16279bd722f454a99dc7b86c65f1a9f884a049df42c52463a9b6d6ea577dc4f9

Analysis

user interaction
yes
max time kernel
190s
max time network
204s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 14:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
piggyoink.png
Size 13KB
Sample260930-ryfweasyg1
SHA256 16279bd722f454a99dc7b86c65f1a9f884a049df42c52463a9b6d6ea577dc4f9
MD5 b91c9e11555ef2a937acf2f927b8f31f
SHA1 8451377e9d881e1fa466af8f5c7138c685c75bb0
SHA512 f7fcd3efd225f3cf1a2df98381bf28e172d02b452eeab1db6687678eabc21d457f0b59b7a68c5dbe5eb55434755125aacf4a7fe1dc498e9de2dd299f716d5f57
SSDEEP 384:4NhFr7xjbCGTGY/koETo4npp2L6vxEl6l:IFRCoss4pcixR
TLSH
T1FA52BFE0DB8C9C27ECD2D59BC1301101704F907D4AE9FD1A89A9EC63F65076309DE54C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
142	discord.com
128	discord.com

Looks up external IP address via web service 1 TTPs 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

discovery

Internet Connection Discovery

T1016.001

flow	ioc
270	api.ipify.org

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1604	chrome.exe
5228	chrome.exe

Checks SCSI registry key(s) 3 TTPs 8 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{27B2780D-9DE9-4F45-9540-6BB3C54BD922}	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{2E16BE3A-73AF-496D-94DF-D58824A7DDAF}	chrome.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1188	mspaint.exe
1188	mspaint.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
6108	chrome.exe
6108	chrome.exe
4940	chrome.exe
4940	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 24 IoCs

pid	Process
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4940	chrome.exe
4940	chrome.exe
4940	chrome.exe
4940	chrome.exe
4940	chrome.exe
4940	chrome.exe
4940	chrome.exe
4940	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe
Token: SeShutdownPrivilege	4092	chrome.exe
Token: SeCreatePagefilePrivilege	4092	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe
4092	chrome.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1188	mspaint.exe
1188	mspaint.exe
1188	mspaint.exe
1188	mspaint.exe
5188	CredentialUIBroker.exe
5384	CredentialUIBroker.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4092 wrote to memory of 3980	4092	chrome.exe	104
PID 4092 wrote to memory of 2868	4092	chrome.exe	105
PID 4092 wrote to memory of 2868	4092	chrome.exe	105
PID 4092 wrote to memory of 1604	4092	chrome.exe	106
PID 4092 wrote to memory of 1252	4092	chrome.exe	107
PID 4092 wrote to memory of 1252	4092	chrome.exe	107
PID 4092 wrote to memory of 4916	4092	chrome.exe	109
PID 4092 wrote to memory of 4916	4092	chrome.exe	109
PID 4092 wrote to memory of 1628	4092	chrome.exe	110
PID 4092 wrote to memory of 1628	4092	chrome.exe	110
PID 4092 wrote to memory of 1268	4092	chrome.exe	111
PID 4092 wrote to memory of 1268	4092	chrome.exe	111
PID 4092 wrote to memory of 4024	4092	chrome.exe	112
PID 4092 wrote to memory of 220	4092	chrome.exe	114
PID 4092 wrote to memory of 220	4092	chrome.exe	114
PID 4092 wrote to memory of 5444	4092	chrome.exe	124
PID 4092 wrote to memory of 5452	4092	chrome.exe	125
PID 4092 wrote to memory of 5460	4092	chrome.exe	126
PID 4092 wrote to memory of 5716	4092	chrome.exe	127
PID 4092 wrote to memory of 5716	4092	chrome.exe	127
PID 4092 wrote to memory of 5780	4092	chrome.exe	128
PID 4092 wrote to memory of 5780	4092	chrome.exe	128
PID 4092 wrote to memory of 5908	4092	chrome.exe	129
PID 4092 wrote to memory of 5908	4092	chrome.exe	129
PID 4092 wrote to memory of 6128	4092	chrome.exe	130
PID 4092 wrote to memory of 3708	4092	chrome.exe	132
PID 4092 wrote to memory of 452	4092	chrome.exe	133
PID 4092 wrote to memory of 452	4092	chrome.exe	133
PID 4092 wrote to memory of 5144	4092	chrome.exe	134
PID 4092 wrote to memory of 5144	4092	chrome.exe	134
PID 4092 wrote to memory of 3604	4092	chrome.exe	135
PID 4092 wrote to memory of 4652	4092	chrome.exe	136
PID 4092 wrote to memory of 3604	4092	chrome.exe	135
PID 4092 wrote to memory of 4652	4092	chrome.exe	136
PID 4092 wrote to memory of 5176	4092	chrome.exe	137
PID 4092 wrote to memory of 2300	4092	chrome.exe	138
PID 4092 wrote to memory of 5176	4092	chrome.exe	137
PID 4092 wrote to memory of 2300	4092	chrome.exe	138
PID 4092 wrote to memory of 5080	4092	chrome.exe	142
PID 4092 wrote to memory of 3316	4092	chrome.exe	143
PID 4092 wrote to memory of 3316	4092	chrome.exe	143
PID 4092 wrote to memory of 6028	4092	chrome.exe	144
PID 4092 wrote to memory of 6028	4092	chrome.exe	144
PID 4092 wrote to memory of 1284	4092	chrome.exe	145
PID 4092 wrote to memory of 5964	4092	chrome.exe	149
PID 4092 wrote to memory of 5964	4092	chrome.exe	149
PID 4092 wrote to memory of 6108	4092	chrome.exe	150
PID 4092 wrote to memory of 2260	4092	chrome.exe	151
PID 4092 wrote to memory of 416	4092	chrome.exe	152
PID 4092 wrote to memory of 416	4092	chrome.exe	152
PID 4940 wrote to memory of 2116	4940	chrome.exe	154
PID 4940 wrote to memory of 3376	4940	chrome.exe	155
PID 4940 wrote to memory of 3376	4940	chrome.exe	155
PID 4940 wrote to memory of 5228	4940	chrome.exe	156
PID 4940 wrote to memory of 2392	4940	chrome.exe	157
PID 4940 wrote to memory of 2392	4940	chrome.exe	157
PID 4940 wrote to memory of 4564	4940	chrome.exe	159
PID 4940 wrote to memory of 6024	4940	chrome.exe	160
PID 4940 wrote to memory of 4564	4940	chrome.exe	159
PID 4940 wrote to memory of 6024	4940	chrome.exe	160
PID 4940 wrote to memory of 4808	4940	chrome.exe	161
PID 4940 wrote to memory of 4808	4940	chrome.exe	161
PID 4940 wrote to memory of 4232	4940	chrome.exe	162
PID 4940 wrote to memory of 5568	4940	chrome.exe	165

C:\Windows\system32\mspaint.exe
"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\piggyoink.png"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1188

