874132ec952bd3c81a206a9e47d3ef243f6c265661db8c9a724ebf964d31b9a1

Analysis

user interaction
yes
max time kernel
929s
max time network
923s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 12:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
background.js
Size 3KB
Sample260910-pc1ycabq6x
SHA256 874132ec952bd3c81a206a9e47d3ef243f6c265661db8c9a724ebf964d31b9a1
MD5 477c3776789514715af9c84afd259bf1
SHA1 f455a65d1274da6b6260a9b6ec499f404563585a
SHA512 4d416dde6720a333975309ed48d32c482b8fa2b9e5d745b7dc6aae8f83e43bc3ce23bca2880bdb03eb3ff2f470ceb6438d1382bcfbe8ae208c7e131beab9f133
TLSH
T17B71519E686A242963B173795A47C206FE17662746C9E659BF0CC1281F3801AC099FEF
MD5 SHA1 SHA512 TLSH

Score

6^/10

discovery execution

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
166	discord.com
167	discord.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4716	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335159442101476"	chrome.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{D21678AB-ED7C-4D5A-BACE-A438B6407D8E}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
5044	chrome.exe
5044	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe
Token: SeShutdownPrivilege	2220	chrome.exe
Token: SeCreatePagefilePrivilege	2220	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe
2220	chrome.exe

Suspicious use of WriteProcessMemory 42 IoCs

description	pid	Process	procid_target
PID 2220 wrote to memory of 3176	2220	chrome.exe	96
PID 2220 wrote to memory of 1812	2220	chrome.exe	97
PID 2220 wrote to memory of 1812	2220	chrome.exe	97
PID 2220 wrote to memory of 4716	2220	chrome.exe	98
PID 2220 wrote to memory of 4840	2220	chrome.exe	99
PID 2220 wrote to memory of 4840	2220	chrome.exe	99
PID 2220 wrote to memory of 3732	2220	chrome.exe	101
PID 2220 wrote to memory of 3644	2220	chrome.exe	102
PID 2220 wrote to memory of 3732	2220	chrome.exe	101
PID 2220 wrote to memory of 3644	2220	chrome.exe	102
PID 2220 wrote to memory of 2004	2220	chrome.exe	103
PID 2220 wrote to memory of 2004	2220	chrome.exe	103
PID 2220 wrote to memory of 4120	2220	chrome.exe	104
PID 2220 wrote to memory of 4120	2220	chrome.exe	104
PID 2220 wrote to memory of 1372	2220	chrome.exe	107
PID 2220 wrote to memory of 1372	2220	chrome.exe	107
PID 2220 wrote to memory of 3720	2220	chrome.exe	109
PID 2220 wrote to memory of 4868	2220	chrome.exe	111
PID 2220 wrote to memory of 4868	2220	chrome.exe	111
PID 2220 wrote to memory of 4432	2220	chrome.exe	113
PID 2220 wrote to memory of 3732	2220	chrome.exe	114
PID 2220 wrote to memory of 1460	2220	chrome.exe	115
PID 2220 wrote to memory of 4808	2220	chrome.exe	119
PID 2220 wrote to memory of 4808	2220	chrome.exe	119
PID 2220 wrote to memory of 5104	2220	chrome.exe	120
PID 2220 wrote to memory of 5104	2220	chrome.exe	120
PID 2220 wrote to memory of 3284	2220	chrome.exe	121
PID 2220 wrote to memory of 3284	2220	chrome.exe	121
PID 2220 wrote to memory of 472	2220	chrome.exe	122
PID 2220 wrote to memory of 472	2220	chrome.exe	122
PID 2220 wrote to memory of 828	2220	chrome.exe	123
PID 2220 wrote to memory of 828	2220	chrome.exe	123
PID 2220 wrote to memory of 4476	2220	chrome.exe	126
