hxxps://tria[.]ge/dashboard

Analysis

user interaction
yes
max time kernel
900s
max time network
472s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 17:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://tria.ge/dashboard
Sample260930-vqak7stdqf

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2040	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{E576AFDC-5C53-41D2-978F-2C87DD79F2E0}	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe
Token: SeShutdownPrivilege	4068	chrome.exe
Token: SeCreatePagefilePrivilege	4068	chrome.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe
4068	chrome.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 4068 wrote to memory of 548	4068	chrome.exe	89
PID 4068 wrote to memory of 2040	4068	chrome.exe	90
PID 4068 wrote to memory of 5024	4068	chrome.exe	91
PID 4068 wrote to memory of 5024	4068	chrome.exe	91
PID 4068 wrote to memory of 2728	4068	chrome.exe	92
PID 4068 wrote to memory of 2728	4068	chrome.exe	92
PID 4068 wrote to memory of 4324	4068	chrome.exe	93
PID 4068 wrote to memory of 4324	4068	chrome.exe	93
PID 4068 wrote to memory of 308	4068	chrome.exe	94
PID 4068 wrote to memory of 308	4068	chrome.exe	94
PID 4068 wrote to memory of 724	4068	chrome.exe	96
PID 4068 wrote to memory of 724	4068	chrome.exe	96
PID 4068 wrote to memory of 1404	4068	chrome.exe	97
PID 4068 wrote to memory of 1404	4068	chrome.exe	97
PID 4068 wrote to memory of 4540	4068	chrome.exe	99
PID 4068 wrote to memory of 4540	4068	chrome.exe	99
PID 4068 wrote to memory of 852	4068	chrome.exe	100
PID 4068 wrote to memory of 852	4068	chrome.exe	100
PID 4068 wrote to memory of 3448	4068	chrome.exe	105
PID 4068 wrote to memory of 3448	4068	chrome.exe	105
PID 4068 wrote to memory of 3828	4068	chrome.exe	106
PID 4068 wrote to memory of 3828	4068	chrome.exe	106
PID 4068 wrote to memory of 2648	4068	chrome.exe	108
PID 4068 wrote to memory of 2648	4068	chrome.exe	108
PID 4068 wrote to memory of 3964	4068	chrome.exe	109
PID 4068 wrote to memory of 4560	4068	chrome.exe	110
PID 4068 wrote to memory of 3964	4068	chrome.exe	109
PID 4068 wrote to memory of 3596	4068	chrome.exe	113
PID 4068 wrote to memory of 3584	4068	chrome.exe	116
PID 4068 wrote to memory of 4104	4068	chrome.exe	117
PID 4068 wrote to memory of 1008	4068	chrome.exe	118
PID 4068 wrote to memory of 5732	4068	chrome.exe	129
PID 4068 wrote to memory of 5732	4068	chrome.exe	129
PID 4068 wrote to memory of 5796	4068	chrome.exe	130
PID 4068 wrote to memory of 5796	4068	chrome.exe	130

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://tria.ge/dashboard
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xa0,0x104,0x7ffe9ba0c728,0x7ffe9ba0c734,0x7ffe9ba0c740
  2⤵
  PID:548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2016,i,5178731831813378235,999199363020133459,524288 --field-trial-handle=2064,i,6331145562025427742,9647579628612873549,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2184 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1712,i,16803576215543638447,10720753847942236555,262144 --field-trial-handle=2064,i,6331145562025427742,9647579628612873549,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2060 /prefetch:2
  2⤵
