6da94c2511b7a1b434ff973e27ff85c0079b3e639b9f8d0d706e8c5a68ef8dc3

Analysis

user interaction
yes
max time kernel
565s
max time network
550s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 11:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
№ 7093 від 22 вересня 2026 р.zip
Size 2KB
Sample260930-nv9grs113k
SHA256 6da94c2511b7a1b434ff973e27ff85c0079b3e639b9f8d0d706e8c5a68ef8dc3
MD5 07250a365e9721364ef45bcc44438292
SHA1 8612e0ccbe3170987a9b4154f12514fbd4b925ff
SHA512 5916b8bbc88c84ddaaf02cf0f5abac0a97678d0ef422a1524ada72de728e32ef8db52311dd68a109454d6691cecb6d381a82497518d3518337714761a2177b9a
TLSH
T182514D893246AF29D417FB72533963C7ECE6384D40DAF7869946BD118CF92481F01CA9
MD5 SHA1 SHA512 TLSH

Score

5^/10

discovery

Malware Config

Signatures

Probable phishing domain 1 TTPs 1 IoCs

Phishing

T1566

description	flow	ioc	stream
HTTP URL	126	https://chatgpt.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a432fbb929fec198	3

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4248	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	7zG.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
2956	chrome.exe
2956	chrome.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2656	7zG.exe

Suspicious behavior: LoadsDriver 3 IoCs

pid	Process
660	Process not Found
660	Process not Found
660	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeRestorePrivilege	2656	7zG.exe
Token: 35	2656	7zG.exe
Token: SeSecurityPrivilege	2656	7zG.exe
Token: SeSecurityPrivilege	2656	7zG.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe
Token: SeShutdownPrivilege	4932	chrome.exe
Token: SeCreatePagefilePrivilege	4932	chrome.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
2656	7zG.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe
4932	chrome.exe

Suspicious use of WriteProcessMemory 31 IoCs

description	pid	Process	procid_target
PID 4932 wrote to memory of 1780	4932	chrome.exe	115
PID 4932 wrote to memory of 4248	4932	chrome.exe	117
PID 4932 wrote to memory of 4324	4932	chrome.exe	118
PID 4932 wrote to memory of 4324	4932	chrome.exe	118
PID 4932 wrote to memory of 5484	4932	chrome.exe	119
PID 4932 wrote to memory of 5484	4932	chrome.exe	119
PID 4932 wrote to memory of 5608	4932	chrome.exe	120
PID 4932 wrote to memory of 5608	4932	chrome.exe	120
PID 4932 wrote to memory of 4200	4932	chrome.exe	121
PID 4932 wrote to memory of 4200	4932	chrome.exe	121
PID 4932 wrote to memory of 1880	4932	chrome.exe	122
PID 4932 wrote to memory of 1880	4932	chrome.exe	122
PID 4932 wrote to memory of 1208	4932	chrome.exe	123
PID 4932 wrote to memory of 1208	4932	chrome.exe	123
PID 4932 wrote to memory of 3552	4932	chrome.exe	125
PID 4932 wrote to memory of 2536	4932	chrome.exe	128
PID 4932 wrote to memory of 2536	4932	chrome.exe	128
PID 4932 wrote to memory of 4800	4932	chrome.exe	129
PID 4932 wrote to memory of 4800	4932	chrome.exe	129
PID 4932 wrote to memory of 2656	4932	chrome.exe	130
PID 4932 wrote to memory of 2656	4932	chrome.exe	130
PID 4932 wrote to memory of 716	4932	chrome.exe	131
PID 4932 wrote to memory of 716	4932	chrome.exe	131
PID 4932 wrote to memory of 2824	4932	chrome.exe	134
PID 4932 wrote to memory of 2824	4932	chrome.exe	134
PID 4932 wrote to memory of 1180	4932	chrome.exe	135
PID 4932 wrote to memory of 2796	4932	chrome.exe	136
PID 4932 wrote to memory of 5056	4932	chrome.exe	137
PID 4932 wrote to memory of 2956	4932	chrome.exe	141
PID 4932 wrote to memory of 456	4932	chrome.exe	142
PID 4932 wrote to memory of 456	4932	chrome.exe	142

