9159b512d8485a2f97986462a302be63497e957c0998d00c371810dad7113d30

Analysis

user interaction
yes
max time kernel
300s
max time network
302s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 22:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
compramos.png
Size 11KB
Sample260924-2rfbeayvct
SHA256 9159b512d8485a2f97986462a302be63497e957c0998d00c371810dad7113d30
MD5 a48cf12d9113649e79ad8808f6ea1946
SHA1 f93eece4daf74298566cbc1cafb7df258e11a8f3
SHA512 a531edb69d4b0fd5ea3e9077091c9f34c01801c9cd2733cc40f6c04f2e8b815824eb7e32f800d9f84ef325c420454f1a8342bb80f3d4af7822fe58c1170d1d35
SSDEEP 192:kj+3HtET57gfyClwUcL67TzqlcJas0R5TWTkjAZabjUMdhdBHLbS+jgZDwUWbQF5:kj+9ERrCloL67acoHukjhYi35DakuvQg
TLSH
T1CB42BFFAAB89179D879DBACF87544C7C8200D0A6C1F05D3F636B9704AB7C91D20E9A85
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
756	chrome.exe

Checks SCSI registry key(s) 3 TTPs 8 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0009	svchost.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 9 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134347637422389638"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe

Modifies registry class 4 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
4972	mspaint.exe
4972	mspaint.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5756	chrome.exe
5756	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 28 IoCs

pid	Process
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe
Token: SeShutdownPrivilege	5164	chrome.exe
Token: SeCreatePagefilePrivilege	5164	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe
5164	chrome.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
4972	mspaint.exe
4972	mspaint.exe
4972	mspaint.exe
4972	mspaint.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5164 wrote to memory of 3124	5164	chrome.exe	94
PID 5164 wrote to memory of 1192	5164	chrome.exe	95
PID 5164 wrote to memory of 1192	5164	chrome.exe	95
PID 5164 wrote to memory of 756	5164	chrome.exe	96
PID 5164 wrote to memory of 2632	5164	chrome.exe	98
PID 5164 wrote to memory of 2632	5164	chrome.exe	98
PID 5164 wrote to memory of 1836	5164	chrome.exe	99
PID 5164 wrote to memory of 1836	5164	chrome.exe	99
PID 5164 wrote to memory of 2196	5164	chrome.exe	100
PID 5164 wrote to memory of 2196	5164	chrome.exe	100
PID 5164 wrote to memory of 4568	5164	chrome.exe	101
PID 5164 wrote to memory of 4568	5164	chrome.exe	101
PID 5164 wrote to memory of 3392	5164	chrome.exe	102
PID 5164 wrote to memory of 3392	5164	chrome.exe	102
PID 5164 wrote to memory of 4508	5164	chrome.exe	103
