0c300e07769ae7a75e90b322c597ca4415eaca76703687a0b6340b257c154f03

Analysis

user interaction
yes
max time kernel
1800s
max time network
1775s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 10:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
gabirle 1.jpg
Size 5KB
Sample260925-l2evmadc29
SHA256 0c300e07769ae7a75e90b322c597ca4415eaca76703687a0b6340b257c154f03
MD5 33526ad309e592e3632fdb4271b43df9
SHA1 a2d0e416a9cfa613f2ab89e920db610d72f5a82f
SHA512 25499c45006bb62d60e23c6af53b75473e653a0c6cd9daadfd1a7fde724bfc1af1f99a6c80ef699bbd6b31237e2c266c316d75390c69953c0947c8502f6d098a
SSDEEP 96:zLN8WklDCIaZzdotRmpOHk7gFgia2dLwZ0r1q5l1pEVQTecxdXf0WxFpN5J0OkJU:z9kFUpotRcOHkPKfJqvtT/xdP0aFpHJN
TLSH
T18CC17C98D1651899F6661F838A21BA23E21958B7EA24BB101376A82D6CF42FC5E42487
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2872	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134348041384773988"	chrome.exe

Modifies registry class 6 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{D1720B7C-81CD-457D-A456-B4CDAAF8A773}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
4596	mspaint.exe
4596	mspaint.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
4216	chrome.exe
4216	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe
Token: SeShutdownPrivilege	5500	chrome.exe
Token: SeCreatePagefilePrivilege	5500	chrome.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
4596	mspaint.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe
5500	chrome.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
4596	mspaint.exe
4596	mspaint.exe
4596	mspaint.exe
4596	mspaint.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 5500 wrote to memory of 2108	5500	chrome.exe	104
PID 5500 wrote to memory of 4624	5500	chrome.exe	105
PID 5500 wrote to memory of 4624	5500	chrome.exe	105
PID 5500 wrote to memory of 2872	5500	chrome.exe	106
PID 5500 wrote to memory of 2272	5500	chrome.exe	107
PID 5500 wrote to memory of 2272	5500	chrome.exe	107
PID 5500 wrote to memory of 5716	5500	chrome.exe	109
PID 5500 wrote to memory of 3328	5500	chrome.exe	110
PID 5500 wrote to memory of 5716	5500	chrome.exe	109
PID 5500 wrote to memory of 3328	5500	chrome.exe	110
PID 5500 wrote to memory of 1856	5500	chrome.exe	111
PID 5500 wrote to memory of 1856	5500	chrome.exe	111
PID 5500 wrote to memory of 2288	5500	chrome.exe	112
PID 5500 wrote to memory of 2288	5500	chrome.exe	112
PID 5500 wrote to memory of 1508	5500	chrome.exe	113
PID 5500 wrote to memory of 4744	5500	chrome.exe	120
PID 5500 wrote to memory of 4744	5500	chrome.exe	120
PID 5500 wrote to memory of 3464	5500	chrome.exe	124
PID 5500 wrote to memory of 4324	5500	chrome.exe	125
PID 5500 wrote to memory of 5296	5500	chrome.exe	126
PID 5500 wrote to memory of 5108	5500	chrome.exe	127
PID 5500 wrote to memory of 5108	5500	chrome.exe	127
PID 5500 wrote to memory of 2696	5500	chrome.exe	129
PID 5500 wrote to memory of 2696	5500	chrome.exe	129
PID 5500 wrote to memory of 6032	5500	chrome.exe	130
PID 5500 wrote to memory of 5488	5500	chrome.exe	131
PID 5500 wrote to memory of 5488	5500	chrome.exe	131
PID 5500 wrote to memory of 4348	5500	chrome.exe	132
PID 5500 wrote to memory of 4348	5500	chrome.exe	132
