hxxps://www[.]mediafire[.]com/file_premium/j0c9twno04emf9j/FL26[.]rar/file

Analysis

user interaction
yes
max time kernel
300s
max time network
304s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
30/09/2026, 23:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.mediafire.com/file_premium/j0c9twno04emf9j/FL26.rar/file
Sample260930-24dcks1w2k

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2768	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-686476835-2493921010-524562731-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-686476835-2493921010-524562731-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-686476835-2493921010-524562731-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-686476835-2493921010-524562731-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
2172	chrome.exe
2172	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe
Token: SeShutdownPrivilege	1520	chrome.exe
Token: SeCreatePagefilePrivilege	1520	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe
1520	chrome.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 1520 wrote to memory of 1620	1520	chrome.exe	85
PID 1520 wrote to memory of 4876	1520	chrome.exe	86
PID 1520 wrote to memory of 4876	1520	chrome.exe	86
PID 1520 wrote to memory of 2768	1520	chrome.exe	87
PID 1520 wrote to memory of 1908	1520	chrome.exe	89
PID 1520 wrote to memory of 1908	1520	chrome.exe	89
PID 1520 wrote to memory of 4780	1520	chrome.exe	90
PID 1520 wrote to memory of 3856	1520	chrome.exe	91
PID 1520 wrote to memory of 4780	1520	chrome.exe	90
PID 1520 wrote to memory of 3856	1520	chrome.exe	91
PID 1520 wrote to memory of 2496	1520	chrome.exe	92
PID 1520 wrote to memory of 2496	1520	chrome.exe	92
PID 1520 wrote to memory of 1776	1520	chrome.exe	93
PID 1520 wrote to memory of 1776	1520	chrome.exe	93
PID 1520 wrote to memory of 2780	1520	chrome.exe	94
PID 1520 wrote to memory of 2780	1520	chrome.exe	94
PID 1520 wrote to memory of 1456	1520	chrome.exe	95
PID 1520 wrote to memory of 1456	1520	chrome.exe	95
PID 1520 wrote to memory of 448	1520	chrome.exe	100
PID 1520 wrote to memory of 2340	1520	chrome.exe	108
PID 1520 wrote to memory of 4636	1520	chrome.exe	109
PID 1520 wrote to memory of 3788	1520	chrome.exe	110
PID 1520 wrote to memory of 880	1520	chrome.exe	111
PID 1520 wrote to memory of 880	1520	chrome.exe	111
PID 1520 wrote to memory of 1040	1520	chrome.exe	112
PID 1520 wrote to memory of 1040	1520	chrome.exe	112
PID 1520 wrote to memory of 4296	1520	chrome.exe	113
PID 1520 wrote to memory of 4296	1520	chrome.exe	113
PID 1520 wrote to memory of 4056	1520	chrome.exe	114
PID 1520 wrote to memory of 4056	1520	chrome.exe	114
PID 1520 wrote to memory of 4832	1520	chrome.exe	115
PID 1520 wrote to memory of 4832	1520	chrome.exe	115
PID 1520 wrote to memory of 2332	1520	chrome.exe	116
PID 1520 wrote to memory of 2332	1520	chrome.exe	116
PID 1520 wrote to memory of 2172	1520	chrome.exe	117
PID 1520 wrote to memory of 4156	1520	chrome.exe	118
PID 1520 wrote to memory of 4156	1520	chrome.exe	118

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.mediafire.com/file_premium/j0c9twno04emf9j/FL26.rar/file
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x21c,0x220,0x224,0x1f8,0x228,0x7ffbbb46c728,0x7ffbbb46c734,0x7ffbbb46c740
  2⤵
  PID:1620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1828,i,3761031379562280050,17226622053922550592,262144 --field-trial-handle=1936,i,11291541494564667252,15200948281548619605,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=1976 /prefetch:2
  2⤵