  PID:5024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2416,i,13411923228949085346,17898732965962285308,524288 --field-trial-handle=2064,i,6331145562025427742,9647579628612873549,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2388 /prefetch:8
  2⤵
  PID:2728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3252,i,17515426640323803456,599729007841919703,2097152 --field-trial-handle=2064,i,6331145562025427742,9647579628612873549,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:4324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3260,i,9530158096978271328,8432092911054207634,2097152 --field-trial-handle=2064,i,6331145562025427742,9647579628612873549,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4452,i,12483105153461508957,296468403042901911,2097152 --field-trial-handle=2064,i,6331145562025427742,9647579628612873549,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4468 /prefetch:2
  2⤵
  PID:724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4744,i,17055147705284655795,11357990371316768402,2097152 --field-trial-handle=2064,i,6331145562025427742,9647579628612873549,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4756 /prefetch:1
  2⤵
  PID:1404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3524,i,16800858535791377395,10656641990919629248,2097152 --field-trial-handle=2064,i,6331145562025427742,9647579628612873549,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5028,i,10583538899194003535,9301411390300226184,2097152 --field-trial-handle=2064,i,6331145562025427742,9647579628612873549,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5240,i,937753919550740639,9747734096376492573,2097152 --field-trial-handle=2064,i,6331145562025427742,9647579628612873549,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5248 /prefetch:1
  2⤵
  PID:3448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5064,i,13171938176063572079,3585810697131663570,2097152 --field-trial-handle=2064,i,6331145562025427742,9647579628612873549,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5640 /prefetch:1
  2⤵
  PID:3828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4456,i,7307020233881925240,15275139759920154688,2097152 --field-trial-handle=2064,i,6331145562025427742,9647579628612873549,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:2648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5892,i,10494495770866017633,10921071274581092352,524288 --field-trial-handle=2064,i,6331145562025427742,9647579628612873549,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:3964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5904,i,10513118126434566131,16476231943246020855,524288 --field-trial-handle=2064,i,6331145562025427742,9647579628612873549,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  - Modifies registry class
  PID:4560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6884,i,12559974580006812379,6042800487246251347,524288 --field-trial-handle=2064,i,6331145562025427742,9647579628612873549,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6892 /prefetch:8
  2⤵
  PID:3596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6076,i,2444449019880254339,9407125413330357482,524288 --field-trial-handle=2064,i,6331145562025427742,9647579628612873549,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6120 /prefetch:8