PID 5500 wrote to memory of 4216	5500	chrome.exe	134
PID 5500 wrote to memory of 3620	5500	chrome.exe	143
PID 5500 wrote to memory of 3620	5500	chrome.exe	143

C:\Windows\system32\mspaint.exe
"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\gabirle 1.jpg"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:4596

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:2348

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffefba6c728,0x7ffefba6c734,0x7ffefba6c740
  2⤵
  PID:2108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,17103023102286016834,17470166064352676746,262144 --field-trial-handle=2104,i,6398363933369140292,3806749862741013916,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2100 /prefetch:2
  2⤵
  PID:4624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1588,i,6291643085512293682,6139720626674661271,524288 --field-trial-handle=2104,i,6398363933369140292,3806749862741013916,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2396,i,893668507273289373,4884888768073669264,524288 --field-trial-handle=2104,i,6398363933369140292,3806749862741013916,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2508 /prefetch:8
  2⤵
  PID:2272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3248,i,18398113595665707810,14585702663106089915,2097152 --field-trial-handle=2104,i,6398363933369140292,3806749862741013916,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:5716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3284,i,1063774581135318906,17241112048326435967,2097152 --field-trial-handle=2104,i,6398363933369140292,3806749862741013916,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:3328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4476,i,12464616599391281627,13801789335918742850,2097152 --field-trial-handle=2104,i,6398363933369140292,3806749862741013916,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4468 /prefetch:2
  2⤵
  PID:1856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4712,i,1188924610855701484,3864766325211792620,2097152 --field-trial-handle=2104,i,6398363933369140292,3806749862741013916,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4724 /prefetch:1
  2⤵
  PID:2288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5572,i,4226184075931171002,14089254803848563316,524288 --field-trial-handle=2104,i,6398363933369140292,3806749862741013916,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5576 /prefetch:8
  2⤵
  PID:1508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5848,i,12027449687763538649,15922864689862030278,2097152 --field-trial-handle=2104,i,6398363933369140292,3806749862741013916,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5356 /prefetch:1
  2⤵
  PID:4744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3324,i,15691365479745849635,15735943741209636997,524288 --field-trial-handle=2104,i,6398363933369140292,3806749862741013916,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3340 /prefetch:8
  2⤵
  PID:3464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4620,i,11370472761898623881,11347244554844243505,524288 --field-trial-handle=2104,i,6398363933369140292,3806749862741013916,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3128 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3312,i,14351423846389769850,10026084971030864225,524288 --field-trial-handle=2104,i,6398363933369140292,3806749862741013916,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3496 /prefetch:8