PID 5164 wrote to memory of 2900	5164	chrome.exe	104
PID 5164 wrote to memory of 2900	5164	chrome.exe	104
PID 5164 wrote to memory of 2880	5164	chrome.exe	105
PID 5164 wrote to memory of 2880	5164	chrome.exe	105
PID 5164 wrote to memory of 1996	5164	chrome.exe	109
PID 5164 wrote to memory of 2836	5164	chrome.exe	110
PID 5164 wrote to memory of 1996	5164	chrome.exe	109
PID 5164 wrote to memory of 1948	5164	chrome.exe	111
PID 5164 wrote to memory of 2836	5164	chrome.exe	110
PID 5164 wrote to memory of 1948	5164	chrome.exe	111
PID 5164 wrote to memory of 5960	5164	chrome.exe	112
PID 5164 wrote to memory of 3964	5164	chrome.exe	113
PID 5164 wrote to memory of 5960	5164	chrome.exe	112
PID 5164 wrote to memory of 3964	5164	chrome.exe	113
PID 5164 wrote to memory of 4432	5164	chrome.exe	114
PID 5164 wrote to memory of 4432	5164	chrome.exe	114
PID 5164 wrote to memory of 5972	5164	chrome.exe	116
PID 5164 wrote to memory of 1776	5164	chrome.exe	115
PID 5164 wrote to memory of 3620	5164	chrome.exe	117
PID 5164 wrote to memory of 5972	5164	chrome.exe	116
PID 5164 wrote to memory of 1776	5164	chrome.exe	115
PID 5164 wrote to memory of 3620	5164	chrome.exe	117
PID 5164 wrote to memory of 4168	5164	chrome.exe	118
PID 5164 wrote to memory of 4168	5164	chrome.exe	118
PID 5164 wrote to memory of 2380	5164	chrome.exe	119
PID 5164 wrote to memory of 2380	5164	chrome.exe	119
PID 5164 wrote to memory of 3564	5164	chrome.exe	121
PID 5164 wrote to memory of 4764	5164	chrome.exe	122
PID 5164 wrote to memory of 5400	5164	chrome.exe	123
PID 5164 wrote to memory of 3044	5164	chrome.exe	124
PID 5164 wrote to memory of 3044	5164	chrome.exe	124
PID 5164 wrote to memory of 1924	5164	chrome.exe	125
PID 5164 wrote to memory of 1924	5164	chrome.exe	125
PID 5164 wrote to memory of 3264	5164	chrome.exe	126
PID 5164 wrote to memory of 3264	5164	chrome.exe	126
PID 5164 wrote to memory of 1220	5164	chrome.exe	127
PID 5164 wrote to memory of 1220	5164	chrome.exe	127
PID 5164 wrote to memory of 4368	5164	chrome.exe	128
PID 5164 wrote to memory of 4368	5164	chrome.exe	128
PID 5164 wrote to memory of 2436	5164	chrome.exe	129
PID 5164 wrote to memory of 2436	5164	chrome.exe	129
PID 5164 wrote to memory of 4356	5164	chrome.exe	130
PID 5164 wrote to memory of 4356	5164	chrome.exe	130
PID 5164 wrote to memory of 4900	5164	chrome.exe	131
PID 5164 wrote to memory of 4900	5164	chrome.exe	131
PID 5164 wrote to memory of 4552	5164	chrome.exe	132
PID 5164 wrote to memory of 4552	5164	chrome.exe	132
PID 5164 wrote to memory of 4600	5164	chrome.exe	133
PID 5164 wrote to memory of 4600	5164	chrome.exe	133