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\№ 7093 від 22 вересня 2026 р.zip"
1⤵
PID:4564

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2684

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\AppData\Local\Temp\№ 7093 від 22 вересня 2026 р\" -ad -an -ai#7zMap1918:136:7zEvent28312
1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:2656

C:\Windows\System32\NOTEPAD.EXE
"C:\Windows\System32\NOTEPAD.EXE" C:\Users\Admin\Desktop\№ 7093 від 22 вересня 2026 р\№ 7093 від 22 вересня 2026 р..bat
1⤵
PID:2524

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffd0dc7c728,0x7ffd0dc7c734,0x7ffd0dc7c740
  2⤵
  PID:1780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,6614910858397805456,8266710779861288681,524288 --field-trial-handle=2112,i,5024818306365953975,12121282921796113812,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2152 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1712,i,2808546244323727165,14688502427535847933,262144 --field-trial-handle=2112,i,5024818306365953975,12121282921796113812,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2108 /prefetch:2
  2⤵
  PID:4324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2420,i,16490263873434874291,11475387660056422351,524288 --field-trial-handle=2112,i,5024818306365953975,12121282921796113812,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2516 /prefetch:8
  2⤵
  PID:5484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3216,i,11845239690720221048,10303141823303269804,2097152 --field-trial-handle=2112,i,5024818306365953975,12121282921796113812,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:5608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3272,i,11164243515543940466,9736654347233231741,2097152 --field-trial-handle=2112,i,5024818306365953975,12121282921796113812,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:4200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4344,i,12431774724122400503,6123861261241799828,2097152 --field-trial-handle=2112,i,5024818306365953975,12121282921796113812,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4368 /prefetch:2
  2⤵
  PID:1880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4768,i,9177780293805594367,10851531873805798894,2097152 --field-trial-handle=2112,i,5024818306365953975,12121282921796113812,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4736 /prefetch:1
  2⤵
  PID:1208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5536,i,16098493261586873354,5865685709863301411,524288 --field-trial-handle=2112,i,5024818306365953975,12121282921796113812,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5556 /prefetch:8
  2⤵
  PID:3552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5744,i,6197689017138060778,8852506668777478165,2097152 --field-trial-handle=2112,i,5024818306365953975,12121282921796113812,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5776 /prefetch:1
  2⤵
  PID:2536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3516,i,15712733848746169330,3293456961597594562,2097152 --field-trial-handle=2112,i,5024818306365953975,12121282921796113812,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3432,i,6670760959408315508,11590944338518510339,2097152 --field-trial-handle=2112,i,5024818306365953975,12121282921796113812,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:2656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3956,i,13930113213027418941,8164062531027937511,2097152 --field-trial-handle=2112,i,5024818306365953975,12121282921796113812,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5912 /prefetch:1
  2⤵
  PID:716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6524,i,8794026092559991136,15989823978588126016,2097152 --field-trial-handle=2112,i,5024818306365953975,12121282921796113812,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6540 /prefetch:1
  2⤵
  PID:2824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6636,i,15494868012038102538,9818863601185751196,524288 --field-trial-handle=2112,i,5024818306365953975,12121282921796113812,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6648 /prefetch:8
  2⤵
  PID:1180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5584,i,9943944520102257266,7882100847979960814,524288 --field-trial-handle=2112,i,5024818306365953975,12121282921796113812,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6688 /prefetch:8
  2⤵
  PID:2796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6564,i,9255546016366744210,10397905815724827802,524288 --field-trial-handle=2112,i,5024818306365953975,12121282921796113812,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:5056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5752,i,14189715651033108942,16524826256458378726,262144 --field-trial-handle=2112,i,5024818306365953975,12121282921796113812,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5720 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4332,i,16299313066972042266,12546481266211278472,524288 --field-trial-handle=2112,i,5024818306365953975,12121282921796113812,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3820 /prefetch:8
  2⤵
  PID:456

