5ac44cf81ec4e139b09fe0837b8efcdbff7464f6a5dfab8af048a3f0ae4d74f0

Analysis

user interaction
yes
max time kernel
900s
max time network
896s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/09/2026, 17:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
background.js
Size 17KB
Sample260916-vmcldstaqa
SHA256 5ac44cf81ec4e139b09fe0837b8efcdbff7464f6a5dfab8af048a3f0ae4d74f0
MD5 935b185eadb67f23fd9956cffaec689f
SHA1 e6c3b91813ab73473e1bb552aae7ba45dea730d1
SHA512 c04b410f5bcb8841222349a8345cc6cbe56635c5b1601fe283b82554a190a2a692617cff3b249486cf117bc9033ebfe7aed8911741452a3154707b71ab763d2d
SSDEEP 384:E+ErlFbRA5McmT5ONoLDbsHP5jxILQHUdKdYRqoFd5K05ZUaag4S5fae58HS+iEw:yrlFbLFKvJ/0qHSAwHC7vsl0c
TLSH
T14C72A9BE34FA20295522A0BD455F9025B221E01375CDED78FA5CA1703FCC62949F6FE9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2372	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134340522030941212"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
4696	chrome.exe
4696	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe
Token: SeShutdownPrivilege	1236	chrome.exe
Token: SeCreatePagefilePrivilege	1236	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe
1236	chrome.exe

Suspicious use of WriteProcessMemory 39 IoCs

description	pid	Process	procid_target
PID 1236 wrote to memory of 2276	1236	chrome.exe	99
PID 1236 wrote to memory of 840	1236	chrome.exe	100
PID 1236 wrote to memory of 840	1236	chrome.exe	100
PID 1236 wrote to memory of 2372	1236	chrome.exe	101
PID 1236 wrote to memory of 1844	1236	chrome.exe	102
PID 1236 wrote to memory of 1844	1236	chrome.exe	102
PID 1236 wrote to memory of 416	1236	chrome.exe	104
PID 1236 wrote to memory of 2240	1236	chrome.exe	105
PID 1236 wrote to memory of 416	1236	chrome.exe	104
PID 1236 wrote to memory of 2240	1236	chrome.exe	105
PID 1236 wrote to memory of 2272	1236	chrome.exe	106
PID 1236 wrote to memory of 2272	1236	chrome.exe	106
PID 1236 wrote to memory of 1228	1236	chrome.exe	107
PID 1236 wrote to memory of 1228	1236	chrome.exe	107
PID 1236 wrote to memory of 4452	1236	chrome.exe	108
PID 1236 wrote to memory of 1916	1236	chrome.exe	112
PID 1236 wrote to memory of 1916	1236	chrome.exe	112
PID 1236 wrote to memory of 620	1236	chrome.exe	113
PID 1236 wrote to memory of 620	1236	chrome.exe	113
PID 1236 wrote to memory of 3888	1236	chrome.exe	114
PID 1236 wrote to memory of 4356	1236	chrome.exe	115
PID 1236 wrote to memory of 4804	1236	chrome.exe	116
PID 1236 wrote to memory of 4696	1236	chrome.exe	117
PID 1236 wrote to memory of 212	1236	chrome.exe	118
PID 1236 wrote to memory of 212	1236	chrome.exe	118
PID 1236 wrote to memory of 2144	1236	chrome.exe	123
PID 1236 wrote to memory of 2144	1236	chrome.exe	123
PID 1236 wrote to memory of 3792	1236	chrome.exe	124
PID 1236 wrote to memory of 3792	1236	chrome.exe	124
PID 1236 wrote to memory of 1160	1236	chrome.exe	125
PID 1236 wrote to memory of 1160	1236	chrome.exe	125
PID 1236 wrote to memory of 3884	1236	chrome.exe	127
PID 1236 wrote to memory of 3884	1236	chrome.exe	127