PID 2220 wrote to memory of 4476	2220	chrome.exe	126
PID 2220 wrote to memory of 544	2220	chrome.exe	127
PID 2220 wrote to memory of 544	2220	chrome.exe	127
PID 2220 wrote to memory of 4800	2220	chrome.exe	128
PID 2220 wrote to memory of 1740	2220	chrome.exe	129
PID 2220 wrote to memory of 4800	2220	chrome.exe	128
PID 2220 wrote to memory of 5044	2220	chrome.exe	130
PID 2220 wrote to memory of 3656	2220	chrome.exe	131
PID 2220 wrote to memory of 3656	2220	chrome.exe	131

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\background.js
1⤵
PID:1408

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffebdc5c728,0x7ffebdc5c734,0x7ffebdc5c740
  2⤵
  PID:3176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1700,i,11008248542749354419,11473251325957124306,262144 --field-trial-handle=2032,i,8187676238217368854,17665796938146619429,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2076 /prefetch:2
  2⤵
  PID:1812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2224,i,16931314237456653619,16928787681932501083,524288 --field-trial-handle=2032,i,8187676238217368854,17665796938146619429,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2232 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2412,i,2280437602685830643,16100610733946815624,524288 --field-trial-handle=2032,i,8187676238217368854,17665796938146619429,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2588 /prefetch:8
  2⤵
  PID:4840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3260,i,17252002404309579666,16714686923370316946,2097152 --field-trial-handle=2032,i,8187676238217368854,17665796938146619429,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:3732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3104,i,10075461166145272840,4155054930723487402,2097152 --field-trial-handle=2032,i,8187676238217368854,17665796938146619429,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:3644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4444,i,15668315824264954006,3805859931911865681,2097152 --field-trial-handle=2032,i,8187676238217368854,17665796938146619429,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4496 /prefetch:2
  2⤵
  PID:2004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4744,i,5673798182989950006,384934925644212886,2097152 --field-trial-handle=2032,i,8187676238217368854,17665796938146619429,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:4120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5508,i,1311690595323910706,15004965220038605964,2097152 --field-trial-handle=2032,i,8187676238217368854,17665796938146619429,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5520 /prefetch:1
  2⤵
  PID:1372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5704,i,12307033099407816089,890448779753346632,524288 --field-trial-handle=2032,i,8187676238217368854,17665796938146619429,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5708 /prefetch:8
  2⤵
