hxxps://cuty[.]io/TeachingFes

Analysis

user interaction
yes
max time kernel
128s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 04:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://cuty.io/TeachingFes
Sample260930-en3k7sec52

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
536	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{99BBD008-33B3-4589-8095-89B896FDF6E7}	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
5036	chrome.exe
5036	chrome.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid	Process
652	Process not Found
652	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 22 IoCs

pid	Process
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe
Token: SeShutdownPrivilege	4252	chrome.exe
Token: SeCreatePagefilePrivilege	4252	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe
4252	chrome.exe

Suspicious use of WriteProcessMemory 58 IoCs

description	pid	Process	procid_target
PID 4252 wrote to memory of 2916	4252	chrome.exe	87
PID 4252 wrote to memory of 4748	4252	chrome.exe	88
PID 4252 wrote to memory of 4748	4252	chrome.exe	88
PID 4252 wrote to memory of 536	4252	chrome.exe	89
PID 4252 wrote to memory of 3544	4252	chrome.exe	90
PID 4252 wrote to memory of 3544	4252	chrome.exe	90
PID 4252 wrote to memory of 4688	4252	chrome.exe	92
PID 4252 wrote to memory of 4188	4252	chrome.exe	93
PID 4252 wrote to memory of 4688	4252	chrome.exe	92
PID 4252 wrote to memory of 4188	4252	chrome.exe	93
PID 4252 wrote to memory of 4552	4252	chrome.exe	98
PID 4252 wrote to memory of 4552	4252	chrome.exe	98
PID 4252 wrote to memory of 3956	4252	chrome.exe	103
PID 4252 wrote to memory of 3956	4252	chrome.exe	103
PID 4252 wrote to memory of 4488	4252	chrome.exe	104
PID 4252 wrote to memory of 4488	4252	chrome.exe	104
PID 4252 wrote to memory of 2996	4252	chrome.exe	105
PID 4252 wrote to memory of 2996	4252	chrome.exe	105
PID 4252 wrote to memory of 3728	4252	chrome.exe	107
PID 4252 wrote to memory of 684	4252	chrome.exe	111
PID 4252 wrote to memory of 684	4252	chrome.exe	111
PID 4252 wrote to memory of 5000	4252	chrome.exe	112
PID 4252 wrote to memory of 5000	4252	chrome.exe	112
PID 4252 wrote to memory of 1816	4252	chrome.exe	114
PID 4252 wrote to memory of 4908	4252	chrome.exe	115
PID 4252 wrote to memory of 1532	4252	chrome.exe	116
PID 4252 wrote to memory of 4680	4252	chrome.exe	125
PID 4252 wrote to memory of 4632	4252	chrome.exe	126
PID 4252 wrote to memory of 4632	4252	chrome.exe	126
PID 4252 wrote to memory of 3092	4252	chrome.exe	127
PID 4252 wrote to memory of 3092	4252	chrome.exe	127
PID 4252 wrote to memory of 4932	4252	chrome.exe	128
PID 4252 wrote to memory of 4932	4252	chrome.exe	128
PID 4252 wrote to memory of 4276	4252	chrome.exe	129
PID 4252 wrote to memory of 4276	4252	chrome.exe	129
PID 4252 wrote to memory of 3468	4252	chrome.exe	130
PID 4252 wrote to memory of 3468	4252	chrome.exe	130
PID 4252 wrote to memory of 2944	4252	chrome.exe	131
PID 4252 wrote to memory of 2944	4252	chrome.exe	131
PID 4252 wrote to memory of 3536	4252	chrome.exe	132
PID 4252 wrote to memory of 3536	4252	chrome.exe	132
PID 4252 wrote to memory of 2504	4252	chrome.exe	133
PID 4252 wrote to memory of 2504	4252	chrome.exe	133
PID 4252 wrote to memory of 4036	4252	chrome.exe	134
PID 4252 wrote to memory of 4036	4252	chrome.exe	134
PID 4252 wrote to memory of 4840	4252	chrome.exe	135
PID 4252 wrote to memory of 4840	4252	chrome.exe	135
PID 4252 wrote to memory of 552	4252	chrome.exe	136
PID 4252 wrote to memory of 552	4252	chrome.exe	136
PID 4252 wrote to memory of 2276	4252	chrome.exe	137
PID 4252 wrote to memory of 2276	4252	chrome.exe	137
PID 4252 wrote to memory of 1320	4252	chrome.exe	139
PID 4252 wrote to memory of 1320	4252	chrome.exe	139
PID 4252 wrote to memory of 3184	4252	chrome.exe	140
PID 4252 wrote to memory of 3184	4252	chrome.exe	140
PID 4252 wrote to memory of 5036	4252	chrome.exe	141
PID 4252 wrote to memory of 1284	4252	chrome.exe	142
PID 4252 wrote to memory of 1284	4252	chrome.exe	142