  2⤵
  PID:5296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3508,i,8536387483448953446,2520322701618960522,2097152 --field-trial-handle=2104,i,6398363933369140292,3806749862741013916,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:5108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5804,i,14023548642201255496,15354241875961336197,2097152 --field-trial-handle=2104,i,6398363933369140292,3806749862741013916,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5548 /prefetch:1
  2⤵
  PID:2696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4524,i,11195537979808288031,10448546469599332233,524288 --field-trial-handle=2104,i,6398363933369140292,3806749862741013916,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5560 /prefetch:8
  2⤵
  - Modifies registry class
  PID:6032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3340,i,14543819301859847292,3899016385322261338,524288 --field-trial-handle=2104,i,6398363933369140292,3806749862741013916,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:5488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=4568,i,877682170976886793,18050427239666926697,2097152 --field-trial-handle=2104,i,6398363933369140292,3806749862741013916,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:4348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6060,i,17986602779859204558,12343365343266054676,262144 --field-trial-handle=2104,i,6398363933369140292,3806749862741013916,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6040 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6072,i,334336710253451869,11618088122214387323,524288 --field-trial-handle=2104,i,6398363933369140292,3806749862741013916,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6076 /prefetch:8
  2⤵
  PID:3620

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2668

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4292

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 0a959205ccd5293d9276a707a76d7a1ba47fbf743b77512515692401398486e4
MD5 cb8c10d5320faa1e3208818d3ad52fbb
SHA1 6c0561440d0b5f2b54a5f0a2a578dc7dca9cf878
SHA512 ce652a3f7f78547a228ec571688f58b175d6b0bf96c6bd53d9717ec161c7c004a4174fb3325d79cb356b8166b2fd2f217b2132dd8ce2a3c240ba188b30e992e2
TLSH
T1BEF02DF5D921AC3718FE1B1920A58A4AEB64236B2B40484B3B3C811C8FB553B8A9595C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 346KB
SHA256 9be344d8aab52c80881980d24ba1435146143794aebbeb98bcae9a4b41f0bd16
MD5 fc31feb6dbd996017ba0751ebf1a2be0
SHA1 d5e54654c86bcbfc7aeed4377e9183421b5f63f4
SHA512 21a4c7e4b3c8f42a8886bcac34a50ae30e61efd3c0443b66fd3cffc54caaf4265d4ee65521051cc530e2e1dccbfb877a303a119768406da737c3249ab577b0e5
SSDEEP 6144:r6PyntaVKs+9xeKjohEc1avaW5Id9Veu22qVTvHodWVjaVrQXcx81E+/SnCCKCDC:uPynjs+9QEcyIfcN2YTvHo0VjaV2Z/SO
TLSH
T1FF7423717998940FD4622800765A6FF51C403FAFC52AE6E3677B10B34D9E4A7347CA38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000010

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010
Size 437KB
