hxxps://darkmoreops[.]com/download/3a48719c723215791b5465e010759a2224a47af4210cfdc2/Baker_Botts_Partner_Coordination_Review[.]exe

Analysis

user interaction
yes
max time kernel
269s
max time network
261s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/09/2026, 19:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://darkmoreops.com/download/3a48719c723215791b5465e010759a2224a47af4210cfdc2/Baker_Botts_Partner_Coordination_Review.exe
Sample260916-x5ppsadb68

Score

6^/10

discovery ransomware

Malware Config

Signatures

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4756	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134340604413080055"	chrome.exe

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Opens file in notepad (likely ransom note) 1 IoCs

ransomware

pid	Process
2468	NOTEPAD.EXE

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
2100	chrome.exe
2100	chrome.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4828	OpenWith.exe

Suspicious behavior: LoadsDriver 3 IoCs

pid	Process
652	Process not Found
652	Process not Found
652	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe
Token: SeShutdownPrivilege	4868	chrome.exe
Token: SeCreatePagefilePrivilege	4868	chrome.exe

Suspicious use of FindShellTrayWindow 42 IoCs

pid	Process
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe
4868	chrome.exe

Suspicious use of SetWindowsHookEx 13 IoCs

pid	Process
4828	OpenWith.exe
4828	OpenWith.exe
4828	OpenWith.exe
4828	OpenWith.exe
4828	OpenWith.exe
4828	OpenWith.exe
4828	OpenWith.exe
4828	OpenWith.exe
4828	OpenWith.exe
4828	OpenWith.exe
4828	OpenWith.exe
4828	OpenWith.exe
4828	OpenWith.exe

Suspicious use of WriteProcessMemory 31 IoCs

description	pid	Process	procid_target
PID 4868 wrote to memory of 1796	4868	chrome.exe	86
PID 4868 wrote to memory of 2928	4868	chrome.exe	87
PID 4868 wrote to memory of 2928	4868	chrome.exe	87
PID 4868 wrote to memory of 4756	4868	chrome.exe	88
PID 4868 wrote to memory of 2092	4868	chrome.exe	89
PID 4868 wrote to memory of 2092	4868	chrome.exe	89
PID 4868 wrote to memory of 620	4868	chrome.exe	92
PID 4868 wrote to memory of 660	4868	chrome.exe	93
PID 4868 wrote to memory of 620	4868	chrome.exe	92
PID 4868 wrote to memory of 660	4868	chrome.exe	93
PID 4868 wrote to memory of 2752	4868	chrome.exe	96
PID 4868 wrote to memory of 2496	4868	chrome.exe	100
PID 4868 wrote to memory of 4376	4868	chrome.exe	104
PID 4868 wrote to memory of 4848	4868	chrome.exe	105
PID 4868 wrote to memory of 2668	4868	chrome.exe	106
PID 4828 wrote to memory of 2468	4828	OpenWith.exe	107
PID 4868 wrote to memory of 2100	4868	chrome.exe	109
PID 4868 wrote to memory of 4288	4868	chrome.exe	110
PID 4868 wrote to memory of 4288	4868	chrome.exe	110
PID 4868 wrote to memory of 2604	4868	chrome.exe	111
PID 4868 wrote to memory of 2604	4868	chrome.exe	111
PID 4868 wrote to memory of 1336	4868	chrome.exe	112
PID 4868 wrote to memory of 1336	4868	chrome.exe	112
PID 4868 wrote to memory of 2708	4868	chrome.exe	113
PID 4868 wrote to memory of 2708	4868	chrome.exe	113
PID 4868 wrote to memory of 1204	4868	chrome.exe	114
PID 4868 wrote to memory of 1204	4868	chrome.exe	114
PID 4868 wrote to memory of 3828	4868	chrome.exe	115
PID 4868 wrote to memory of 3828	4868	chrome.exe	115
PID 4868 wrote to memory of 4068	4868	chrome.exe	116
PID 4868 wrote to memory of 4068	4868	chrome.exe	116