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://cuty.io/TeachingFes
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc9779c728,0x7ffc9779c734,0x7ffc9779c740
  2⤵
  PID:2916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,4985747022182693512,11067544342687683510,262144 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2084 /prefetch:2
  2⤵
  PID:4748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1620,i,8119833422287386951,11517395725891089816,524288 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - System Time Discovery
  PID:536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2372,i,13611299120531788672,14077714120215483960,524288 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2548 /prefetch:8
  2⤵
  PID:3544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3248,i,16644454670733811680,10751953493347751655,2097152 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:4688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3268,i,18077464156398859256,1951547193677474762,2097152 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:4188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4604,i,4933052912217562804,9091691056958055723,2097152 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4448 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4856,i,15295585511083124186,11525306134799864463,2097152 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4832 /prefetch:1
  2⤵
  PID:3956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5040,i,11220242027950100513,3569781239862775315,2097152 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5028 /prefetch:1
  2⤵
  PID:4488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4852,i,11655951082098956688,14971267017659341714,2097152 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4872 /prefetch:1
  2⤵
  PID:2996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5952,i,11326725843071211949,11629109947572508541,524288 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  PID:3728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5936,i,15501771959928894584,15342835790243679988,2097152 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6036 /prefetch:1
  2⤵
  PID:684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5108,i,14015049638707175231,16918938389320052797,2097152 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5964 /prefetch:1
  2⤵
  PID:5000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5808,i,1502730177449093931,14807894720326906971,524288 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:1816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5160,i,906382059419399228,18287929833862135803,524288 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6364 /prefetch:8
  2⤵
  PID:4908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5148,i,539531035906126351,3448424521374654386,524288 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6404 /prefetch:8
  2⤵
  PID:1532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5028,i,8446231391781560836,9176319138045161709,524288 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6396 /prefetch:8
  2⤵
  - Modifies registry class
  PID:4680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4692,i,9180373884261470497,3658753904121908933,524288 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3800 /prefetch:8
  2⤵
  PID:4632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=4784,i,16818719757198397428,11295166200043996525,2097152 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5984 /prefetch:1
  2⤵
  PID:3092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=4860,i,16377432498118012406,4465266204180134633,2097152 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=3372,i,18041893308520159676,9514314867393373596,2097152 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3408 /prefetch:1
  2⤵
  PID:4276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6068,i,14281400345125847814,13117992513894818562,2097152 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6720 /prefetch:1
  2⤵
  PID:3468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5136,i,11400470817443972336,5636557338284203468,2097152 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6732 /prefetch:1
  2⤵
  PID:2944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6740,i,13369868024261801450,6046110787152376705,2097152 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:3536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=4612,i,11208152554678838147,9171725661048781527,2097152 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4792 /prefetch:1
  2⤵
  PID:2504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6764,i,10416682613309805758,10416615108511070802,2097152 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6756 /prefetch:1
  2⤵
  PID:4036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6324,i,13488563904141290393,17418857869042851301,2097152 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6808 /prefetch:1
  2⤵
  PID:4840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6848,i,10086852102436081825,9141457860708136114,2097152 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6888 /prefetch:1
  2⤵
  PID:552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=7032,i,17291472064238389487,7470241233888150779,2097152 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7064 /prefetch:1
  2⤵
  PID:2276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=4980,i,8360862745091105464,5549612483839940412,2097152 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4704 /prefetch:1
  2⤵
  PID:1320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=6028,i,17798577942173803955,1233087571581232351,2097152 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5056 /prefetch:1
  2⤵
  PID:3184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=7044,i,17645281827107298278,7441841818333308422,262144 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7040 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=7524,i,7055870762253226092,1609627698763368661,2097152 --field-trial-handle=2088,i,1028048191025541444,2102851475560020052,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6536 /prefetch:1
  2⤵
  PID:1284

