c9401aaa442480b76fb1359bf485ac986ec5826b91aadb0d3183695c5f6c80cb

Resubmissions

10/09/2026, 18:05

260910-wphe4awvd13

10/09/2026, 18:01

260910-wlymxaea693

Analysis

user interaction
yes
max time kernel
900s
max time network
891s
platform
windows11-21h2_x64
resource
win11-20260513-uk
resource tags

arch:x64arch:x86image:win11-20260513-uklocale:uk-uaos:windows11-21h2-x64systemwindows
submitted
10/09/2026, 18:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
zalupa1.exe
Size 77KB
Sample260910-wphe4awvd1
SHA256 c9401aaa442480b76fb1359bf485ac986ec5826b91aadb0d3183695c5f6c80cb
MD5 329d6157f113af695e3d57b334afe9a7
SHA1 09da19a9c0085570c261f109190c9f80b15ed4fc
SHA512 3d5a83514dcee0c4324799a0b00582b48827fa5bb5552f905bcdcce97b510511ff78d540ff9959d77ce2c06a64765319206b944316f62251e701e31a7f5f75ca
SSDEEP 1536:GD/fpELdsrM88P9uTPYa0hutExOBr24z:a/GLdsrMFw0hh4
TLSH
T1EE732927DA36507EC26AC9F8CA874902CB72BC86479177CF63915DE20F25AD45F3EA01
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4764	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335371904716571"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
4156	chrome.exe
4156	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe
Token: SeShutdownPrivilege	1356	chrome.exe
Token: SeCreatePagefilePrivilege	1356	chrome.exe

Suspicious use of FindShellTrayWindow 58 IoCs

pid	Process
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe

Suspicious use of SendNotifyMessage 28 IoCs

pid	Process
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe
1356	chrome.exe

Suspicious use of WriteProcessMemory 39 IoCs

description	pid	Process	procid_target
PID 1356 wrote to memory of 1160	1356	chrome.exe	82
PID 1356 wrote to memory of 4764	1356	chrome.exe	83
PID 1356 wrote to memory of 3620	1356	chrome.exe	84
PID 1356 wrote to memory of 3620	1356	chrome.exe	84
PID 1356 wrote to memory of 1352	1356	chrome.exe	86
PID 1356 wrote to memory of 1352	1356	chrome.exe	86
PID 1356 wrote to memory of 3488	1356	chrome.exe	87
PID 1356 wrote to memory of 3488	1356	chrome.exe	87
PID 1356 wrote to memory of 868	1356	chrome.exe	88
PID 1356 wrote to memory of 868	1356	chrome.exe	88
PID 1356 wrote to memory of 4004	1356	chrome.exe	89
PID 1356 wrote to memory of 4004	1356	chrome.exe	89
PID 1356 wrote to memory of 4032	1356	chrome.exe	91
PID 1356 wrote to memory of 4032	1356	chrome.exe	91
PID 1356 wrote to memory of 1700	1356	chrome.exe	92
PID 1356 wrote to memory of 3952	1356	chrome.exe	95
PID 1356 wrote to memory of 1704	1356	chrome.exe	96
PID 1356 wrote to memory of 3328	1356	chrome.exe	97
PID 1356 wrote to memory of 4720	1356	chrome.exe	100
PID 1356 wrote to memory of 4720	1356	chrome.exe	100
PID 1356 wrote to memory of 5056	1356	chrome.exe	101
PID 1356 wrote to memory of 5056	1356	chrome.exe	101
PID 1356 wrote to memory of 3732	1356	chrome.exe	102
PID 1356 wrote to memory of 3732	1356	chrome.exe	102
PID 1356 wrote to memory of 1340	1356	chrome.exe	103
PID 1356 wrote to memory of 1340	1356	chrome.exe	103
PID 1356 wrote to memory of 3556	1356	chrome.exe	104
PID 1356 wrote to memory of 3556	1356	chrome.exe	104
PID 1356 wrote to memory of 4500	1356	chrome.exe	105
PID 1356 wrote to memory of 4500	1356	chrome.exe	105
PID 1356 wrote to memory of 4208	1356	chrome.exe	106
PID 1356 wrote to memory of 4208	1356	chrome.exe	106
PID 1356 wrote to memory of 3968	1356	chrome.exe	107
PID 1356 wrote to memory of 3968	1356	chrome.exe	107
PID 1356 wrote to memory of 1264	1356	chrome.exe	108
PID 1356 wrote to memory of 1264	1356	chrome.exe	108
PID 1356 wrote to memory of 4156	1356	chrome.exe	110
PID 1356 wrote to memory of 3732	1356	chrome.exe	111
PID 1356 wrote to memory of 3732	1356	chrome.exe	111