SHA256 a451b8791f9183f16a2b30959f9f69e20f35117f8ca6e34e463916869328f3c8
MD5 15d9ce7fe8b446c91cc0598983dde50a
SHA1 b2ad1e9b11a41f5176e3cc495dac68aa26e0955f
SHA512 39e14f23bbde8278b586057eeb648777afc1e6d11b71f3e5529688341f7868b61d0d7ef43cc925189a70def4a6b53e863a06fc8d36e7551c9a50745be6607529
SSDEEP 12288:9SyJNj5Vy52pw6eyroMIW3/dJhlzOH7pVUa0Uiku:9vJzV1pw/yroMfCIUfu
TLSH
T10B9423CFDB2108E7FE76C411CDAD9FE8049BA554056D8CB35BB6066D825A0808636FEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e
Size 21KB
SHA256 c4b5e604d1d55dc28717c96535dc91b4a6ef7292a8a21c37643a6a86ab8253be
MD5 d7d4f007483b550840c3a38d58eb9be6
SHA1 8b09da41689097377ba771c02779b85f7e26a777
SHA512 6a0e42dcec28d8e4d711975629ff80966e9e281028fe7df67fbc49fc82c0b0574678c3073d1855024513a1e667ef9f2c0295519f65930e77c39f8b2e1b2a45c3
SSDEEP 384:SbG0MZbasAUKG9mnKxPnPi0S2uF6ZjriJjARgUwWHQ1Z1tE/Ivr+NyYjZ8K9ieJb:OG0VK5mKx/Pi0jiJ+gzwQ1tUO+NnSJTM
TLSH
T1B6A2D08AD673B42667472F28B5D5D2AC6B9ABF0362F398D308C7C0D53A5F2D18704D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000042

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000042
Size 66KB
SHA256 cb5bd8fe1ca5bb80c9ca7ebb7d9e01b6cf8a59adbc79dd73cde7a01846492229
MD5 2b45019efca9ebe8da3073223d89b0e0
SHA1 ca66bb82e98146532fcee215cdcf63446cbfae59
SHA512 d06987607be07273283e41f984124cd50448ea9f09abad2bb18c965c75524b72793a49dc074e2b07cd4d593a25fcadd46185a82cea9166ecffdf5725a59b92c0
SSDEEP 1536:+BOeYd8PA4UMqpO5zWg7cgi0QFwEAJplXW6I7rRDSDuFcR:XdAAgNWpwEAZpI7AuiR
TLSH
T1D56302DEFF792002A19A8338B137C71B6748B51EF5C2F717A92911E181757E206B5F0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7901da9924721d2b1f003c46bb9ef72e446febb24e053f6007b41bffec3c836d
MD5 63030d0e756ccdb69fc07940fa254813
SHA1 6108627ea034e9e78d4b3d59af5af3b431dff5a1
SHA512 d7f801bff3fe0c1526b8d083897d137adfa20de6246570e5198e108623c32e3e95ea29f7a613fef28825a196f2a2866de7e8e86dd04120a1ce1008cf3d25c129
TLSH
T157612279FA234999DFD6B9B55CCA1364AE6849BFC7018BCF13005C74B0873711D8858A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 26c8d1f7f730dd44e439024ea4c2b29c92d9cea650bc5b58af2ab2cf60560e6b
MD5 b7e00b4d3bfa26138a9510cb6ac68be9
SHA1 89a30007d1ab3466e24d9d456daaabc11e51c6e7
SHA512 cc53730cdef8e8922fed94bb7069107661e15e469542a9fb63bf433c4974a7f687a949d6857f5d24a5109753733c88118ba1fbc939f53b7e1b354af3045e569f
TLSH
T151512079FA2349AADFD6B8765C8A1364AE6C09BFC7128BCF03005C74B0873611D8858A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 6bdb35658703c120017233858908f9605b3a7009ee14efcb9f15739563cb78b4
MD5 f036c391f5ed6686c0500adcc772dadf
SHA1 aa0953dddb7d3f4b1b32bd5874ff66d8480c9751
SHA512 bb342eedef2bc57464c2e7f452ffe48d3089c8e639229c04e77f283452b68713f018eea23577d5da442a425067b88249c6abdc0fade81df60a6ff63f4784a3ca
TLSH
T1DAC0929413A77212E3A626B2199A504933F1481C02267683C39EDB88663776EEF00D80
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 b3ec86dd72a4de46d2a4fad4bc5bb38b78119fedbe2cae08ccdadc9ca8ebeb93
MD5 6a3c0f5b1df12f41fc712b623a6fa45e
SHA1 365c55fa47391e2b58c3ea15dc3495ea46505da1
SHA512 b895013218efc390482b42c7e3dd91c3f2d542a214df8e3df919556785574373413891402d41cda395e9d991b2b72e7513bf4a892deee80084dcb28e22722064