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:740

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffaed1dc728,0x7ffaed1dc734,0x7ffaed1dc740
  2⤵
  PID:3980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1716,i,767681838682531777,6189537045683626138,262144 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1988 /prefetch:2
  2⤵
  PID:2868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,11526727678608321214,15717481238366482383,524288 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2416,i,17068557448672725124,12462062772533072858,524288 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2584 /prefetch:8
  2⤵
  PID:1252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3248,i,17657095416269805049,4578243968783050654,2097152 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:4916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3336,i,7152067464779695330,1847142574085913103,2097152 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3364 /prefetch:1
  2⤵
  PID:1628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4540,i,7733020639661274064,5102568514077605027,2097152 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4548 /prefetch:1
  2⤵
  PID:1268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5352,i,15700803360856022173,11308031612817647356,524288 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  PID:4024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5664,i,18442068609359011620,14714722909400607274,2097152 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5644 /prefetch:1
  2⤵
  PID:220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4500,i,2495527869058351429,13913898010409227209,524288 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4540 /prefetch:8
  2⤵
  PID:5444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4584,i,6740980462356304559,10568487379773988090,524288 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4640 /prefetch:8
  2⤵
  PID:5452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4568,i,3094045453833134821,4591263154854862978,524288 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4604 /prefetch:8
  2⤵
  PID:5460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4616,i,3378865609816281828,5899890157008333288,2097152 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5836 /prefetch:1
  2⤵
  PID:5716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5568,i,5280392244391597002,14669594748021279142,2097152 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5876 /prefetch:1
  2⤵
  PID:5780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3368,i,4083001286595808685,17903365289580681667,524288 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3576 /prefetch:8
  2⤵
  PID:5908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5604,i,1695747712934931005,2791453201286109877,524288 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5752 /prefetch:8
  2⤵
  PID:6128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6936,i,8779698505977311877,8471379957856654231,524288 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6932 /prefetch:8
  2⤵
  - Modifies registry class
  PID:3708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=7184,i,14844032212381201250,16008306709464744998,2097152 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7192 /prefetch:1
  2⤵
  PID:452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=7316,i,3736788192430095825,14996610796617768239,2097152 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7328 /prefetch:1
  2⤵
  PID:5144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=7368,i,4367236883659998902,11936098707401615819,2097152 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7464 /prefetch:1
  2⤵
  PID:3604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=7496,i,2587732618702746554,12279332980926847972,2097152 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7504 /prefetch:1
  2⤵
  PID:4652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=7548,i,5126061511562656718,6051303867372929620,2097152 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7668 /prefetch:1
  2⤵
  PID:5176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=7584,i,15370904219091693277,7570406409656489186,2097152 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7776 /prefetch:1
  2⤵
  PID:2300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=8576,i,14694333371807408810,15657103689778173273,524288 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=8532 /prefetch:8
  2⤵
  PID:5080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=7224,i,5186236339063902015,6996100220692439039,2097152 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7248 /prefetch:1
  2⤵
  PID:3316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=8380,i,16501738414410740009,8744307115563175150,2097152 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=8496 /prefetch:1
  2⤵
  PID:6028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=7788,i,17592746715171115415,9855124982824838611,524288 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=8300 /prefetch:8
  2⤵
  PID:1284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=8032,i,4115707788622755258,8462360967842879010,2097152 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=8064 /prefetch:1
  2⤵
  PID:5964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=9008,i,9537748512267668661,17426195847891046553,262144 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=9004 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=9000,i,8274716019781737199,5699110179919195904,524288 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=9004 /prefetch:8
  2⤵
  PID:2260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=8996,i,3237456561257820551,1652817014764344481,2097152 --field-trial-handle=1992,i,6983393462598547654,4455897907150378575,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=8300 /prefetch:1
  2⤵
  PID:416

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3824

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3080

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x304 0x3e8
1⤵
PID:5272

C:\Windows\System32\CredentialUIBroker.exe
"C:\Windows\System32\CredentialUIBroker.exe" NonAppContainer -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:5188

C:\Windows\System32\CredentialUIBroker.exe
"C:\Windows\System32\CredentialUIBroker.exe" NonAppContainer -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:5384

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of WriteProcessMemory
PID:4940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffaed1dc728,0x7ffaed1dc734,0x7ffaed1dc740
  2⤵
  PID:2116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1700,i,14725641471948591942,8447067523259768865,262144 --field-trial-handle=1964,i,7453181726991532951,1175109085000518931,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=1960 /prefetch:2
  2⤵
  PID:3376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2216,i,2624962510217746190,16953108926458306890,524288 --field-trial-handle=1964,i,7453181726991532951,1175109085000518931,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2336,i,13934440153457848004,2070990429569505432,524288 --field-trial-handle=1964,i,7453181726991532951,1175109085000518931,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=2528 /prefetch:8
  2⤵
  PID:2392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3236,i,5196650827838340089,14242027790567204500,2097152 --field-trial-handle=1964,i,7453181726991532951,1175109085000518931,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:4564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3268,i,1145027277044897812,16735991854906959446,2097152 --field-trial-handle=1964,i,7453181726991532951,1175109085000518931,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:6024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4604,i,12790630237887374092,13797994675662546048,2097152 --field-trial-handle=1964,i,7453181726991532951,1175109085000518931,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=4580 /prefetch:1
  2⤵
  PID:4808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5300,i,173937052906027441,10414416441460730002,524288 --field-trial-handle=1964,i,7453181726991532951,1175109085000518931,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=5308 /prefetch:8
  2⤵
  PID:4232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5536,i,11166361625816154967,16221356571538435950,2097152 --field-trial-handle=1964,i,7453181726991532951,1175109085000518931,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=5424 /prefetch:1
  2⤵
  PID:5568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4600,i,3136234998966227922,14330793416855406125,2097152 --field-trial-handle=1964,i,7453181726991532951,1175109085000518931,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=5656 /prefetch:1
  2⤵
  PID:1732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4672,i,8004658199012528048,15156467956106444479,2097152 --field-trial-handle=1964,i,7453181726991532951,1175109085000518931,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=4712 /prefetch:1
  2⤵
  PID:5772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5788,i,12622456121404562841,10347833742611735489,2097152 --field-trial-handle=1964,i,7453181726991532951,1175109085000518931,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:5868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=6056,i,14849225603554518921,2890033567540502566,2097152 --field-trial-handle=1964,i,7453181726991532951,1175109085000518931,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=6036 /prefetch:1
  2⤵
  PID:5288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5644,i,17687630798054925751,11399655269533250356,524288 --field-trial-handle=1964,i,7453181726991532951,1175109085000518931,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=5756 /prefetch:8
  2⤵
  PID:5952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6296,i,2290059388809713978,8680352903978704751,524288 --field-trial-handle=1964,i,7453181726991532951,1175109085000518931,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=6320 /prefetch:8
  2⤵
  - Modifies registry class
  PID:4404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4676,i,16597452662253030401,14135082464826891194,524288 --field-trial-handle=1964,i,7453181726991532951,1175109085000518931,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=6348 /prefetch:8
  2⤵
  PID:3576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6568,i,13799142026019649418,16651062271966740802,524288 --field-trial-handle=1964,i,7453181726991532951,1175109085000518931,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=6600 /prefetch:8
  2⤵
  PID:2312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4596,i,6052680928357392163,16110108029248358514,524288 --field-trial-handle=1964,i,7453181726991532951,1175109085000518931,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=6956 /prefetch:8
  2⤵
  PID:5192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=208,i,5128533663554532360,5578265482192187792,524288 --field-trial-handle=1964,i,7453181726991532951,1175109085000518931,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=6944 /prefetch:8
  2⤵
  PID:5264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6936,i,20472758712692883,14088851256865458984,524288 --field-trial-handle=1964,i,7453181726991532951,1175109085000518931,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=6900 /prefetch:8
  2⤵
  PID:3260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6592,i,13079070945804688620,7667277096374981087,524288 --field-trial-handle=1964,i,7453181726991532951,1175109085000518931,262144 --variations-seed-version=20260930-010033.584000-production --mojo-platform-channel-handle=6620 /prefetch:8
  2⤵
  PID:1176

