3bdc15f2d386cce4f11224e0fc5797cfbbd37246285d8c81b2a4499d25d1b51f

Analysis

user interaction
yes
max time kernel
149s
max time network
152s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
13/09/2026, 00:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
stremio-shell-ng.exe
Size 4.2MB
Sample260913-ashpdacf85
SHA256 3bdc15f2d386cce4f11224e0fc5797cfbbd37246285d8c81b2a4499d25d1b51f
MD5 47386bb4c85dad6a4b6aa63a03b9a265
SHA1 0c65d0a9a4cecc8f8cfa6c113ae40c169e811c45
SHA512 6983ef05920c99e6ef08cd8d6c03676f5a51d8a2df5d2a83afb4257dfc2bf6c9484fbfd5aa9af6563a61368409aa93cb585964a3def929443ad93de77dd20f6a
SSDEEP 49152:pCrpHof7N8h5onjPm5u+EEWEHAqndoO96BnHPzutEKPtf41oXh0Tqsb8YF4OnqJM:Es25QzN4XAaam+AgAaqdauaa5ip
TLSH
T1032619217A9A99ADC05AC07483478A736A7130DB0B39BAFF448456783F79AF51F3C358
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
155	discord.com
157	discord.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5224	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337329410482305"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
1272	chrome.exe
1272	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe
Token: SeShutdownPrivilege	5320	chrome.exe
Token: SeCreatePagefilePrivilege	5320	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe
5320	chrome.exe

Suspicious use of WriteProcessMemory 39 IoCs

description	pid	Process	procid_target
PID 5320 wrote to memory of 5940	5320	chrome.exe	86
PID 5320 wrote to memory of 4948	5320	chrome.exe	87
PID 5320 wrote to memory of 5224	5320	chrome.exe	88
PID 5320 wrote to memory of 4948	5320	chrome.exe	87
PID 5320 wrote to memory of 5524	5320	chrome.exe	89
PID 5320 wrote to memory of 5524	5320	chrome.exe	89
PID 5320 wrote to memory of 3520	5320	chrome.exe	90
PID 5320 wrote to memory of 5548	5320	chrome.exe	91
PID 5320 wrote to memory of 3520	5320	chrome.exe	90
PID 5320 wrote to memory of 5548	5320	chrome.exe	91
PID 5320 wrote to memory of 5416	5320	chrome.exe	92
PID 5320 wrote to memory of 5416	5320	chrome.exe	92
PID 5320 wrote to memory of 2376	5320	chrome.exe	94
PID 5320 wrote to memory of 2376	5320	chrome.exe	94
PID 5320 wrote to memory of 1136	5320	chrome.exe	95
PID 5320 wrote to memory of 1180	5320	chrome.exe	98
PID 5320 wrote to memory of 1180	5320	chrome.exe	98
PID 5320 wrote to memory of 2080	5320	chrome.exe	100
PID 5320 wrote to memory of 1248	5320	chrome.exe	101
PID 5320 wrote to memory of 4672	5320	chrome.exe	102
PID 5320 wrote to memory of 5768	5320	chrome.exe	103
PID 5320 wrote to memory of 5768	5320	chrome.exe	103
PID 5320 wrote to memory of 4640	5320	chrome.exe	104
PID 5320 wrote to memory of 4640	5320	chrome.exe	104
PID 5320 wrote to memory of 1272	5320	chrome.exe	105
PID 5320 wrote to memory of 3820	5320	chrome.exe	106
PID 5320 wrote to memory of 3820	5320	chrome.exe	106
PID 5320 wrote to memory of 3076	5320	chrome.exe	107
PID 5320 wrote to memory of 3076	5320	chrome.exe	107
PID 5320 wrote to memory of 3656	5320	chrome.exe	108
PID 5320 wrote to memory of 3656	5320	chrome.exe	108
PID 5320 wrote to memory of 5092	5320	chrome.exe	109
PID 5320 wrote to memory of 5092	5320	chrome.exe	109
PID 5320 wrote to memory of 5296	5320	chrome.exe	110
PID 5320 wrote to memory of 5296	5320	chrome.exe	110
PID 5320 wrote to memory of 2156	5320	chrome.exe	111
PID 5320 wrote to memory of 2156	5320	chrome.exe	111
PID 5320 wrote to memory of 1200	5320	chrome.exe	112
PID 5320 wrote to memory of 1200	5320	chrome.exe	112

C:\Users\Admin\AppData\Local\Temp\stremio-shell-ng.exe
"C:\Users\Admin\AppData\Local\Temp\stremio-shell-ng.exe"
1⤵
PID:3900