PID 1236 wrote to memory of 3860	1236	chrome.exe	128
PID 1236 wrote to memory of 3860	1236	chrome.exe	128
PID 1236 wrote to memory of 1224	1236	chrome.exe	129
PID 1236 wrote to memory of 1224	1236	chrome.exe	129
PID 1236 wrote to memory of 4644	1236	chrome.exe	130
PID 1236 wrote to memory of 4644	1236	chrome.exe	130

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\background.js
1⤵
PID:2920

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:216

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffafde1c728,0x7ffafde1c734,0x7ffafde1c740
  2⤵
  PID:2276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1712,i,14942468839055290116,4888494036820370454,262144 --field-trial-handle=1892,i,13159010240501584824,14498200540058719286,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1888 /prefetch:2
  2⤵
  PID:840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,12821939203398518006,1395989416797254921,524288 --field-trial-handle=1892,i,13159010240501584824,14498200540058719286,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2276 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2416,i,584250055469700945,3143067836826548362,524288 --field-trial-handle=1892,i,13159010240501584824,14498200540058719286,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2292 /prefetch:8
  2⤵
  PID:1844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3260,i,2807413414056223251,14184551161046750690,2097152 --field-trial-handle=1892,i,13159010240501584824,14498200540058719286,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3460,i,10748737343718258352,9608122888736572294,2097152 --field-trial-handle=1892,i,13159010240501584824,14498200540058719286,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:2240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4496,i,13908042453280044596,65776449296659256,2097152 --field-trial-handle=1892,i,13159010240501584824,14498200540058719286,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4472 /prefetch:2
  2⤵
  PID:2272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3980,i,8091777207993148680,7545526013704392596,2097152 --field-trial-handle=1892,i,13159010240501584824,14498200540058719286,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4768 /prefetch:1
  2⤵
  PID:1228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5516,i,16789152817738898002,9266439975796286969,524288 --field-trial-handle=1892,i,13159010240501584824,14498200540058719286,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5512 /prefetch:8
  2⤵
  PID:4452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5592,i,15589709525112786116,2300929682239989345,2097152 --field-trial-handle=1892,i,13159010240501584824,14498200540058719286,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5940 /prefetch:1
  2⤵
  PID:1916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3480,i,17570108386439579844,1091338314699340690,2097152 --field-trial-handle=1892,i,13159010240501584824,14498200540058719286,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=240,i,10581141868063585088,3501410986874121096,524288 --field-trial-handle=1892,i,13159010240501584824,14498200540058719286,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6092 /prefetch:8