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1088

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3684

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 bca14b60919e857d2338a0a644fdfd49d00b2eb5a0e3f78d2a60dd60f0e859b8
MD5 7a3373b1e5ff562cca0f63ca86ba1e4f
SHA1 f51251d48ae49c05e24ffe43da5d4a8962457449
SHA512 e0b11300edabace67a9938cb90d07ae68cd6ef07f6e3615d4ea57168cede7238339e46163c13305b20e94097453a81320f19ded8a03a19db4e6c0ca4438436e2
TLSH
T1FAF078A5C921AC7B18FC0B2C20A80B4BF790136B3781895F3B3D951C8FB463B4295C6C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 bb0b14daa00ae57cec24c70eb117e3ed1a1096adda5daa1c87d84482a489894b
MD5 bb26ff003d29abef3b756f0eac59b96d
SHA1 df7f64e12d4616556a8d921e3a7a90bc45d4728b
SHA512 e7e157e13c693aa93207624ff0eaacc088ba9428eb4e1c937fb9433040ee895c95021f3d7e5859372806f90db81bf4137e837615c7ce39962624cf718534590c
TLSH
T1223121587A84086EDB0773FB24E0EC12B839A924584B3E521A0FAC38FC7BFC30141348
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 97fa129aeb96a0221b85f59b7108cdd0fe54f47ee31b0f897215655645ce2808
MD5 a1af584456105326a7c34d2bc47e66b8
SHA1 a10faf802a09f1487762ec14e3697555447faa64
SHA512 efd3de97f1295a86ac00b1e21ce987543e8be485ba71dd4c497888c961fad0b5638c7cda82630f2a816f6c8966e266f1b3086fba183323b4c8757ec451859bd0
TLSH
T18681601436881C6DCB07F6FBD9E4CD86B838A22854172EA3090E683BFC76FD79500798
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 19KB
SHA256 a0a10c0d56bdb3b22af6a317634d492648df2347d5f4e153498f9ba1fc9da030
MD5 6a0eb1225dd8c71ef8ab3dcd025d2ee2
SHA1 5e53fa0857691b2a00dae3ad59a44e3a6bd147a4
SHA512 6cd9a0c85eae1b0f033fa05e9b27c4845d99a718ee61726873b1f9f6343b963c1999b374b61077aa7e1972ec2879b291355d4264adcf0eeea9566135278189ff
SSDEEP 384:D0MCqBAxyGGykGQxxKJrlaTaIK6HVndn6RMJqdj0kQrxvX6oMNDdFzjZMjposgMo:I3SBQXOaXW0h
TLSH
T197929DF3C3E5C67E8A1196F86A246E1BCE5D0628432C3C2689E9AE1BD3F3471D11165F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 47e5bdbddb358a04f4b12f77936c397b67cae19d19eec3424349d452839ab2c4
MD5 9c1ee4773d409a72c5473eb9d7535e1c
SHA1 a2f86e09de48f8feb95308ce8d9944bd5910ecc9
SHA512 04622286ccc3c3b9e81536144514affdd0976a980260ecc66e86141590499dc26fb5e8a2302a7535f157b389aa01ca76fc6d53b8076e411b437fe442f180756e