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x7ffd93dbc728,0x7ffd93dbc734,0x7ffd93dbc740
  2⤵
  PID:5940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1724,i,9160783736049969689,1010395361464408278,262144 --field-trial-handle=2088,i,457620672296283041,9795225176880561179,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2084 /prefetch:2
  2⤵
  PID:4948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2116,i,9297850597445623708,8232723601340932231,524288 --field-trial-handle=2088,i,457620672296283041,9795225176880561179,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2444,i,2591165184551151324,1619611917990158753,524288 --field-trial-handle=2088,i,457620672296283041,9795225176880561179,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2616 /prefetch:8
  2⤵
  PID:5524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3188,i,2605118446046382943,12507551839224054999,2097152 --field-trial-handle=2088,i,457620672296283041,9795225176880561179,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:3520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3192,i,5578770228513369913,3586322428147892295,2097152 --field-trial-handle=2088,i,457620672296283041,9795225176880561179,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:5548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4392,i,18280168490618785771,11913253442719546921,2097152 --field-trial-handle=2088,i,457620672296283041,9795225176880561179,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4424 /prefetch:2
  2⤵
  PID:5416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4716,i,1043757160757681672,10655544463670048458,2097152 --field-trial-handle=2088,i,457620672296283041,9795225176880561179,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4728 /prefetch:1
  2⤵
  PID:2376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5376,i,16995569705264743541,7272239216690354176,524288 --field-trial-handle=2088,i,457620672296283041,9795225176880561179,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5448 /prefetch:8
  2⤵
  PID:1136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5600,i,10492287703510652700,9120659338120157202,2097152 --field-trial-handle=2088,i,457620672296283041,9795225176880561179,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5460 /prefetch:1
  2⤵
  PID:1180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5852,i,14104583248473674379,6515780334319963938,524288 --field-trial-handle=2088,i,457620672296283041,9795225176880561179,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3900 /prefetch:8
  2⤵
  PID:2080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5884,i,2760900876480639551,646615305899737425,524288 --field-trial-handle=2088,i,457620672296283041,9795225176880561179,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3268 /prefetch:8
  2⤵
  PID:1248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4872,i,16432095029860593716,1088009541076721635,524288 --field-trial-handle=2088,i,457620672296283041,9795225176880561179,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4720 /prefetch:8
  2⤵
  PID:4672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5852,i,1795876887793354487,9449655956856601786,2097152 --field-trial-handle=2088,i,457620672296283041,9795225176880561179,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4380 /prefetch:1
  2⤵
  PID:5768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5472,i,12215793460030484780,5561657780568265626,2097152 --field-trial-handle=2088,i,457620672296283041,9795225176880561179,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5820 /prefetch:1
  2⤵
  PID:4640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3232,i,15762976334798521595,6967349799792895811,262144 --field-trial-handle=2088,i,457620672296283041,9795225176880561179,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3312 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3396,i,721366349293454875,3200310276922607477,2097152 --field-trial-handle=2088,i,457620672296283041,9795225176880561179,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5700 /prefetch:1
  2⤵
  PID:3820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=3320,i,15479046248771083541,569996199883283009,2097152 --field-trial-handle=2088,i,457620672296283041,9795225176880561179,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4872 /prefetch:1
  2⤵
  PID:3076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5840,i,723075908098678616,5722876983743236617,2097152 --field-trial-handle=2088,i,457620672296283041,9795225176880561179,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5956 /prefetch:1
  2⤵
  PID:3656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=3384,i,10163986954985750416,13341948978587358703,2097152 --field-trial-handle=2088,i,457620672296283041,9795225176880561179,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3380 /prefetch:1
  2⤵
  PID:5092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=3352,i,3232011201958755842,5703859389025102965,2097152 --field-trial-handle=2088,i,457620672296283041,9795225176880561179,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:5296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=3896,i,15279780531426866702,9386396880019623350,2097152 --field-trial-handle=2088,i,457620672296283041,9795225176880561179,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:2156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6020,i,14786713208467507787,14771716133808520446,2097152 --field-trial-handle=2088,i,457620672296283041,9795225176880561179,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5984 /prefetch:1
  2⤵
  PID:1200