  2⤵
  PID:3888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6108,i,7343799507395871282,6252144003673954778,524288 --field-trial-handle=1892,i,13159010240501584824,14498200540058719286,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3668 /prefetch:8
  2⤵
  PID:4356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6104,i,16304048242788115757,2826305038639968314,524288 --field-trial-handle=1892,i,13159010240501584824,14498200540058719286,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3636 /prefetch:8
  2⤵
  PID:4804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3668,i,6571112621896046930,13021008703883578696,262144 --field-trial-handle=1892,i,13159010240501584824,14498200540058719286,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6092 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=3632,i,13630928143575197769,6517407273407180769,524288 --field-trial-handle=1892,i,13159010240501584824,14498200540058719286,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5740 /prefetch:8
  2⤵
  PID:212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5852,i,13305824952142510264,13940050237130756255,2097152 --field-trial-handle=1892,i,13159010240501584824,14498200540058719286,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5824 /prefetch:1
  2⤵
  PID:2144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5860,i,12395350022723128699,2884200764010360721,2097152 --field-trial-handle=1892,i,13159010240501584824,14498200540058719286,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5892 /prefetch:1
  2⤵
  PID:3792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6176,i,1695760802273535419,7667070051170103837,2097152 --field-trial-handle=1892,i,13159010240501584824,14498200540058719286,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6164 /prefetch:1
  2⤵
  PID:1160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=3620,i,2620240277680432078,14571227550631138040,2097152 --field-trial-handle=1892,i,13159010240501584824,14498200540058719286,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5520 /prefetch:1
  2⤵
  PID:3884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6644,i,4307452213316348104,2203448288341236416,2097152 --field-trial-handle=1892,i,13159010240501584824,14498200540058719286,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6636 /prefetch:1
  2⤵
  PID:3860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6700,i,587022999080937444,18060355888755571816,2097152 --field-trial-handle=1892,i,13159010240501584824,14498200540058719286,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6688 /prefetch:1
  2⤵
  PID:1224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6864,i,11685723228054272546,9176408076048129745,2097152 --field-trial-handle=1892,i,13159010240501584824,14498200540058719286,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6852 /prefetch:1