SSDEEP 192:iR0Qw8+GANv7UpAPRp2do9/Hsb+WNn39OF92GH2PegW+VyIsnAUge:iR0Q8XAUXDhwNm2A2i2e
TLSH
T1EF32832DED10797B5CDBD22AFA227B63D7F5102120942E84EAFC897C19D76CC222B447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 ae36c7ee0db171978d44b933838fda3bfc6716c337c88b1b20749950675ff64f
MD5 98e373bfde0e1ed6babb9e50fd14b3ef
SHA1 c3db6147c448d862064fdafbd5cf9a1ff208630f
SHA512 7b1e33d5a93964fe5c97f93a2d6ac80d43eef3b583c7bb089cea56a9ea1736afde0d9d76736b5ce59caded9f236318cbce9a34abb2e940a63565786e5a7fb628
SSDEEP 192:iR0Qw8+Gsv7UpAPRp2dj9/Hsb+WNn39OF92GH2PegW+VyIsnAUge:iR0Q8VAUXohwNm2A2i2e
TLSH
T1A232822DED10797B5CDBD22AFA267B63D7F5102120942E84EAFC897C19D76CC222B447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 c01f16b5eb94a74791c9e3224de591497fa07b3d53c0e945a45ad4a3047f574e
MD5 cc1b549f72b4142dd8e6e51d49c524eb
SHA1 d4569f960c6252aea06c8bcce057386627bb2452
SHA512 33eafa50eab37b49b1066a4b0fbb1f1a4cec0092ab655c23834259a09c2909c91ecb966cb5df5b18a99466e8254fd8e1761a476f9ab6244d2905bde1271b24df
SSDEEP 192:iR0Qw8+Gsv7VpePRp3dWv9/Hsb+WNzLL39Oddg9H2PegF+VyIsnAUgE:iR0Q8V5aX2hwnRagl2R2E
TLSH
T17942952AAD5039BB5CDBD22AF9227B67D3F5103124902E84EAFD8D3C19E76CC2217447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 57803fff44098918c98820db0dcc3aaa2f47e8f6211c10ad6f9f7a177de107d4
MD5 3150303b679fc295040c13ed5e9f972a
SHA1 262228537f468144bbe1155b338e78026597465a
SHA512 917bfed08d2649ee6d6c3a0361c9147337320733b116b3184aaeafed645bbdc1ec53026d034607d8060e8692f9fa45b392ecdd7a1af195b5ec20b515b05b4ecc
SSDEEP 192:iR0Qw8+Gsv7VpAPRp2dR9/Hsb+WNn39OwoE/H2PegR+VyIsnAUgE:iR0Q8V5UXuhwNCEv2d2E
TLSH
T12742832DAD50757B5CDBD22AFA227B63E7F5102124902E84EAFD8D3C19E76CC221B447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 13KB
SHA256 cbff59adc7b520f0de2985ad921ee12da5b00aa0aaadd64b2862a8b11ece7f19
MD5 8620b09f169758aa6d92f2e7b8a4c29c
SHA1 c265bb3d46a3af238c08a66240583a655be69a0e
SHA512 017bb2738ebc633e2b1824b1fe90215df48c3e3ec2d222610a597c250ca9b406bd8560dd6e15c6ddcea319cc301407ec464c4569fc29dfb4f74923aa99fdceb8
SSDEEP 384:s2jGN7KxkXqKf/pUZNCgVLH2Hfgsl1/XODGN+ErU3pxHG4xHk4V4:s2GN7KxkXqKf/pUZNCgVLH2HfgszvO61
TLSH
T1C4520A27A88C9A3F0FD8C54DD8177F4FADF101566268492452FB9C1903A5BDB114A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