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3956

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1968

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\CrashpadMetrics-active.pma
Size 1024KB
SHA256 ae1bddb9e2cc97b0c9cd78ef3cd17553be6e5204677bd67e0b8f7fa27007f189
MD5 b0366599d64b0fc1adb2a712dcd02ee1
SHA1 b7a1c09ccd2846664cab5f76bd80b8e9f107acb0
SHA512 d7de6d48285018f8b709c81ca01688126db7893ce9f48829524ee3122aa6f2200c7f78186b5a558d0b1ecf8157ee78a20064b63b45ab89f7aa0835b8409435d0
SSDEEP 12:bHCsEXhVMMBKEKSCemJKlkQyYVhYJ0I+pPK6BsyW1inP6:biPROMMBS+MkIYWIE1BtXP
TLSH
T117252786A30815EFC54288B589AE03602374F9E55F52079B2E2DAA1F2E271D80F45164
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 4d0c5fbc12a875642429b0dd2daa46ea463d1c2b1482abf3f14cd122bba54191
MD5 d588345da3672470b53c54f52ba4c7ae
SHA1 a4a09d4dfe1f7232a6aee942ed8ba9fafacc4c81
SHA512 8fdce53fcf159847b327d3aea853aff1923b0786fdc362c79ba5e9c4a508f118e8dd193e48658133923b5b97a69d4cf2f94ecc2a52de56b372a393039e32aff8
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 0e66a4ddb73e2e253892259d8808b2160296eac75a6dd580cbd277b3e7715441
MD5 9c7efbcd3f6a192af97d5851ac153d5a
SHA1 829ce4fa327d04b38a5c1738b18ebafd3ae67617
SHA512 b8cd3a53326da29224af6d441031c5a437695807a8d2c0d8675b3b39b0022c17fa6c6c76ec5296cdda6f6b6f74721caeea804b7eee42d69cd5a7eee0cc60f894
TLSH
T109F044A5CC21AC7B19FC0B2820A80B47F7A1136B2780899F3B3C950C8FB423B428586C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00001b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b
Size 1.9MB
SHA256 b8f0c39dc86a6c6af93aaffa20ea9100af89230a5b2647cda2c4c31ef54fc750
MD5 802ab6c15fb69435adeec61edf88a432
SHA1 38ef492364da3c1a0209712d1d2bc4b7101225fc
SHA512 c48c5246b0ad0c16279bcc577ca50e9b94b27da1c06bc269ce4c0da291c67a2235c6f16ae08aa3c94299b0bc5ca0722b77af9e53122e0f74993052ec356385aa
SSDEEP 49152:1tHdviJcWLq4v4WZXDOzsV0YGOzBjq51VupzQfme/hBOIkL:1fv8ZLH4OMRmBjq5GpzKdy
TLSH
T1E1953326E0EFB86B208D7DF9F509D37A9D6A05B8F81883E090561FC57AF716870F8548
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c
Size 5.1MB
SHA256 624a1d8b1d0cc7a225d44c38e21b8a032cf303f8680e4ea37cfee175b9500da2
MD5 4ac83653330893efdcd07077d260c134
SHA1 3ea1b4cfd5cd20bb176870eae0801177cb476408
SHA512 035bca7d2878a304c24cc350b2a0804370d6ddf4bc2cc4e5f98bf60a492c403f40aaf61af2a3442eb7a84ebe3a7f0668611951af13ccccaace4c64925fa5bd7c
SSDEEP 98304:vQdZKJGkbTL9/Ft1fPjnBYQ7f4MFhQTpYamB6:vwZKJGkPR/FXfrnocH6
TLSH
T19E463393880391C0F93E6EFB775283D0179E288C6FF4A269A58B891D785F02456F71ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 216B
SHA256 1ad42c3a8da0b25fa863d2adb16a177434ddb56631a0ae05575446f0f90bf0d7
MD5 10b8febe7e7e0e727fde4830420404d1
SHA1 cd7bbc4d64565f5068f5c1815a0febe0d986f889
SHA512 be27ff48bfcc6979df7d1d6f8c7c6f99d718171c1182fb09671643842da255fe5d0e2131e9927873b81b5a45f807ec4a2a73f63e62e2b91cf270fe0c67412205
TLSH
T1B8D0221060C0C080EB68303510E2273060601C029C031269438CB008FCE2D5093B8B84
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 264B
SHA256 f19a5a66121a834b26db4484941ab77c506c85c36390f0cc359907eb08d45aee
MD5 1d08ad3b854a56cc4d3641939e5bedfe
SHA1 24026c1d45ec565b3f9054de99d63d9f1404eae1
SHA512 ed0c1607109c3f222c7c12388413bbaed520f3ea12645e10c91e3888a02ec27c825786c24b30d172b44d5c0ab61052293a829689e9253fc2fc4138ecf96fca05
TLSH
T15FD0235059D1A4B5DB98117500F22770B170ED51481317AD438C75A4FEF3E5543F5FC0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 216B
SHA256 5bbb5e9d3ded7f597c239f116f2fa8ee6b234d098378ea9fbe47693f10b73560
MD5 d64e8106cf1098b235032574706d9014
SHA1 69f17752cf93bebcbe344673a4aa5798188a6a87
SHA512 3705bffea1fd77202fa597e8c92ee818c22d930fb021056869dacfe6939ae9519241ca5e055979775f6c9f46bd293a93c12889e45aebe90348e8dc4c540a8b52
TLSH
T12FD0120051D091A5FBE8217994A63B70A2641D519823226143DC70547CE3D559765385
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 42825038dace5016dfeecf3595e86eacc68b791fe75343b4134b27a1cf639f7a
MD5 0e130818c511b0f04dc9472db16dae8c
SHA1 609ba6e0838e732fb857f453b28c7029936f38be
SHA512 ebd052ef609e682b177cccfec1f62efd5a9212d679e85d6cb685bb4b69189116322434256f347e01aa5de4d76a9d2158a847b50ae26219efe89c0671237c7325
SSDEEP 3:MsEllllkEthXllkl2zExll:/M/xT02z
TLSH
T12E440404FFC00407D74010704113CF701770D410051157433F554413FCDD5431D04100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Favicons
Size 56KB
SHA256 98c0f86fc74248323c92467eaaaae7083c6f9dfdf19199f5c830f5c15c47caa7
MD5 6e9639d078e3cc25d9853450277a6605
SHA1 4b6e085838871d3c77d2fedc6343dec931a308de
SHA512 cb04c6040999e3ebd03214f331df1d06df646116b86b8e803e7f609e715ffc435b53d48ee41771ef85bff8e92aee532ca5c6ac2dc217a44c476a8a57e3ce0b9c
SSDEEP 192:HcciINDpIlzi4p4XwmrmjryF1+dyAac6AiIEKOFjr:biAaiwm6GzFjr
TLSH
T1454335D3BBDC2D61DACBF3F2A1F1AA1EC9F2000C0D9958E27AA4292B5CD0D5055D859F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History
Size 416KB
SHA256 0dc918036a51b683ffe43914d3af00eb7399e36f358ab7c2d27721ac8be0472c
MD5 db4fbef6a0df037b46eba67bd248a45b
SHA1 9a60b36a6d39258ef115d9ce27aa59bc06bd2675
SHA512 0743c647bca1f0fc8bdec7b6eaa63188a1d2e94fbae02fa83b2715a3e137f02ba4c7c7ed829b259b12a4865689e7c7f5df17abd12a3dab12914172e6df0449f5
SSDEEP 1536:hidJWVuzIIDFlxd1ZzLzF+4elLBerF0+r2NhzEjhvFqE5CW+vdd:8JqI7xf+v5grF0HhAR0
TLSH
T17C94A6E27FDD1D14CAD3E3F170E0BA2DA8FA129D8D0505D675A464A798E4C284ACED0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
Size 544B
SHA256 27a2fd9e95a1a9edef609fe7d8971bf0569db59db4bb4459ac7e8a74f1d0be0a
MD5 d2bcc9cf624bde3d6a28d6f7417802c0
SHA1 de6b4234c11a71cf9fb54faf2de28930f1350301
SHA512 1a2833fb256fa98b88e237f423b6e1b7b454254f345dca91bb0af565df24b270ac5d78632b28c360dc729c5a05a1d0e86f11851c717ccfb3ae753821bf48614b
TLSH
T10FF027F393125924DF7D82F07066F39DC8C3420C9CD89BCECA6DA91C1A5892E212FD00
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
Size 332B
SHA256 6bc02c1d63932f3a0d290d95582919fb944104ecd5b841741c0b96d1da2db7ab
MD5 98ac3ea3ede75328eae38eb40e1a7056
SHA1 8554f9bfe7c99ed5b69b719bc2f76d8b01a012fd
SHA512 441ba0a1dfb9f5d71e781e1fa5ba8fff3dbc2f3a6186b1816ca889a128edc1db2015b73a0938fe2bb9cd47d0e2cf429129dd6854b8d341bb8f6b8be601a43a23
TLSH
T15CE02650AACDC6AE519C812BD2247B0DDFF83E05E7DE6F060B09F44DB8C6428E2C02C1
MD5 SHA1 SHA512 TLSH