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://darkmoreops.com/download/3a48719c723215791b5465e010759a2224a47af4210cfdc2/Baker_Botts_Partner_Coordination_Review.exe
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffd5d10c728,0x7ffd5d10c734,0x7ffd5d10c740
  2⤵
  PID:1796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1756,i,7407524513593496231,10207479362872901381,262144 --field-trial-handle=2004,i,16801398598099983928,12728749020155920647,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2000 /prefetch:2
  2⤵
  PID:2928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2212,i,8604311181865604502,11619626508739682495,524288 --field-trial-handle=2004,i,16801398598099983928,12728749020155920647,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2292 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2380,i,13518577906170394698,1879337079412334043,524288 --field-trial-handle=2004,i,16801398598099983928,12728749020155920647,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2504 /prefetch:8
  2⤵
  PID:2092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3228,i,2614024124636759353,377295894271000601,2097152 --field-trial-handle=2004,i,16801398598099983928,12728749020155920647,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3232,i,13276729257149303390,10565136996296336559,2097152 --field-trial-handle=2004,i,16801398598099983928,12728749020155920647,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5356,i,13962307627475102232,3834185556153480566,524288 --field-trial-handle=2004,i,16801398598099983928,12728749020155920647,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5252 /prefetch:8
  2⤵
  PID:2752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5568,i,8848332221411565102,17818893636636905473,524288 --field-trial-handle=2004,i,16801398598099983928,12728749020155920647,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5572 /prefetch:8
  2⤵
  PID:2496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5628,i,508743683853692547,16095844259580430884,524288 --field-trial-handle=2004,i,16801398598099983928,12728749020155920647,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5788 /prefetch:8
  2⤵
  PID:4376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5608,i,6535292613802430406,758242641201206683,524288 --field-trial-handle=2004,i,16801398598099983928,12728749020155920647,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5748 /prefetch:8
  2⤵
  PID:4848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5620,i,1063236631790807665,15697589447515387564,524288 --field-trial-handle=2004,i,16801398598099983928,12728749020155920647,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5460 /prefetch:8
  2⤵
  PID:2668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4668,i,9085905980527945723,12165050988940895917,262144 --field-trial-handle=2004,i,16801398598099983928,12728749020155920647,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5596 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4668,i,11868404139281660004,17809474587702563670,2097152 --field-trial-handle=2004,i,16801398598099983928,12728749020155920647,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5500 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5360,i,17196952911241883702,15517344952755828044,2097152 --field-trial-handle=2004,i,16801398598099983928,12728749020155920647,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5372 /prefetch:1
  2⤵
  PID:2604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5960,i,15271137743567373732,1640932397066539007,2097152 --field-trial-handle=2004,i,16801398598099983928,12728749020155920647,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5988 /prefetch:1
  2⤵
  PID:1336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4628,i,10802820030430972647,16370678025098303480,2097152 --field-trial-handle=2004,i,16801398598099983928,12728749020155920647,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1164 /prefetch:1
  2⤵
  PID:2708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3392,i,5532380462411901767,1627301666246898334,2097152 --field-trial-handle=2004,i,16801398598099983928,12728749020155920647,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3208 /prefetch:1
  2⤵
  PID:1204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5880,i,1340054155803353310,9539914234688449750,524288 --field-trial-handle=2004,i,16801398598099983928,12728749020155920647,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6184 /prefetch:8
  2⤵
  PID:3828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6192,i,6420816211570009206,9410959412049749445,2097152 --field-trial-handle=2004,i,16801398598099983928,12728749020155920647,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5876 /prefetch:1
  2⤵
  PID:4068

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4408

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1048

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3216

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4828
- C:\Windows\system32\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\Baker_Botts_Partner_Coordination_Review.vbs
  2⤵
  - Opens file in notepad (likely ransom note)
  PID:2468