52c8e897645090cf_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\52c8e897645090cf_0
Size 63KB
SHA256 cdc67c98c224e09d24911b9ba05bd31ba52d86dabc2c43ab46f8551ffdd7254b
MD5 12900018129fa227f6d3bd115b80fb4d
SHA1 84f7f2b0beaa3f5e486bcb826cc58dd95476c0f9
SHA512 ccd42f8ea384b31fde3d129148026c96b0c18b9721f42e744083e34d8263a03a210db34abb790c9d315e0e18ce4534df5b63c2bf2b8e46d35b8cfe4bf089f811
SSDEEP 1536:3Su5XhviJCQOyxxfS8fZ6YXkkN2oCiyOIIV353i4Rm9F:Z5hYOluUY0kCiyOL
TLSH
T1BC535BD9777174B3837BA0F1606F120B713AE5A7B004C4A4B198EDE15E54B9A027BFAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 7b310ae17580d28ae115bfaada69d95186b5e67773402e57ce616ec486629c4c
MD5 ef6dc6850c71c83f32eec8478a5bf260
SHA1 cc316dc40191cd3d486268eec43124ec3ae8201e
SHA512 20c65c5bc5fbb7d681a8a1220859f0c99a812eacbfcd09bb54c3fe26a4ded432db3fd405a7607f0c56ef140874f10b7711b0b6d5c4127bd0fa1bc80366ccbbcc
TLSH
T1D0A002604FC00005C5445AB2558597967724CD950951431BC1D45088AC902D88E55016
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 123955a7e6003f52319726c4fc076a88ac352e15e34ad320bb984926ff1b93a3
MD5 37a0acbb8454127cb842a2d8efbd4fbf
SHA1 29a039561f05ad0bee42917129ff7a44091c8885
SHA512 803a7a3a99f7edbb71df6b7adeacae28da30f051f051b37eec83199eaa4c7d043ca74b22e6de77a5cce673569675f4087e6cada44afcd2d7064a7e349accf11e
SSDEEP 3072:xGt+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gE:kt+hFD+7t56OD9ZfSApprE
TLSH
T194D31232AA95D8BBC9FC6541B157A300DE766CED41DE2A09444A9F8EE09FC4C0773A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 e0ed57fb3dc9220bb2e64ac50f67efba1f456c4225593893ac65d03d57107482
MD5 87fee98e5d0a3d88eb239d79f6acde9b
SHA1 421b5d724f46d75f2683becfb5f4e61cb12b73d0
SHA512 723ed12b27a7c9c7dd4be3a4a059493fdce724508dd5565ca4b2276b5a7ba370c4d5262a8ed64c22959f122eb17016c1ed69f0aecd65db16e52db4271fb12006
SSDEEP 3072:xeQ+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gE:8Q+hFD+7t56OD9ZfSApprE
TLSH
T17AD31233AA95D8B7C9F96541F157A300DDB668ED41DE2A0A444A9F8ED09F84C07B3A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 ad058dc242ef154c3fbbb4bc190ebbd675c6ed6a6808f8b3d86612a243206805
MD5 095791cdbc2c529336388ff89b620ad6
SHA1 dbd07de72de9263c99368e4faa6bb553ba905717
SHA512 966f960b5eea8c3e78a5ec7d8fd3e4afa4a58bbb750773dbf055508c0aa9decd591b4f1f4c039e2aa1aff2e6a92bd40aee2edffc731b26274b9a5f8ad6dc54f9
SSDEEP 3072:ceQ+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gE:DQ+hFD+7t56OD9ZfSApprE
TLSH
T174D31233AA95D8B7C9F96541F157A300DDB668ED41DE2A0A444A9F8ED09FC4C0773A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 e08d9e4b6d82ef0c1bc862ab2b61006a7073233c328514e1b764ef0f065d86c8
MD5 84bc90f552a39610c415e0b4c02da92c
SHA1 f4a958e6ff10ce401f8edb12b23f3fa5ffc26de7
SHA512 ed96309639de9ea2f085743abfe837b11521430b4795d1723abd0873fb006ccdb1046735ffcac6d2f3876998d456f082a98c5e7d0a517e86827dc54b41c35318
SSDEEP 3072:ceka+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gE:Dka+hFD+7t56OD9ZfSApprE
TLSH
T175D30232AA95D8BBC9F97541F147A304DDA668ED41DE2A0D444A9F8EE09F84C0773E33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download