Submit Download

3052b620-6c5e-4a35-8686-b27f085afc47.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\3052b620-6c5e-4a35-8686-b27f085afc47.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 a33d712a1c0ecd65f30f8c0269c09db0c28de0e11286fb4ac9692fb23cd2f922
MD5 4f2d2e6915fb78c1d23f810556945f9b
SHA1 a75fa57280f71d2483119cdc02b11772790d616a
SHA512 cd9f4e6a15fa84b81820475f3b82e8bce1f61c7a9a6a19fbf355291fb062b08336b6fd3a4d9245be16e9e052bc7424b5dde97512235b91bc882f8f91ea3a3d8e
TLSH
T1D4818BF7C7D4867DC91166F4AB256E1ECE6D0924531C3C26C8D8EE5B53E28B2E24138E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 955f610edb6d3093a997db12f51ff829c11a3d5d8693308e00adb8dfa3cc6437
MD5 4310b398c92b717a2aae6ff97cd70463
SHA1 528c3725ad5304dbce14ccb0b22f891ec0888d40
SHA512 1f2e855a868d2497e5a181a5b8686cacee127adde26789657017b424d5073170839b230c8c8ab569cae35867d00a091adc30354c33e97c0b164fa8fe61e70e3d
SSDEEP 384:D+ooJcG9qmEkz9ykaOFW2FqY7/IHbefswr3L8XV8GRm33RvFOXLHo3K+pnXLaZ1O:4B
TLSH
T11542C9F7C7E48A3D8A1155F5AB157E2BCE6904648B6C3D7688D4FE0B63E2831E20174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 774400bab7c3aae1d5d7961d81ff9d4bcade4f9df6dbcf37201aef21e9844419
MD5 2b80c6531ac6751e2f8003e5b2e04e37
SHA1 85b51f6e995fb5d55b2e1fce93e8ad7354197199
SHA512 f3f4880fb1be9fe2a569f16d0e47f39c9ed6f59d414260236c0527f7f34d7dfb21f1ea12fbc13827d593b09a88c3e7dc8ad47c4149b8162f49ede9fa4e34a67d
SSDEEP 384:D+ooJcG9qmEkzCB2pnykaOFW2FqY7/IHbefswr3L8XV8GRm33RvFOXLHo3K+pnXt:q9
TLSH
T18B62C8F7C7E48A3DCA1155F5AB157E2BCE6804648B6C397689D4FE0B63E2831E20174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 7KB
SHA256 f1a9547e9d464a6e918300b28417a035b3bf1135cc0f79db0afa05cce2d28899
MD5 a01486ed0a87a20dbfcb56c682273f09
SHA1 53049fe35d59b0fe70757ff8585dadc798b82682
SHA512 0a220baa7d4ac3b0f6f36614a3478acef49e5dddc871a72e849bb4db94f7f487f35e12e17edbcc94349c3193b41ade84d25126e276c743ac717b7f9d0276ae73
SSDEEP 192:t7UYU6USUDUwUnUvUQUZUXUpUYUPUDU5JUoUOUkCUNUPUC0UGUQU5UmU4UHU2UOY:t7R/Fct+wrk0qtUKq1rDCeaIFDktNGLG
TLSH
T159E19BA7937FA53B70298DBB1E8CB8051DFEA436914264F8CEA7C26D70C14F3171A426
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 124f421bf8035381ba8145b0264b36f7509bdf200e7899cc708e92aa22de8eed
MD5 8e0d285394e9df5bdf0bd96b61737a29
SHA1 caebe8e0db3b6b47cc708e982fa3a596581ed416
SHA512 bc470136a03f77bc0e4f9056d0c802c054949f1dbfc0c209ada962014880d2955c929c2b7f7aaa94657f843e4dff679c29f14728a21467a875771ab171e86463
SSDEEP 192:SRIQBw8COv7GwsPRpdHh9/H/gb+WNnuqqbWAVkhFe62iLVyIsnAUgraJ:SRIQBcqipX3hku7bDk/22e
TLSH
T1AF52A42DAD24657B5CDBC21AF9667B67D3F1103164942E84EAFC8D3C19E76CC220B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 fe58909a165f0f405ecd674f34e3cba9f7066911f01aecaed41a3191dab3d9ff
MD5 873e51dd4c0bdb98a47d6c12f8674c7f
SHA1 08eb9f55a4d9cf534c7e2462abd04dff5be52321
SHA512 5888ee0dd0f6d84de7bebfca48403e51a120655b103caa2679939a3df764aa761a3ccdb294fc546555af09118c94a2bfbc8b5a00e3d7a2d8099ba89f336c75ed
SSDEEP 192:HRyYw8g4v7UpAPRp2v9/H/gb+WNnA+0TFe62iQVyIsnAUgtaJ:HRyY2kAUXchkB0R2t8
TLSH
T14F42822DAD20757B5CDBC21AFA623B57D7F5102124D42E84EAF88D7C19E76CC221B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 1dcef23ec3db978a86291aa1178c09fc805eb9679c3a00cac9fb0d0cdef9e606
MD5 91aeb3ce9c9665427ab5da9429713cf5
SHA1 6eac7f1ce5d314b21e1df6be9cd6afcd1580d1f6
SHA512 a816d57adf4b2bc24d3d99a3766a31c51b05a178b0ddcffc15a7373a1b859428d2808b558cfd22fa6982094f95747b8631a61b6661a554f56e02f0cacc6db7f3
SSDEEP 192:GRycw8iOv7GpsPRpdHh9/H/gb+WNnWEjSfMDFe62iLVyIsnAUgraJ:GRycEqiEX3hkRYMh22e
TLSH
T19242A429AD14757B9CDBC21AF9627B67D3F1102124842E84EAFC8D3C19E76CC221B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 3de1990e4f8cc1ae8b1f23f63814125ceeed005a0a3a4c67309bc0e12f3ef426
MD5 73e07807821f8524c06dcac82f3c4ede
SHA1 f2cfd8a5dc5d8569e9d0400e42ae8464cf41c808
SHA512 000228961e39ffbfdc810beca287c829c7834835b62686b1b2a9e3649f05beb796886e245c8ec7470daf1b37522bad98d6d8f1f6842996c4e8d6695f1ec71f99
SSDEEP 192:7R8jw8S2hv7GTsPRpd7KB3sZ9/H/gb+WN1FfFCJu1QP4yNi4Fx2aAFe62igpVyI6:7R8jdxiaXrhkrTe4142ac23Pe
TLSH
T19F62B72AA860697B5CDBC22AF951BB6AE3F5202165C01DC4FBFC8D3C15E76CC6207857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 f2304d25a7953d21d7108291c50df5c92f0782edace0c6d90824b70f1af39b51
MD5 e409426e0dad41c8eb1c92ca787aea3c
SHA1 0194134ebac6958febe7f44e1f159ef73748383a
SHA512 75f9ff66e12a33f71eae3b2d90fb7bb68f428070154d1e9b61bd8783bab4134e46458f1ceb88cb530a9e132b8b1cda5de4b08624adcac625cea673356f655816
SSDEEP 192:7R3jw8S2hv7GTsPRpd7KB3sZ9/H/gb+WN1FfFCJu1QP4yU74Lx2aFFe62igpVyI6:7R3jdxiaXrhkrTe4l4kar23Pe
TLSH