C:\Users\Admin\AppData\Local\Temp\zalupa1.exe
"C:\Users\Admin\AppData\Local\Temp\zalupa1.exe"
1⤵
PID:2912

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcb2fac728,0x7ffcb2fac734,0x7ffcb2fac740
  2⤵
  PID:1160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=uk --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1468,i,6788195955730145774,8175697682038481108,524288 --field-trial-handle=1984,i,5718292137586623725,17078890114900921370,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2024 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1664,i,6501896781653559614,13929882274787998127,262144 --field-trial-handle=1984,i,5718292137586623725,17078890114900921370,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1992 /prefetch:2
  2⤵
  PID:3620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=uk --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2408,i,13803150272912230043,17243679058963788876,524288 --field-trial-handle=1984,i,5718292137586623725,17078890114900921370,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2420 /prefetch:13
  2⤵
  PID:1352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=uk --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3256,i,8452420017912209155,17188116019474995524,2097152 --field-trial-handle=1984,i,5718292137586623725,17078890114900921370,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:3488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=uk --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3292,i,14769290925061700430,7673032587793745436,2097152 --field-trial-handle=1984,i,5718292137586623725,17078890114900921370,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3380 /prefetch:1
  2⤵
  PID:868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=uk --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4416,i,1747508977691595885,15758581658579776337,2097152 --field-trial-handle=1984,i,5718292137586623725,17078890114900921370,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4432 /prefetch:9
  2⤵
  PID:4004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=uk --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4764,i,7237850074050114824,2681465465393717080,2097152 --field-trial-handle=1984,i,5718292137586623725,17078890114900921370,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4756 /prefetch:1
  2⤵
  PID:4032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=uk --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5544,i,17844258682700671733,11030465077809965635,524288 --field-trial-handle=1984,i,5718292137586623725,17078890114900921370,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5548 /prefetch:14
  2⤵
  PID:1700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=uk --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5388,i,6858589390468169394,342594669992606233,524288 --field-trial-handle=1984,i,5718292137586623725,17078890114900921370,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5548 /prefetch:14
  2⤵
  PID:3952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=uk --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5844,i,6583102254760967918,15038091196183686725,524288 --field-trial-handle=1984,i,5718292137586623725,17078890114900921370,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5568 /prefetch:14
  2⤵
  PID:1704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=uk --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5608,i,17191757183985880404,15433644393553343171,524288 --field-trial-handle=1984,i,5718292137586623725,17078890114900921370,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5780 /prefetch:14
  2⤵
  PID:3328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=uk --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5564,i,14839848682722670468,14702693067626043529,2097152 --field-trial-handle=1984,i,5718292137586623725,17078890114900921370,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5844 /prefetch:1
  2⤵
  PID:4720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=uk --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3396,i,17237613899563636777,4257977048344523638,2097152 --field-trial-handle=1984,i,5718292137586623725,17078890114900921370,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:5056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=uk --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5436,i,1436481866534752833,6659947399858793634,2097152 --field-trial-handle=1984,i,5718292137586623725,17078890114900921370,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6076 /prefetch:1
  2⤵
  PID:3732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=uk --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=3636,i,16568704917156221050,18197677661874174931,2097152 --field-trial-handle=1984,i,5718292137586623725,17078890114900921370,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:1340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=uk --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3400,i,16708363684591319049,5076247204274104076,2097152 --field-trial-handle=1984,i,5718292137586623725,17078890114900921370,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:3556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=uk --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=3416,i,14459020508276172482,15417108665519737252,2097152 --field-trial-handle=1984,i,5718292137586623725,17078890114900921370,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5848 /prefetch:1
  2⤵
  PID:4500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=uk --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6012,i,2375028861220235675,7697009691566333888,2097152 --field-trial-handle=1984,i,5718292137586623725,17078890114900921370,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:4208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=uk --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=3960,i,12845499124953826429,13991195251226119228,2097152 --field-trial-handle=1984,i,5718292137586623725,17078890114900921370,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5868 /prefetch:1
  2⤵
  PID:3968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=uk --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6264,i,10635291517961693481,7264154163433585928,2097152 --field-trial-handle=1984,i,5718292137586623725,17078890114900921370,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6368 /prefetch:1
  2⤵
  PID:1264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3624,i,13119396303667032676,13964336992870872870,262144 --field-trial-handle=1984,i,5718292137586623725,17078890114900921370,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5440 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=uk --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=1528,i,7639278607265448876,5558526935282501047,524288 --field-trial-handle=1984,i,5718292137586623725,17078890114900921370,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5572 /prefetch:14
  2⤵
  PID:3732