  PID:3720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3368,i,15545934780880165559,9239728416544384019,2097152 --field-trial-handle=2032,i,8187676238217368854,17665796938146619429,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3404 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5616,i,11027137142303250269,6420119095444688715,524288 --field-trial-handle=2032,i,8187676238217368854,17665796938146619429,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5608 /prefetch:8
  2⤵
  PID:4432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5580,i,16573415025811043638,12645725124956768034,524288 --field-trial-handle=2032,i,8187676238217368854,17665796938146619429,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5588 /prefetch:8
  2⤵
  PID:3732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5584,i,18416154979168577197,16241103527644236099,524288 --field-trial-handle=2032,i,8187676238217368854,17665796938146619429,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5604 /prefetch:8
  2⤵
  PID:1460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5620,i,2454337051614375152,4910969119150347476,2097152 --field-trial-handle=2032,i,8187676238217368854,17665796938146619429,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5628 /prefetch:1
  2⤵
  PID:4808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6084,i,10759000883780220434,5950647531317612698,2097152 --field-trial-handle=2032,i,8187676238217368854,17665796938146619429,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5912 /prefetch:1
  2⤵
  PID:5104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3432,i,16463659365254120485,17343518218888804493,2097152 --field-trial-handle=2032,i,8187676238217368854,17665796938146619429,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:3284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5928,i,10973298819189821392,15652914075048026505,2097152 --field-trial-handle=2032,i,8187676238217368854,17665796938146619429,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3964 /prefetch:1
  2⤵
  PID:472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3384,i,16584407562729484124,8139383088333298030,2097152 --field-trial-handle=2032,i,8187676238217368854,17665796938146619429,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5916,i,8078435874627077358,279422842050502466,2097152 --field-trial-handle=2032,i,8187676238217368854,17665796938146619429,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5624 /prefetch:1
  2⤵
  PID:4476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=3516,i,11557692828918285695,6924697345393344298,2097152 --field-trial-handle=2032,i,8187676238217368854,17665796938146619429,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5572 /prefetch:1
  2⤵
  PID:544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3288,i,17114237437488244860,8876036344694188963,524288 --field-trial-handle=2032,i,8187676238217368854,17665796938146619429,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5612 /prefetch:8
  2⤵
  PID:4800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5628,i,15183484671088386720,10087012765415177466,524288 --field-trial-handle=2032,i,8187676238217368854,17665796938146619429,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  - Modifies registry class