C:\Windows\system32\mspaint.exe
"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\compramos.png"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4972

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
- Checks SCSI registry key(s)
PID:4628

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ffd44c5c728,0x7ffd44c5c734,0x7ffd44c5c740
  2⤵
  PID:3124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1632,i,11282616637308546272,12334867107585354768,262144 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=1808 /prefetch:2
  2⤵
  PID:1192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2196,i,7674990412004664682,16008681498106929411,524288 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:11
  2⤵
  - System Time Discovery
  PID:756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2336,i,13801057360192340885,14853074457127192858,524288 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:13
  2⤵
  PID:2632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3248,i,15025642667332328729,3586237146552355021,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:1836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3288,i,5796818752830232664,6911689876486016534,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:2196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4704,i,18320116686300486933,6987031080814491606,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=4712 /prefetch:1
  2⤵
  PID:4568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4904,i,14170260502474242349,3499191834155907247,524288 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=4880 /prefetch:14
  2⤵
  PID:3392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5384,i,11892350666839095017,16904402628564883881,524288 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:14
  2⤵
  PID:4508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5484,i,8548681796027910709,2632665338211363890,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:1
  2⤵
  PID:2900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5520,i,3903343067428489867,5297967601699010631,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:1
  2⤵
  PID:2880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5684,i,11761221120088140310,6803242421247526708,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=5568 /prefetch:1
  2⤵
  PID:1996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5856,i,2172703367974993787,13381985741043335849,524288 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:14
  2⤵
  PID:2836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5980,i,18336054107536532443,4177230376223938019,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=5520 /prefetch:1
  2⤵
  PID:1948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5480,i,17932191137749622731,4965041140469067403,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:1
  2⤵
  PID:5960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6200,i,679352033206776837,17591697405701998526,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:1
  2⤵
  PID:3964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6292,i,4679428609079687710,5736290394789186713,524288 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:14
  2⤵
  PID:4432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6456,i,177285628541448371,14699763435455767934,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:1
  2⤵
  PID:1776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6316,i,11130057796962478140,9045042960358246771,524288 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
  2⤵
  PID:5972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5692,i,17977616536147185072,5252934394535370887,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:1
  2⤵
  PID:3620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6008,i,1468532149282837347,2875037980458887658,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:9
  2⤵
  PID:4168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5960,i,6270558596738921857,5283089042795127073,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=5756 /prefetch:1
  2⤵
  PID:2380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5612,i,10162320727235470528,16113837016523113008,524288 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:14
  2⤵
  PID:3564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5820,i,3917126766679511237,10038806010108960415,524288 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=4700 /prefetch:14
  2⤵
  PID:4764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5784,i,678328356683035351,6385567994654188222,524288 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=5676 /prefetch:14
  2⤵
  PID:5400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=4792,i,3734740413526430412,5280747422270695418,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:1
  2⤵
  PID:3044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6216,i,10078180913432189335,11316749554790053756,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=5764 /prefetch:1
  2⤵
  PID:1924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=4456,i,13376983901797884333,418543035758588185,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:3264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=3928,i,12035765923517948688,16861185741781223444,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=5708 /prefetch:1
  2⤵
  PID:1220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=3316,i,9261982544804001307,15976285863264597980,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:1
  2⤵
  PID:4368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6660,i,6999143727616157287,4032547486872986748,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=3916 /prefetch:1
  2⤵
  PID:2436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=6584,i,14553274832777804962,14675638828827323022,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:1
  2⤵
  PID:4356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=6588,i,9698337469729895217,3182187711192315383,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:1
  2⤵
  PID:4900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=5760,i,13259698629249345746,1953638001913966352,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=6716,i,10104555597299366824,7476184653561816980,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=4724 /prefetch:1
  2⤵
  PID:4600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=4760,i,14423498915008198774,3360914854961719788,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=6620 /prefetch:1
  2⤵
  PID:4616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6404,i,15304607966284703678,10817664522356095621,262144 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=4796,i,12713423763832586463,13877084620298003664,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:1
  2⤵
  PID:6084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=3600,i,17277919918142898140,3125014853367800996,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=6760 /prefetch:1
  2⤵
  PID:4920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=6724,i,16869828590515364963,11405020592356974433,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:1
  2⤵
  PID:5704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=6696,i,17790149365336673263,14212462290247764034,2097152 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=6768 /prefetch:1
  2⤵
  PID:2680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=2280,i,14713395822357431076,15122802881991936011,524288 --field-trial-handle=1812,i,13171860975270736265,9116503429154585862,262144 --variations-seed-version --mojo-platform-channel-handle=1236 /prefetch:14
  2⤵
  PID:3424

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1352

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:472

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:4992

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
TLSH
T109F09C8CD050E86F02B2411AB1647314FB51037A0751A59F393CDC0D9FB6DA751C6F4D
MD5 SHA1 SHA512 TLSH