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2100

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4900

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4136

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 e2863e545be7f20f2d765d13a040e4fbdf23f0d0d3094049c313f7cb91007744
MD5 fcb78259a3280c6ed7a0d0e0e2ce13b8
SHA1 1c475587d24ac52fcf2d192529f8bde43358b91b
SHA512 a0be7e77c1ef8424ef32b0054f714394b33e7b96940cf293c9efef405b6de0624d016797238bb52c777a669811d2394b0e8a7c65b58ac9d40e7cf22568154ec6
TLSH
T146E022BECE21FC3B1CFD0B5994584A86EE5103672650894F3B7E811E8FB167646C1C5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00002a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002a
Size 21KB
SHA256 b7582acf1f182c6a66e203cd6eee889d409cd05ff4950975128a32fc3e0c0418
MD5 e126007f6b835ef3a0916864cf476699
SHA1 04eb8318f173d6fdb5417e92645502d93966b8a8
SHA512 5e169a71116c41508283ee7224b7fee51c6b737a909c269e062e7494c9e7a853dbd4a762ddd9d9f104d79965d5570c2511df5b1c08c840c2037a4901af8a7140
SSDEEP 384:7zhykQ67ifiZgQPmqN64Q4PBZtjCiMEZiRkCYzMNFMvj686avLDo1bo0/GZl:5VQ6kU5Pmqk4xZTF2Ct6YLDkpql
TLSH
T1EEA2C01F966DC059082EB5CC9795B522D0CB8391E5CD106FD8F54C2FB4B277236E8B86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 b0d81d9ab5e5d3e6e460c7edb702e0a04208f7cc83f1e56fa98090ca46baf182
MD5 0eafaf4639df7e52ec3ebae6e75e7482
SHA1 a7bc241c6b100668ab3acd285de2b2c77cd31a89
SHA512 ae4ae6a60ee022121c21086a609372bbd6b85fbe7845fa97f21d88d0fac0b8ee61122ef2c4029bd8410e9eef65e5220d00a20bb4aafffcb50f4254e9f33a3cff
TLSH
T1F1213666915B9872EB667C3123F46D7A1B2C4203C936339A830DDFB427563706686369
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 4d61165d942d4c43a204224d9f605cb25e6400a62bf79a05c4816813a11857b6
MD5 b859b4ff0add2015d4164b86706a1c0d
SHA1 4cf02d47486263f752fd3fb260a0144be20740cc
SHA512 d6515c7302d984f3f0bb079ba6dbabf64ed161d90d8cb64aaa29f466914ba6df7cb8f8c6bf65824bda0d8581e8165282daf43266fda58cd261e7952780f27bf2
SSDEEP 192:D0uwTt0HJJKNwJmHaIgd2BLaPiSqfvqfPiNP9mwuuaqDNUEEd7NPbNDy:D0uwTt0HJJKNwJmHaIgd2BLaqSqfSfqt
TLSH
T11BF1ABF7C3E4C62DC91196F8AB15AF1FCE291924032C3C7689D4AE1793E2872E21575E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 f44a6d4b67a761ddd6c7adfca00657dba42b16f2fc668a0dad580b8f42f7c991
MD5 a6df4dda6ce81e5e4dc95f160311eee2
SHA1 8ad045b6e78b69751711b6f38af5ccbca06ff92a
SHA512 6dd809a08fdf7bd3a1b69c5b8c5786b0642c771a4d050e3b6b0973037068c2b9ae2a06caa61367514509d379e1de6486c5fa2329d328a9ac98de63316e7d48cf
SSDEEP 192:DilWKZIO8JwpjJpaIgd2BLaPBIu0RfvgfP9NP9mwuHaqDNGEVEZrabU:DilWKZIO8JwpjJpaIgd2BLaJIu0RfYfD