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 6df545ecdd99f656fc2a29d36350a9522b62b0ee8adda22f4b1b5d74f3080833
MD5 6237b0d72e9251a0bf52cf3959f7f974
SHA1 3adfc9806ae1ebf9aed1582eca4ee4044b6b70be
SHA512 90c0deb540041de3e39e85befab69dd397e952cfcc539b2398f03598f42965bfa51dc3af0c40ecee9e4300594766c3d25bc6483a60814f0f5b4320f336d9d0fa
TLSH
T13FE0ABA9C861AC7B2DFC032820940B46E650036737404A0B373CD9098FF423B01858AC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 b0f247fa182e2305670f30aaa48ddf5398e150555a4463ceb6625d3c4ea2ca51
MD5 0283c445dde0c8611fe760ac9b272e5f
SHA1 e5d47b54c3365df496e47d649c1b205d0a7dfaab
SHA512 4a081de5459b8b6864b32ca243f3382cf43550bfb969b7f377486be98e430540c6af4edbab854991a276fd15e581a92e29d4c57059a44a28b2d024e45157a96c
TLSH
T1735174CDD2A5882FEB92F63090D5B872F33A5C9DEF030E9A1047D63413867D984E2975
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 71fd2c90a486fec8e447d4182b11473168369e75c2f5f9fcbbfde1a103c51672
MD5 19254c3d1111b3ae09f1911b193a3fb7
SHA1 182faebfd7423f262cf0c5a7cee7fe038fa90d13
SHA512 12795cd734bf88ceaf27b4c798cd1ce3d352a505cea96878765e29977a62bbc8f6f8008847103af176345881e70a5a9f2952fa46933d093d2f378e30c7ec2779
SSDEEP 192:DEnNlid4/vyk7r9H1/J9pswDtNPYaPifP4f8Tqg:DEnNlid4/vyk7r9H1/J9pswDtNQaqfA+
TLSH
T119E18DF7C3D9C62DC91156F59B216F1ECE290A28531C3C26C8D4AF5BA3E28B2D21165E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 48bba3289b657aff23f60dac4ab264c13f74a049cf3b0b0fd0a4fc77851b7ae2
MD5 76520cbfd39487c5e8898adcd6bc2b78
SHA1 5d9a66f28d86ab027503d5fc501573e2906ac949
SHA512 5cbdd8bc6b906de20b826348dc7811b25e6b671e524c7e53c3b344a500dc1fa8ef1a12f30466d70dfe5352cb4a712c7f4df419da2f83b4da82df4a07d31e2481
TLSH
T102518DB7C3D88A7D894156F8A7152E1FCE2D0A14532D3D16C8D4AF1F53E29B2D20068F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 d8ea9d3bfd842c54849419e3ac0d44442f4892a0046dd6ab5b2f9148fd66566b
MD5 e9654a4b37650b309f8be8f2e4dd0099
SHA1 1d6053a17ffe66906e35836743e230c03f050767
SHA512 ddd0644d625831b55422a17208676e3b7d204a80b0ed36a0947f1bd93dbe8aacdc595a702e261db96663952331e2dc2cf8cd9ebeec3347308f263015c150f95d
SSDEEP 192:iRXcSw8R3v7UpAPRp2v9/Hsb+WNn/kPKQeHVyIsnAUge:iRXcSLfAUXchw8PCe
TLSH
T1B632722DAD10653B6CDBC22BFA627F53D7F5102124942E84EAFC897C26E75CC6217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 2306f2734a62a89df36b4c1623da9326b2384e36d49301a0b2ead69d4ad237ca
MD5 18442bf5e4dacff28c04a67c7e198e65
SHA1 c26ed0e85dc81078ebd30b0cf23a2f6e5bc8ee18
SHA512 e7a80818d09b8e532188b7ef7e4dcb2e56a10c5fae79a0f4eae36768a3d26c58da87e712fa0d529adb7908b6ddfce437beeaba96a52dd82db0fe1beb73168c99
SSDEEP 192:iRXcSw8R1v7UpAPRp2v9/Hsb+WNn/kPKQeHVyIsnAUge:iRXcSLFAUXchw8PCe
TLSH
T1DD32722DAD10653B6CDBC22BFA627F53D7F5102124942E84EAFC897C26EB5CC6217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 6fb9bd7fc105b484b44be97ef5f23546e93d284a5f0f0afe17b690cc0b4c4223
MD5 ba80a3e797188ebb7873e18c736b91d2
SHA1 52cb3b78a82e18313ed4c42272f214983cd71709
SHA512 bfd7032adde50d243f95a3ce90afa490e8c8e1d0636cf146215fbe7e63a5967ce88836e77181042da1d197c4f6d0b6e9cb38e06378be9376dec41fea11c564b9
SSDEEP 192:iRXcSw8R3v7UpOPRpcv9/Hsb+WNn/kPdQeBVyIsnAUgE:iRXcSLfAyXChw8PPE