  PID:1740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6472,i,10428563616403722838,5608085422293293748,262144 --field-trial-handle=2032,i,8187676238217368854,17665796938146619429,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6696 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=1148,i,2227067916873965950,3501844426942550264,524288 --field-trial-handle=2032,i,8187676238217368854,17665796938146619429,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6416 /prefetch:8
  2⤵
  PID:3656

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:544

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4844

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 7e46e65fb4bb7bcb2970aa70ef9ab8c668b41b97bbf2db44fdf89287aec60f28
MD5 550c40a3e0ca62fc7e3657c464632344
SHA1 bee2fa645d0389c97a023a267a6002a243343356
SHA512 c83192363899a62fcb612e4cb8f6c19f3598bfa1588536a10b6c59aaaee81e265732f250e294ea2e3893c96f1d8919c18b0d1c5eeff432d8e24b81755a9e8c4e
TLSH
T1D9E02BB9CC25AC370CFE472955940649E751139B2E916A4F363D920DCFB062685C6C6C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 b6dc76875e64df77083c929a142e67c45a40e365149c2374da80318352ecf7de
MD5 45f7a4009aa0ae58f8cbb580d6001c8e
SHA1 568e9539f14bd45ef9d008228c877fd33c63d52d
SHA512 76916736d64e562d1dae803198400d731136cd9d07eb00e13473eda6274e5e980551b69d400df23c3779e603181d9b72bac19f82e4940581479cfc40ec15b04d
TLSH
T13721525370821876DF803B77CD9A052F186D81E65F5F1F0A46D2C54591252B1E31CD0E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 792B
SHA256 8b7455c8be6cdd0f20e2d2b026c8a6402cebcc8a4118ed9254db4be1d4cf129e
MD5 f1433475c5f152742cf84653fc59a377
SHA1 09ed6c6f3b804d39ea6f42ac2e582ea56f691550
SHA512 aa674d8d55ccc6859c5faa910622b3b336a1b75388a82cebc8bcde103b24fd2f0caf4e229817d18f5d8d5515ae84cfad40b8843bc95f4bb323dd23fb5e85edc4
TLSH
T18501AC2030524479CF800773CEE756356C6C80A6AF1F0F1D0051D15591041B2E75DC07
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 31cf5af9e2a9d5e4f6144114776e0f7b08335d42757c4fe4b7e9f243c8a879e8
MD5 2e6bbd1f84ee6d91334afaa581953717
SHA1 b8d982e65249400495ee0089cab7f4122fa42578
SHA512 27a8dd7f49cb746c0e4f413918a8b2151975f8d530e85f0fd1ba46b2bdc2b3e2e3478c8981dd9b5a861ed1e6442eb4e7ec30b6576b93912d9aca5a8e66bb8f83
SSDEEP 96:COwcgiy2rNXVVC5+QNDLj+99gjm4sTEcHt4Sadkft1QKhM5Y7RS5lso9x9In8sWE:JLkAQFLK9oGV4EvOKRSZ9/80yo6Zj
TLSH
T1EEF1A1867293702CFB5323B589D9091B32FBC14D1B1B5E1BB691D6797061382A318FF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 90be1fc8d6eb2f3b021a0e88b27d8d1e86881405f1fe704d4054d50091cc6714
MD5 82235449e5b7e0400ad63dd1c7feeb82
SHA1 2d140ed5b2d85231d38058a592544d5e7a435fad
SHA512 23b36e4a12428f37070b88ecf6b45f42b9167efd12c317ce30ee5edb828da877312b3b141730d044ed50fac3d7c9d0d3d1628d91baccf8a7657ca5d90bd71b90
SSDEEP 192:DEsAKy4JhJDUByxu+BaaDUtYY9eJL47aPtvdmKfPlWNPhNuurotbR2rX7:DEsAKy4JhJDUByxu+BaaDUtYY9eJL47n
TLSH
T1C5129DF7C3E8862DCD5156F89B156F2FCE2E0918432C3C26C8D9AE5B93E2471E25164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 056ad7140391141bca20081c521bdc73d8f698e15e49e20caefbe480c6aef55a
MD5 54b87ee108997c529b695f2600c5c1bc
SHA1 2843624b5f287cbcc8d37640bdd3f055324e99fd