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1716

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4072

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

27d0b467-86f0-43ab-81ec-ba90eaeb1bd1.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\27d0b467-86f0-43ab-81ec-ba90eaeb1bd1.tmp
Size 131KB
SHA256 e1d64942bc12328ca11214edcb3742730e4ed6d15fd31c30fe23fac549aca2ec
MD5 b05d3a2a5a6cc60ba9bd108aa072e450
SHA1 b1790b3f8cb8f6a576aaa6261413b15020adee0d
SHA512 6a945120e6e4c514857899ae9e9fac7abeb4a23c15294ab8c79119eccfeab7a27658eb5a998da4feec8ae7d49886a0105998a13fc7b51e32a6f2e96bd09e9d0c
SSDEEP 3072:LIvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLz5:zPtbmf1K49XLWbEPi4NTKlLz5
TLSH
T150D312217D01BCB8A9AEDB21A1902E15EAB8D94F953D3FE61CDE3F4C05A3699C304C53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 9880e4d05f9eef5dab6f1903ebcd69e8217dec5aa0ee782628685b1b5e9b6291
MD5 10f0f97d40f6684327658bdfe2d7e3c3
SHA1 4a27135bd22460994efff9d059e3aaee163adee3
SHA512 b9fa9b85228ad6b89d34e9428cbd26c44337f29c76e783559acbcca64b7b76f89cc7647d55e4ef8ec2bf547d3965a59db869ef266a018c556d4f325f6631e705
TLSH
T14FE02B5ACC21EC6708FD071860A50E46E601132B2781950F7B3D822E9FF1636119A82C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Size 346KB
SHA256 06fb30c34e3d7cb64ec821dd7d1eee69613b4a84c3841c081dee7143c151555e
MD5 e4bc0d7ecc0b43b6b8bd71ed0d8e894a
SHA1 27776f4cfd2ff01e98221769cb4aa554a2670e6a
SHA512 4c0956fb89b264ceb8dcc20a8cf905a4ae784195e78c306d2c0577d2e4c0548b6058ecda0516a089dc97570864728ab60503bffd804af5d0934e5f9c8b1fa475
SSDEEP 6144:ZPNyy2q1x/xjj1YO1RKSXVSFAsamiA6r/dsaRDDQ9fSoA9pT1c/i:qy2qhGORKNARmiRRDkJIpv
TLSH
T1EB7423DE4C0A0C9960EAE1034BDF477B3A4A44E7E0C5EC52987C1DD26D9F2627CED688
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 6eb35d979cd41cb72a3f16ae67d64cdaa74aec799cf3043a38a1a5288349daef
MD5 69de362d8804d8e5f24d412a528fd377
SHA1 c413a36f8375ff57e415fa93bd696d72230770f0
SHA512 004779aba596d6024fd85ebf2e9f2afadf217d54439275f07f16cfe310c4ebe6bab6d204154e7fad34fef43fd4c594f43b3292f33495a6769e65edd21412f83d
TLSH
T135C09B5401445421C325227414554AB625581D2401E1169653F1D1EDE587771E555D51
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 10a260f92cf1ecfd89f7c1838f19e7dfcc43a24a0d73f79c53c28f83dfbf635c
MD5 6f4662e4f0600f9df9672843e0c66b90
SHA1 8398779e089db148462a6e6d0eeb412344e27f19
SHA512 d335ed83b307bbb10343d8725076f91287558cf0b9f80b38e2fc833c72769bb819d27aa151af3c7fb14968fae8ca1ed91a08a8a06a24e75cab3fea3da971fc0a
SSDEEP 48:YALlqTqEhghBhXsbTRsfyVfoKsUXLs2gmzsMfsvosyKsKqzs/+sQcsDjhhnONzs4:DQB23qTYyV77rKicf6njhRE
TLSH
T1FD81CEF3C3D8862DC80156F4EB157E2BDD290A24532D3C56C8D8AE5F97F28B2D25065E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 9e7e8bead3e843dc0f9946f34e560accb400c61b6324989b367c9878f9b0981f
MD5 c9aa76b1662fed7e008051edec5c3aa2
SHA1 8158e489f875e2b38042b563e3478528344d9872
SHA512 7aedf0b6395d065c7be0ccca92586e63791519cc561e48c44e9f98e9cf38bc6277fc8287bac7c5c8b9442aa8a16f33bdf0bb8f5fab23026ca10960ebf4d25c3a
SSDEEP 192:BR8cBCxM4DjUUPBEv7uhMPRpSNNHf9DHsb+WNDTPF94TMej6etVyIsnAUgraJ:BR8mCxnYsgysX8dwn5efe