  2⤵
  PID:3584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6128,i,13087919073861262317,12576371468669474048,524288 --field-trial-handle=2064,i,6331145562025427742,9647579628612873549,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6148 /prefetch:8
  2⤵
  PID:4104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5916,i,14078313986479160596,12537567531733662417,524288 --field-trial-handle=2064,i,6331145562025427742,9647579628612873549,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5580 /prefetch:8
  2⤵
  PID:1008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=3368,i,9073743809696057275,15068242595381783502,2097152 --field-trial-handle=2064,i,6331145562025427742,9647579628612873549,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3400 /prefetch:1
  2⤵
  PID:5732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5048,i,12077321634303210252,10800966545791069307,2097152 --field-trial-handle=2064,i,6331145562025427742,9647579628612873549,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5276 /prefetch:1
  2⤵
  PID:5796

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3196

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4180

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 6a38887b420983c160facca4fb1a0bfc2a0f21e57d231bf6a585f4ed1ea5f27d
MD5 ac40219d9e4b239379f485bcb8291eb2
SHA1 b805870c56e44456e7c1d9f4d1881232c6f9f284
SHA512 fcbc14a767ea1fab3231355ae5d93dbf75510c0f5e44541e127dcf864fffc4e05728f322bc19d42acaf0863a5bbb54ad0453a8017c4d16cd62d8a00ac61f6451
TLSH
T136F02DB5D921EC3718FD0BAD2095474AE75013672B41484F3B3D410C8FB1637468596C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 78704ee763470ad3ce7ca8a5bf86ad39f5fb9d5923e419bcaeed06f22a31cce5
MD5 3f7f3951f8499b109feb482cc2a45c75
SHA1 9511e135ad22161f92cfce21827d491f805c6ad7
SHA512 378c8b84e9bb944c6b830ad9d18df2ae2a148dbd855a4edb62eb0c2e1eff5a2b3497c93c2cbf182da6c8f9e83955d0c8e163566d0d6dc87af55f463b5139486b
TLSH
T19B319958A584C184DF8D55F00B830970273EEF8904961B2B8195FCAD3CAB3F96F75D82
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 498d19a5f729708f8278a2e28ab37ccc73b3e6545e1fc234249c58a1fec30504
MD5 549e20c751c8f2113bfb7475e0458779
SHA1 443b97a8899bd1ea9260d319e5bc401bbe19d643
SHA512 6c125c0b8f65ff52b96fabc5fb3220afd847ebcbb9107a6bf08ae955210fca0ec43905ec6e88e4a07c40a21116fd90377122bc3a830a7beddb4db7cc1269b85c
SSDEEP 3:MsEllllkEthXllkl2zE/lRl:/M/xT02zC
TLSH
T1604404447FC00447CD0411304751C3DC1370D4101F13574374514C337CC57411D01001
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 6c1c52ce3d6745ccb867b8488f8e92ca306bc29375948fd8c48fa667638647b6
MD5 17b3d4fca42aadc104e9478224ebad3c
SHA1 8b8d8691883ec1dbcd88a92c6091a664f0644d84
SHA512 9091c793396076099a5485c96ca219e3c2ae27bbdba9ad65099055423a4e8ea447e1883fdb36249d1691af21e1e149c3a996db33dda6d5ca06a21d04476292c5
SSDEEP 192:DiBVgRV9zCdcfSIapu2Z7IGHbLRbyKUumpT5qunS7vj7:DiBVgRV9zCdcfSIapu2Z7FHbLRbyKDmC
TLSH
T10C028CF7C3D8862DC94596F49B156E1ECE2D0A58532C3C26C8D8AF4F93E2872E25174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 b694f9fe6a9edd73475a00090445edcfd776e8af8e12501074027887039b26ac