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4440

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1468

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Phishing

T1566

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 9ae33e7b4ab8d35c818b942b62b212abe2dd52241e87ce60772405e8091af780
MD5 2583313a76fcbed6c58bd68c98bb0e5c
SHA1 30eddf7f6eb2d3fb26a6f5b7719af72ab51368cd
SHA512 f2785d84b7e5aa133217e0e71e52df121a8d5522d9f9fda44a8d29d34f0f323ef5b91b44310ff6e6587163c5f6e7ea698118d7d7af9c5b8bd953253e5336ea35
TLSH
T15DF02DF5DC21AC3718FE1B2920A58A46EB50132B27804C5F3A3D511C8F7553B4695D5C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 f97ac6e090cd52efcd6c6c0967119626fffc5dccaef4150647d14f71cb969327
MD5 3037f32ec7a7f61049baa12415e52431
SHA1 6249accf3b9b8ddd347bbbd2ec6abf9825449b3e
SHA512 ac34728f0d30e7a3d9d97a32b85a320d98d938b08ae6ebc895e0f82050a2f7361a571d2faf2fbcce1daa86215aa0980d03597562cda0ea0b330d83d79492e450
TLSH
T11681FAA643677011CB68597009E72A1C643F6BC6B4A2FF190474E8B37FEE3E606248CD
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 f905d35295b244e6c739924455d8df5a972bc5d1431ea1e931a31ac397d6db52
MD5 60593741b67d4572a64e96fd9f365843
SHA1 fd9930caad9bc4eab96166a6a767636881eb3645
SHA512 0d6013bf61c7654ca041702415e50bab2da9d1460214875834e4b2a64e6e57b930dce36efa19be9ed7ee5007ca5282a5f901942c6d65910d005bf4532a5bf7dc
TLSH
T10C81FDA203677011DB68597009E72A1CA43F27D7B0A2FF190474E8B37FEE3E606208C9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 52f039d6fc008901ab2dd84542e09a1c8cc9b26a33e5975755c4b1e7cb3b7218
MD5 1b9ef6a29b23cb59137845cad2b75dcc
SHA1 1f5fb031c7f22f047e987dc653978c830dc61b23
SHA512 51e18779b14b0be172ed3b55cc48aad73c6b0263b1ce4d7663f2e9e3127708e0c9484998cc7d17181d0e6e3812a55866345158de926d190784ac367407cc93c3
TLSH
T1FC81FAA643677011CB69597009E72A1C643F6BC6B0A2FF190434E8B37FEE3E602248CD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 32f8c76ecf7404d871fdc5e87dd9be87d629c018eac7ce7e9e3fb12133441c08
MD5 1ee437a8d0a5541f193f5267cd78c145
SHA1 5d317aa458b3ce4bdd2988ec9dc60ac97e513c27
SHA512 362a37d87a78f5552a08ec8b226ee5e30c7b7f50ac171868f4d89c3cb5db852ee1f312876cbc8897d821b7d38fba1c005e9f2c4f2197538fb930d191e74e931b
TLSH
T10781EBA643677011CB68597009E72A1C643F6BD6B4A2FF190474E8B37FEE3E606258CD
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_chatgpt.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_chatgpt.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 b7972f05c1b10fe76642d2006de469ecbe171b98717e465d7311b5a59bcdc3ae
MD5 5426533d3fd89184643b234791f7ab4d
SHA1 d772de63ec4d918e9dccaf55bf3018cb9e44a417
SHA512 15e32e990c5d9152b37871286eff31700f99d6e27cadc06bf5fcc0982c87d1600883f361084be738b1a539d15020be347134f2f46bda5ecb7214e86c33cfadcf
SSDEEP 192:DzKfbyXG2ykqcKqfvlp+ry9lRgUGNPBIaFaPlrRgCWHg:DzKfbyXG2ykqcKqfvlp+ry9lRgUGNpZu