TLSH
T1BD52B62EAC10397B5CE7C22AF9517B97E3F5102135D01E84EAFC8A2D25E7ACC2217813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 2330ce9c0bbb71cd642db3365d1e5ca01f26567ea0eeee385f7c935cbcac1c86
MD5 fe2539dd0a3b285f626876a5335ff19f
SHA1 d33d2f8c9b6622bfc4b65c58f04579721c8e1d7a
SHA512 5c9fb9b7266cb794d34de83197e075865c2e6ee451cc5f22766d0c7982521f3a2220c59e730d41ecbafc8059dc023e413761fea26ecff7eea2f4d6bee0bc9c1a
SSDEEP 192:BRcxa4DjUUPFQv7uhAPRp2I9DHsb+WNnF90b6ehVyIsnAUgtaJ:BRcxdY0My8XDdwf0D8
TLSH
T15842B42DAD10757B5CDBD22AEA653B93E7F5103135C42E84DAF88A2C25E7ACC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 cadbf81ec548f2564ad9a33d2ea1d37cdd4bc85f6c29c810b7b61ad6406daa3c
MD5 439d5377263d6afd6ff416ff7cbee39d
SHA1 12a3ab863136b8db9e4b008fd519a981cf5ec68f
SHA512 b355034bac8d07a216ca625ad7a9d5b067e236d529f8a7cc708dbb7ec52a5e673ddf378a6528039bcc8169373e91cfe64e5df29cd7a2cfdf7c801602c81e1b5b
SSDEEP 192:BRcxM4DjUUPBQv7uhAPRp2NfU9DHsb+WNnF94RJYM6erVyIsnAUgraJ:BRcxnYsMy8X3dwfWY+e
TLSH
T11642C52DAD10797B5CDBD22AFA117B97E7F5102135C42E80EAF88A3C25E7ACC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 aac45d5377de2db7d86875bebefad47b11080c93bb35aeb24db2bd8bf68dde13
MD5 a52a71949f8f869a2e3737787e254a6c
SHA1 16fa668b08c5bc5d20ffc05280199df21e55e76d
SHA512 37452cb528e29b4d9df8835266c71187d932e1634a3732d7f74ca001690a35cbe0b39d1adfc86b21e8830b88c42ee67b722ec656819e1538a11389a20e0973fa
SSDEEP 192:BRcxa4DjUUPBQv7uhAPRp2NfU9DHsb+WNnF94372p6ehVyIsnAUgtaJ:BRcxdYsMy8X3dwfq2l8
TLSH
T1B342B52DAD10757B1CDBC22AF9557B97E7F5002535C42E84EAF88A3C25D7ACC2217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 ebfb6f3a3996054cc36166103e9490bf6312adf13c6b6d4acd53912aef3550b1
MD5 a08ac751cd6d875b8d43741b96a7d4d4
SHA1 1bf1d7c94892103d88d24d359f3ed1f7cf357a13
SHA512 db882c6662cbf97ec16d97f555009173bb9dd76bb0b2fa85310681f3fc73bd45b45a4463c3a7186ca4be614d8a6a04b3b17f40fb393c153b0533ec14c96a89e1
SSDEEP 192:BR8cBzxM4DjUUPBEv7uhMPRpSNKK9DHsb+WNnF94TMej6etVyIsnAUgraJ:BR8mzxnYsgysXCdwf5efe
TLSH
T1DE52C52EAD10797B1CDBC22AF9517F97E3F5102235901E84EAFC8A2D25E7ACC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 5603376a5e6642e9b6d64b019f83f1f477e5d4e968da675f2a6268e86199946d
MD5 a6e483da01fedbde5c716ce4074add9c
SHA1 40860e70d8583e639a5865e46aa359aaaf3cee3b
SHA512 f3161c2c0836c0c4d63b948289ca2bc27aac9dd5d591852d59b5d621651b510911bb7b8c6cbccbd2559ac86376ce164053b9707b0f58f963bf16b6cfea8a3b40
SSDEEP 192:BRcxM4DjUUPBqv7uhMPRpSNfU9DHsb+WNnF94XAgf6etVyIsnAUgraJ:BRcxnYsmysXrdwfJgbe
TLSH
T1E152C52AAD10797B5CDBC229F9117B97E7F5103135901E84EAFC8A3D25E7ACC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 97bc66b4f155b0c7d1c1155ae8d3954a623213984f10f23f42e9e1fb19904a17
MD5 2be92c7643ba48fb4aa831b67bdf1af3
SHA1 79be648a0d33bdda874579b35bc4130d1a99c838
SHA512 807a577b54aae138829b44e4a6f8d45c0e84793dd9d5979325f6c50c10138ab57dbf6926083a46c29ed6ca492c7a21eb9c9bcc6ee1ce6172001f1ab91694f4d2
SSDEEP 384:KkjuF7KxkXqKf/pUZNCgVLH2HfgslxH7pLuLceSsNXODuF+ErU38jHGPQB7IYjL:KouF7KxkXqKf/pUZNCgVLH2HfgszH7p6
TLSH