MD5 a226059e5385bd8e5321f0cdc6772eb4
SHA1 18535235b91e08e61c62a139fa461666d4249abd
SHA512 ffc1aed9bf502c0e5613468a4ce6d9157109e4bb83cd0ce8ff3e6e95f1931c6240c3fb1d70130613b229129573b9a93c7940bb3456f2d0e08a771e1a32422127
TLSH
T10911EF63D73E74A720AA04672E48B4451DB6B836029268F4DEA3812CB0C15E3478645B
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 19506250abba1c5d58f5eef99c7c4e7227b968a8de66e9c2100131b19dc5a092
MD5 d9aa38f355d58f718d58d20620363c22
SHA1 dc79e9f376294d3c4fbde7504a4c6d043a1d081e
SHA512 91746b46dd18610c8a149ca2aa63c8dad1e5dcda2854bc820be4962cf7de115ef0350a0b04aa23bffb34f48f018a4569a013a93907d45919e0f239353026d0dd
SSDEEP 192:rRtv33f6Chu5Cv7epAPRp2oVow9THsb+WN8d6EZ4bUp4xj242BiYkwkFQEVyIsnv:rRtv33f4OqUX39wy4i4k42pEFlE
TLSH
T1FD52C72EB920697BACEBD22AF9517B57E7F5103160901E48E6FC893C14DBADD220741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 961fe1b9eafdb26f0da8ede20b7b51ef1fd64ff39724f6424696d0c3b40e32d4
MD5 a65895a88f49d898719881e3cff72009
SHA1 87c83a463f401c17a5a170d454dafe1f1e1b537f
SHA512 5c0aafd4e898e5a750c0f25c46260996a62c51e6fb7c96ea05cd92df1592eb48ba7eb810caa805ee64122f6f2667a66e90380c088ec8c33084c71990c8675f5c
SSDEEP 192:rRtv33f6Chuk8v7epAPRp2oVow9THsb+WNv6EZ4/j242/iYkwkFQDVyIsnAUge:rRtv33fboqUX39wD4q42XEFEe
TLSH
T12742D52EB910797BACEBD22AFA617B57D7F5103160901E84E6FC883C14DBADD221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 6e0fe410057ee54553a98f3f7ae90a96395c61d9a8494d1bee9f599d9fac2784
MD5 34a1465af0233c3984fde5850b70c009
SHA1 426efa90eae19e5c44b13f75cbcc59cf78a14f46
SHA512 71da9b4bccf8be37fb44b1e17a75d97d747d39a4e763be529d88db53c3f90121d002ee4ae40c6e4246218d7d177b339d6ad7bdd850e9a4462a86e0a6c621e1d2
SSDEEP 192:rRtv33f6Chukrv7epAPRp2oVow9THsb+WNv6EZ4b9Y4xj242ciYkwkFQDVyIsnAC:rRtv33fbTqUX39wD4C4k42GEFEe
TLSH
T1CE52C62EB910797BACEBD22AF9217B57E7F5103160901E88E6FC883C14DBADD211741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 09803b0cf8276e5f5617d913fb7abd721f2fa8c0512e7bed7151ca29be21285b
MD5 582ebbfa65dfee3381dff248348cb600
SHA1 a103eecc9c824fa979876921adaeb0b8bf2fee4c
SHA512 745c31df8b961555f830f0c2516aabc9e828f167f8af9ea5384ca083d75a63a96ac9b16f009d68e8d0cba66024f4c7b6c168987dd923a5e373bec8a46b539321
SSDEEP 192:rRtv33f6Chu5uv7epyPRp4otVow9THsb+WN83k6EZ4bUp4ptA4xj242ciYkwkFQq:rRtv33f4KqWXr9wN4i4w4k42GEF6E
TLSH
T12262B71EB920697BACEBD22AF951BB5AD3F5103160901E48E6FCC93C14D7ADD310745B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 f7e0a7036b9bf87d18941afe0a0039bacd2a6a85b55115963a1d3bb3d3d25ed8
MD5 f5dea701d1a456a3a13710f824722a0b
SHA1 61f3bdb433c2dbd53fdfbd02fb2c0b467fc8f51a
SHA512 57ad41f970191f2aefbe4c358b9171c2932649453a5d90e4b2377a9c358a9d2f45247433f41a6836a315424d66459abb42a476e472641e65c9e0855795e04ac4
SSDEEP 384:nNjzO7KxkXqKf/pUZNCgVLH2HfgslYk7pLuLceSZkXODzq+ErU3yTHG3E5TZ64:nNzO7KxkXqKf/pUZNCgVLH2Hfgsik7p6
TLSH
T17A72F9A7BC4C9E3B4FE4C99CDC167B4FADB5024755E9886442FA582903C5BCB11062FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 0593949bc2e8708a052f92668289a199b6e301a102d294de96e6ee6570011b3b
MD5 2cbfe5011f19b3388d4c1a66c0bc0a21
SHA1 1e9169d191129c075e278ff6a1fb59c915f866de
SHA512 dfe976236d1676be3e53ef697cf1d84ba2bcc2d6dd7a01fa5954b384efe3dc8a1f926fdb486f49d64754408c6eaafb5f7fa348be01aa675b7a62a5381df51a84