SHA512 7dd3c5ded847a0263517ed9b3af13c98c2df6851693721a29d57dd40232e1c0ef70f4b0b1de8d40b879dfc3ec306966350270f5f9fbb54d8147c73f07c442da8
SSDEEP 192:DEsAKy4JhJXaaDU0aPtvLfPXNPcC/VY98fJL41E:DEsAKy4JhJXaaDU0aVzfPNUC/VY98fJ/
TLSH
T1B9D1A1F7C3D8D62D8D4156F89B156F2FCE2E0918531C3C26C8D8AE5B93E28B1D21564E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 041f4f774058f2ba4a9fe8d36432e5682d3dd20c9f2bbaba1dfb4241d5140a25
MD5 551b585e765dcc7391c0b17fd2750a51
SHA1 e18defab3f2a19e00c9daef20d225ab2a50bbe26
SHA512 b6fd103d131bce47a10a1a9919dacd22f8f394408ae8237f97459c292407c2440c680d7f23a11602986d68cfddbadacf7a93fa59f6eb29ed656e9e84d573131b
SSDEEP 192:D0uVuqJJ5JwAt+jZ+BaaDUtYEd7ZkS7aPtvqmfPluNPiNuIautrXwSPwxCf:D0uVuqJJ5JwAt+jZ+BaaDUtYEd7ZkS7u
TLSH
T14F0279F783E4862DC91196F4DB15AF1FCE290928432C3C66C9D4AE1B93E24B2E25574E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 b69dd965f7d5bf8d61c65ee81d53d680a5a03e26f13ef2eb34fd8deb27c388b0
MD5 62c203d4b130bf66d10e25f961ab5f75
SHA1 07461d74b23fccf53690b482b1ef2d61abdc623c
SHA512 5884b315e90c43822b3e5e372cd488b2d5910b13f22eb3e8320b43c31c74656020204765b1301e270fb399bfcb1fafe7e2601bddbb5aafcd17d0d1ef8d97fb6a
SSDEEP 192:D0uVuqJJ5JAt+jZEAZvaaDUtYEd7ZkS7aPtvqmfPluNPiNuIautrX8GbUWjhJgK:D0uVuqJJ5JAt+jZEAZvaaDUtYEd7ZkS+
TLSH
T163028BF783E4C66DC91196F4DB15AF1FCE290928032C3C66C9D4AE1B93E24B2E25574E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 cea1e0ed7205be905119251ed098a6a6982dc273f591bced18b48d98b2292325
MD5 996d478c2c2097fb04a40eec71eede5f
SHA1 f77dbf5ba5f9c4e501033cb9030d42615f8ebdc2
SHA512 945c7c2f36cdc2384fd9d2b979dafcf37a1e94210eb576dc79cd48bf4436235b1ce6e5ffe630299172c5cfea8c29138f63a43e8d4f00d6c44a89aa3d014ac145
SSDEEP 192:D0uVuqJJ5JwAt+jZEAhaaDUtYEd7ZkS7aPtvqmfPluNPiNuIautrX8GbxCWjhJX:D0uVuqJJ5JwAt+jZEAhaaDUtYEd7ZkSa
TLSH
T148028AF783E4866DC91196F4DB15AF1FCE290928032C3C66C9D4AE1B93E24B2E25174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1024B
SHA256 c9c60960d4d0b664e7fd388d203f5da69a4c81736076064a38aaa3d1e9bca293
MD5 f8590106de402d63212e8eb206f59139
SHA1 b2652ad4b2f204e80f978bd70f6482e8656ba6ea
SHA512 bb3318bea169cf6f38908176c8330b482eb267cff458990f7deb8280f3e343feecb6f75e65c6329b7dc1184f1141cce406dc6cb10338889bab649be895d400f6
TLSH
T196117FA3E6BEA537617909EB0D007D05597ADC32018195F6CF6A822CA0D99F30B134B7
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 478c62357ec427d39554a03c53f9758c73f9e9f18a226f9dedf78a79070c2548
MD5 9e4d355b7c59595e4c67d7246ac5f0fa
SHA1 24a558e83da2db3073e5b329d7ccb18d66d9d338
SHA512 8c69b2c760ef4a97df5292dab6821a5cf99da886fc616534a16d0e3bd65e9bd0d6859e1707ee2ccabfb5a9d3cc39b095adc7e84d589071ca00968e1b91c20094
SSDEEP 192:TR8cBhj/TMRF/v7shAPRp22mUn9wHsb+WNnSZ4Vy2Lse+xTasVyIsnAUgtaJ:TR8mhj7WXY8X/PKwcT2GaI8
TLSH
T1B052D72EF954693B5DD7D229FA627B67E7F5102121942E80EBFC892C00E76CC621B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 a8cd18f6e6e0e854022ae1a17cea7ef51db0b6229b14e673300f29c165acb2e6
MD5 ba6d170a8f580e5bc6e7e36c7016799e
SHA1 215b830b8c37bc2150f641ddb58eb9930ecc4418
SHA512 acc06c4023f3c743fedbd7f4533e35b9c2314e41dfe9050d5a0a7b28c9dd508a4001459e717a520ae5067830cd74400b94c7c5ed91665ce4e095bcdc1a026e4f