  PID:4876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2136,i,9448423482109586444,9837315534026984599,524288 --field-trial-handle=1936,i,11291541494564667252,15200948281548619605,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2280 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2328,i,18357172264453562868,11702319621260072367,524288 --field-trial-handle=1936,i,11291541494564667252,15200948281548619605,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2344 /prefetch:8
  2⤵
  PID:1908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3216,i,8125288809144756390,15915914939949032141,2097152 --field-trial-handle=1936,i,11291541494564667252,15200948281548619605,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:4780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3220,i,11961162829881899705,11825414099766111793,2097152 --field-trial-handle=1936,i,11291541494564667252,15200948281548619605,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:3856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4300,i,11186874627062417291,16017526309256226622,2097152 --field-trial-handle=1936,i,11291541494564667252,15200948281548619605,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4312 /prefetch:2
  2⤵
  PID:2496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4760,i,1304489357065537735,5274260436108290163,2097152 --field-trial-handle=1936,i,11291541494564667252,15200948281548619605,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:1776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4892,i,2049038824309047195,8563717994562846067,2097152 --field-trial-handle=1936,i,11291541494564667252,15200948281548619605,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4880 /prefetch:1
  2⤵
  PID:2780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5332,i,4658469677805410884,16391804819328555421,2097152 --field-trial-handle=1936,i,11291541494564667252,15200948281548619605,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5284 /prefetch:1
  2⤵
  PID:1456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5840,i,9657738638968129622,17628648001924440463,524288 --field-trial-handle=1936,i,11291541494564667252,15200948281548619605,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5476 /prefetch:8
  2⤵
  PID:448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5240,i,5964360115211025774,11621875131733525386,524288 --field-trial-handle=1936,i,11291541494564667252,15200948281548619605,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4948 /prefetch:8
  2⤵
  PID:2340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4988,i,16366892923500338409,2176491081027152312,524288 --field-trial-handle=1936,i,11291541494564667252,15200948281548619605,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4944 /prefetch:8
  2⤵
  PID:4636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5004,i,11236171453852912453,12454471594964799959,524288 --field-trial-handle=1936,i,11291541494564667252,15200948281548619605,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:3788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4292,i,10158456378796099280,16075027075694201194,2097152 --field-trial-handle=1936,i,11291541494564667252,15200948281548619605,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=1112 /prefetch:1
  2⤵
  PID:880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5104,i,9977568815559773502,6776504399916784028,2097152 --field-trial-handle=1936,i,11291541494564667252,15200948281548619605,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5912 /prefetch:1