Submit Download

craw_background.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
Size 531KB
SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
MD5 6eebed29e6a6301e92a9b8b347807f5f
SHA1 65dfb69b650560551110b33dcba50b25e5b876de
SHA512 fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2
SSDEEP 6144:abyfBNC2FRdjiRXqbe5Dq31IVlMqX+wd5/CcMMJcRULt0NjyTOEzZQ+h72W3GB0n:Ft/g
TLSH
T1B5C4F74C34C2E8CD6A623DA5247B9085A2319266F4479ED9F0EDECF21AF44641937F3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 12423bc38555a3dbd8b5fb57299e29a923e4c38aaa5314fe10702b753c7947a7
MD5 a5a0a88323cfaaa1224365ac3cb6a4ff
SHA1 90e0045e74b06d16734d3aff3260fb0e9fb2717e
SHA512 4fa76ab9ffc1e6683f534e32c71350ca4821bc4bbf2614b22b7445767c0d086bbb8c1f62e6c7ee54117b14d9e5100423525f973be71f96b4c68e2111926f3675
TLSH
T117517AB3D3D48A6D881166E4DB256E2BDD7D0A18122C3C26C8D8EE4B53E2973D21178E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 3fd32f7460e8b59ca52dbe93bb52032895d629e370e207abab17f20391424b7e
MD5 c239341226210f592980d2ef77d19651
SHA1 ae45640e540cbf1de7ca2249e9b13a13119bc4b8
SHA512 ee6ad53bb697d0fa683af93a420f13c0cd5f5a54d6847f8f1ef5b4218b3c6fe35328b1eabbeeaa196757cff1dfbbda6a5442b45317118af47971d45fba8052dc
TLSH
T126818AB7D3D48A6DC81166E4DB256E1BDD3D0A29122C3C2688D8EE4B53F2973D20178E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 c1e48f3ccb7e737ea50ef948249163fb0187aed00c4bba68682e7bb225a2b73c
MD5 ba2b818202ca46cdd0408ba439ff4e98
SHA1 c293ce470445828a98df034cf5b4928929986e75
SHA512 6fe781ee6a6e4a7604a63b7e04ca52de1d7793decfada23dbccc4195e23bdf8eea13dd37c15b61f35196e250cea1586a85b7902246571c9df50c91247fe360f2
SSDEEP 48:YALlqRq5qYhXqNh4sGXLsTfoKsYRsePss44skfsWosf79BjJzsg+snjsnjhhnONH:DMy1Jeoe7JP0knP7L3RSjhq
TLSH
T140919BF7D3D48A6DC81166E4DB216E1ADD3D0A29122C3C2688D8EE4B53F2973D20178E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 b5c8188b4b0aea4fc6bc4d6d10d9c0283d488d8e605dd56a918042d71cbc7fd8
MD5 831f6dc53e0b21f0dd7e2260ac1eea74
SHA1 a6af7fdfbe69d2e83402e66a416292b37e02a9af
SHA512 7c58d975a26481b3aec766e1c5fa4534d20390d70f52a4409a76629233f528f798c346e872cb2c3f0457a7df27531842cbd6bac20c859e3ed6e15c569c31aaf1
SSDEEP 192:PRPM0SDwLv7vAPRp2a9jHsb+WNn4e0GCExkwzflfVyIsnAUge:PRPM0S8zmXddwR0AxTfl5e
TLSH
T1A732932EAE54B47BADDBD22AFA657B43E6F5203120942E84E6FC8A3C14D75CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 d15e7b29ae5c7b8b409290a16aad5f5402cfb95e574f91ee19891a0d17563cfd
MD5 39ee6905b276ae64bad8a7ba7897e951
SHA1 b70852d8e61acf78012a1c046834b43acd11b778
SHA512 f25bf3e65cc495e9f676830ad1572ae0509f248f3df7bf371a7a5d8ee7f69408ed3f4fc1a8d25649fb8c9a5844396cb5a92854f0e52f75327127d0f6ab1a057a
SSDEEP 192:XRPM0SDgNv7gWPRpKj9ffh9jHcORb+WNno3YH3olB2RCExkwzflfVyIsnAUgE:XRPM0S0tfXGdxs4Q2vxTfl5E
TLSH