SSDEEP 192:DBh1GlwWwqKJN+GdTh3Ju9JEZ+5KqniEd1UtvWaPiSkuZqfPiNPimIz16cImNbjv:DBh1GlwWwqKJN+GdTh3JuLEZ+5KqniED
TLSH
T1B702ABF793E5C62DD90096F49B15AF2ECE291528032C3C7688D8BE16D3E2472E21575E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 7d6da9baf18a26c0f7341b7a6dc409c6b785807ca3d307de0e13a38ea3cf5454
MD5 9a695207337a0f73feded2d4a13f5ba0
SHA1 baf23eb413a4ece5eadb15c0612f85b5dcb2392f
SHA512 294c2b37c8d70c8a08a50a2baa8db818687bffae3f0bc26e3966ec665bf10510cda04dd75737cd7365bf4130343b9ee8990a4f673506472e9c5bfd0267c57ff6
SSDEEP 192:DG0lXyU9BevJZ2tgVbpJlJJJJlKqnzAr1XPvWaPArrIpo3gTfPpNP5BMMIN1HvI7:DG0lXyU9BevJZ2tgVbpJl3JJlKqnzArz
TLSH
T15632ADF7C7D8C62DC85156F49B25BF2ECE1A1A28422C3D26C8D8AE5B93E2471D21534E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 f4b4320bfe0de8303e59b93ef311a1d3f8c03dc804ead3f11f3e26b19cedaf1a
MD5 f7dfdb1e8da8c3350cfe32b272e9ca3c
SHA1 cdaaeef413e79214c2f123f2545734455ba245a8
SHA512 735d6672a82b19e8735c153767d40fd7d458de35cdea85a27d067a2c72fa196e43ffbd99f5325ed564c86b641b2e47b99154fd35d58d5ed1adf92a6919cf4f14
SSDEEP 192:DG0lXyU9BevJZ2tgVbpJlJJJJvpKqnzAr1XPvWaPArrIpolTfPpNP5BwIN1HvI3e:DG0lXyU9BevJZ2tgVbpJl3JJvpKqnzAw
TLSH
T17232BCB7C7D8C62DC81156F49B25BF2ECE1E1A28432C3D26C8D8AE5B93E2471D21574E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 ce49a9ad75407e14e277511f64a773e2138426a3d4906eb84245eb52a442ef49
MD5 6115a299250dde91a89519ecf62b6b5a
SHA1 db27856283fc1d351d7143cc21fac3b40bd8bf5c
SHA512 3ffd58ca886b67e98bcfcefed0e7512401ffd2ba14d6b7486b6adc4b6817817b61d3279192794ad3930c1d85f12d4b3312b0635a51fa70b44fcb60db52ecd808
SSDEEP 192:DBh1GlwWwqKJN+GdTh3Ju9JJJvpKqniEd1UtvWaPiSkuZqfPiNPimIN1HcImhbj9:DBh1GlwWwqKJN+GdTh3JuLJJvpKqniEA
TLSH
T13B129BF783E5C62DC90156F49B15AF2ECE291628032C3C76C8D8AE5BD3E2472E21575E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 26723f591e499eb9f88732f6612355a2b9519ec1dcb973d7d84f1fff5e681e97
MD5 363676064fd4be783d8713c163bbf84c
SHA1 deea95e9788f0f0dcbd337169abec179a039c9a4
SHA512 9efa2e394d5175e590b1c7578575c99df3796a28d33563031ca1ce549a4020e1034fadf345aac16d08da6e372a2d985412afd0ee8091865997b622e3c9a22e43
SSDEEP 192:DBh1GlWwqKJN+GdTh3Ju9JEZ+jAKqniEd1UtvWaPiSkuZqfPiNPimIz16cImNbjE:DBh1GlWwqKJN+GdTh3JuLEZ+jAKqniEw
TLSH
T17902ABF793E5C62DC90096F49B15AF2ECE291528032C3C7688D8BE56D3E2472E21535E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 9836d37a00d8b7b39662fd2dcc350e3bc741e345b06a6cbc8471b093c093482a
MD5 a1dc7492ba78ed7a4293fd6e25ccb69a
SHA1 57477bab41af424b0fb5ad1e4fba22c4314c4a86
SHA512 84472fa64bd3815a388b35a64d0a1c78e8da3b69fb5030698000c04d5fdb4f968f2f3531009be69e210912ca26616c98badc84f89bffed230837855ab292eb92
SSDEEP 192:DG0lXyU9BevJZ2tgVbpJlJHKqnzAr1Xt0kW5vnKaP6eGVfP0UNPk/rrI1I2I9IrE:DG0lXyU9BevJZ2tgVbpJltKqnzAr1XtK
TLSH
T1A422AEB7C7D8CA2DC84156F49B25BF2ECE1E1928422C3D26C8DCAE4B93E2471D21534E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 24dc03a2eefc9986b44c8c6e25818410caf4be097e70bb7688bc38aafe82d3d2
MD5 2170b64c420b2c2d063ddad2aa08f1b2
SHA1 b7077725ea8ed33fd4d51826c1767afdb1c12e72
SHA512 51e334daaf983ff146ff30141a0245c95807d68d7814450b2518d53c1d2b352db42cbefb75592db8a238b8b88d2ca3befab29109369840549199d4aae5d34fab
SSDEEP 192:DG0lXyU9BevJZ2tgVbpHKqnzAr8BMv0yHpIWIxIiKVaP/D1I/fPGkNPrE:DG0lXyU9BevJZ2tgVbpHKqnzAr8BMcyS