  2⤵
  PID:1040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5024,i,9470708721324171997,9356840654034571109,2097152 --field-trial-handle=1936,i,11291541494564667252,15200948281548619605,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4896 /prefetch:1
  2⤵
  PID:4296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6096,i,4868268066399846415,14124648838093563348,2097152 --field-trial-handle=1936,i,11291541494564667252,15200948281548619605,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6060 /prefetch:1
  2⤵
  PID:4056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6204,i,8874437716757196466,1010630845377413066,2097152 --field-trial-handle=1936,i,11291541494564667252,15200948281548619605,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6224 /prefetch:1
  2⤵
  PID:4832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6380,i,8966300486609820219,4583848007425384743,2097152 --field-trial-handle=1936,i,11291541494564667252,15200948281548619605,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6396 /prefetch:1
  2⤵
  PID:2332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6076,i,15752001872058981261,17710509415809232099,262144 --field-trial-handle=1936,i,11291541494564667252,15200948281548619605,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5460,i,8758926658515191501,1074839190029277821,524288 --field-trial-handle=1936,i,11291541494564667252,15200948281548619605,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6620 /prefetch:8
  2⤵
  PID:4156

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3832

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1888

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

684c9b7a-19be-474f-8001-f756b17b6ad8.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\684c9b7a-19be-474f-8001-f756b17b6ad8.tmp
Size 132KB
SHA256 f00cbd300c2039082170fc8a8654652b64be3236672c216b41ecd6c69ff0bd4d
MD5 5830f86d8f45cd6b602ba0e410966ffd
SHA1 b98434af0fb9e4a0a7e28e4e2aaca747f7e839db
SHA512 6163ab892aad7f752e4bbd328372e0a7433b1ea29575089d6e9c271ba24511d8f8489f88b59ddfac780b08af856558a07dfc6cca9bcf29fe93d043487167e2ef
SSDEEP 3072:71IvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzn:7RPtbmf1K49XLWbEPi4NTKlLzn
TLSH
T1F0D312217D41BCB4A9EEDB21A1406A16EAF8D94B95397FE61CDE3F4C05A36D8C304C63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1ae95460-7041-4a7b-8209-0cdcc1be2651.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\1ae95460-7041-4a7b-8209-0cdcc1be2651.tmp
Size 649B
SHA256 d2e756754921e14003717d33fe9e83e7360096e57522f83ef8543b4321401c07
MD5 c6170251c784ca303f55421b69046430
SHA1 30cc2501318e88554e6bb0578b96e1608694bc0f
SHA512 a83f48170e3324de71ba4e3e5669e52b1f9f5ac22d2107b873a605b395987160525a03e5899dc74594825f892bf510364429cf817c6164afe5bb48f06c97c539
TLSH
T16DF07DB6CC21AC3718FD1B2E60A44746E76513672B90994F3B3C510C8FB47374686D5C
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00002c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002c
Size 1.1MB
SHA256 f631ed841bf6e1dc93e5726d9771e34ff561e704c56a403c5a7c1327bc0c6883
MD5 2e3f49d8869884c4e92c65f0d3f7272a
SHA1 e7e902d5321af5e27d3223ee7ce780f0f1f43b18
SHA512 953fae6f2975320486394ee6f8a3d0e28ce10e33424cf93cf1104b37c2ce5169ba6730e2bda563b1752670f686991a64b166b64513c10d580e629e82c7de1382
SSDEEP 24576:4d+CXott7tXtMhlO9dclr9HOVk3CN4sOWEt1npzI:TttvMntl5uQCVO/1nxI
TLSH
T1DC4533A6A0DE4483CCC61AB5D4E1DE4C74CA7805797A439BC9B2F6DF04EC87592397C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 841638974f8ed5880602f0d719decdb5aab1f560f2374a595ba4736b5e28a2f8