T19C52832EB9206A7B6DDBD229F965BB53E2F6203160941E84E7FCCA3C14D75CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 880754bc9da6f39ee928e5fdd567ff081d97d94d3879cc31026acac9d7d7fde7
MD5 b746f09b616f891882a6210b3cf142c9
SHA1 9a1f3f3c6659daf5e2e63db5d5211c76877c3ca8
SHA512 8c44aff775d79d958439e6add36f5e59dc3e366453eaed0bbd441ce5e04c679f109fbe8f0274940c2c009ceba3a2e506a6e45a04452dd9ec1b018978e1e0f4a9
SSDEEP 192:XRPM0ShCev7gWPRpKj9ffm9jHcORb+WNn1o3YH3osDWdCExkwzflfVyIsnAUgE:XRPM0S0afXddxC4XWjxTfl5E
TLSH
T11052942EB9206A7B6CDBD229F965BB53E2F2603160D01E88E7FC8A3C14D75CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a113522e5c61a8d12d310285d94c3eacc059be26f40235e0dcb7c19a1ef55969
MD5 cad8c94a6d10577361a00646386cdea7
SHA1 ef483ee2c91481597393148660f344d48301feb2
SHA512 667632cd34de3c95c8d14c0b6eb3953664788e01118048359ebc08064dd91b1b777b5af72eaef8c34250cfa77878ccfaf12dce672df84d833b214b215c7fad8f
SSDEEP 192:PRPM0SDPWv7HWPRpKja9jHDFb+WNn4e0xCExkwzflfVyIsnAUgE:PRPM0SbikXrdfR0PxTfl5E
TLSH
T12442942EBD14757BADDBD22AFA657B43E6F5203120902E84E6FC8A3C10E75CC221B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 a59836e759273bec89f8aa190f1614425f5f529dd03d395598aeeea589a1dc86
MD5 4d6ebd22dc68ee6b4372e96f8cbea492
SHA1 03dcb6131bb641d63440d31c03c0e4f183556b97
SHA512 ce96e07c8432f0bff701f3fb2ece3729a11082a934c4e805a82d2db1d974b82a16351e0e082bb757a3eb1b6222efb9ad6d1d9b764534695fc2cf9afb535d89e5
SSDEEP 192:PRPM0SDwBv7vAPRp2a9jHsb+WNn4e0MCExkwzfhfVyIsnAUgE:PRPM0S8RmXddwR0GxTfh5E
TLSH
T1E332832EAE54B57BADDAD22AFA657B43E7F5203120942E44E6FC8A3C10D75CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 0dc9eaa3d799b50142fc87ce98b29e80ca40b957d1b8523def3d153bda0accbf
MD5 da53e072c49b39cd2c2c56ad4069fc69
SHA1 c72ac2d151269b9823dd492e586dd54b31a61b0a
SHA512 f533170cdfdb1a9820c94531c6d7318e6c08c01983c7a63c4a7753aba3329b30c48970ca9ced805b2f0dab293a2d019b9cc41c847b061ea3bc42f35ae2b9117a
SSDEEP 192:PRPM0SDzlv7HWPRpKj9fQ9jHcORb+WNn4eXH32uCExkwzflfVyIsnAUgE:PRPM0SvVkXTdxRH2oxTfl5E
TLSH
T1C342832EBD10797B6DDBD22AF9657B53E2F6203260942E84E6FC8A3C14D75CC221B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 3de6f3144b21752ef008a9af3d71e0c3b7e311f44fa8903bf478a22fbe9cd83c
MD5 10a9770dbcac7bef4a3fbb4fd33abd37
SHA1 67a62d98d84a18da32e0ed4ecb70b89c8992bb5b
SHA512 c9ff2994841d21415be4c9e230a962411a6a1f01897dbcad42351d5c0b85f86f20be5d66320887b1081bf69b2438f318358a4fbae6aa63e8cfc6b2e40b8119ea
SSDEEP 192:PRPM0SDjcv7HWPRpKj91Q9jHcqRb+WNn4e0xCExkwzflfVyIsnAUgE:PRPM0S/IkXVdVR0PxTfl5E
TLSH
T19242842EBD10797B6DDBD22AFA657B53E2F6203160941E84E6FC8A3C14D75CC221B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 bd5dcb73401308c817c849e696e51a96702ed696ce4fbaf97e95cfe902b3c4f8
MD5 f14a2898a4e6b639c95386ca051bd115
SHA1 7a2a71586b13177b0be0dd70c7de5c0d3b47440c
SHA512 07bce25efc27df2f640400c95a9e5e028749f81371184937502d07e120b7a45c80ec0b1f1c015ce35dda6dfbdc20d2bf391deb531a36a734b7b9d4af17fa9bf4