TLSH
T14712BEF3C7D8C56DC84156F49B25BF2ECE1A1A28432C3D66C8D8AE4B93E2471D25534E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 77c8f4aab0a9670c2796e93092ab862ab256e9fa252e9820ed7a3d270daea334
MD5 1090047ff96988bd8189b0d8d097eec7
SHA1 32a07c9cc297d351f8a4a78b9df9371867a72483
SHA512 1b3cf95143b9441648bb47e403234ebe28e020580a86d48fd9a2d0bcbffecaa537a3348d3ce940dd5c04cbc01abbcf1774fccf560399db4d3a3ced9aea4e92a6
TLSH
T1811159B783BFB877507EC46B5E487C0A65B5B435028268F4DFAB426CB0D28E71722457
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 cc46e012e8ef1e6bcf9e3cc17252ad468e03d67d2e8248a12e5eda534238cd86
MD5 ae6ae9f9c1fce585abf480eedb3dad2b
SHA1 b273e5a3fa92772a6cf035a0a4aec8e517d9a580
SHA512 c7581313f3e59944bf3ec14a47a4e327c7cf7a9fb575dd8e5009c5efc4538d553ea1c7d429978b61c128c14c13661edcd3513c591906adc22a1034562d4fef9c
SSDEEP 192:PRwcBhJM3NlHV9gv7WpGPRp0YBL9THsb+WNn9W7rwOeD9w209kwuVyIsnAUgraJ:PRwmhJqNl8qWX5JwYYOe62oGe
TLSH
T10452D72EAD10353B5CDFC22EF9617B66D7F9102561942E84EAFC8A3D25E75CC221702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 794f8fd12318b9775f3687f5a21e2029797598e2f0a6ace1df0721353b1e63e2
MD5 38ef89c39c352c5fb43e6cbb284275f3
SHA1 f16d51adcac4746738ed6011c24f226a11de9339
SHA512 ec0f92c84ac46b1518cfe87f627bb66facf99eb6cb68ca7f7a696ce6bd406b74dbbb6ae7bb3e139b1f7694c55a426d6eb06a6f46fdf5854c1eb4fc820d3a4440
SSDEEP 192:PRwcBhJM3NlHV9Yv7WpGPRp0YBL9THsb+WNn9W7H8ceP9w209kwuVyIsnAUgraJ:PRwmhJqNlEqWX5JwYYceW2oGe
TLSH
T1A952D62EAD10353B5CDFC22EF9617B66D7F9102561942E44EAFC8A3D25E75CC221702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 521a08dbd191f0411d8d1a41b9d8ef09fb84388862bab9ff1017fe7f10dc6a8d
MD5 7bd2e3ac441c65d07495dab4c4530b1b
SHA1 f2d07f75f9b6687cf51cde3f2446d7ba454ed7a9
SHA512 349d2df07517a18918bdfecb67455a99e0767ce13cec8d2525f1d806cd51ff55ec5be77aab46d3f6366d421c31e25990a4e8d14599e7fa8808aebfb0531ba7ee
SSDEEP 192:PRYJM3NlHVdYv78pAPRp2b9THsb+WNn9Wdefw209kwuVyIsnAUgtaJ:PRYJqNlE4UXwJwYdeY2oG8
TLSH
T12542B42DAD10753B5CDFD22AF9627B57D7F9102561942E84EAFC8A3C24EB5CC221702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 2d0452e56402d11089d6ad949eded7eb52495029181ebb5763a094ed6fca3372
MD5 171c9c2498a05adc7f353259c581e9c7
SHA1 c82f752416989ad9e69052cb22c4f7e18bccbc0a
SHA512 b0c99b967099f6f1116bdc837343eae78ff930695ff8f7155547cb74aa2e854e6d8f3dd5fb11abe20ae38a49080b592ffd9dc9516cc99fe748d4e2de9200929f
SSDEEP 192:PRwcBhJy3NlHV9/v7WpGPRp0YBL9THsb+WNn9W7rwOeD9w209kwuVyIsnAUgraJ:PRwmhJ0NlXqWX5JwYYOe62oGe
TLSH
T18852D72EAD10753B5CDFC22EF961BB56D7F9102561942E84EAFC8A3D24E75CC221702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f7da6d31f0ab8877a18f4c6471c1694f8b943c6f6f123de34bcd123522785a41
MD5 0eb3c3380ca07fd5aadf9e69e91b7e22
SHA1 f8a0703125a6f287a3da83912ed9a6a1a67e26ce
SHA512 71a12b2116ed75201d8b36dc872434fa9834611de09351313ee51df6fd7b3805a9939c0bf536716b74e16b2002b230a4ea4ddee8639d0bcf3c745e14d9d2c840
SSDEEP 192:PRwcBAyJM3NlHVyYv7WpGPRp0Y8q9THsb+WNn9W76SEe69w209kwuVyIsnAUgraJ:PRwmhJqNaEqWXfJwYrEep2oGe
TLSH
T1E352C62EED10353B5DDFD22AF9617B66D7F9102560942E84EAFC8A3C25E75CC221702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 3797e4c30a6d203aafd7b5c9dc0ff1deaec8a3853ce3095f8403ad8c2b0e513a
MD5 3027c551924d8c751cd2771c2b83baa2