  2⤵
  PID:4644

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4448

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4520

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 fb0119b2112dc1959c8f778daec4389cb57021c4781b139c88fc6b35311e5022
MD5 e0e901a9695d3ddf57b2fa110f1caa13
SHA1 22b6325d5b56d6f952c93bd81a40aae0d9365c3b
SHA512 33a8bf7308de5d39e493592b938c59a810017071107d737c4f3cd2b2b7edf916d2aa6274e7f20d408e930f574c55fab923839f10811d3c3616e76c726a5aaa2b
TLSH
T107E02BA9C961EC3719FD171918524785EB5413173B90940F3B3DC2098FB167E468681C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005
Size 73KB
SHA256 bc2f92acd3f3f4721bece2d2eb78dc5e837955d26e2632093710eb83718c0621
MD5 9ab63bcbd462198dc53f88b18d5bba5c
SHA1 972272319b85d0d5fd2c091e537f7811136c010a
SHA512 985883cb56e57bf71b7f0cd4685a66777f3ccfe77cbd18025a3e4727ac911228d6c8360ae9ea4d0944f5eb4f0b425019fdb1b35a1226fc646f79e0baad44869f
SSDEEP 1536:fFe/4pJN5arcE771tUTND1rEbyXCCUxqVzs14z+DZMJDB7kO9wyKz+YqiuFT:H7CcE/10JtEbOCdxYNiDZyB7L9VKz+Y+
TLSH
T1DA730236290E1E549526C7BD49A495832B0F9BDC5814C0AC2B0B286DDC924DFFDE3F95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 915e1609ea75b9319c4f3f93ec0dc9fc5b6bd662c0ba0fbcbe6bd942fbfdf32d
MD5 b98ee9b7f13e6fe600156cc41690f7dc
SHA1 a33c0afd820839e54d1528438874b1f0257dc708
SHA512 e3e6118b0c8faf892dff57d5d753f7f837078e9a487cff149cb6da2740c767121c3125dab787ac3674808f79367561612b327ba791ffd918827d3993a48b1081
TLSH
T168B092BC02A35644EF80A27A24800185623A1A1CAE82161282E26151C41D292424B054
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 f207413fab79ce84d9c93888107d366531dd7229eab381c0dcf660777164b08d
MD5 025b0083c44df23d80d58166d3cf6100
SHA1 ba983d1637072ee2caff6dbf1e461524b3614db9
SHA512 2f4913259290a6d4929183441206f3ccf30621ac99e4694dd53472335241ac1c8049df26dbb34b2b90b35192aade7df82162668172d55d04e34e71bb955f2708
TLSH
T188818CF7C3E4966DC91156F49B256E1FCE2D0A24532C3C66C8D4AE5B93E24B2E20178E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 b03fee1205bef62c0a736f5937787e265ed70ad1480167c55cccc48cc63a8a60
MD5 5361446f3002d5778d671c6b5441b260
SHA1 8656696d1a43ac9764a3a0f729154d907cdd0458
SHA512 bbd4c0a38891d9bfbe43759263d8db57effbab526c5f17b2109b1cf21e9e23f1f08bdbea1d700f32916fc4ef2940740d645469c8a3581111e450ff39e95cc974
TLSH
T1CF618CF7C7D8867DC41156F49B216E2FCD2D0A24521D3C56C8E8AE4F93E28B2E21135E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 5cea51e69e5e9b166589482933fd0678522b577d9622c59407a8ea647ff600a7
MD5 982707005e711759bde187bb67ddc322
SHA1 117397bdea6e1cc96342b6da4da7781af6142914
SHA512 325347e4b6aba950a623a31acb7e23ceb5456c2cac820900f4185ab3522da32b9681fec094ab8befa240e7464bdc794fc3c0eed17bcc7761afe42b9f5513ca24
TLSH
T19671AFF7D3E4D66EC81156F49B156E1FCE2D0A24531C3C66C8D4AE5B53E29B2D20138E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 799d74519912a9441305a0c7b8fc81008d67bfeb1248fa9df26c46529143b145
MD5 b7bed23f8954645f130b2c1f26a7837f
SHA1 ca26ae848943a043417287335230baff31a52aed
SHA512 934afbf0c9c516eb1e75fe8297cc3f4b60074dc0b3fa8a794ea040e2fae87a9c2658ca4e7a45de27c1c647f7e174259d519c99bbf24442bed7e176811b0adc21