SSDEEP 192:PRPM0SDjSv7HWPRpKj91Q9jHcqRb+WNn4e0xCExkwzflfVyIsnAUgE:PRPM0S/+kXVd9R0PxTfl5E
TLSH
T1EB42842EBD10757B6DDBD22AFA657B53E2F6203160942E84E6FC8A3C14D75CC221B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 53bda248454de0bf4be6028b95ecd9dd3c17a1a58aa29214b69154f540d9027a
MD5 f928324336aebe47e2ac01e92e75ab6b
SHA1 7ab8deb93707cf8a9a38d2163075aa5f216cd431
SHA512 3c1e8418afd9523bad74dc2ea7b399e8e63c443bcf5c6ead096eff7a9ddc4f6ad6fd1fda5edb3d220e86c17da9ae125b4fae17a5fa5c1d8ddc43b9cb193843cf
SSDEEP 192:XRPM0SDCvv7gWPRpKj9ffm9jHcORb+WNn1o3YH3osDWdCExkwzflfVyIsnAUgE:XRPM0SmnfXddxC4XWjxTfl5E
TLSH
T1DE52942EB9206A7B6DDBD229F965BB53E2F2603160D01E88E7FC8A3C14D75CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 13KB
SHA256 e9b2c4a22709b39835df636fc435cc8eecab401e995433a62974b44996a40b67
MD5 1912c2c4777b9f3a1a0067cab81f8f80
SHA1 1df7df6993232580ddf3e7a25fba1e9cec752d51
SHA512 f78b2443058f9e310c6d2c16a3f560d971c0694a6f7e8219e79e68411af7a3aede7b2ce28bb2a96ab3752a493bbfbb161a0dd055ca9b1d28fb2bfab116232b17
SSDEEP 384:LBjZc7KxkXqKf/pUZNCgVLH2Hfgslm+XODZE+ErU3A9HGXdgFu8wUxd:LBZc7KxkXqKf/pUZNCgVLH2HfgsIkOV+
TLSH
T1EB52F727648C9A7F0FD8DA4CCC166F4BACB5015765680D2893FB9C1803A57CF124A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 39c5e9f464d27711f4806fe9380d75dbe5f5edf85eaa010810e5a88da99601eb
MD5 a4baaf2d500d49818739773b13dd4cd0
SHA1 82a1235dbd72f84d8e4252102531f43003afc159
SHA512 3cec797716edf0037c5f33a1249b299ff1c060dc508377bddcdeaf9de1dde13566eed20b7968c5611d9bc3c298cca6b9fe281cbe90e2f7b794aa9b6c00d8ee63
TLSH
T191A0025452C00815DE385274747529D166626D9C2A658303A4D70484CD7F1D0D111712
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59cefe.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index~RFe59cefe.TMP
Size 48B
SHA256 cbc292ffade03f91a98dd705a15fe0175961bf257acc0a05c6c3d54de51192ac
MD5 2d6f85b55a0b930e63e7e5bc61b25f55
SHA1 8323377df5363658b9fd840d183c584734fdda1d
SHA512 43a3015f70a69855fdbf59d2b5a7cdea08a874be05f33cd1a60568d89370db33e9a1a239df1aa803b1ba49521ed21b5f548a9f750fdf80f66005fb258734024e
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 138KB
SHA256 4793724fd76f706053f8f70ce9df836d37940b268610bfc2eda77f494d8ae521
MD5 95d3474cee6d8f1ac948cf656ee39603
SHA1 47affd8c5a28066ad869d321b9e2f4ec7473d7b2
SHA512 01f34f16dc33330a4f2535d3bd1d5e04a4ad03510dfd31ac0a0fcd0da8855f00d32afcef9734759145b1cf45baaa95525145fd0b4a6bc7ef3b6aebf85932d33a
SSDEEP 3072:n0w5AM9JYonWG5+ifFgOTyH4FC6sahipMRq1kJlwgX5bf7Lq:V5n9CSWohF/WH4FJVI8tlwgXJDLq
TLSH
T160D3123326465C67EEBB8578470B2C304CB07897DA49BA18AAF93E49C1CF5E94B13770
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 137KB
SHA256 fdfd84a7b7855a2168345949e46cb2d85e3ffe051c0f8fca66d7961b02564cc8
MD5 48cd9c46ce6234ce179af8baae3152c2
SHA1 112b29cb32f3c2001d9de48393709215c366eaeb