SSDEEP 192:5R8cBzjIyjpglRi4v7shIPRpy2mbwglS9wHsb+WNYGyhBAn/Ajse+xTakVyIsnAq:5R8mzjvjp3kYgXzXKwkiYOage
TLSH
T13252E92AF81069379CD7D619F962BB67E7F1206125902E80E7FC8D2C04EB6CC721B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 6839e40cf0598d879046d869841dcb8ae7a9febbc8ab6a45b51dbe2913d87ab4
MD5 666b03798daea486aa1b45109b1d45e8
SHA1 918c8ee268f5513012d8cec55fd17461e97574d0
SHA512 5a4c6132be095f048c6b12c3bec4b7598d22fcd043095f77592286330c4fca522d3702146f643cea30afbd6b97ebbae97ce1051d957263adbd2cb97cd018af00
SSDEEP 192:TR8cBhjIyjpglRF8v7shAPRp22mUn9wHsb+WNnSZ4fMeAse+xTaIVyIsnAUgraJ:TR8mhjvjpQoY8X/PKwcLe1ase
TLSH
T16B52E82EF914693B9DD7D219FA627B57E7F1102125D42E80EAFC8D2C00E7ACC621B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 c35e4af3c7683f997f5b437c42075cba5abe575890caa1d56cdb7ee28991a138
MD5 e78fe0ca0f4c7d660758b10bbc6bf957
SHA1 71a55108f98a95e2558d83ad17ba5171b7c7309d
SHA512 468e80fa1ca357270cc162f74674495e359b38458b47f51bd389a898522d6c562a27b16311000905eb0a1b55a4c18468647b34d796beed86f991ba2094b152dc
SSDEEP 192:TR8cBhj/TMRF3v7shAPRp22mUn9wHsb+WNnSZ4Vy2Lse+xTasVyIsnAUgtaJ:TR8mhj7WfY8X/PKwcT2GaI8
TLSH
T10B52E72EF954693B5DD7D219FA627B67E7F5102121D42E80EBFC892C00E7ACC621B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 4f8ef39527e4354a00162b41ac86e8c9cff304ff60fbc4532c946eb0492ced2f
MD5 b142ca57695329ef7789e01bd0d4d657
SHA1 51acf0da13245048ab91e5f150474f6f861e66fd
SHA512 871efedcb71b4e284433a41c2161900ce7a0a748ab62fa6079af4ec4ae7da4ef8b7de8692ff362912e870bcf94830177863a4639025b5f227b2c29b615e4a03a
SSDEEP 192:5R8cBzjIyjpglRiWCv7chIPRpy2mkrwglS9wHsb+WNYGyhBAn/v+m2Bse+xTakVK:5R8mzjvjp3NQgXzUKwki32Eage
TLSH
T1D062E82AF81069375CD7D629F962BB67E7F1206125901E80E7FC8D2C14E76CC721B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 85984583e832556e0aec76f022a1901b3420278dc35c0a469e0f56eac6351616
MD5 b42e953adf8f4314c90e5a82996ac04a
SHA1 d0c8d53ba458f01f3bac68abab07e59c1cb3b0d7
SHA512 85d9d052fbc6e1efa3b44b19555e89c8ec923e685fe604411370177a01437fa8255eca462c726b001df7a0d8f08744398c925a9dd3ef0d33300804847a8da7b9
SSDEEP 192:5R8cBzjcyjpglRiCv7chIPRpy2mkrwglS9wHsb+WNYGyhBAn/v+m2Bse+xTakVyr:5R8mzjrjp3OQgXzUKwki32Eage
TLSH
T1A462E92AF810693B9CD7D619F962BB67E7F1206125941E80EBFC8D2C14E76CC721B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 379d96542283773f422c052abe7293924621df1604b63c9a59676e1514d2db6c
MD5 d066f854d368cbebca026e5da297c2c3
SHA1 4f2f84d54b0a8dfd273bbdb70bcde51ad5e2f12f
SHA512 613285c6b38983d33fb336394c5eff7edb692f60dfa433defdbf45524dd1c84cadfc8cba744a39b1c75482b318f7db6eaaae9842cfa8649a9ad00cece8442e41
SSDEEP 384:gCjUH7KxkXqKf/pUZNCgVLH2HfgslsZ7pLuLcSjCDXODUr+ErU3/NHGcmyqOqjmo:gCUH7KxkXqKf/pUZNCgVLH2Hfgs+Z7pF
TLSH
T15A7209676C4C9E370F94C6CCD8267F4F9DB5024B65E9886483FA9C2903D5ACB114A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 e36a4847671b275392ad7641ea6a866f5b7382d7e0505fc8b7520cbc5b659ed6
MD5 97027cfe77ba13ad387a5c26f1dbfda3
SHA1 08ff8e8c28a2aee9bd780cfc90fd18c169362a5b
SHA512 f3a93498ef50343ac64aa498e7acebd334a786e3ae0623af167b3ebf9cb557d47a83f2a5b97ae5c1e1ae8846009f080d6a87af1cdff87c3e0b2c6b7459827c70
TLSH
T133D0974BF01100A0EBA70BC21622A2DA87312C8C4C858848E106343800F9F42D721E63