TLSH
T1E5619EF793E4D66EC81196F49B156E1FCE2D0A24531C3C66C8D4AE5B53E28B2E20178E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 691B
SHA256 b262d33847815a1eb12980ac60f3a1aa01a6efeb8be5a732d68f62cd144ee169
MD5 39e31878953734e130a0dd40dd3fcaf8
SHA1 3ffe17fb10e83de2f81f78b39a094a4b21158f40
SHA512 2f77820dc6d649866325c4248481a477e819749a83b75804e0cf184baafe16c361e84236931ec579bab5761d3cfcba7487a825e6fc26e5391f9581188a6058d6
TLSH
T17C012BE7DAAEB523517E59AB1D40B8092775743402D21CF4CE66826DB0CA5E72F11427
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 05afa47f2aa191ed25c042c2b747a1fcd15b168300c0b92c9e95ba0ce62f543a
MD5 1a975f11217c3f6d17d83841547fd837
SHA1 b974465f95d28f984b037079d5f8fbcb4059026f
SHA512 2af75a7b92ff0046c8056cebf0f16178c133241e277358004886fd83949d352924a2fd544b3d37322b785035ca0b7ff38d168cca503be2cbbc6b8e1ab6f76582
SSDEEP 192:1Rq38SOkIuOUfVE800fv7ThAPRp24lH9WHsb+WNn3E+r423ueZVyIsnAUgraJ:1Rq351fA03v8XpUwUx2be
TLSH
T15F52A62DB914B67B5CD7D22EEA657F63E3FA042224902D48EAFD893C10E79CC6217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 17d10848d38aa2bd68b3c162a359fd209db6488ff62e832516198336168ac6f6
MD5 32eceb9f79a013f084b7c456f74d1c28
SHA1 2fd2e364f01a6b2d13f84ed5ddac1d60c71d7ec0
SHA512 3679ab579791f4d1a7b664f1b640f8499378ba16eb102289c2e5ea34c9728bffcefffb2574ae1b89b2e546b81507fed55fb48169e8e9cd61c562b1e1c69b8a42
SSDEEP 192:1Rq38SEOUfVE80ev7ThAPRp24lq9WHsb+WNn3E+r42RuelVyIsnAUgtaJ:1Rq3C1fAav8XQUwUx2l8
TLSH
T1B752942DBD14B63B5CD7D22AEA657F63E3FA042224942D44EAFD893C10E79CC6217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 cb227cd53d0b93ff527ab280b5ce7eea996654753181fe5ee146682be33c5858
MD5 64141e53f956f128d682568a92b27435
SHA1 bf6c43a566a1ddf705a58efaefc564a266e8dc09
SHA512 698d2cc9c631d6ea7dd3232c56e61a601993091e018747dca724732b4ba191d56166ca3ef3784032c48e0da69b4c2cc0463aa27ff7ff1aabed240af437c75e49
SSDEEP 192:1Rq6OUfVE80Qv7ThAPRp2V9WHsb+WNn3E0FuelVyIsnAUgtaJ:1Rq61fAMv8X6UwU0x8
TLSH
T17742732DFE14B53B5CDBD22AF9627B53E7F9102120A42E84E6F8893C15E79CC621741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 bf5e13e9d3e7169b8c3ed5375f1150c9c5e524a614e29845213304b7ae59951b
MD5 9e599018ad47c4c5b4344d0dd46dd3cf
SHA1 8882a4f45c5bf24384e6d57c1668c696c914c458
SHA512 a9bf6fbca6d04780a6b0701d7ec2c28056601d31e85b9aceec1d51f738e9d8d235b2be0ff0d836b1d85ec71686a453e8f3d509b8e734a024f1fef346012eb27d
SSDEEP 192:CRqB8SOkIuOUfVE8EDv7TMmPRpI4lx9WHsb+WNn7nNGSEluedVyIsnAUgraJ:CRqB51fo7vzXVUwL9E9e
TLSH
T1D762B52DB914B63B5CD7D22AF9657F63E3F9042221902D48EAFC892C14E79CC7217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 3fd61c6eb8088e7cb2727bc2359ead6c92fd82fddfe4fee4dc8f46822c8c0ef5
MD5 440784b65c8d0785d508fc43ed56884b
SHA1 f7489963bcde1cf7c1ff614d54e9459e4325ac70
SHA512 a78a79223917ca9f28af5183164eea13aebd7c434fa7f3fd5555b204771b8334f822402678e95aee1fab0452922025a2905c22a0314475fe206eef4e2f2e2004
SSDEEP 192:CRqwO8SOkIuOUfVE8EDv7TMmPRpI4le9WHsb+WNn7nNGSEluedVyIsnAUgraJ:CRqx51fo7vzXiUwL9E9e
TLSH