TLSH
T11C02BEB7C3D8863DC91156F89B216F1FCE6D0A28432C3D26C8D9EE5BA3E14B1D25164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 8b04cc7f5430db4d40c0f048b8570f3bd2448efc987a6af5b6f4a6d2b5b54f20
MD5 c347ff850db1b788fbcf9b048f1ced5d
SHA1 2e6527fb6673f1deb4b8d7442e5041aa51c4dc80
SHA512 063c2f39ce16858069b052f2a199c79ed4ea03d2962cc3d6a803b90b3c6f334fca044dc9e626dfd93e19f9840e2b765736b5d49c4c59d5bd97d201e20a353a31
SSDEEP 192:DzKfbyXG2ykqO2U50tKqfvlp+ry9lRgUGNPBIaFaPcRgCxjh1ELFNM8yblo:DzKfbyXG2ykqO2U50tKqfvlp+ry9lRgc
TLSH
T13732BEF7C3D8862DC91156F89B256F1FCE6D0A28432C3D26C8D9EE5BA3E1472D24164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 4002854366bb26180d1993cc5842b461b68d43ca4c129aa4dcc2b1d8fe38fe19
MD5 e13bd72a8774a8100c6530f587ccca83
SHA1 4daa51e3c288074192f3ea90a1bf44368a994b3d
SHA512 b448493e34fa2cd94e7cd95ce0f781da3fe9d46ae5bb2ae6b401665d555986f7f99f9ea34fde9c8e825f2951298f55ecf3a756cff41e237a31c7f5b14ba4775c
SSDEEP 192:DzKfbyXG2ykqO2U5CKqfvlp+ry9lRgUGNPBIaFaPcRgC14jh1MZLFHLM86:DzKfbyXG2ykqO2U5CKqfvlp+ry9lRgUb
TLSH
T11532AEB7C3D8862DC91156F89B256F2FCE7D0A28432C3D26C8D9EE5B93E1472D24164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 e169630c919eecfe3e4b51ea507594635fc843be422e2f5b7312ee61846732aa
MD5 7294dbbfe3f3c45af2949ac3dd8de973
SHA1 2bc5bafef7a688f7874ca45a78020a9080222e4e
SHA512 694cd58c0db46ca919c85eeafd7864d7d4778d6159eb3df138f6c9023fe946e7fc181bc24095bc295078f01c9089a7a23f6c8d6d9870f789aa67e4575c78e145
SSDEEP 192:DOh1ytuQN0Qfwlj50tKqfiEd+rk9UZmGNPiIaFaPc1gqxjhnwKM8ybgHg:DOh1ytuQN0Qfwlj50tKqfiEd+rk9UZmI
TLSH
T1BF128CB7C3E9862DD91196F49B15AF2ECE3D0928432C3C76C8D4AE1B93E2472D24574E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 5242a5e3fa0e55794a1363320db262b9025192cc5575ee0b09a66e4754fb46a6
MD5 46e5aa3c0cdd36547e8efe1756db48fd
SHA1 5793d3c8c0b30cdbf6e480ad9f41a57ff57b86af
SHA512 23863f7cb31c7d5c56334490a7c9e8632267a756a6f00d9ba647532a8ae4df3fe8972ab96f53433f4a99c87ed29a88c0de012ad84bc03f2b32374bc710d7cadd
SSDEEP 192:ARicBzPuxH5k+0Iv78phPRpWwqqsdnr9THsb+WN7TLxJ1CoaI2eDQlD20f1xEkwo:ARimzPJ+0U43XErJwNyG2eMlD20f1uFe
TLSH
T1D562C55AAC50397B4CDBC22AFA61BB6AD7F5102121D01E88E6FC8D3C25E79CC3207817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 654451d327fa444cddde259da3a70fce000fd94102adaf6fce95937c959749dc
MD5 d06fcd52dacede670e0e3ad4181ad920
SHA1 5c46271b780084ee83d61a2b8b11258148c767ec
SHA512 65c82660d0d50ba0953095effca2d7b3e07eb23f2b56ef33fd913a594a78d969954fb7881bd46ccebf534b56de4ab33a4b8f8c24213ec76769398d8535f72ce8
SSDEEP 192:ARicBzPuxH5k+5Iv78phPRpWwqqsdnr9THsb+WN7TLxJI3kaI2eqQlD20f1xEkwf:ARimzPJ+5U43XErJwNuK2e3lD20f1uF9
TLSH
T14262C55AAC50397B4CDBC22AFA61BB5AD7F5102164D02E88E6FC8D3C25E79CD3217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 790fdb743b9963ac6fd3e78618d87c6768672f4bff1adc7f425f30d4b5f14efe