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 226B
SHA256 df9118117d61caabd1d82f473bff65b5aecb05175254b13e57c4ca569b9bb583
MD5 5415ce5eff655ed2da216d61f1835830
SHA1 2f641d08cff2ff5136c99952d60ff882bfc56991
SHA512 057f8373049217b68bac723fae5617d93e48f6a51da31debac6768dc913593358600859f8ef49376dd04e2126e5eb309324f8f15e8251279baaa2a0099cb8558
TLSH
T1D5D0974BF01400A0EBEB8FC11622A2AA87303C8C4C998848F002043404D9F829262E63
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5a1f51.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe5a1f51.TMP
Size 138B
SHA256 34d9475961e1f9a815007c5b8038b1717110993fe7969a3e4419a89a231e7d15
MD5 0a1d89d21a043512d2bf6b944e1d2c73
SHA1 2f78e5973d9088d9381280410fdd4112147f140d
SHA512 c24ff5cf72346c75fa892a9d1ce99be17a8d4bb3dfbdd13e517cd455e2bc5a75b03e14de28488bf937c9b63b1b890b1512c982e81e66b2bdae61d57a39fd7f99
TLSH
T16BC04C97F44405519B5646525232B65987162CCD8C86C48DB513752410B9F136101EA6
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 e7419d478f02adb30861fe1db4c016d982abccf08a0bfe6caee0b764a0970c00
MD5 067d59c929cc9d7fc80828fba1857e46
SHA1 95abe2c9c33775623414aca75b219d1932f7100e
SHA512 5e4bc1cf6a062ded54c3d946347ea3970be5f130656adb685c8e8f37e2747e8507652ea0fbb48563cbadcceac7e42f4ef6aea46a3c118199e3513fa495ed2073
TLSH
T1F9B0129280459142C02203F8124B64887114AF16960E1B0293F0E92298262A08014061
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a311.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58a311.TMP
Size 96B
SHA256 3c2cb06b2d770029a7d823a856a44a25b8be6bc2127d06f96ccf48b4363f8c67
MD5 bef509ebdcb248477849208df87b107f
SHA1 2cda3710b145de9e1d44c5a925b17ddb3a83ee2f
SHA512 a4c89e0ea0362a999509943e9e98566ff2b8ce89d01d4e514efcce506b92f9f0474d029cf38ad55359249dfe9b98b79832e26119358ce64ad82fb0321799d49f
TLSH
T1D2B00296D5026292D04A03F829E695D97160DF25C603221AB3E05EA6DCBE6704526670
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 8af06739b8d8e6e4b67debdb1ac8cf176d376cc4cf0da324e99d6567f683109a
MD5 654794f3741d5ea152a7a6d5e211f9d9
SHA1 e5f4e0ad226c11d7f442fabbf933bd73ca3a6c07
SHA512 905633f9203643e236c361aab1b03972687ba7df327bcae664035e37b26e17954b4d2370bd6bf46d01df7a85cca222ed7a25d10e62a311470145fead7c1fb255
TLSH
T1A4B022280028280EE2008F38F2C3ACF8B3333C0033E30C03A8E080008E32383032220B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 ee2b5c6fa59c73d2ec949476e088d1d16dcf5010001ee1a12384ad18c4e4c5cb
MD5 a62bed8b9a86074d2c082b836f16e7bb
SHA1 cea24a815bdf35dcb7af3a5ebe8a39eb550cbf55
SHA512 98444eff21e189ac1f265b27efb9fba1dff098cc3d11cc47a045cb25b772e48f72388ecfeb3c6995af3abe29853a617ef2a691348525af475ef5f3142eb195eb
TLSH
T124A0029411480B89D04143759FC242F0A3547A201F171E515CD042849C641964252616
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 242KB
SHA256 e3384c14b5e176a5f2fcfd58a3fe00493921d445d06f198eab88f8f0785ca354
MD5 d5665e1f8c7aee1ee1b259f9d94c3e1b
SHA1 03a6d2eac2a5c23cbf98bcb4a97d05464cc9cec7
SHA512 f7f542991a3ae9c9e6f8eae61d26b9f5e9144fa3eb71148c10d95f63bfc3ee75a61ebbee1aa891fe9701015905cb2d4c4d313702e457aa8542e2727944990665
SSDEEP 6144:TQ5tTbRIn7e2f7vwO6wm7Rkm1tYpBeh2BAo/:T+38eiCD9oBGcAo/