T13B62A52DB914B67B5CD7D22AF9A57F63E3F9042221902D48EAFC892C14E79CC7217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 e7f946205380ca96c64e084a4de73ee11667a0a0d677db77521c6ffcc4d4aadb
MD5 7b0ce1a4ae73f2409e728f36e828cb85
SHA1 890bd783045808c7ed3f87b664c6b198d1018f58
SHA512 4b2cbaa5bef3db8d7ae31af34f19d7dcaeaad8859ecdfc2f8a47ff2a3966c0ce787c3457f322cb70de267dc36c4fb7710c94ed81e6a6c1d00ff74ecc78952d49
SSDEEP 192:8RqwO8SOkItOUfVE87Dv7TnmPRpI4le9WHsb+WNnkY+Q8u3uedVyIsnAUgraJ:8Rqx81fn7vYXiUwzyuHe
TLSH
T1CD62A52DA914B63B5CD7D22EF9A57F63E3F9142221902D48EAFC892D10E79CC6217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 3aa210ccd362d372c0371f54deb43391b43818cb6f6c67627118efc0823e4d37
MD5 389aec57bbcbe89581c70d405aef6c50
SHA1 ed5e1d365ee35ea44a85327d944ec71cf51d46a7
SHA512 14a8d649cdfaa7fe6b4828df37d69afe373483a7efdcb0cf50a2163d9855815da13ae0ba0e3b5b8a47e766ba76473dc9dc7aca2d73fb0f71dd54cbc563cf60e9
SSDEEP 192:8RqwO8SOkItMUfVE87tv7Tn3GPRpI4lp9WHsb+WNnkY+Q8u3uedVyIsnAUgraJ:8Rqx83fnNv34XtUwzyuHe
TLSH
T17162B52DB914B93B5CD7D22EF9A57F63E3F9142221902D48EAFC892D10E79CC6217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 523761bc1813672aed3255e4becb28be826b1abc952b1618d2bcfadebfe5e21c
MD5 472d61bcf21443a047dac261aad552e8
SHA1 608e068876727f4f676b88d75ee81c5361cbab00
SHA512 c732c8cc57effcc49d70faf34528b26e9138b9a4c90bc7197c1b7efc3bd7d6aa9914d2b1dd802f59451918a42148b21a62cf31325f4ca0e95e28d8b96bbf35b5
SSDEEP 384:TNj/O7KxkXqKf/pUZNCgVLH2Hfgsl5S7pLuLceSZkXOD/q+ErU3v7HGISxpQ8:TN/O7KxkXqKf/pUZNCgVLH2HfgsvS7pC
TLSH
T11472F867BC489A3B0F94C6CCD8167B4FEDB9024B65E9886446FB983503D4ADF11062EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 bf83080e93a7384186da4f023357408988e85df82d5a0fc02b5f831b0a3cae0c
MD5 222d85bf5336de51ad23da9549396fc7
SHA1 06dbbcbdd0b2fbca81fe59b52dc0f9bde91925de
SHA512 92f87dece2f3ab003e50010a35a38e3200d2a8cded88db4afb5375860d5abc3f6e2557c1e1eccf3e977c37f8c7e1000afaf9b94f5a36b2937ce05ab2af53242b
TLSH
T1CFB0129480465312C41202F81550288C7558DF14AA05170581F42D018835160802B154
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5c8eda.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5c8eda.TMP
Size 96B
SHA256 fad1349710660b02d9757a6f6e7f89edc133cb454d1e12255c18337351b24a6d
MD5 0663e7cf6fe5bbf91347b80da214e31f
SHA1 7eaca404045cb8ef1b9e2e8bba94c0551df633f7
SHA512 63284c0ac0e3f3ffb335d97b942c4a42027664ba5773c1345345309aeec05b97d34ac0910a8b232ec3509491eb43e19f10c7c179166d047919c765b5e24185e1
TLSH
T148B02238C0232302C80283B028A2A0CCB222CF28C2030A0BE2E00B22CC20B200B20830
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 261KB
SHA256 4da68e4b487445f77cf7807436135482e2802b37b87e753a8c9a51c976583af4
MD5 3941ede653c6dc2275ea2ae7ffecc237
SHA1 2276f03e8faf6959300530e040bd94fbc0a4fd12
SHA512 576067e51c20417cefeab887fc4b7ee850f668281ed2891449513736bdf36f545acd06f2b23c12851c79ed63fa8e4133c9f935b22c02febdc7fa73adb59d851b
SSDEEP 6144:RpOohkHNMCmxEsz40p+hFD+7t56OD9ZfSApprN:RpLgDBsLpyFSXD9ZfS4f
TLSH
T1EC442232594499F7CEF96582B04E3700CDD6BDFF118F695984A79B8AE0CB9580732E32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 262KB