T15E62B72AA860697B5CEBC22AF951BB6AD3F5102165C01DC4FBFC8D3C15E76CC6207857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 e05413f89ae080224015e24c5c280b0bc2e06e917be7926f6dd39f7c7afbdc8b
MD5 83d0065a758c982b0c858de4f62cf03c
SHA1 1d0a3a1472914c4211eb31aa6331c329562f85d6
SHA512 4515d996274a80a26c290ed31d479e8d6d8d8adb398313bcd3d1d6f40672ef8af5fb861c1b0457714295af48205616a214419dba4327fd10bda567ba98fb3f6a
SSDEEP 192:7R3ew8S2hv7GTsPRpd7KB31Z9/H/gb+WNVfFCJu1QP4ya14rx2axFe62igpVyIsB:7R3edxiaXAhkxTe4B4Eav23Pe
TLSH
T1F862B62AA860697B5CDBC22AF912BB6AE3F5102165D01DC4FAFC8D3C15E76CC6207857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 6dbf62b1c775b3c28ba92dbe103da2613da9cf0d4ab858aad2902d0cebfccb18
MD5 c2b1ad176d2db0ff13138dc9c5f702dc
SHA1 f33f63b50548fec538b466e876991a6ef1ec1856
SHA512 9a32e560fbd8bac93d2f05747c6fe5e2b2ad2d0a3bd96f65d264d5046758a81d45b40827336b243f9fea63415a935c8350507a5afbbaa8a38d146e756cb8d93b
SSDEEP 192:SRlxew8COv7GwsPRpd7KBZh9/H/gb+WNHyuqqbWsZe9Fe62iLVyIsnAUgraJ:SRlxecqipX2hkD7bXez22e
TLSH
T1C152A72AAC60697B5CDBC21AF9627B5BD3F1103165D41D84EAFC8D3C19E76CC620B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 fb92cd8508156c21c0f56a485098d98ec5eefc351f587f8a638221f2628eaefc
MD5 bba899afc8c80bcf2241f89a6eee2371
SHA1 2511c6a92a6b31d9a0480adbcaeb438332a721f7
SHA512 26691980d781486844b65bcd97ab9e6793ff263dccdbc5d3d9607feae5326b57ebb68fd775041ab5b7774ff81b629a30823e3ffe5010dda6c833c8c28ee7dad0
SSDEEP 192:GRIQBw8iOv7GpsPRpdHh9/H/gb+WNnWEjDM0GFe62iLVyIsnAUgraJ:GRIQBEqiEX3hkRU0i22e
TLSH
T16752A529AD24757B9CDBC21AF9627B67D3F1202164D42E84E6FC8D3C19E76CC220B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 3880c0aca1d15b8283bea00c10669bfef21ee79f16faf1ae49b3d4266f6c4c0c
MD5 e236efe25207f38b85e0763bd5f753bb
SHA1 4f8d022c9f6e842b6e0099ea271c74646b4b3207
SHA512 3495ff55ded7117b61b95e3309b6b4fc779d73c87315d0e91e50f4b6361c9f11aa580026cb4c54cf4a14d1fa257554bc27577efcb43769e29d4f25f27614edf2
SSDEEP 192:SRFew8CBv7GwsPRpd7KBuZ9/H/gb+WNDyCJu1uqqbWx2acFe62iLVyIsnAUgraJ:SRFecRipX/hkEI7blaw22e
TLSH
T14F52962AA860697B5CDBC22AF9527B6BD3F1103165D41DC4EAFC8D3C19E76CC620B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 a5c10cc02236d6230078b2dd49115afccc00764a132c93b62c27eff47f874318
MD5 c5388f3d2e3c95057940b6e87d91e273
SHA1 df38a7fba7c12e3c54cca42b2c28ae3771a8a82a
SHA512 7f2f32ef5b9efbeb941fdcb9ad0ea9fe50ef64c43ec24b6e84aab948cee6660132ff4b1fde189a430e43b357b2f1b5ed0d46fe3fe8378c2378e7805dcb8a1f63
SSDEEP 192:SRv/ew8CBv7GwsPRpd7KBuZ9/H/gb+WNDysuqqbWTAoSmWFe62iLVyIsnAUgraJ:SRv/ecRipX/hkO7bJeS22e
TLSH
T1A152962AA860657B5CDBC22AF9527B6BD3F1203165D41DC4EAFC8D3C19E76CC620B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 a1ca218b52043c9967f1a9c17583a5a0d54852212912abc685890d0d4971e32e
MD5 5dca530bbf29f91860ec521560f77b68
SHA1 075d3878a9c29a1fe6f41e0de102033f4a28bfff
SHA512 802dfffb53b7bfa769c3b5d385c6801193dcf0cf7c2426afa4ceb3411a7e7c6109cf2e1850063152ba3f1e9b5d1768bcb65905af36ee9e021ab088d99cdf8820
SSDEEP 192:GRyYw8gsv7UpAPRp2v9/H/gb+WNnWEejFe62ifVyIsnAUgraJ:GRyY24AUXchkReB2Ue
TLSH
T1FE42932DAD20757B9CDBC21AFA623B57D7F1102124D42E84EAF88D7C19E76CC221B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 b2ed5efc623ed4f87f7c524377e35623872824c9f94c0474609136d8a0f109ca
MD5 0c6ebc9edbd60e23fdf5b9e16f38bcba
SHA1 51c8270861c18ff0aba370f84513f5883f7ec114
SHA512 04ebfeb6922f2d6c72b880d0be62c47157ac5f18afc3298f44d92490416eb32eb82e2e46910aa4cb8756936d8b34cc7698554e3c4803c9cfdc283e41b76a1458
SSDEEP 192:SR3ew8CBv7GwsPRpd7KBuZ9/H/gb+WNVfFCJu1uqqbWx2avFe62igrPyIsnAUgrK:SR3ecRipX/hkxTI7blaV23fe
TLSH
T1CD52A62AA860697B5CDBC22AF9527B6BD3F5103165D01DC4EAFC8D3C19E76CC620B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 13KB
SHA256 cbff59adc7b520f0de2985ad921ee12da5b00aa0aaadd64b2862a8b11ece7f19
MD5 8620b09f169758aa6d92f2e7b8a4c29c
SHA1 c265bb3d46a3af238c08a66240583a655be69a0e
SHA512 017bb2738ebc633e2b1824b1fe90215df48c3e3ec2d222610a597c250ca9b406bd8560dd6e15c6ddcea319cc301407ec464c4569fc29dfb4f74923aa99fdceb8
SSDEEP 384:s2jGN7KxkXqKf/pUZNCgVLH2Hfgsl1/XODGN+ErU3pxHG4xHk4V4:s2GN7KxkXqKf/pUZNCgVLH2HfgszvO61
TLSH
T1C4520A27A88C9A3F0FD8C54DD8177F4FADF101566268492452FB9C1903A5BDB114A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG
Size 333B
SHA256 2b76de3e3e6cde0522e5ed64f13c13aeef6f54791cf682e8e7e4beda44836675
MD5 c7d817e55707ea49686c9ca87a3efc82
SHA1 84bbb6a47065c5872e0c9926ca55734f3326f921
SHA512 b4026b95af7a3cff31b2aa28c7c5dbb11bbe84e761708d271eb0767e5d4939a07e1d1d54e0bc6086535602b18e543ec6941834c50ca474f1665fad1af457980e
TLSH
T1C6E08C50A6C9CBFEA0B9C2130268A70CC6F47E0BD7CE7E0A1F45D94915C692DB3F1691
MD5 SHA1 SHA512 TLSH