TLSH
T1C212BFF7C3D8C62DC81156F9AB256F1FCE290A24432C3C67C8D9AE1B93E2871D21565E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 b6e8e6d63c7a8e06b068540722e68ba51e6ac7e618a34cf87a97fa714eb9a635
MD5 62a9faafcca368eb016ac7a55fe8a005
SHA1 8a7bfa2be1b20da7edf9d2a5d13924390f697a90
SHA512 cba63e3f555e76aefc78f582e838df76e030ac037434b138ddd21788cd93f647262d8715280d3d92991c69b9963c856799efdf756eef9837a03b92fd2037367e
SSDEEP 192:DilWKZIO8JwpjJpaIgd2BLaPhQIu0RfvgfP9NP9mwuHaqDNGEVEZE:DilWKZIO8JwpjJpaIgd2BLa5QIu0RfYU
TLSH
T1FB02BFF7C3D8C62DC81156F9AB256F1FCE290A24432C3C67C8D9AE1B93E2871D21165E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 9cbefcde32a365976e344350b3939841935fe5fa3a4bf0e9498b88f130f27ff5
MD5 4d94e78fa7edc12c01517ee3cbe9f4f4
SHA1 1d270046b60cd539e8c5e39b61b0684c32f43948
SHA512 4c0cb9e8e1fbd2409b00e4ea55e55c754cda8c06c1b83ad3a85b2cf6fb02cfd2e98396aacf9a6bfbd44212874dbef60a71db110e69e556c3107774ce168e0412
SSDEEP 192:D0uTt0HJJKNwJmx1aIgd2BLaPiSqfvqfPiNP9mwuuaqDNUEEd7NdsgjhnOK:D0uTt0HJJKNwJmx1aIgd2BLaqSqfSfq6
TLSH
T161F1BBF7C3E4C62DC90196F8AB15AF1FCE291924032C3C7689D4AE1793E2872E25575E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 d1036207f603d277d4e6b2417837fac2b40530ef5963d4c826a932269c3b55da
MD5 1b25d8ded3776c4320bcfd3860e20ee3
SHA1 eaa2cfaa4891a99fc14c85bdfb608cf347f1ed94
SHA512 e681790c6cd84d3a1522182eb64bc4c91df14d202010cb1a36612ede9e5a74a324438d5f66439d4679d2395f87f3e55e789b9a8ee70a42536583585c10c2647c
TLSH
T1E751BEF7D3E4867DC90192F9DB246E1FCE7D0A14121C3C6288D8AE5B43E2872D21138E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 d95de8f7f8e985b61c0d1480135e9bb31890261f06cdc1cb1c89b31ecdcf7f53
MD5 8ce470af6502b827c2b5ba9c5d2209bf
SHA1 15147f29e9be8585b1d8f84083839b8cb5e4749c
SHA512 0d9b383c043fafae403104c3e3cce201c7b5530858c0ff4f1e6ea4940157c42944ca29e8f6be1a8a33bb13cf8ce36d259e6534b833331f5051aabb2b22332de9
TLSH
T1B9316B9792BFB967507F19AB1E04BC055A79B835014268E5DB66832CE0D26E32B224B3
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 2eed6cfc27efa76a4aff49d5e5d839b3805b4946989c5c81c0fb1899ed787111
MD5 d3fdab2b7492cf3cb848995492efa654
SHA1 d0320221ffdd0de839117c7b4c7f04d46631da75
SHA512 2fd6026ce003ffaae53ce7a1629321c954b04a361d879c5fc150c69635b5354c886a793947b51504cebbef70bbf247f7b8c98669e79228501999296cecb67b4c
SSDEEP 384:qBRUKP5gqIW0VHSK8UXerwUqW0Cb8eTazu8:o5go7rwdl5
TLSH
T14842B52AEA14693B9CDBC259FA227753E7F5202131D42E88E7FC892C16E75CD221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 ea313b57f0120792ed4919953281cb39f700be5a50a64eed9ecef97b17e7c8cc
MD5 42d64aef024f78b783d5509d10eb31d1