SHA1 e1dc6688c6c878e692cf16262cbf0ce94be643aa
SHA512 f618bd297779742f4df58d355113b8174beeca540b2b1261790ef821fb5778541d74387a6024a1875ad1dc6cc7d429690a6d1a52058c9006aed76c69fee3fdde
SSDEEP 192:PRwcBAHEJM3NlHVyYv7WpGPRp0Y2y9THsb+WNn9W7qSgeK9w209kwuVyIsnAUgrK:PRwmbJqNaEqWXlJwY7ge52oGe
TLSH
T14D52C62EAD10353B5DDFC22EF9617B66D7F9102561942E84EAFC8A3D24E75CC221702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 e44bf4e6cee17917693a5ca4f14235b825bc18d0537a215953a24cc1b1361349
MD5 212f69685f9b1fb69cb3acbbf36f7ca2
SHA1 d8abb590357367d37b749f47328e9f2575f68727
SHA512 e379c0be92cf5e0ac739b997f92d3bffbfa343a4cb10bcbdc6befa64d419890456345390deb9ec83fc14a2e51dec4a8625cfbe7d5c7fa269432b8e35e4d7d414
SSDEEP 192:PRwcBhJM3NlHVyYv7WpGPRp0Yv29THsb+WNn9W7VeYel9w209kwuVyIsnAUgraJ:PRwmhJqNaEqWXWJwYoYe82oGe
TLSH
T19752C62EED10753B5DDFD22AF9617B66D7F9102560942E44EAFC8A3C24E75CC221702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 359ec66a179c54bb12241542ac63dde68297ed80b2a62ba06cc2c0a8559d1283
MD5 5e03a14e4f2a8f972543dd8585cd1291
SHA1 3c3b763c431bc413414ed533fc8c31c0138acb38
SHA512 939d68f03aa6ab9cfafe606039b4732569f60c4ca69ca3403998f0c3bf453c044f874b49bb416cfbc29fd2aba4167107a564ec80c1190e3f00337f82281a0c43
SSDEEP 192:PRYJM3NlHVyYv78pAPRp2Yne9THsb+WNn9W7sa2erw209kwuVyIsnAUgtaJ:PRYJqNaE4UXsJwYT2eM2oG8
TLSH
T1CD42B62EAD10753B5DDBC22AF9617B67D7F9002561942E84EAFC8A3C24E75CC221742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 5a0abb7f5f43d5b8be80ea24e6a41a3d78e9894c7026bb41c0e815d4d783c044
MD5 e8a7f5e2f88f7fec98ac71711cd70b44
SHA1 7b2a69da2d67aae1184e802609e694a9f8b69c5d
SHA512 97472049ac5422a737c13a6e32121463c870c418e20d3cc5e3024fd28d191f0475fe785cf120f1c4ccfb775b8202ba1c52a1b91d7dff9b5d330ecb5b5f730845
SSDEEP 192:PRwcBhJM3NlHVyYv78pAPRp2YFW9THsb+WNn9W7VeYePw209kwiVyIsnAUgraJ:PRwmhJqNaE4UXiJwYoYeo2oCe
TLSH
T13E52C62EED10753B5DDBD22AF9617B57D7F9102560942E44EAFC8A3C24E75CC221702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 a55c9d9bfbff27f4080d00af8282862be9cc6b021b0d1cf3b654e6d1857a1705
MD5 c8926c13ed1e541a9ebca052800d518d
SHA1 3522a9925410a3faf9a73cb924c1c1fb4dbffb5b
SHA512 0cc7f70f08f90753f1713955142d2f28c2b7b8284eb83bb86dea581036af8c57e30edda3af83eb81e1295de946e3c6812dc7f1671fca9c13e29cb035d90943a4
SSDEEP 384:j5j3S7KxkXqKf/pUZNCgVLH2HfgslA/7pLuLceS9YXOD32+ErU3tJHGT7LAE:jJ3S7KxkXqKf/pUZNCgVLH2HfgsC/7pO
TLSH
T1E772FA67BC4C9A3B4F94C68CDC267F4FADB5024B61ED886443FA582603D5ACB05062FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 9ba7eded07d4e4a5f8f3b87c9ea059a3432a7cf82d40ef3f94168d459f6d2c32
MD5 1502c05bc918a074dc4170bc7911428d
SHA1 c0ca100243c78e788c1c63782f5a6004dc06ecb4
SHA512 19b74ceddad065d5b30045f09325de960585b35a746e3f538da54b105c70344cde637291234e0ed0ef39cd3bb6222a5bba6310c26fe590234a337357e3797bb3
TLSH
T110B0124680812311C00103B05151E06577608F3DE313139951E01D05C8311504427108
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591fc3.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe591fc3.TMP
Size 96B
SHA256 0432e82ef3d0d8884302ea2a550d4a39b9511ffb858b34bf872d0d9d449a553c
MD5 b6d5b3c1d5f9c7216bc79cc9e8524a93
SHA1 7006a7409582468f8edf904032f67cd62b854579