Submit Download

Session_13435252777122575

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Session_13435252777122575
Size 32KB
SHA256 87eacfc8c8598698ef809964d6385e7ee5eb5d39623ad525f888203da09ae907
MD5 c911a20db845e3351b595955b22b13bc
SHA1 7a3dc7c948c2715a103dbf5ae682df970a25e3d9
SHA512 cb370d1ac3d14289ad247fb8203279fd10ad96a0e8b0544caa7d812c60efc2d7e26fe5b4aad12cb048308e3141ac9a4be3a9ac79bade44cde7a62deca8fc3588
SSDEEP 768:ip8rr9HH9rr9rPrr9HH9rr9Cr9HH9rr9Hhhr9HH9rr9HV9HH9rr9HHcgN9HH9rr0:iurr9HH9rr9rPrr9HH9rr9Cr9HH9rr9u
TLSH
T12CE2953A87D1BBEAC235A8FC81D294365110DD2DDAFE497819E1C1143AFF41A2F609ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Tabs_13435252701244539

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Tabs_13435252701244539
Size 41KB
SHA256 6b81fdfdb1cf2023102fad0dd56fb5c35a8df1725394f90cbb42cb22781d22d4
MD5 e557f6da0ed33e6c8390d197d4e26b87
SHA1 81b9c775954b4931f4cea99abddcbf62a4fb83c3
SHA512 fff2f6c5d69b83dff3cbc875e44055f52f3a243e8de74d4be86796b5bf0c087687c166db57b6cfb8eda86cc6c095a91b6fb917a05718c656b974d60670056bad
SSDEEP 768:JylpQqylpQvBWylpQFGylpQVTOylpQMylpQkylpQ5X:JylKqylKAylKFGylKUylKMylKkylKV
TLSH
T12B13CD6A7AF80636D2FFC3B991FA10AAFD79A61575800E2E2071C2151D07B131EE1E5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 42405d04580a3b292d1bce5f41f04663e89ab0fc70d25804195fdde71231c0fc
MD5 bb7856bec256cc3365d94eeb9b31084e
SHA1 f06ca802068f734555310995b58f095ed131dd8e
SHA512 3eebe9eb7c4108fb7b61c3f5d77a795ad65f6c687ba8bd079cf996e470930db0ef42a918cc8f92b7b67fdf163a2b2da7f25ea0f164aee34f1c9b2b7d316b3b2d
TLSH
T125B0122C37149045C84F1C315A48C767FB03F64205E05A53883DDB611F0AA586C4C8C0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
Size 345B
SHA256 e0277d4b18c356bd9153e106bc92b3bc9e0c168a6d2a95e24310f0979a8c9c71
MD5 dd828594db35a7290904bd886408b0ac
SHA1 74688e543555f179b371fe2e51b593c47af210df
SHA512 3b008f14b1a4f8c449acad9e56c7ae2d053d75f6cbd0c7ea0668f4c17097663d9d149b0a845d23a368ae35e512c663624d4ef405140a66cc023e5416ecc93a5a
TLSH
T1F9E0202067C9CBFF61E9C1175224F30CC5F17D06D7DE59191F08E4445286458B3F1681
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
Size 321B
SHA256 bd9bfc8a46beea2df0dddf0e5912c8efd68b0c94c597c53ec9af5124d95a2ce1
MD5 91667d3e297fa19f6be5926037c57acb
SHA1 5e1d881376a53f3b1c76a739511506e87217a3ff
SHA512 c11361672cc8f3821b4d8e4780a2237422ea4a5532199efc4e2cf556c34d9eba1dd909a711289bc8436bbd8a9fa029cf56f4fdc9f6b8c96d9ad3fdad301dc69f
TLSH
T18EE02670AAC8C3FD85DCC1234274B70C8AF07C09ABDE3E0A67085084618203862F02C0
MD5 SHA1 SHA512 TLSH

Submit Download

Top Sites

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Top Sites
Size 20KB
SHA256 70abb9ec433179fd8b999bf1a3f81aa1b7f69e0129410e625ef09a90ed296d95
MD5 24a46be1d167f49ec5ad387891f13818
SHA1 5a3bb36c53688b1feb9061939fe2732fac0afaa6
SHA512 e22c5ca9e239239b6a627771a3ecefdfb349696a4af8c17766b3160250f5b947bb596d034c18b618079dda769af0eaf73d4eaad560f023915a678ed63914e215
SSDEEP 12:TL17CZhDu6MvDOF5yEHFxOUwa5qguYZ75fOSX7GJccog53ccogL:TLVCZwE8I6Uwcco5fBX7a5JL
TLSH
T17292C0DF2F242433E4F98B39F2D741DD8F7A951CC785EF9094A41C21ADC1980524E866
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager
Size 40KB
SHA256 39d721818901f1eabb253e44e6e6fa50952a18988433d1c8b025350a29dddf7d
MD5 a5bb08476396dd630ea6b9871dc8ec10
SHA1 9ef13201ba801e9afa961dc8beb870fc9d5bb9fd
SHA512 247e2547597978bb2b5de72226500dbddf4a426482e192092a55627956fecb45ca5e8b03b9750572215d16558e2ecb3c08e338e3fbdea1d65c94c968d0322350
SSDEEP 48:T3j7dojKsKmjKZKAsjZNOjAhts3N8g1j3UzBulLULKAVL1Lg+:f7doKsKuKZKlZNmu46yjUuH+
TLSH
T136032C8E977881F3C0B2C13EEEC246E6FC7C2A08D7266DD115F903B59E8C036616466A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager-journal