MD5 4351876889d79535b746c63d7843c906
SHA1 e001a724d56c6791cb99b1513cfaf361a83e3f37
SHA512 3947097e60c577e533b88c9e7ba5697eeac0b61b41c9f3be47bafaf66303940af7bcb1a7052b2c6b9fe277e4b9d9e359828d19c5d9a4e4c69b8a859629d41293
TLSH
T12731ED649CCB29A1DB093B7368E90C8CB0F455B845D35EDE485945747CBE7C84700FAB
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 590ccfcf6b4d0cc3c9b5cff427b80e8f58e5dc6c50d1e7f31d019f63d0f31fa3
MD5 0fd506a60bdbe6ca33dd18e0946b7ba1
SHA1 dc117f7cda5bd096df45e15ffdfcf9beca3e017d
SHA512 e8e1ef2473993d4e9b1d2025d658c60f4a33700f26056ada7721a8d9c40ff734d6ab8a18478721dea2fd36a4e14a5c5584ca8e012cd4503ea61dcdfc65eb325f
TLSH
T14F41222498CB39A1DB093A73ACE90C8CB5F415B842D35EEE180954B03CBE7C85300FAB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 816B
SHA256 dcbe70674756f3f2f6509e23f0d6878cf286347a1de82d27ae07fc7905b4fefc
MD5 3f32f267c228c85d2b117a00d943dd3e
SHA1 449d524576bbe4c35faf554e68f7ba036471e615
SHA512 88ca04ac870c42cf6676bd14e8457a423bec580ba6ca2a2fcf5ec9679399d14b541da439576a42c3fb71f0b2e53af0588490fa60a56747edd0a5b78b7a9b61ca
TLSH
T11C01DC1890E33251EF083E7318FA080DE875ABC850D39EDE948C99707CBEB958501FA7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 d94cbc94729a45dc8418d60c87a4cb0a1475ee26e7ae04c113fd73ee1edaf6a7
MD5 c90d0255945dfe2baffc95b2170ac7ec
SHA1 5b498190cc23f3e6e6c1eacf045503bcb4f16db8
SHA512 fa72d30c1d78a08929f52d9a137e8d83dbcb15d008e2ac9085127c43c6668cc52e0660db34dafd1afbe8a415c5ad97e69a15d09b7e1b97e580812f2cb75ef600
TLSH
T19341022498CB39A1DB093A776CEA4C8CB5F455B842D35EEE084954B07CBE7C85600FAB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 c51f60284f1a686dac2edbd81586788a6fbbccebe42d9d8c2bea414ecec9a751
MD5 8ab6db2dfc43b1fa18123e787f2520c2
SHA1 6fb0a213aaf0933377a824d4e98095bc36fceef7
SHA512 8e7307948bbd4c654043feb3631ff3cfa0632d4cda97e8b6a2d82feacb1f0e864361f754570619e370639d31de0c5e618f31e3793aa602625d851a7e65766927
TLSH
T18741222498DB39A1DB093A73ACE90C8CB5F415B846D35EEE580954B07CBE7C85300FAB
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 25KB
SHA256 05113739299c877bdf74e0685b881136c28c7133a320cce0c60f1ab0f980a05d
MD5 1a4d2219e5900b1301faa6c9c7fba9ed
SHA1 6e06912503ca9b84121591d4aee70da156b450db
SHA512 ae3424848e6ee6543525e7a8fce9280352fa27db8a576638cd87483f4b08e295e05c3faa17d0a1f277c9c79e0631c395558a78beef3e84fd810668251039a0d0
SSDEEP 384:DC0TQ7cfcf0ey9wxJej/BecmxWFeMJ5J2K1pYKjrb6yKYh3611YKLaLsY+hKTS2L:zzrHxsED8A2LsnbZbM/g
TLSH
T1F5C28AF383E5D92E891157F85A146E1BCF1D0629432C3C1688D5EE8BE3E2472E16A64F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 a0e4467f4e4ff814e49b3b4893729ef34ead33c3c80eb476efb83c58e49bc23d
MD5 f8fb1fed268ed7870ab4d9d255c2969a
SHA1 23d23411ec668bed2ed6d5880562bd8158b4a64c
SHA512 f4c38632591be3d97bfb3c73def91329bb7cbb508f4b82954b41cd42d029eacd89aba97d3d4df21b9b33169c7c03603f6de678bc6f74231d09a66e902b9fcd8d
SSDEEP 384:DC0TQ7cfcf0ey9wv1pYKjrb6yKYh3611YKLaLsY+hKTS2mLEk9oZeCFAPJ07fOlP:MxsEgd
TLSH
T18D427CF3C3E5D92E891156F89A14AE1BCF1C0A59432C3C1688D5EE8BE3E2472E15964F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 af3fc9ee0c9277bdb4b302814f38fc5a3f645e28531fcb52d21d48d73b5b72a4
MD5 e7082cc7f51ff5d3023ea64e6f7979fe
SHA1 ddf005242525660bcf150239c42218f18665f7e8
SHA512 276fa861a86afc00fe8c41de33ba21e133fba6d0517c82fb57ccc318e192a838efdb80d7fb76f80b7ff2ae583e562da27fe9239c8460f132be14bb9a17bd9727
SSDEEP 192:uR+O6iaSi4v7AWpAPRp2WS9+Hsb+WNnr2oWE2GaxkwOVyIsnAUge:uR+OSkzUXmgwS62hme
TLSH