T109721A67BC4C9E7B0F94C68CC8177E4FACB5025B65E9886482FA982603D5BCF114A1F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 8779933258b292bb55c99f6542a5a92c75f924d480029377e1fe82f3eb01e602
MD5 eb9000a0e93200b9d331e48fb6745ca5
SHA1 0781fa370689aca857094befda92e01f383dae82
SHA512 a13e881681b18a9ba275aeb2f8abac09f7ee4209298a2c9f1ffd9cfa2ecac1f20541df4b0377a5d6da55be73ca7df7354bd9798c5303580b9d1fcb4e66225c3a
TLSH
T19DB0124890425302C4D613B0165018D831549F12A605230141F04E05C835573C01B0A8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59092e.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59092e.TMP
Size 96B
SHA256 a97273cc79653831c1086318dcf96635a7abe6f15ce9c74b5027023bbb9a08b8
MD5 2611bf008b3235b6868f11c1c6c75ea0
SHA1 f5485a0622b7750dc1981e6473b4b88534ed5bc0
SHA512 51864d43f0dde655ed2acd21b48140a16fd9f767bae2eb6078ae967e4b3de2ad6cf39563bf3b4ca14e7f8e11bd4d16bd682b23bd932b64a6b690e69b1abf85cf
TLSH
T108B00265C1126322C0C213B026999AE871A1DF25C6071322D3E05A66EE65E72C525561
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 d70da8c280c300adbb461417d5c2924dcf03101c136efaa989a1e0f67f3f98b8
MD5 96582811f1d22594721b7d1b9350ee22
SHA1 ebf5ebc53ae18efb2ff1aa9bf897803e3c5bb6c4
SHA512 d60dd96aa7bab07f6e06de1cfa297bc81299ab69fd99607403c0f7653976bc3decb84a1c8f2f7ca4cc3809e63c3fc64a12d80e53cb454769981ad135f10c1e0a
TLSH
T160A002A181900211C1400670E6C551E1A320AA2213475B834196C068D8B25838552B00
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\FileSystem\t\Paths\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 260KB
SHA256 ca080a294c5a9ef9fb347e9bb16278a7788da87c83ec4904ddf51a885c6e5907
MD5 f7d7738db7e7445830810f14d7aad8d9
SHA1 439eb23abd80c1deef8008e12378e7a06c451e8e
SHA512 c8bb6534de3b8304f32938f8a401351edb610d985df66971731acdaafe9f9fd5eda91fb62e0b7cf0567ea28351ea77569f3a0df92373e6427dfb72bbca33e935
SSDEEP 6144:yeaG4pEejPhAIuNWmTETIIAPtbmf1K49XLWbEPi4NTKlLzd:ya4285RujA3QofM49s4NTK9Z
TLSH
T1114423213F1DA978DECED331A2911A296978CC6AC46E2BD51CCD3F8D45E7688C718D32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 260KB
SHA256 c86abaac266de98b68d9c9ca5aa96e72da9aac46ab1d406140d5beed3a6d8a0a
MD5 39535a04d31bc8c6263a51bd95af2790
SHA1 96372fd070f385d4132be57809c5b38f3c857811
SHA512 f39afb1a9c288758c62a6fd57b5e0a1ab1f00a735624e1b82c35360e75a89b961a45ec54a2913c6d34368e93b4a53575e7e8767614b801007e3d167c4eefca3a
SSDEEP 6144:teaG4pEejPhAIuNWmTETIIAPtbmf1K49XLWbEPi4NTKlLzd:ta4285RujA3QofM49s4NTK9Z
TLSH
T1714423213F1DA978DECED331A2911A296978CC6AC46E2BD51CCD3F8D45E7688C718D32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 261KB
SHA256 de1571bad5b2e4fee676d9b89a9561c3d13f3e41a5269a35700c6d9ad9dcd05e
MD5 10ed4f00b8c3690f5b1da8b7c08cdbcd
SHA1 812878f78a0e1bd7a183de45f1db5ea08c212b4f
SHA512 7afac251b896e4d4c12b76f702ffcd033a153b4490c6d6ad1352c6fe4b561a58734afd269a35164ac0748350ea90d330cf886b6714046397aa7a6819facde5a0
SSDEEP 6144:tHaG4pEejPhAIuNWmTETIIAPtbmf1K49XLWbEPi4NTKlLzd:tJ4285RujA3QofM49s4NTK9Z
TLSH
T1424422313E1DA578DDDED331A2911A296C78CC6BC46E2BD91CCD3F8D45A7688C718D21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download