MD5 dfccd136ef0d666ed36857f711683ec3
SHA1 b299368abafa7b489b53d651297d1e6cfb3efb92
SHA512 7362daa14779da10598187fa2a382497b3d030ac02b60b04164f4ba3592a8f2b8ac131760d5ee98b2c7608bf6f4c8cc8517c5747ed779114121cc01339084f07
SSDEEP 192:ARicBzPuxH5k+iIv78phPRpWwqqsdnr9THsb+WN7TLxJHMIaI2eFQlD20f1xEkwf:ARimzPJ+iU43XErJwN+m2eqlD20f1uF9
TLSH
T19C62D65AAC60397B4DDBC22AFA61BB56D7F5102161C02E88E6FC8D3C21E79CC3217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 ecd40a06bc5b2f3f40ffeef669068970e8ed8a38e42412bf5d236c2157b9f788
MD5 fa72f5dc6d9067fe72d39519451ad4d3
SHA1 dc33ae51799e83051bf80460f7b66d1bbd42c662
SHA512 e46994327f523470ba43ec038e11d175a7d1bcbf7f56daf653f504ce711869253d90837fa407d90846502f8f275f022d780f1a3f00b721228b98239f5f5ad4bc
SSDEEP 192:ARicBzPuxH5k+RIv78phPRpWwqqsdnr9THsb+WN7TLxJKAgaI2e0QlD20f1xEkwo:ARimzPJ+RU43XErJwNXe2eVlD20f1uFe
TLSH
T1E362C55AAC50397B5CDBC22BFA61BB26D7F5102121D01E88A6FC8D3C25E79CC3217857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 a55c9d9bfbff27f4080d00af8282862be9cc6b021b0d1cf3b654e6d1857a1705
MD5 c8926c13ed1e541a9ebca052800d518d
SHA1 3522a9925410a3faf9a73cb924c1c1fb4dbffb5b
SHA512 0cc7f70f08f90753f1713955142d2f28c2b7b8284eb83bb86dea581036af8c57e30edda3af83eb81e1295de946e3c6812dc7f1671fca9c13e29cb035d90943a4
SSDEEP 384:j5j3S7KxkXqKf/pUZNCgVLH2HfgslA/7pLuLceS9YXOD32+ErU3tJHGT7LAE:jJ3S7KxkXqKf/pUZNCgVLH2HfgsC/7pO
TLSH
T1E772FA67BC4C9A3B4F94C68CDC267F4FADB5024B61ED886443FA582603D5ACB05062FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 425812d30dcb8f23525203c34653d330ad12f1ec75ef56ab083680a012abeba6
MD5 ce4766d675ab338212ce541b456db77b
SHA1 dabf0f90e5b21e85476817278314a610da9ed20a
SHA512 3ac8eed701778bfcd67b9d3e55c428e69df2d542c9a17f4920bcc5cb7376520c7ac325b7aceb5c3b77faea3a2b03723214ac2589b35ad13c7dd7e43c269dd506
TLSH
T15CB0120580813302C40203B12150949432609F38E212138551E00D0198311E140571C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a10ab.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a10ab.TMP
Size 96B
SHA256 ecdc185fa314f306a95724d8e4b8bf47d8a3f1a8ea879dbb665f6eb7cc3e5b30
MD5 b9599728bdc62e03b58cb5f368924500
SHA1 898ddde6ac5462fa23f8f8e9ca2f453ace61a36a
SHA512 c3c015cd0058911e337c4298070cb6b8357e006a44bf515fb3cf5a5e338c07b789e920c9aa27180a707e8ba6525f2ab5cd042906154a36ed1a612e2d2fdd29ec
TLSH
T10EB00259C5026213E08603B42AA9A5D87164DF35C717131392F16B66ED25EB18525270
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 c915f95f3f02b54361045707e26867a627e2890859d99f81c3482ca56b600e46
MD5 8f49a8de8a7195cd54366ae7c793535d
SHA1 6099e212849be53173d55ed06aa6f7a11f53251c
SHA512 764738be712acd58fde58fc930781631035d5ebf2985935042e1aff4402f5e225eefa4bca67577136d92c8e98595181e393b8f72261832b9d526ce8e96ad6b72
TLSH
T128B011B0000A2802E88A02B022EA08802B202B002AA20E32A2B08080A0A2A8002820A2
MD5 SHA1 SHA512 TLSH