T1BB42C52DAD64757B5CCBD22AFD21BB53D7F9102231941E84EAF8C82C24D7ACC6227817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 474998e723346a06ac4224f821ececda97461d4ed7067ac6122699cd83f22e08
MD5 8e8d63978c9f06cddc4055cd22259f99
SHA1 6173c87b9a1dae2ef25d08378a81b569669feacf
SHA512 6e404a9dedf97c2dc4c1a76dac18ebc962f3ada4ded1d0b00e40abaf6eac4e985cb34793717f0e05d4866039d873db3b323e5e552ac0559a53bf0cfe0b1c1235
SSDEEP 192:uR+O8iaSi3v7AWpEPRpyWS9+Hsb+WNnr2oNKYuaxkwpVyIsnAUgE:uR+OgfzYXigwSbYZvE
TLSH
T1CF52B52AAD64797B5CCBD22AF921BB52D7F9102235941E84E6FCC92C14E7ACC2213417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 d24e76847e0d5658c9411ae04d71a830d68d69186a8cbbc600736b189ac771e8
MD5 53be6442e4dea1ff498359240f2497bd
SHA1 25f5ecec02e1c9f096764832e7fdeace63332af0
SHA512 b21c1a449e1a4078d0b67f92afaccdb9c8e345cdd7325451e3fa20a6534355346af1d80f76eccd6dbf8d315dcb37a6569ba1ce323f37694c0a444ced1318c330
SSDEEP 192:uR+O8iaSimv7AWpAPRp2WS9+Hsb+WNnr2oaQeyaxkwtVyIsnAUgE:uR+OgSzUXmgwSOe9bE
TLSH
T1B542C629AD64757B6CCBD22AFD21BB53D7F9102235941E84E6FCC92C24E7ACC2227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 0372afc889078fbf33307f2db42c95ccec501023a9fecfe80712e5b2fda30da5
MD5 fc5e69deb70bfb596c5d7a60bb5e7b1d
SHA1 e26be2769bd6cfdb4e3d43c0d22926dfdeca9c18
SHA512 a2dce867f94cd2975b494dda2eb5df2e6488794ca5c97cceb7aef661bd8e6852a999c1c797444404a845a6cbcbeb94ba8bc249d3c5fbc0c819d6b0d7c27c3048
SSDEEP 192:uR+O8iaSizv7AWpEPRpyWS9+Hsb+WNnr2oNKYuaxkwpVyIsnAUgE:uR+OgLzYXigwSbYZvE
TLSH
T16552B52AAD64797B5CCBD22AF921BB52D7F9102235941E84E6FCC92C14E7ACC2213417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 759fe6d1cb552844a593a71157a88b662443ff069eab2c7d3fe35955e668c027
MD5 ae5fbae1c82c2e049b1be7585695c0f7
SHA1 516b6e13f4e4385e7241fa0308389a4e44054a14
SHA512 445c234326f8d216bcd58cc20d0a492ddba2c74d1aa3f212dc2b93915293f9d598c10ee7e549dbfe7e2fdf6cf1a4f0b7801e53b57bacb5849448955c105b71e3
SSDEEP 192:uR+O8iaSiFv7AWpEPRpyWS9+Hsb+WNnr2oZvEGaxkwpVyIsnAUgE:uR+Og1zYXigwSuEhvE
TLSH
T10B52B52AAD64757B5CCBD22AF921BB52D7F9102235941E84E6FCC92C24E7ACC2213417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 918a1b9cb0c36e825dd9ea65ecf790ef2c4e118992c245069a3fc68f597e4cd5
MD5 b4268f86c5df80daa2fb00ca71a47352
SHA1 2aebd672c79b2c0f441a65501688fda4d56a1a50
SHA512 8e05291af0d4e8b5ada92abac4107270a2e62ce7461d6bf8a2c2f13a32f5542d5d43a68f9568c47c89eb688336a3fbd595d054a72f30df35679078bed0b344f0
SSDEEP 192:uR+O8iaSi7v7AWpEPRpyWS9+Hsb+WNnr2oaQetaxkwpVyIsnAUgE:uR+OgDzYXigwSOe0vE
TLSH
T15C52B52AAD64757B6CCBD22AF921BB53D7F9102235941E84E7FCC92C14E7ACC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 32e6c0a3f05682d1e24f62135a16a559239bad390f6d29f2c3f6be9606c5db00
MD5 dd640a034f45376f3fcaa0a994fd4c07
SHA1 84453886df3f8873a24f080834e8931fb45a049c
SHA512 f4914452222e94317f3fd39a2a4bf91384dae0f2bcb11a077cd1c0143c27df3b5988a42d81e29fc71842f0242fa488537d4bbb16e9e30f0e2c39407ce6dc1661
SSDEEP 384:nVjD27KxkXqKf/pUZNCgVLH2HfgslDZ7pLuLceSx8XODDS+ErU3s7HG+I4QEry:nFD27KxkXqKf/pUZNCgVLH2HfgsFZ7p5
TLSH
T1D772E8677C4899370F94CAC8D8267F4FACB9025B65ED886553FA582503D4BCF110A2E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 5f7b6cf203073cb2b03c127d338f37418c249db44c8d033a6fb502d915fa50e2
MD5 60500903997b0e3f3291f9aa8edecf39
SHA1 6549cbbbd3abf774ff551c0600963eb99f05a593
SHA512 5b673ca3522554386b8a2f2e78e1b201455e5395177fb746041b9947f23e67bca0dac12b425c1edd81442c248c26db3ec7457186e98b1764337604af59f733dc
TLSH
T19CB0120C8182A342C05302B02252548C31E49F10B609130151F00D41D839571801F2A5
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58dfbc.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58dfbc.TMP