TLSH
T19532942DAD10653B6CDBD22AFA227F53D7F5103124942E84E6FC8A3C26E76CC6217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 bfab09f251c650c6c43f44c5b2e10f5b634626ae9b2fc26a76eec51b0760780d
MD5 b649f5d8adb18a216bfd0e74672fe560
SHA1 8feea51eac2ad7b7b99b8dd7528c1c9bddcc7320
SHA512 59f3101775795b8e89bed501d3203cd3b59ad3d680f2c913b6481151427eb69912aa25bf08be6facb0669564b68e4cee3a7586d53ec1fb21a3213a460c070e20
SSDEEP 192:2RX8cBzSw8u3v7UpOPRpc9M5mF9/Hsb+WNnEDA4162vQeBVyIsnAUgE:2RX8mzSIfAyXihwvv2VE
TLSH
T10242735EAD20657B6CDBD22AFA227F66E3F9102124942E84E7FC8A3C15E75CC6217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 197aa07e639fa4eb354b48a571f0ab737c0f1c4277e07deba18edc74ac8a5351
MD5 e29c86fd0d8ddd9e1fd441c8223e193e
SHA1 51c777667d54606562e19358cc9e65d3b318d2f8
SHA512 e9de7b466490003eeff4b6493b25bc1fb5f5d9157dc8d7cb99686bb36f80474fb47d820a768e51261f279f1fd7e3287eb83cc49facbb072a9e9275a5c7606fb9
SSDEEP 192:2RX8cBzSw8uUv7UpOPRpccGqZeM5gF9/Hsb+WNnEDAJ8a+1622QeB8yIsnAUgE:2RX8mzSIQAyXmqZmhwvbF2pE
TLSH
T1FF52725ABD20257B6CDBD22AFA227F66E3F5102164942E84E7FC8E3C15E76DC6217403
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a53b58c07ac62aa169be14583daacc167c6a529963d5b14dd56dc1c62ad352a3
MD5 c5f97aa22f6e86f77225eb8807207f00
SHA1 f1767d02f1afdbf8816fadbb09414e74131847d7
SHA512 61f4da6edc5fa1e640a38617c7c481e0eff9a061cceccd24a9c6dd80e57fef1848b09deb0847cd3e98ca383b0b9c500b0a6d8f9bc61abbe701e022ec70f77c17
SSDEEP 192:2RX8cBzSw8ucv7UpOPRpccGqZeM5gF9/Hsb+WNnEDA4162vQeB8yIsnAUgE:2RX8mzSIIAyXmqZmhwvv2wE
TLSH
T1B042735EAD10257B6CDBD22AFA227F66E3F5102164942E84E7FC9E3C15E76CC6217403
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 13KB
SHA256 cbff59adc7b520f0de2985ad921ee12da5b00aa0aaadd64b2862a8b11ece7f19
MD5 8620b09f169758aa6d92f2e7b8a4c29c
SHA1 c265bb3d46a3af238c08a66240583a655be69a0e
SHA512 017bb2738ebc633e2b1824b1fe90215df48c3e3ec2d222610a597c250ca9b406bd8560dd6e15c6ddcea319cc301407ec464c4569fc29dfb4f74923aa99fdceb8
SSDEEP 384:s2jGN7KxkXqKf/pUZNCgVLH2Hfgsl1/XODGN+ErU3pxHG4xHk4V4:s2GN7KxkXqKf/pUZNCgVLH2HfgszvO61
TLSH
T1C4520A27A88C9A3F0FD8C54DD8177F4FADF101566268492452FB9C1903A5BDB114A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 fb369c0adbb35abe07ddb2da50abae168f2f925129b5a3ae0f26ff211a9de0c4
MD5 f64ad2f82c164ee08d3ba70faf72f3b8
SHA1 08ec656e35841d7f206c66d357f60cefb59514eb
SHA512 f13afa94db12faa207f0c66507ee4967b410fc8f6a292711dbdebd853260313d2c27a03aaec41578064affe60a3869e98db62de7ba02a0aa622c8cb1de759789
TLSH
T140B022EC00023E0BEC0023F0A0CA08C3BF302F200B83808222F080808020203CA020A0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 132KB
SHA256 bc3315cb4c6fdf230fa6077648887e3086e75fd09d5b8d8bed97e3a05ae070c1
MD5 f0a41a390f60a4c21e41d79152ff0753
SHA1 2fc25594f739e1d5f214bf45e91d66be58cfe6c4
SHA512 80be628e1d81805d9e3d49477fbee79573fddd60c8e947e184dfb2e291f4eb38c54ef2ac6354306e20de0b2247d207f80411ed7af8ee61151361be4bf5f9ef0f
SSDEEP 3072:OLyy+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gE:Uyy+hFD+7t56OD9ZfSApprE
TLSH
T1BFD30232AA95D877C9FD7541F247A304DEA668ED41DE2A0D444A9F8EE09F84C0773A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 da0a380eae36ecdd9f0f77187adbca05ab4f8eae1c32ac7c25c362ac8a840d1e