SHA1 2d4b5218fd060a7d1c94de42c85a385185c7395d
SHA512 d0fba757bac68d5629ff7e2ebca2c90757fb341f6d942c34644256b423fc9487090a9fe795dc0d106a29386d86f492c98f48093e90b4d90df8f5f694f2ebf1c2
SSDEEP 384:q4RUKymz5gqIW0VHSK8Ip0XzoLRK9VrwUmRTOl2Cc8eTaBuvR:Omz5goIarwpIeR
TLSH
T1FD52C52AF910693B6CDBD21AF9227757E3F5202531D42E88E7FC892C16E76CD221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 bbc35f450b9c91e676466d1bd32eddc50d76562696d1b34b8e72e6ab7cdef311
MD5 50861b3d5a231c8d85c78ec28aceb729
SHA1 6cbe03b0b43242add196f6dcc41e2d978cf86919
SHA512 699442084b0d6670c4a27a027a20754055987b0082cbf12721ec92b0c2935f792ae2760a90bbaaf9577197d27d62dc310d27b62a0d36655957f6bb1a2c010257
SSDEEP 384:q4RUKymz5gqGMW0VH9K8Ip0XzoLRK9VrwUmRTOl2Cc8eTaBuvJ:Omz5TDIarwpIeJ
TLSH
T1B852C62AF910697BACDBD21AF9227753E3F5202531D42E88D7FC892C16E79CD221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 5a7953fb50195bde48fc66ca2cc0a1dce5cf5524229532df5531238100597a09
MD5 800b64a3821a764efa54299d3cd81167
SHA1 451e6cd146ab51451c5f479bd3ef910e00d9ec8a
SHA512 3e435e03a183b518327912847fb2cd92d1a9e825ba2a620d64c795c1c47cbb13061dcecb8e5eb83e1beacaabeb3fd19992adc5f9a01a08d6b62a05c9f79faf52
SSDEEP 384:q4RUKymz5gqIW0VH9K8Ip0XzoLRK9VrwUmRTOl2Cc8eTaBuvJ:Omz5gDIarwpIeJ
TLSH
T1BC52C62AF910697BACDBD21AF9227753E3F5202531D42E88E7FC892C16E75CD221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 14162a626fff06f739e8885266a73165d679b41783d96baf5f2e0fbd6180a80f
MD5 809f77fc75f76f20be5500a323225f46
SHA1 8ef93534c22f4b285de1c31ec7533475a45c37d2
SHA512 7a293c365ed26ef4f362f9c26c7c126d7ac1ba8325b3f97d16350f35b6d442a23f558f17a55355f3421a78120afa0f7270ed3635e2544c828146da74c11f3039
SSDEEP 384:q4RUKymz5gqIW0VHSK800XzoLRK9VrwUmtSOl2Cc8eTaBuvR:Omz5gozrwwAeR
TLSH
T15052B52BF910697B6CDBC219F9227757E3F5202521E42E88E7FC892C16E76CD221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 ad776ceb013d1d0148f3f4ae3f69832561dfd062f56b0d7d3ca64c208453db90
MD5 e573833b2fa12cb6b858c098f948cc63
SHA1 eeb39f52c5937ca16ceb2058ebb4e22b3aa498d5
SHA512 0d78591c8206a8f92e90584ab5dace7d8800945a5cbf14358ed0d86ee305db579458861e3268f02d73c52d8b322ce907c2433112ef4188783dcab6abaaef9738
SSDEEP 384:qBRUKymz5gqIW0VHSK800XzxlErwUqWJOl2C08eTaBue:fmz5gosrwyYB
TLSH
T17E52C52BF910697B9CDBD259F9227767E3F4202131942E88E7FC892C16E75CD221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 d19a370ded9bbbc55644709ec09d8cf034ee9871018d369a21f88300292aa341
MD5 945fbc7a923343981f34e45e79ee2182
SHA1 9b9f8182160980a7ba562919900b27402e2801de
SHA512 b31e2c90aa713b25b9c51ba9da06122cb5860e6a0709f524043dde9ae14a4efcbf404a12632a1b5e141ecb4d3939c61c1aca123816c779f38051f1efd2ae1821
