwY+HwaCvEBVyIsnAUgE:/RmUfwH4rXM58GSYFaPE
TLSH
T18942C72EA914693B6CDBD22AFD167B63D7F6202220D05E94EAFC892C15D75CC322711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 b475de641b3b034fd7b82f100402eb643efc54b144d1978e173a3df1630d16d7
MD5 edc5274ef5bdb4fb3223b4426035e6af
SHA1 1ecc0c403d514e29bb45f9e28325b2acdd5734f6
SHA512 8b8749a2f06a138a28b3bfed1773f3a82b2312544fa19cbc67f476800e6a6729b9c96c65182e9a7598002cc16ed1041182ca19f39992c6753ad3e6ce8aa8fec3
SSDEEP 192:/RmUxZw3v78pBPRpyRi9DHqsb+WNn2hu07UKHwaCvEBVyIsnAUgE:/RmUfwf4rXl5JGdUhaPE
TLSH
T11342C82EA910693B6CDBD21AF9167B63D7F6202221E05E94E7FC892C15D75CC3217117
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 a3c2b8fc251d99fd79f24c340beefc97584a5b88b12ea4d2b3d99210a5f91291
MD5 0c3d9554acbe40c5ffec1d7b073ad660
SHA1 024215b4e105f2e660a083909c1324bd3a984bb5
SHA512 c95c6e48885d6595258a3478961d017aa8a0ac8e9a15e1474a7f7d09638829fa934f8800d5cb60fc23933bf3eb5e2fee4c187bf5e693eff1af3ab75f8b961a1d
SSDEEP 192:/RmUxZw/v78pAPRp209DHqPb+WNn2hPNHwaCvEGVyIsnAUge:/RmUfwX4UXD5QGP2aGe
TLSH
T1BB42D62EAD14693B6CEBD22AFD267753D7F6102220D46E94EAFC892C14D75CC322711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a66b2af15181d7d923e7c22c3c03d345de44a31bf353881a48e467f9d9378dca
MD5 32741433fb3935a03c14fcbc2dfed2ae
SHA1 8d2f130a7e113fdf19162bfd5fe6181bce7024bc
SHA512 987da2dd0bce91fc93e063fa97ab4a336509333aa801534efb0c473a98fa1b5eeddb9053dc144ffd135664ad30b1a4bef897331f8b6738a081fc6513470d6d67
SSDEEP 192:/RmUxZwPv78pAPRp2R99DHqbb+WNn2hurf21HwaCvEjVyIsnAUgE:/RmUfwH4UXi50G62Oa9E
TLSH
T1BC42E72EAD10693B6CDBD22AFD267763D7F6102260D46E94EAFC892C11D75CC322711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 13KB
SHA256 3426e293396fa1424a09f9423424627a398157ab7bfc3ec06964ae1df493a1c5
MD5 be6f9d6a2cbcb56c02708e735863c266
SHA1 974f8ac2aeecd275c490a6e72bf1549cc608ea18
SHA512 5d06f958f136237f1a30c847cff1a2af158baf7b8f8804d6c444ebc126d222c22c946442ed853f321e6823a9c6894841dac031de891b36a87a920630130e9eec
SSDEEP 384:6QjOp7KxkXqKf/pUZNCgVLH2Hfgsl9RXODOB+ErU3ymHG/5Ut4vtEp:6UOp7KxkXqKf/pUZNCgVLH2HfgsL1OSK
TLSH
T1EE52E867648D9A3B0FC8D58DDC16BF4FADB6015766780C7452FA5C0803A97CB124A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000001.dbtmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\IndexedDB\indexeddb.leveldb\000001.dbtmp
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 06ae95e35181ffd5efdb528a0111868718d86d23a5f87e01421fc74bc06c7761
MD5 a5534fa11300c63dad8905bc1c1c128a
SHA1 0221bce56c84713ed26844cba1fc6f59deaa56d9
SHA512 fd76d2ec879a7ce8bd4cbd6f143e996ee24b8993c4ef5bb3583911e08076085625ad0e85b6a6de1aa224964ba146db05a895ba869bc3110d35443a68e0b9099b
SSDEEP 3072:PTGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:Pqm7Rkm1tYpBeh2BAoO
TLSH
T16DC31237AD65E83759B9B71AB04E0E1F1DF24DA7C930DE52C8D85B0423EA7CC1A48934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 b2e2c695625f52f18e2a86c6f3b5d33a559295702e81c8420ee7bbb44a29f27f
MD5 8b6da2b15122d763a61ef9f94f2a1cb0
SHA1 4cc892cbdbe0847e0d8055fb4a05dd4bafb77fc6
SHA512 6370454c1db4d961a93ad24dba4c4742128d784e2a291f2d998a3b4b891380e9aea594840df9f007cf2818723f66862515a2f7e9aee0ba95778efa1724cf4a40
SSDEEP 3072:YtGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:Ykm7Rkm1tYpBeh2BAoO
TLSH
T1D0C3123BAC65E8775DB9BB1AB04E0A1F1DF249A7C930DE46C8D45A0433FA7CC1A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 cecd9cb70bc2ce4bb8b875062763e232063f5c1fc84f4aa7906c3f5191b7af76
MD5 83b3f7be418c938ca68010361376b946
SHA1 c7e955da3e3fd7f6357cab4c995f5104fde87697
SHA512 438b5e92b2785f654f10fb59e0dff85e321e27a8eff5f9ba8ca4e9ec731cef2eb70f65e35ad77b9873088ad49f3fff15c9c09185f0cebad5ba215cb8a328b422
SSDEEP 3072:LGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:Sm7Rkm1tYpBeh2BAoO
TLSH
T1ABC3123B5D65E9775D78A70EB48E0B1E1EF24DA6C930DE42C8D86A0473FA7CC1A04A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 b76c2accb187113cd93823c2db226d2eb59f473286e2b91be5e56a16871da954
MD5 a9c468418a46cd8d2c0f07437c184e2b
SHA1 4cb9bf41201cda6427bdb8adb7a4c65b7312e0ff
SHA512 c5d06e2724a371fe130ef9cd8bd0bfa16e6faa627176ce7ff0baa92d26aeff1678c6df07909db8ee749d4a13e8a5d75d4c2146e26ba262b6c63635de1ef57b94
SSDEEP 3072:GTGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:Gqm7Rkm1tYpBeh2BAoO
TLSH
T137C3123BAD65E97759B9B71AB04E0E1F1DF24DA7C930DE52C8C85B0423EA7CC1A48934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download