Submit Download

cf26404a-c602-4169-abe6-6b5fce505e04.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\cf26404a-c602-4169-abe6-6b5fce505e04.tmp
Size 12KB
SHA256 52664c613b35b6cdaf4595a1b63b5dc185c09e56b94e3b72293ebabf3ed95556
MD5 ab773218b62e8ea10bca0d419c34e578
SHA1 f328d4f783f282c86a69994f5d26c9560c0e15c3
SHA512 254aa5a7ab1e16326d5ef3e9fc74c3712d9469860ab1b69529b35f733e91217d35e60359b555794036a1c7d095b0438fa64f728bb1deae2fbdcbc07d852a29c1
SSDEEP 192:ARicBzP6xH5k+N6Iv78pAPRp2Yvr9THsb+WNnLx4aI2ePQlD20f1xEkwnVyIsnA4:ARimzPl+N6U4UX1JwNW2e4lD20f1uh8
TLSH
T1B642A42EED50757B5CDBC22AFA61BB57D7F5102120D42E88EAF8893C25E79CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 289KB
SHA256 17349561a09ebfe62d27c3a5685c3f89623e40107bac6b212faee37480dac44f
MD5 fa27bd3ab3923969e20aa8de6c605335
SHA1 6b0a054f7e4d8a4dfb19ccfed51d0e3244f63ce9
SHA512 9499b5cbe272dcc1eaa6de25c28145c73cf31e533f25b8af215f0bf20656d8aea5443357b98ddc80d4ac7669227c57ea89b732122c6186f771419e2c21f5d1a0
SSDEEP 6144:o/hbOme+Dvz0p3IGzzZDTy+hFD+7t56OD9ZfSApprv:+b9e+fM4GRPyyFSXD9ZfS4N
TLSH
T15C54133679529CB384BC9100B06FE128CD79C9DF46EEAB0944466F8AD29FD4E0797837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 3dcd03f2fb0d9b9f1387f05b908d73142189d1a324f9bca4dd8699e06a4b9e93
MD5 69efbcb15c0dcb4b0b0128cb5dec7635
SHA1 6ca2fd6b737e052b3123d4592ef099edd77420db
SHA512 e91858ed723eed8d920e78eb7cecae71276c1ec1def495de08fc7ae2ac351242a24fabf6d5b4f84ba332643e97fc59fd7e2f2cd51104242b5c7c3e558f809fca
SSDEEP 3072:U+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gy:U+hFD+7t56OD9ZfSAppry
TLSH
T167D31232AA91C8BBC9BC6541B297A304DE766CED41DE3A09444A5F8EE05FD4C0773A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 265KB
SHA256 8a0e367b02f36bb7acefc87032f286760da14109a66fc9b48ecb5c70c959bd3d
MD5 6353d8edf4d1311d3e752fa50080fc54
SHA1 786d10fc4db023b6e1e6743ab12f97db0c0ec06c
SHA512 3540c7f6d23984fcf120accea3c4dea5763f1e449dbae6b972a417aa0602d2cd38dc1d919c3fb53bf17db25c460dc5e4ea6076e01f3b94a29ac36e8671749d59