TLSH
T1543422676D90E93B55BB8F6EB48F0F2F2EF35981E910C6D188D07E09D599B80490AF34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 243KB
SHA256 5eaef815be59f5da08d56d3339f7706788c2f40708548cd4384e7ed37879fe65
MD5 d03b551cdcc347ebf54f1c2a3ade59a8
SHA1 fc21a106261b08cd53bd0ec020ca26523e3beb20
SHA512 adfa3950e364ef2f537b1660c798bd061a882dee9008bed38d766f098ed1f7d76de5fc3597f76b6a5fb5e60335e66de919b193616717e8fdb8a024852fabe464
SSDEEP 6144:zfQ5tTbRIn7e2f7vwO6wm7Rkm1tYpBeh2BAo/:z+38eiCD9oBGcAo/
TLSH
T17034237B6D90E93B59F78F6EA44F1B2F1DF25A82DA10CAC598D43E05D1997804C0BE34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 243KB
SHA256 a0ba15e4bf53814c4e3c3c7aa331e41d5386226ee266662acd6708ea3efcf0f9
MD5 c3e94b0e625db0030844e021ae395084
SHA1 5b6e3cccc2bf3f2586455f0d572bb60d2d5a8e0c
SHA512 3c620159fb94a2d30daabddf19462b3fe4f31bd76e081e43ed25d6736d5da596efcb3ff28842ba47620d16fce97f3af9e130ed7755c4e927e1be1861a323c0c1
SSDEEP 6144:3xQ5tTbRIn7e2f7vwO6wm7Rkm1tYpBeh2BAo/:B+38eiCD9oBGcAo/
TLSH
T17A34237B6D90E93B59F78F6EA44F1B2F1EF25682DA10C6C598D47E05D199B804C0BE30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 242KB
SHA256 a9476bf66a0d265b8f2337b9c6d5d7455154d4de17a8d6e58e99a16629d5f64a
MD5 ce9cd09030a698dfee8ca9e9c5d4e1ab
SHA1 2dd4c99cbf4744492610b3c6f9e6af803a1c172e
SHA512 5d170e52534a931ba98db14bdda91723a7428786e3e520d24b8a6fda0aaf34be033e569d5d90375b08163004225e5745aa9871aec980890bfcf116c451663192
SSDEEP 6144:+Q5tTbRIn7e2f7vwO6wm7Rkm1tYpBeh2BAo/:++38eiCD9oBGcAo/
TLSH
T15B34226B6D90E93B55BB8F6EB48F0F2F2EF35981E910C6D188D07E05D599B80490AF34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 243KB
SHA256 5e77dbd2df0d5da44f70d3a196c0943b876fc80f4ae4b1215ec52625decaf824
MD5 19fd4bb27cf549fb6205d2b645890363
SHA1 951fa251320d067f235f36e3ad592b12a3e46773
SHA512 fb50422e07ccbb5db927c3039582460e372ebedba0a14aa4a8e5b156d284425c1db883a13a7aa8133d84c5ae6b37bdf656f2292132352fc4cd41befd75a189f4
SSDEEP 6144:8fQ5tTbRIn7e2f7vwO6wm7Rkm1tYpBeh2BAo/:m+38eiCD9oBGcAo/
TLSH
T1E034237B6D90E93B59F78F6EA44F1B2F1DF25A82DA10CAC598D43E05D199B804C0BE34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 243KB
SHA256 b358bbeb127e4bc41599dfa028f07c2883890a663dc487dbef1c5f5ffdad9698
MD5 05420b5804b803d190785060d5e39548
SHA1 e70eb9a09d1e2370c22369b9198bba1a40f760ff
SHA512 2f7067b90b370eedac70ccacbbaa7d13f4fd6990077aea0354fdef40ccbc20597c4eafe94589270a1aee4b7078259c18ee8bf602635b0a67b84803b97a7fe96c
SSDEEP 6144:ofQ5tTbRIn7e2f7vwO6wm7Rkm1tYpBeh2BAo/:6+38eiCD9oBGcAo/
TLSH
T1B234237B6D90E93B59F78F6EA44F1B2F1EF25A82DA10CAC598D43E05D1997804C0BE34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 76ef45f9ad3ce88cc5096ba26f2bce69b72b1db0f5bfb9e8a13025dc100a2f6c
MD5 8a175fb99850360ff211dc07a0216955
SHA1 fb81c9b05431c7739fe4b0c97c66a6d64d0f2f9c
SHA512 f92bc22ce190f6bf37d48b9764c3079ebedc1451146d913f909cee274a4ea6124242796808adf8ca913dc43ddd72b145b81701266679129fbd0be8dc55d082f4
SSDEEP 3072:NGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Em7Rkm1tYpBeh2BAoK
TLSH
T1C3C3123B5D65ED779979BB0EB08E0B1F1EF149A2C920DE92C8D85A0437EA7CD0A04D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download