SHA512 ee24477ec318e17251a0a6db61ba56a9ed1b9086b192f6acabdf27a6033e89f65d04b86bc615b8296f422a8a01cbafac352b85e82f2f5d0db2e93b8d15eae816
SSDEEP 3072:DjAM9JYonWG5+ifFgOTyH4FC6sahipMRq1kJlwgX5bf7Lq:nn9CSWohF/WH4FJVI8tlwgXJDLq
TLSH
T1F3D312332256AC73EAAB8675871B0C3049B068D6E699B7248AF66F4DC2CF6D50713770
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 137KB
SHA256 91c7fd4a9cf6d1c175afc2909ea44fc89d958140aa8930d7f3262d8fbab6c953
MD5 b9225a2841b2b087075f3fd665a9e843
SHA1 9b82359947d5fccdf690e9945f19b963b81b8346
SHA512 c1218990c0dbf75ff8851b71dbbba6f3e3630bad7837e9791bbbaedb51b084d7a7f916ff249edafd169cb44c606872922c62615126ab367438f60096acb38098
SSDEEP 3072:cjAM9JYonWG5+ifFgOTyH4FC6sahipMRq1kJlwgX5bf7Lq:4n9CSWohF/WH4FJVI8tlwgXJDLq
TLSH
T1CCD312332256AC73EAABC675871B0C3049B068D6E699B7244AF66F4DC2CF6D50713770
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 4KB
SHA256 d275866a65ffa304edab21a34366b7e5f8a5aaa44645a642211ba80ab663fca8
MD5 605c591377414705d17cc02ae641156c
SHA1 f650f62d8b664c3f6be2b15cb09c8aabab6e983d
SHA512 347beb5a102353e731c1bc54d8befa097acbebf59f6cb9f35024ecd1897acb5191a251cd5c6b4379d7f4bafa511815b89fb1a2520745f110397c5511dc744e34
SSDEEP 96:sC0d+DYOC49mjc0XQKgfaHtpZnm5gRDotok56VDOB6MGyvY7CqS0bOZ5v4a:sC0wR0jhgKR3ZnzDUDeu8TCqS0bOz
TLSH
T133A107B1A8ADAC7754B7D400B052BB07DEB871A76461AF40EAEC1F1D10FB1EC1382527
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 138KB
SHA256 4e5859ab5a93f51d503d78029aee198d2793e3e33f887c47181ceb8591629da2
MD5 a3b3e2d549a3d36117915eedfe583eae
SHA1 2e78055624897da23a25279967be3442994fc3af
SHA512 86a420b8cca0dd09833635a627fb94ffaffcac825f7a5b70132d8636896518991b82a6965191fe65a1bede80859a55cbf77134a361caea4c1a2fd9d58355053c
SSDEEP 3072:H0w5AM9JYonWG5+ifFgOTyH4FC6sahipMRq1kJlwgX5bf7Lq:15n9CSWohF/WH4FJVI8tlwgXJDLq
TLSH
T16DD3123326465C67EEBB8578470B2C304CB07897DA59BA18AAF93E49C1CF5E94B13770
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 138KB
SHA256 76778362972abd3bb661d19e1523fef9b2badfd715a6ac7802d5e5ff77f9545e
MD5 204749e92f8165ee73d6028bfd89e167
SHA1 f7afbfa5a399545d2e778d052d2f361328e063dd
SHA512 08fc2609dd5dc3697569f0be36e51eefaec28251b0d66af51adedfb2570c5d7a53cbaef472c34f6060e126c6a7391c6a5d71669f089c0bb344d4d8cfba7f5187
SSDEEP 3072:u0w5AM9JYonWG5+ifFgOTyH4FC6sahipMRq1kJlwgX5bf7Lq:e5n9CSWohF/WH4FJVI8tlwgXJDLq
TLSH
T1A5D3123326465C67EEBB8578470B2C304CB07897DA59BA18AAF93E49C1CF5E94B13770
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5164_702172000\CRX_INSTALL\_locales\en\messages.json
Size 450B
SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
MD5 dbedf86fa9afb3a23dbb126674f166d2
SHA1 5628affbcf6f897b9d7fd9c17deb9aa75036f1cc
SHA512 931d7ba6da84d4bb073815540f35126f2f035a71bfe460f3ccaed25ad7c1b1792ab36cd7207b99fddf5eaf8872250b54a8958cf5827608f0640e8aafe11e0071
TLSH
T1D3F055CB9000FC5E538BC00EB10072282BA603E01AD1726724EC1C0E67DFDAEB143F9A
MD5 SHA1 SHA512 TLSH

Submit Download