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager-journal
Size 8KB
SHA256 31c2e197ffcbb8e421de3fbe4ff5c1f6235e60bca3948677c62de3ecda35fc6e
MD5 1d95ac8697277cc413ff7e92f8e4514c
SHA1 1951c4973115f1f1f9df65601e57da52e08c73c2
SHA512 6296b5c5d07020a5f6a2c47c7971360138e98198c1e9cd70ae3dc6564ff674b04eff4ded9b604f231cf4f9f97705e6f97ae3f581cf141c580d0ef0fdb78389f1
SSDEEP 3:1glNllv/etXlIFyluFsl+qg/G9TjffaXM/RuWGJpDEJ7KgJpDEJ7HBQwFyQLoK:hl4fKMSCc/mLEJOgLEJLhFtLoK
TLSH
T10402229CA04482E5C432453CC7CEA48C3A290E44BFD73A8131E009D97C9D4024020FC2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ce4c9503-d8af-4b8c-90c6-70f9771720ec.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\ce4c9503-d8af-4b8c-90c6-70f9771720ec.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

fcffac63-e398-435f-8b1d-3647416ecb62.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\fcffac63-e398-435f-8b1d-3647416ecb62.tmp
Size 12KB
SHA256 07f071457e70a9249e657689c4bfaaa62ec34b5eb8b421a87715b5b083d15077
MD5 b9d6da740978d6ff390aa38487fd579d
SHA1 b3b6a01a0fd18c0fbc2b9f9300e4a58a137293c0
SHA512 f882f7a62df578195af792a4d39c057edc13c4d558732437bea7670b48c22f32860c12a57555dd4ef4e78603fd2f791a610b88cbf301c5c14a00485724a604aa
SSDEEP 192:GRyYw8iNrv7UpAPRp2Hx9/H/gb+WNnWEjxn2oFe62ifVyIsnAUgraJ:GRyYE9AUX4hkRt202Ue
TLSH
T156429329AD20757B5CDBC21AFA627B67D3F1102164C42E84EAFC8D3C19E76CC221B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 d5cb524669f6c05840741368a2bf7abfceface90d52521c0e049854e8ece5ec2
MD5 9198ae4274b86a529509d4b9b6386ea0
SHA1 c9e9513a2a07cf203fcd2609feec79057a8b6468
SHA512 474467463c51eeae16e07f23976c88642fda7b80c310b6145f30db9f099bace78c01f619e0ed1af521fd7a8d10b53493970b40dd7b202263f64e7c2e9b5a6968
TLSH
T1FE21D256F330C255D288863B563E6B19133CC4269FF8EC0F48B120383E76E041D8B6DA
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
Size 335B
SHA256 11b0fac2c985ee7d289b5031ce977dc0bcf4a1a70de894354e558a081b650d8e
MD5 fa43d86d3cbf7049b10bf4801f6e7cf2
SHA1 432ac85c33e300667a09d860f40312e072abf7e6
SHA512 520bfcd324b7b60d0acd96b614e39849c2fed8a5176ed52b78a49abead9033bd41f41b36e0746f91b51614e5cdec12439b0690ee00548de99f23ed112e2dea46
TLSH
T12CE04FA0F989C2EF90F880530660A788D6E23D0AEBDD6E261F0A889955C662571D12D0
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
Size 13B
SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
MD5 43ef949d3c6e9956545979ace65d0085
SHA1 63f2b2de8727854597e49a1216e8e74c68117c07
SHA512 313a5ab7ac9b5efd955beba4615784bdc2a9058ddaa804d85fb2d0c651dd3de07e382d61a1bb482499520a80e0b64c004ff2af03459cbc1daef47f540f0a6905
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 266KB
SHA256 1cda2c3acf77e6831a946938ef3d8b0c707c508ba5df8ac2f273f25b17d26fa7
MD5 87c0ea0be1cc26d2702849cb35bbaf0b
SHA1 91afe029bbd832c21ab8c7b2d44ce4fbbbd3d7ec
SHA512 345700413965734023cd71b97f325c8db2d304d140dbe471def2d27b20755c25a8509819cee7abb43642327219b2346212b9687260097733d5f9a41edc83c4e4
SSDEEP 6144:Wgh+Dvz0p3IGzzZDTp+hFD+7t56OD9ZfSApprM:WI+fM4GRPpyFSXD9ZfS46
TLSH
T1D444123629919C7785BDE150E06FB1348D78DADF82EEAB0984066F8AD19FC0D0657C37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 266KB
SHA256 96e966414ce65ded5f63fb5d3b95fc7f59278967b5b00c4ce253c407d8b8102e
MD5 e214fa9107bdbd7cda0b891413da0bcb
SHA1 5c75645e61a21ca44726ab1da3e21751fed7adee
SHA512 a52c7755a946fff3f3121582abc3b114be3edd963e9fde85073b1380f27fa3a060dfaabdf962775f0455761d896082da419a3d36380aa44eb26213a7144af821
SSDEEP 6144:w4m+Dvz0p3IGzzZDTp+hFD+7t56OD9ZfSApprM:wH+fM4GRPpyFSXD9ZfS46
TLSH
T12E44123629919C7785BDE150E06FB1348D78DADF82EEAB0A84066F8AD19FC0D0657C37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 bcc8852f83f8f4cda76c9d510a766ea0e773e6cac3b69826705314d5bdee2ca0
MD5 3f989cb4b64a30a9a69900ce360b391c
SHA1 484914e03e7972a0d2ecc3b9bd1e120d4a4bce08
SHA512 fa04c4017f69a6516393ac19a51ea16c960183716dc006b72280d2f3903f148fb895fb2df5db6ea62a5a1bf345d203a0a6cd1a091004f4a5b1ddb4f91e4ed792
SSDEEP 3072:xtL+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gE:LL+hFD+7t56OD9ZfSApprE
TLSH
T171D31232AA95D8BBC9FC6541B157A300DE766CED41DE2A09444A9F8EE09FC4C0773A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 266KB
SHA256 2520a070545d884cf8722623eb388561cf3977126756d646e32996fb9584f7cd
MD5 a0c3478da787416fd41c5bb809e2f23d
SHA1 5eace944fd035f24db000fee01385e2d8239b146
SHA512 a593e9e70b802d09b700d1891f0dbef0a8d58c57fc465f8c8db76c52e9c0ba0e17dd1efacf5313f1c5911d41496fdb594492c387318219cd2fea9a6ace2c141f
SSDEEP 6144:H1p+Dvz0p3IGzzZDTp+hFD+7t56OD9ZfSApprM:HD+fM4GRPpyFSXD9ZfS46
TLSH
T16644123629919C7785BDE150E06FB1348D78DADF82EEAB0984066F8AD19FC0D0657C37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 183KB
SHA256 efeb78571b3ba40d82f2edd093b21ae6a30744472f15815a7e83b008cc73e191
MD5 58f7adee2a500eb92b3ceba7dbd5c37e