SSDEEP 384:7tjtw7KxkXqKf/pUZNCgVLH2HfgslsD7pLxLchj5EXODtw+ErU3UpHB4eQTl:7ttw7KxkXqKf/pUZNCgVLH2HfgsiD7pc
TLSH
T183821AA76C4C8D7B0F94CACCDC16BB4FADB5025B65E9886483FA581903D5BCB110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e8cdf0ba7726d041535fe075b92d3cedefd13868\458207ca-c914-4f5d-91b2-78167cf3d32c\index-dir\the-real-index
Size 216B
SHA256 518b1f4526472fdcdb6745bb7a3ce6e4b654c5b16fe536b6ed6987cff783eaf4
MD5 56fdec818a5191b752537b098cd8a6e6
SHA1 ec8c0644956b3ea06c4892123bf03d946324be3e
SHA512 55fbe187c7434f858a4181037500c051e58beb93acb596a756ed61ea1fc456144a6b6ed5f04033a9360c4b50462ffc9e04e7239d1d0f9e8d5b19da25a11c0607
TLSH
T154D08C18C9838FE8CC9C627030D508EA77B02827AF658C0782FC5CBCF842690885B644
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5999e5.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e8cdf0ba7726d041535fe075b92d3cedefd13868\458207ca-c914-4f5d-91b2-78167cf3d32c\index-dir\the-real-index~RFe5999e5.TMP
Size 48B
SHA256 c93b0b5671f299dba7bfd94c066ef83acba36fc94265833fa359246ee8c4041c
MD5 0ec442c066e4b991134849ecbb375359
SHA1 61658edddd5ff44b11e72a04b73de1fbde634f0e
SHA512 0ff352d553121ea5dbe90045d870cfa8f5dd200fd64a04c706b2d52c0be0977133a1d1df7e14abaa47499cdad384affed654b9f35c43fa7581744fdd8ba05a6d
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e8cdf0ba7726d041535fe075b92d3cedefd13868\index.txt
Size 142B
SHA256 bb14ff13ea5c24d21a5519165439f7bca3b0ca812da3b2c5f41f310e87f53a3a
MD5 96e4273de3ca7c8f2ff21ae13a629e35
SHA1 bf17e368b882cd1d47868de474142506481dff69
SHA512 6a12c7c4b4907e4dd004385266681ed7282af3cc255c29444426854d13a6eb878f0046c68412437ba3ca2e76338ad33d4247edfafbc4b27df70dae0321833210
TLSH
T1DDC09B7B5644A54D7D918BD144057334D3231DDC1856CCD58AC21454052F575B10FFD6
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe599a23.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e8cdf0ba7726d041535fe075b92d3cedefd13868\index.txt~RFe599a23.TMP
Size 147B
SHA256 1cbc630726b0e3724edbfc89def7bf9f0f76a8b360b20eae76973e4ec71d6418
MD5 7d44247572d3892e3a2b7765c31d57c1
SHA1 33f653d6bda3a99f3f6739dab0e42259e3e7b4cc
SHA512 18a3ae9709bf2ef90c1d862d6ef672d280f0f3eeefa5d1ebe059bf2e3d4bd15486b228c60eda8b2f1708d9bdb07c00e9fa6268974c4799a081f18c2499b67f17
TLSH
T1BDC04C6B5614A2497D914A9184156314D3231DDC18518D95868270A4153A562B10EF96
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 dd1a36d42f5d271a3585ef7d7077c72c99b6cc41d93ed310cc5ff1faa84fc7e3
MD5 a1214ad9cff3d312f7e962bbfeef04f2
SHA1 b5df152c1f0cb0c7f4c64ef8f5c2d84397e237d7