SSDEEP 6144:3+Dvz0p3IGzzZDTy+hFD+7t56OD9ZfSApprv:3+fM4GRPyyFSXD9ZfS4N
TLSH
T17D4413362D959CB785BCE050E46FE128DD28C9CF42EE6B0944466F8AD2AFD4E0653C37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 266KB
SHA256 068ed9e66324c7f15847aacb2bb8d8d474c90f3a5882eb7af66320c86bea4413
MD5 2d71923a5e82522caae062396dfa4a1d
SHA1 06521e81080714dcc76b5b512fc1bb8319784eb0
SHA512 44aa0b0f817aafd3e67f3db116559cdc555880892f307455963e6109c5d96d84d683a6d1c3d1a7a15930aca5ddfe136555cda229e926ebedc797843eb093f5c4
SSDEEP 6144:3+Dvz0p3IGzzZDTy+hFD+7t56OD9ZfSApprv:3+fM4GRPyyFSXD9ZfS4N
TLSH
T1AC44123679929CB784B9E140F06FA128DD38C9DF42EEAB0944466F8AD26FC4D0757837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 265KB
SHA256 045ece7fd8370e6bb5242b744d0228c38f34b6f78e4552fab7e6e69d32ce07f0
MD5 0db1bf8e0da73a193806fad1c0829feb
SHA1 10104e8fe5a91d081f36292386f70f6c2b9bdb5c
SHA512 d8d7d9742c65fa4dc28a3dfd441f27fc5801176c3f33fef5190eaf11b893e33b05fbe95e9480c1a4cf2ad011b282e3a4a73a371798bd05c9a7f20e4a1ed1accf
SSDEEP 6144:C+Dvz0p3IGzzZDTy+hFD+7t56OD9ZfSApprv:C+fM4GRPyyFSXD9ZfS4N
TLSH
T1F94413362D959C7785BCE050E46FA128DD28C9CF42EE6B0944466F8AD2AFD4E0653C37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

№ 7093 від 22 вересня 2026 р..bat

Path C:\Users\Admin\Desktop\№ 7093 від 22 вересня 2026 р\№ 7093 від 22 вересня 2026 р..bat
Size 4KB
SHA256 311d0910dc8bb69eae5514aff21d3411d62aa64e76de91cb916269fd1abd3901
MD5 475e4d840fa0e674c50289793c569984
SHA1 a5014e521ae3c0856e9f1212c6338d2af63cab03
SHA512 73f0d6cac26377df5d8f5cf542457c4f98dd204d6e5f3a5606da749a7c94d1b52522e8425b2c23fc78993267198313406588aa7ee0e386160c27acce0868db35
SSDEEP 96:qqc2g1oadjd6bVigiPiCn4mk6wb9Uoucpz1QB5eP5ZH0k7x1/tmxq:tc2grdqVz4GvWoucpz1QB5eP5ZH0k7Qq
TLSH
T13191A69DE21A4E0C148E1D31E0D562AAB9F6519153B0C539F2B49E603CD1FAAA0395FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download