SHA1 47eafc96aeaebc3e9b2f6cad0a4c0b0698804618
SHA512 942a70cf51bd372e5a37ec43b9cdb1b2ceca16de979b30005a41e95a9eb32c858ca2ed33b2c21443048c78333da31e4871cdcdd66f1207a7233786ab2a833b0b
SSDEEP 3072:KhdLeto7lGJdVrlixRBy6AztpvzHUpwjaRPIGzZvF3d5ZDTH:OdKto7lX+Dvz0p3IGzzZDTH
TLSH
T16204227D1C930D631026E068E47BB875996CC70F82E9AA4694936F578369ECF170BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 183KB
SHA256 f456cff15176c28266f7414162762ee068a98ac5fbb63dfa878e3b5140986b2c
MD5 6be1e0a173623927a6ca6975afc8fe7c
SHA1 a9f20490404db0b1c03c871da793f22c8f82c9be
SHA512 bf43d23204880d52082f792d3140f71b3cc03a7c93f6f9212f83f93216249a4f84551e4eedbd7f4815c09f262980f8f4febc842f95840519f969bc5d1a83d7f8
SSDEEP 3072:KVdLeto7lGJdVrlixRBy6AztpvzHUpwjaRPIGzZvF3d5ZDTH:6dKto7lX+Dvz0p3IGzzZDTH
TLSH
T1A804127D1C930D631026E068E47BB879996CC70F82E9AA4694936F578369ECF170BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 310KB
SHA256 800310f66b4ac63d7845c53795568a3a999dad6a3fd77747c46841498839b5e6
MD5 d86f1465879ba4672b9ea67472581fe5
SHA1 4590444c70fb28ded06f2761bb94ab2d5d08353d
SHA512 8ffa33f0d368287af326156c0d86498447bcf2954e42bac6f2fcd56a22377c83860ecca4de45f42ac67e960a87595610e1eef3046a78bdccbfc6ece9fdbdc2af
SSDEEP 6144:wUKto7lOF+Dvz0p3IGzzZDTp+hFD+7t56OD9ZfSApprM:w9+fM4GRPpyFSXD9ZfS46
TLSH
T1E964233A2D934C7744B9E054E06BB1349D68CACF82DE6A0A84466F8BD25FD4E0A57D33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 266KB
SHA256 97115aa61adb5be16814274ea1e72b3f94ca66660b7b75c59e1c3859e607c1be
MD5 0cf1f8b0032a309ba08d0d4bbd48d83d
SHA1 dd2cb21d013dd4f1b4c8622c5d0190071caee7e7
SHA512 f68b942be34c90db99d762771f84e0f45e11535f60618908abf9f73ff7c984f51ff84eb44ccd5e5a719bcd775e072310d839b43410de7c4f2ae15fe0c0aa2ea8
SSDEEP 6144:xgh+Dvz0p3IGzzZDTp+hFD+7t56OD9ZfSApprM:xI+fM4GRPpyFSXD9ZfS46
TLSH
T1A344123629919C7785BDE150E06FB1348D78DADF82EEAB0984066F8AD19FC0D0657C37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 265KB
SHA256 0e76796ca4600c86f2a2784382dd4d5c784ff0b24387c91c44c62da591a59979
MD5 ecf49a174e505d9720ce81f382e5adba
SHA1 99d9024056df473b5f7a7de07fb46f18ecf3bfc1
SHA512 90d070b58f5401ad7154c91b463f5c155d7d9bff8d8b9edac22813dad2bc06c891a1a5c06e3a46aaae702e9acbf6de8f4b8aedb62096ccdc573ca54841153cf9
SSDEEP 6144:gR+Dvz0p3IGzzZDTp+hFD+7t56OD9ZfSApprM:gR+fM4GRPpyFSXD9ZfS46
TLSH
T15244122629959C7785BDE050E06FA134DD78C9DF42EE6B0A84426F8AD2ABC4E0357C37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 265KB
SHA256 716e72cdb6ee6344e7934ac1141ef965ccd8f63b1c9d4cf883fb82584659682c
MD5 6264b89b9b924e42c6ec340539655050
SHA1 1da905f8d97eb04749e2abc903aec1666cb22c2a
SHA512 c6909b8872514b6a62d203bcc44a0754860a7b53c7ed4c0f84312910bd1cc180a7538222d39faa9db9a7776e649eeb129fa5ca115d89ffefd009e744961fde86
SSDEEP 6144:NR+Dvz0p3IGzzZDTp+hFD+7t56OD9ZfSApprM:NR+fM4GRPpyFSXD9ZfS46
TLSH
T19644122629959C7785BDE050E06FE134DD78C9DF42EE6B0A84426F8AD2ABC4E0357C37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 266KB
SHA256 1666d5eb9e6fa779a94891d87c1a996d656993dff241653631ee22ec49ca8e85
MD5 e3794235c9b00d75a38a64ede0937a89
SHA1 6c2174b439a19779904571253192f4b7d910221f
SHA512 406a42fb549ecfb1b17708390c1ca0e7d9e05589923ba89832f5cb3c8ace596a8fbec1b5166053304357b7f0fb2adca2c5fd5c02854d66d7d26ef0c8cfd77df6
SSDEEP 6144:qgh+Dvz0p3IGzzZDTp+hFD+7t56OD9ZfSApprM:qI+fM4GRPpyFSXD9ZfS46
TLSH
T13C44123629919C7785BDE150E06FB1348D78DADF82EEAB0984066F8AD19FC0D0657C37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 62248a0e46b3093e56f23519f7ec99d11c57a4974b2c36b4eb38a6aa6628411c
MD5 85bc6dccff77ea2ca273981d76e2b833
SHA1 7a1018a50ad0dc8379fd5ae0199d0e7cba99b022
SHA512 7776d89331deb8724c9a6802cf11fa6504021cd8b39f12bb9e8c40c2df14b742353894b6b1a00b038a4ce9e9d450f847018ed87c43228c4c2971f60daaf6fc45
SSDEEP 3:MsEllllkEthXllkl2zExllq:/M/xT02z
TLSH
T1ED440244ABC00D09C50021705112836413A0D41005219783255904127C995818D01100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\component_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

ukm_db

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\segmentation_platform\ukm_db
Size 68KB
SHA256 12e0f09e5ca54afe8209b70008c489aa0d5532c13555b10d729217e420cf12d4
MD5 dcd308a9304489063cec2458f4f03c7f
SHA1 ee85be3a59100c4ad6a5acb57ade8cf9c23477e6
SHA512 8a7d091b39a8bb82f55a8b052c700d3bf68c1669317c3d4356d41be3732ba124566eaf5629fa50a77faa7321f2a3a6e001ce76b6b117c25a58fd46c46260d9a4
SSDEEP 96:1UcfUV0zQXw62cn51d0/g95EHy7BlezUXN7DjoCPV8LQ/CTlD1TqtbXE:1UcnzQTXeglfhDjopk/CXYbE
TLSH
T1EC63DBDA7B9C1D60C9DBF3F264F2DA0DE5F6129C5D4989E8B6E0686B58C0C1861C860F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/5188-152-0x000002032FF10000-0x0000020330639000-memory.dmp

Download

memory/5188-224-0x000002032FF10000-0x0000020330639000-memory.dmp

Download

memory/5384-277-0x000002C08ADB0000-0x000002C08B4D9000-memory.dmp

Download