SHA256 5f46cfc94a4b3a562e7575192560424dc8c30eaf8fdf967c0c9b7623e581eefa
MD5 c413adde5d2c3b70d57db44d61cafefa
SHA1 34b459114792400acad326b2fe9f141eab81e533
SHA512 fd84c46c25ff633b0d4fd3869bdfd9a2ae74076ddbb4b046360acbf311b18e509aa1c25be41a730ebdc28f9aa0551c27afdecf0b4d4cfd0310f29a184a06796a
SSDEEP 6144:cpOohkHNMCmxEsz40p+hFD+7t56OD9ZfSApprN:cpLgDBsLpyFSXD9ZfS4f
TLSH
T1D7442332690499F7CEF97542B14E3700CDE6B9FB558F695D84A69F8AE0CF4480B32E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 261KB
SHA256 08701c967c076fd7734dd06bc229c2ec308fe06e4d378e3dc8e0e20d5f2ba0f6
MD5 c4b16421411fa96847e607f9824f7438
SHA1 b21594620528088bd0bc7160384808afb60013cf
SHA512 a2e243d47c2b6c8b3838ef93f93bc9cbfff5b9b9acf736fb50cc95f8c2ee77e6e1afdef0a02a3c4c2af64843aca74d6029978d19d65b3570d490da4ed21b7bcb
SSDEEP 6144:2pOohkHNMCmxEsz40p+hFD+7t56OD9ZfSApprN:2pLgDBsLpyFSXD9ZfS4f
TLSH
T107442332594499F7CEF96582B04E3700CDD6BDFF118F695984A79B8AE0CB9580732E32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 3dfc576ad50429a6c9dbdf8acc6a6a111596aed9538fad542459fae22408256c
MD5 cca4f48bebf30faf2e88c79901618c28
SHA1 a1b2abe9930df54d33149c504be3d9b57780a26a
SHA512 508777c3e3479643835e2839dc31ebe020b0f5f72849c6f09bc167a8bb6f28675f1fad5646efe0c78dce05df392b226d05c4fe5e05daf072be284b54d8ecfdcf
SSDEEP 3072:o+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gU:o+hFD+7t56OD9ZfSApprU
TLSH
T1B7D31232AA91D87BC9FD6541B157A300DE766CED41EE2A09444A9F8EE09FC4D0773A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 262KB
SHA256 6c518fa9c0dbcd0576726575b1d12b38126f84acdebd6b65281c73c771b27f12
MD5 ec3f75bf9783d2adc1e00b84c9228110
SHA1 90176fac14d492a063e163971b7a400af5930db3
SHA512 ac5a5a48cee0d88ade8e3ed597ac3e624701811fcbde091b74ff37aacc482efc597966f6d864f0783d72ccd006dd6364c0934dcb1205efcba05628a29c110908
SSDEEP 6144:MpOohkHNMCmxEsz40p+hFD+7t56OD9ZfSApprN:MpLgDBsLpyFSXD9ZfS4f
TLSH
T19E441332690499F7CEF97542B14E3700CDE6B9FB558F695D84A69F8AE0CF4480B32E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 262KB
SHA256 3bcdd9d50d5f0365ece113bb89b16bb1cba04504523784a22b2759e721c77ee1
MD5 d1728e84f3c406a01a91bc94847b20c9
SHA1 b444e393d88c7c3a869bb3554f47698e6523b28f
SHA512 aa78b2e86c3b2bfcd85d32fef29a5b2a34f29e9dc377da35ed4cd893955cb34bbb85a4b65235063319546c7e1016c198f1180be0697a4704d7cea0e212947443
SSDEEP 6144:DpOohkHNMCmxEsz40p+hFD+7t56OD9ZfSApprN:DpLgDBsLpyFSXD9ZfS4f
TLSH
T1F2441332690499F7CEF97542B14E3700CDE6B9FB558F695D84A69F8AE0CF4480B32E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 262KB
SHA256 1166f3bd785bfbaf7f293ff2f47705a37a6f6b6a6e64c49130af9a286a605380
MD5 da4a2147d62b820043ca3aa34c1e79a1
SHA1 12ef4128ff83cfa23a28096adb7bc34dc758a96c
SHA512 e76049c7168217bc2d37e58279d06f56d866c3724514edf3c90bdd85bede0954fc7f5e686120babff081d5a3f2489c1bc6dbfaa88f1b0b389f310cea2b5420a1
SSDEEP 6144:CpOohkHNMCmxEsz40p+hFD+7t56OD9ZfSApprN:CpLgDBsLpyFSXD9ZfS4f
TLSH
T14E441332690499F7CEF97542B14E3700CDE6B9FB558F695D84A69F8AE0CF4480B32E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download