SHA512 493042d4fbc76ff0a13a6e08fe506c4697ad4c7a8d8b4be18fc29ac38e4f5a8bfadc84cb6fe19db09bc3e67f385fcdc0cb054eb64a126e0cab084e5596db7292
TLSH
T10EB01290C0029551C08602F4118264C872189F50D64A170153F0E936CC29250802D150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 0ef634e5d89f7c4ebdf83bec7fab9c564ece0f2b47f46c8ac1c601a85c70c3c1
MD5 49c8b2adba14d541ca1fba52e80b6bb2
SHA1 f8efc4fa9446b1bf256893df31eed37c5cd1a30a
SHA512 b4c0ec70c4dc2babaae78399ce5106bfcd1ce5a2127b46b62b8a66893c8a7466eef76c3bd3819fe1e98ec2b0677e7731c42f2c57119424a9f4d14d35765acb80
TLSH
T10EC01295C40D7111C05E03F431C2D8987224AF64EF1F23F887F47DA6A8759218116556
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe584513.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe584513.TMP
Size 96B
SHA256 3934081630b83fe4a4126e7612868e7c5e936ee64b0873ca235654e4767dcc29
MD5 36f1faf804a5169744624f86e5157225
SHA1 086d1bbb12c13a72c8888948f0c09fba0d4fa786
SHA512 d478d6d51f4914f5b76053ea18746caba6b2bf78758ba0c1e5305e0b11ca19f44b89bddf84c57ed0b6c6b3eec2d587465f3985b234f731281941f48ef2f51d52
TLSH
T108B022A8C0022233C08203B02AC880C83320CF20C2030302C3F00A22CC20AA0C22C020
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 1fd4435b4eb9c20fdbcad5c94be21d02dc9166a2abf7e97475cf5f645be97157
MD5 dbef9871f3853ac3ef81c4219a03582a
SHA1 2954e73342569628aa5893a76139693bb3e6db27
SHA512 6e9d9e5e6a2b03c080d79d9b6a7ec789c5a44357c9cb3476e02f02e95a2d7de07bbcecb6f745f794698ffa3752f71a02f9865dc7af7bfbf273e0d18fd152cd98
TLSH
T12BB0223802003222C2008BB323C338C033332C0C03A3C00280F000AAC2222220323282
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 243KB
SHA256 3a6848ad349ee9856724a5aa49e8cb0d18e023885e5de83744034e287e76b944
MD5 237a412bd8602d6aae530e4e4b5e42d1
SHA1 9667fff800f5d9298fe2703c3fe505cbdfc3fadb
SHA512 45944f73fa1a3a5ed476067eb688ade463a90179342c82d165cfaaf95ad5f70eaa30d722df05df257dfedbbdea626a96584aa304e2e1194d7453af5879a6f2d8
SSDEEP 6144:NYAs0GZu+ZZAKvP7M1m7Rkm1tYpBeh2BAov:2blZAK37n9oBGcAov
TLSH
T17F341237ED25EA2B85B9EA6B708D2D0F0EB068D3E450DBD995C8160873E77CD4952A30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 347KB
SHA256 622f66599a7e03da2e0d5c1f1cf4b796fcf9b23702433617b0492ffd58e7c430
MD5 5fb28c705727fe2079965a5b26c83579
SHA1 9f97af0b875fe828701c69c946e12b6b86aa7b39
SHA512 db5fe1b284d58e3dbb37086a073b6f7bc9dbba68dfc624523af2672dfdcc5ade8147576d5f682f2198d7c06e578d09c67b5b20781d3120e6d7dd5da5a473d81d
SSDEEP 6144:lh+GhL1GGDDEc4YAs0GZu+ZZAKvP7M1m7Rkm1tYpBeh2BAov:vxVAc7blZAK37n9oBGcAov
TLSH
T14E742337EE79EA3FC4B9D91B61CE2D1F1E71A8D3A810DA8596844344B3BB7C60552E30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 242KB