SHA512 2c7b9d07fa5f79666f7c960e2bb335d56068cb578a22cd2b89ab266aa4a19259c3e742d984d17104cc26e9da4d9f1e87e31d6ee53b5ff6c0413ce31bc890655f
TLSH
T1B1B02222C3033202C00203F028A0B2C8B020CF3AE3030232E3E00E33CE202A00C32020
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 4645dd7dbbf359b90ebfa5e9849b4be7f9fe6f206cee91e59910d0c4b01a16de
MD5 3cec380da360ffd8d6449c32442c187d
SHA1 020debd1b23106fea0157766af4908f8ca43678b
SHA512 b934caf62ae3ef726376ac3acf1a6b8d9cf0bfcfefae998e0959391b79240c8fe8eaa1a7443453bc4b063f757c587e74c5d4862c041fc6d538fd9abdb72391cb
TLSH
T1DFA002A543410F05D4374271A3D505D0B365AB1943130AC945B591A5C996543D521204
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 265KB
SHA256 8479006c72870362584ddb5713d37043cbd5b257e7f0330b0749612827fcff32
MD5 cccd3ef3bb777d547f5f715441031538
SHA1 4eb4a23e3e2b37da3b713ee8f692ab7a1b2cc1e5
SHA512 cddc9c098075f81536aba550cacb253244df11bdf048d4fa52a8b59f8b98cf4d6be2f2275241499541a8ccc22d9d4ec2676c7a87313aae9b7da77ddbd3223eee
SSDEEP 6144:xbSpKxkVdyirXRjVaAQZwMbtgSJ+hFD+7t56OD9ZfSApprH:4wkvDrJUXZLtgSJyFSXD9ZfS41
TLSH
T1BD44233A29B1DC7FCA7E86027117A2118EA3DBEE858D490CD8871E49519FD8D0B97D33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 264KB
SHA256 27a5d59d38f5d1d50e098b0a2ba3289f6ccd05bc8b74dce7a13145e0a3ad1772
MD5 9572b5e2c2310e240e8c2c0764c37cc6
SHA1 d1957aedd78f77725abe7d218abb704978c31e68
SHA512 592c7be5291f7446d8abd30f3f5f79689b0027e1cae7e466f9e312ab9b0ba8c0b3266176b59a9400eb8f0f3cf056121c17081cf3b521217c9f0af7f800288bc6
SSDEEP 6144:PSpKxkVdyirXRjVaAQZwMbtgSJ+hFD+7t56OD9ZfSApprH:awkvDrJUXZLtgSJyFSXD9ZfS41
TLSH
T1004422262AB4DC7FCA7E8212715BD2519E63DBED458D490CC8870E8A519FD8D07A3D33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 265KB
SHA256 8e1a62e318637414fb20e75dae8e64ea2fa861229c525702b1642c27ede86442
MD5 28e978efb0cf16aa5ce19a85592a3e3e
SHA1 eddbed2f3475683f551a4b00cf9f9a9936f49b81
SHA512 99c97e0c8c0bbecc645917c6274b6896953cb4759e09f8c3683d052d795bdc26b9276a8ef0527df58536a8fc7e22426079362a001db7fd19525e2af27580fbb5
SSDEEP 6144:BbSpKxkVdyirXRjVaAQZwMbtgSJ+hFD+7t56OD9ZfSApprH:owkvDrJUXZLtgSJyFSXD9ZfS41
TLSH
T11044233A29B1DC7FCA7E86027117A2118EA3DBEE858D480CD8871E49519FD8D0B97D33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 3a51a9e59aad5433d19b75ae1d90f6aabe7813ff224f57d983557cb49daa1f50
MD5 adfc4d02cc2c3415094e0da2cda2eba1
SHA1 14e430f1f10cc973a7a591c3e166094c05eef74e
SHA512 6dba166eafe9b3eb3b466c6faf3244844b721730de2e4ee5ecd489b78e374358474d61f0ba4af2819b987e779b9ba686e8ea7fcb3bed256327017f172023ede0
SSDEEP 3072:H+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gy:H+hFD+7t56OD9ZfSAppry
TLSH
T10AD31232AA91C8BBC9BC6541B297A304DE766CED41DE3A0944465F8ED09FD4C0773A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 264KB
SHA256 0d35af8e800d7fd3957f6dfdd95067ee3fbdd9c93ce29b2c74d03beaa5f08eb0
MD5 b96a599ebc7020363a8cad55b3e51244
SHA1 8b428a7ecc76e0d174fcce9f2f03fb879cd840fa
SHA512 a862ee4267129978ec7eb60bf35a7da6e13a49febfeeb6dd351ee7c3a20b03b2b6c180b005d64041a87f46fd671f7f72f2252aaeb739186bdd344e7e94bc3881
SSDEEP 6144:ySpKxkVdyirXRjVaAQZwMbtgSJ+hFD+7t56OD9ZfSApprH:rwkvDrJUXZLtgSJyFSXD9ZfS41
TLSH
T11A4422262AB4DC7FCA7E8212715BD2519E63DBED458D490CC8870E8A519FD8D07A3D33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download