TLSH
T133B0124CC0425301C43607F4155994C83258DF11F60A170391F00D019936550851B0D8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592d7f.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe592d7f.TMP
Size 96B
SHA256 21a1d74968758933590533de0c2aa538ac04b40d7b55deccd3f940999ebd34e4
MD5 9cd0530d1411d3305e372aef15bf5efb
SHA1 0cef60e576ddfeb4184e39c4002405935798bd75
SHA512 92d122b17919f57e374698fdef9d8d465af99e90b857977b44d45282dedf410f6c3181316bc3a7b87fbacd48052c6200797718b11f86cef86f3b1d672b720c7b
TLSH
T16AB0029AC1466212C84203B03F99A5D87364DF36C607131796E05E6AFC676A04D35964
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 245KB
SHA256 716d01e3385ceef337a4dbbea9d2bea2e4ac734a3f2bc48cef09dd9d51d8a758
MD5 23e2a1d9b93c0c281e2a9dcd748934ce
SHA1 75d39c1e78823e5baff60da6ada16ae58c135c44
SHA512 64ae1a5d3df34ec2a61e1571baf4ff76944a49ace4bdcb50db86e131c5173a560a79d3c27de344bf32efff1a93167f200fa48f7fa34943807360dbf6cc3d1dcb
SSDEEP 6144:2V+Ha1h0GKnqIf2qGOHasrs+hFD+7t56OD9ZfSAppr2:2V+61h0pnqIv5fAyFSXD9ZfS4o
TLSH
T12F3423217414587349BA5606B457F308CEAE29DEC8F87E8D90C6AFDBD2EE45C06E3931
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 ece48a87920162cc5be29becf7b102c42c7fa07d4e91a7e550c3eb4b868db254
MD5 ec2fd1dec9bb3b6278e6d4519216fbfb
SHA1 71fadbac33dd2840578453a4ee86e79dc64bffa1
SHA512 39b6501cd3dc1590d0a6fd2f2379a3121b9ff31c420c66edb083a218528d3e4b93c4b35b2b911abdeb676b4d66e27af1634bdd4fb0122ab82a19025d41008b39
SSDEEP 3072:4+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+g2:4+hFD+7t56OD9ZfSAppr2
TLSH
T1D4D312326A91D8BBC9BC6541B157A304DE72ACED81DE3A09444A5F8ED09FC4D0773A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 aa194784a94ac33175ad3e49fa435832d0cd3a0404e16ea877f51be08eb3e3b1
MD5 0baec8ceeaa7989c8f148b5a37256cfb
SHA1 b21b51f48483e783ac5ed2220475c506b9e75ecf
SHA512 c79ddf6958afb6f306e2d2830c1399e6596cdcee899e28de8c555006d6b36130eb1d31d59463bd7ee77530edbc11aa8356fbc7461f66ba8bac857b5dcf6d292a
SSDEEP 3072:Ws+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+g2:Ws+hFD+7t56OD9ZfSAppr2
TLSH
T137D312326A95D8BBCAFD6541F157A300DE62ACED41DE3A0984464F8ED09FC4D0763A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 1ba9323254bc5b5fcf263e00212f1fb4bdef96c3d24b418010a9dd5b2ee9c40b
MD5 1c6758392c20805d8210df7c176f2608
SHA1 53e5ad19c426584b5c3b5f4380d3a2c0f0d91f70
SHA512 5c6c848b5af0ca49a42e18320db4124d45855f0ba63d0ff1880b7dc0a3827f44f0d0efc131988e3b9dae343c61b74bb763b08c882a60f59c914dadfa9f630c3c
SSDEEP 3072:Js+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+g2:Js+hFD+7t56OD9ZfSAppr2
TLSH
T18CD312326A95D8BBCAFD6541F157A300DE62ACED41DE3A09844A4F8ED09FC4D0763A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 3c33b2bfb9237bba169ac55491feb617a887638d0d79d9b802b2d6492c34795d
MD5 35aea0aeb7770f42ebba7b3580cb5f22
SHA1 259986d82f1ffbe73caf01915d95174094691850
SHA512 4b5cac7a965a9aa9e5a07d60042e833231314762cb3460f8e7d3e2e1567fb45582c4fc0618cbb634bd6fc63eb7874ea643a118351342c475af49ea41686b0885
SSDEEP 3072:Ss+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+g2:Ss+hFD+7t56OD9ZfSAppr2
TLSH
T1BFD312326A95D8BBCAFD6541F157A300DE62ACED41DE3A09844A5F8ED09FC4D0763A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download