SHA256 0e0fc17aefe657b16386855b021178138d77f0175f0a359b791a4e51e9adfe98
MD5 51ca440d7172969ceeafdf1dafc4fbf6
SHA1 4a6a49a54c07787b3bbd165dad4cd15bf1782a39
SHA512 9d118df4c922bb282a20a191733ef699e4cea834e48f95978a1961620311249bf7ccd2527846423315cf00248a8615864ac1917269901460aff9f48b0e82ba7d
SSDEEP 6144:CYAs0GZu+ZZAKvP7M1m7Rkm1tYpBeh2BAov:1blZAK37n9oBGcAov
TLSH
T179341227DD35EE3AD5B9EA6B708D2D0F1EB068D3A550DBDA81C4160877EB7CD0942A30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 caaf133ea4f6d7157934639a1b5eb657a809d76651e78b83b0a3a0b89f507bd3
MD5 ebb06b35425e7b829336b7a4ee12d7b0
SHA1 43da1e3766c9087bcaf2003a62c05b484e9a487f
SHA512 4a85ad14237036c024e8f8af02de0403907fa5a47c6bbe4328290e3bd460717c63e5cc1a6be13b13f0a8415d40b6e20a1edf4478a20b112e1a220058ff400b98
SSDEEP 3072:IGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMe:jm7Rkm1tYpBeh2BAoe
TLSH
T1A9C312275E75A97759B5BB0EB08E1B1F1EF14EA7C920DE82C8D85B0437E97CC0A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 242KB
SHA256 aff42f9fc54e04d9756e37426fce5e6282a6c596977e896497a45db71e103195
MD5 09c930c95d03460e0819dfc3b952f449
SHA1 b9701cf227278cce83176c54fdccb78297179cef
SHA512 f79c0e62a99feac568ef687592494a04407eb3ed6476b87ac7c48cb8f071ef4d069f37dab4dea7a2f9cc98c3875cd44a2038466f62c26e98d3b8e3e6b015fc9d
SSDEEP 6144:3YAs0GZu+ZZAKvP7M1m7Rkm1tYpBeh2BAov:oblZAK37n9oBGcAov
TLSH
T1B8341227DD25EE3AD5B9EA6B708D2D0F1EB068D3A550DBDA81C4170877EB7CD0942A30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 325KB
SHA256 0d16df0c86a773356a5da04e567a4e9574c7be5a39feacf7c95e041a5a765826
MD5 57f54929e6780ceec60353ace85d10d8
SHA1 cd14570a1370f5b327fcea9d8c20b52ce74ade76
SHA512 1af940c48fdc57e78a625d7e32a7377def487112ef9b3f671aa7da926f917b7b3ea99122bfa80ecf0a29a70e8d7a3f360ae87e99604e1ca73f5525f0331d243a
SSDEEP 6144:Ch+GhL1GGTYAs0GZu+ZZAKvP7M1m7Rkm1tYpBeh2BAov:wxVoblZAK37n9oBGcAov
TLSH
T187641237DE35EE3F84B9991A60CE2D1F1E71A9D39810DB9996C45240B3BB7CA0953E30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 325KB
SHA256 e818717afddf06a450c8835384bcbcfef1d48ce9154c6dda11693dc80074a777
MD5 0e1927ab82a265bb7d3109886f4c1140
SHA1 6f90f69ac70de6257d9982f7607d0d1c45ba4166
SHA512 0cb0fd8cc19e5bc53119ec103ee489bda42da72d63cdf9d2be398f2e07ef9f3f4f051fb13fd28542da1104ab9acebf0ab09230375aa70ad499afa22be7643efc
SSDEEP 6144:Yh+GhL1GGTYAs0GZu+ZZAKvP7M1m7Rkm1tYpBeh2BAov:mxVoblZAK37n9oBGcAov
TLSH
T15C641237DE35EE3F84B9991A60CE2D1F1E71A9D39810DB9996C45240B3BB7CA0953E30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download