MD5 656855e5667e091082d59d2c1f819e88
SHA1 fef1d37e903eff6cd48fd4baf3dcdf4957efaa44
SHA512 9823e560556d7dd4249427df362612397996ccbc47641418c982bf76a3a0597e11108a019c10b6893159e869d4762f1604e52e73488814ec99f2344e8d569aa7
SSDEEP 3072:1Bs+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gE:3s+hFD+7t56OD9ZfSApprE
TLSH
T16BD31233AA95D8BBC9FC6541B157A300DE7668ED41DE2A09444A9F8EE09FC4C0773A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 a7bb0d55b1c8616caed91b1bbd0821787e97ed1a923b8e7a4144675d71234f71
MD5 94210f995276d931c2d77a4256bf70b7
SHA1 55d48da5fb8fc53c429dc60f9a9f87f56d9f0cf6
SHA512 7f83f57f3619aa7d2a5746c8cb6182235463e61b3f257824e06fc4ff954ef95a854bd2234f3baaa8a79a5737e2480edac7f2dc28c7c86c615a82795aa691420e
SSDEEP 3072:OLB+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gE:UB+hFD+7t56OD9ZfSApprE
TLSH
T12BD31233AA95D877C9FD6541B157A300DEB6A8ED41DE2A09444A9F8EE09FC4C0773A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 132KB
SHA256 1f6fe0d01afb356779a9be0bdfc4eac4403703f50a334c424fcb345a99d291cc
MD5 7abbd2622d31b1f5e127230e23c24ea0
SHA1 1c583f3ef097003cfa5d5497a14ca11875c77e84
SHA512 f3af800791621ad8c7cf70be5d997e7b9a09aada8bb31d2fac12d60c78fbe0d10b795e34978a02afb1b089c44a72eaace5470689da0bb3d6e940d56be024567e
SSDEEP 3072:Owyy+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gE:ryy+hFD+7t56OD9ZfSApprE
TLSH
T150D30232AA95D877C9FD7541F247A304DEA668ED41DE2A0D444A9F8EE09F84C0773A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 132KB
SHA256 81848dfc777c93222385e5fabd7e480956c7c4aa186a83ca2cceea9d0dca02e3
MD5 01355901c91e8e3b2dac94192e15b31e
SHA1 6461e1c08d7daae20c228caa83f0b4e0cbe917eb
SHA512 2e5750ed76419a125a210bc7b822d96f9b2b5fb5c8c8c62423794de14a4ace01f9a49fdf320591ad5027ae097a161616ef02b41e57bf9badb1514d356e123d55
SSDEEP 3072:Kwyy+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gE:/yy+hFD+7t56OD9ZfSApprE
TLSH
T12AD30232AA95D877C9FD7541F257A300DEA668ED41DE2A0D444A9F8EE09F84C0773A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 43e72658a6efab880a114587db5f3390cba1a261e23cc93b1da9203691976880
MD5 f53f0edf52d2163048d2745cb8a84687
SHA1 c7be2c705cda721d95f96e538ffa98e6b5cea2ac
SHA512 f5fde218cfb199714c43ef08d0d789c49fbe57e6c9cf1553b0d6f66ff5168465b2abaa7e1204306d599356e616b01b50c3dc3df29228ccfa9e02dd93c9de7129
SSDEEP 3072:1LB+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gE:1B+hFD+7t56OD9ZfSApprE
TLSH
T1E7D31233AA95D877C9FD6541B157A300DEB668ED41DE2A09444A9F8EE09F84C0773A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

Baker_Botts_Partner_Coordination_Review.vbs

Path C:\Users\Admin\Downloads\Baker_Botts_Partner_Coordination_Review.vbs
Size 1KB
SHA256 86264c8f64e955c0dfdde3c77052f5c334b48ca0de8d8cfa60de8c1bab0f38c1
MD5 f630d025b59834520f7644f01ed2c4a9
SHA1 a35e29ae01efa12df26eec4ede4df7ed4049b38d
SHA512 81bbe6df82d68bfe122b87bf2163692b98ae3204caa392ac084279386e032f68bf272cc2d6e17a241f89c80f308b3c76d5f7f2cc0073cc9d5d987fc644705082
TLSH
T12E211E6F983DF43906ACC446DFF2DA48EDC2A0DBE064E8BBB440DC814A091E04BA31C3
MD5 SHA1 SHA512 TLSH

Submit Download