Size 96B
SHA256 3b7b7195758e9949226199ec000ad2ea6adfb776d9683e9771721b8a55fa58fe
MD5 9cd94ce34aee910e77bee0e347bf7b8b
SHA1 6debd981a2cef18c2c3963e88e0e5ce4126cbbe7
SHA512 d79dd1b26feb7cb3aaf6469ec7af3fc9287172ecf3654be7e85ad593fb815eb4bbdd9845c2ac7ab2ef53712fd7a23d0bf89f7ebf5a5b71f0faaf81f46c090f03
TLSH
T1ECB02220C20A2222C03203F0208880CC3030CF30C203020383E00A33CC3AE320E28038
MD5 SHA1 SHA512 TLSH

Submit Download

4b08f85965ba3bbd_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\4b08f85965ba3bbd_0
Size 63KB
SHA256 7dd1286499ba9aaa8f6a2e2734df2c08af472c8ae36d8a3f0ceae4aee2b2e0d5
MD5 f7c87d88f86020fa3f6a1f36b15741e0
SHA1 d617246fa2e5fd170796de8ddbc656ca7ef0ef7b
SHA512 bad58989e2b3342843c48805e341783468beeb5297a3d8f419caee3046fcfc716c3ba89e540936e16ad61f38a7c95b433d5370947f4fcfd1aa6c57494f9bd2a0
SSDEEP 1536:LSu5XhviJCQOyxxfS8fZ6YXkkN2oCiyOIIV353i4Rm9F:d5hYOluUY0kCiyOL
TLSH
T190536BD9777174B3837BA0F1606F120B713AE5A7B004C4A4B198EDE15E54B9A027BFAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 a3e096929124c6b750ef6510d6990caea0345ca8b1c33a13956a1b953ad9a076
MD5 6e4da45e860252680c5e748d1e5c23ba
SHA1 357ab612c7945a52f0287ae9031f54aecd147aac
SHA512 849cf6dc61d26639af639f1ad39b550941fe482071e22cd3540bd44e1c3d60ce935008b6ff82b3323ef2b5c6fb8f482b20e787fc6de8b9ddb2da6e9c379ad95c
TLSH
T1D7A002105F964449CC600BB0548603947B1ACC1152430363C0E204C8DD981C54F16454
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 132KB
SHA256 89a6032c5ffa8e2d68e075d69158df970c3d12406ac129f71a452e9187dd1202
MD5 dad9b4dc18ed6dbf80ce45e19c51c3b6
SHA1 bb11664514aecdb76fd56e1aa6076129ed4762e9
SHA512 4db2104160c5f3bb31fc8974602a0ba056aba45014a3d8a12bed404fd11904082b75f7652e1db91d884ea00fb717636669a56595728e06c77b38f32e67e70210
SSDEEP 3072:8GIvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzn:8GPtbmf1K49XLWbEPi4NTKlLzn
TLSH
T12DD302617D05BCB4A9EEDA21A1402A16A9F8D90B953D7FE65CDE3F8805A36DCC304C63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 4f19f057ae44197c044c062457cf88849a5e7471fe95cd23b907bbca68cfb96f
MD5 b6aea6e8fb6608fad93d2aa526c1390a
SHA1 a264d97a5dfef4404d01413d85ad24ba803a2903
SHA512 3e74de43b423c1f59dc142c9eb7cb5d4356360fdc85d70b984453af5b12c05eba266b8d60e3a0d7de1315f4315bd4e75a104000c1bb0e4f2c6028e8c9614318a
SSDEEP 3072:78IvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzn:7YPtbmf1K49XLWbEPi4NTKlLzn
TLSH
T1F5D312213D41BCB4A9EEDB21B1906A15EAF8D90B95397FE61CDE3F4805A36D8C304C63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 132KB
SHA256 3c6c0f9bee3bff98602feb2dc932aebc4015039c997c2708d0cc4eb6e5e806d7
MD5 c10acff386f0c4f7221ca6bfd479b11c
SHA1 96bf9ef66196e9a2aabc389297d8c3dfd663e4d1
SHA512 5ad22c34d362fddb28c558febd74af9a1d4ae9031123a4e1e611ad19b4f7f7a12cb26bf65db21d9f4b99014816bbfc934b09e8d7ef55f62c6ad4fa804c3f7721
SSDEEP 3072:gGIvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzn:gGPtbmf1K49XLWbEPi4NTKlLzn
TLSH
T161D312617D05BCB4A9EEDA21A1402A16A9F8D90B953D7FE65CDE3F8C05A36DCC304C63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 132KB
SHA256 16cf1c0ddcb489e22049b314eb5bd18a3dc821f99efb529e03616b5989f25991
MD5 e28b81f3b0e7613fd8a2efefac013139
SHA1 23b16fe45a80c0aa74c5223c06ddd59cead83cb3
SHA512 b4d836110fb3d6517c9035cba157ddbd66ca4892ae95b5279121c8d7371f793fe98569465cb3e80c1e9a5d85bca958789fac99ff42bcfc921a1270c0505d0d60
SSDEEP 3072:81IvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzn:8RPtbmf1K49XLWbEPi4NTKlLzn
TLSH
T1CAD312217D41BCB4A9EEDB21A1406A16EAF8D94B95397FE61CDE3F4C05A36D8C304C63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download