4a3d56704fbecdd21681fdfe0d0f801414f3e35fe9e940bd23d899ddabfa4da2

Analysis

user interaction
yes
max time kernel
360s
max time network
362s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
02/10/2026, 21:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
alcatel-7750.gns3a
Size 2KB
Sample261002-1vdfjstfka
SHA256 4a3d56704fbecdd21681fdfe0d0f801414f3e35fe9e940bd23d899ddabfa4da2
MD5 4ed7f1e581c12efd4ae48c9ec7f16ef7
SHA1 dca15c06ba28abc433b2106d9a312fe1f8adfb7a
SHA512 fe393182ae1eeddd129ede7b83fee883dd2e12da0f845046568ac64b0ce654265f2862aa76cbe8596396958e54acf6da400d011f0271e81445abc419a981aa8a
TLSH
T1B151CB76CE654CB34A8251983CBB828AB62051876E447C887B9C82CC8F4DD7F267D25E
MD5 SHA1 SHA512 TLSH

Score

3^/10

adware discovery execution spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
3428	cmd.exe

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2340	chrome.exe
4056	chrome.exe
1524	chrome.exe

Checks SCSI registry key(s) 3 TTPs 3 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	taskmgr.exe

Checks processor information in registry 2 TTPs 8 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	taskmgr.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies Internet Explorer settings 1 TTPs 2 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2584227348-426884507-1572084426-1000\Software\Microsoft\Internet Explorer\Toolbar	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2584227348-426884507-1572084426-1000\SOFTWARE\Microsoft\Internet Explorer\Toolbar\Locked = "1"	explorer.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27\52C64B7E\@%SystemRoot%\system32\hnetcfgclient.dll,-201 = "HNetCfg Client"	svchost.exe

Modifies registry class 13 IoCs

description	ioc	Process
Set value (data)	\REGISTRY\USER\S-1-5-21-2584227348-426884507-1572084426-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-2584227348-426884507-1572084426-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-2584227348-426884507-1572084426-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-2584227348-426884507-1572084426-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2584227348-426884507-1572084426-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2584227348-426884507-1572084426-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-2584227348-426884507-1572084426-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2584227348-426884507-1572084426-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-2584227348-426884507-1572084426-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2584227348-426884507-1572084426-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2584227348-426884507-1572084426-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2584227348-426884507-1572084426-1000_Classes\Local Settings	rundll32.exe
Key created	\REGISTRY\USER\S-1-5-21-2584227348-426884507-1572084426-1000_Classes\Local Settings	explorer.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
6036	explorer.exe

Suspicious behavior: EnumeratesProcesses 49 IoCs

pid	Process
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
5596	chrome.exe
5596	chrome.exe
3464	chrome.exe
3464	chrome.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
3948	chrome.exe
3948	chrome.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe
2712	taskmgr.exe

Suspicious behavior: LoadsDriver 6 IoCs

pid	Process
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
672	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 22 IoCs

pid	Process
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3948	chrome.exe
3948	chrome.exe
3948	chrome.exe
3948	chrome.exe
3948	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe
Token: SeShutdownPrivilege	1048	chrome.exe
Token: SeCreatePagefilePrivilege	1048	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
1048	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe
3464	chrome.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
6120	OpenWith.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1048 wrote to memory of 5176	1048	chrome.exe	92
PID 1048 wrote to memory of 6132	1048	chrome.exe	93
PID 1048 wrote to memory of 6132	1048	chrome.exe	93
PID 1048 wrote to memory of 2340	1048	chrome.exe	94
PID 1048 wrote to memory of 560	1048	chrome.exe	95
PID 1048 wrote to memory of 560	1048	chrome.exe	95
PID 1048 wrote to memory of 4524	1048	chrome.exe	97
PID 1048 wrote to memory of 3856	1048	chrome.exe	98
PID 1048 wrote to memory of 4524	1048	chrome.exe	97
PID 1048 wrote to memory of 3856	1048	chrome.exe	98
PID 1048 wrote to memory of 3116	1048	chrome.exe	100
PID 1048 wrote to memory of 3116	1048	chrome.exe	100
PID 1048 wrote to memory of 2436	1048	chrome.exe	101
PID 1048 wrote to memory of 2436	1048	chrome.exe	101
PID 1048 wrote to memory of 4044	1048	chrome.exe	102
PID 1048 wrote to memory of 988	1048	chrome.exe	106
PID 1048 wrote to memory of 988	1048	chrome.exe	106
PID 1048 wrote to memory of 5668	1048	chrome.exe	107
PID 1048 wrote to memory of 5668	1048	chrome.exe	107
PID 1048 wrote to memory of 4276	1048	chrome.exe	108
PID 1048 wrote to memory of 4276	1048	chrome.exe	108
PID 1048 wrote to memory of 6084	1048	chrome.exe	109
PID 1048 wrote to memory of 6084	1048	chrome.exe	109
PID 1048 wrote to memory of 5824	1048	chrome.exe	111
PID 1048 wrote to memory of 5824	1048	chrome.exe	111
PID 1048 wrote to memory of 1336	1048	chrome.exe	112
PID 1048 wrote to memory of 1336	1048	chrome.exe	112
PID 1048 wrote to memory of 3448	1048	chrome.exe	113
PID 1048 wrote to memory of 4444	1048	chrome.exe	114
PID 1048 wrote to memory of 2292	1048	chrome.exe	115
PID 1048 wrote to memory of 4484	1048	chrome.exe	116
PID 1048 wrote to memory of 4484	1048	chrome.exe	116
PID 1048 wrote to memory of 6036	1048	chrome.exe	117
PID 1048 wrote to memory of 6036	1048	chrome.exe	117
PID 1048 wrote to memory of 3428	1048	chrome.exe	118
PID 1048 wrote to memory of 3428	1048	chrome.exe	118
PID 1048 wrote to memory of 5596	1048	chrome.exe	119
PID 1048 wrote to memory of 2576	1048	chrome.exe	120
PID 1048 wrote to memory of 2576	1048	chrome.exe	120
PID 3464 wrote to memory of 5504	3464	chrome.exe	127
PID 3464 wrote to memory of 4056	3464	chrome.exe	128
PID 3464 wrote to memory of 4120	3464	chrome.exe	129
PID 3464 wrote to memory of 4120	3464	chrome.exe	129
PID 3464 wrote to memory of 3836	3464	chrome.exe	130
PID 3464 wrote to memory of 3836	3464	chrome.exe	130
PID 3464 wrote to memory of 1760	3464	chrome.exe	132
PID 3464 wrote to memory of 4164	3464	chrome.exe	133
PID 3464 wrote to memory of 1760	3464	chrome.exe	132
PID 3464 wrote to memory of 4164	3464	chrome.exe	133
PID 3464 wrote to memory of 5252	3464	chrome.exe	134
PID 3464 wrote to memory of 5252	3464	chrome.exe	134
PID 3464 wrote to memory of 420	3464	chrome.exe	135
PID 3464 wrote to memory of 2584	3464	chrome.exe	139
PID 3464 wrote to memory of 2584	3464	chrome.exe	139
PID 5092 wrote to memory of 5016	5092	control.exe	149
PID 3948 wrote to memory of 4132	3948	chrome.exe	157
PID 3948 wrote to memory of 1524	3948	chrome.exe	158
PID 3948 wrote to memory of 4112	3948	chrome.exe	159
PID 3948 wrote to memory of 4112	3948	chrome.exe	159
PID 3948 wrote to memory of 1776	3948	chrome.exe	160
PID 3948 wrote to memory of 1776	3948	chrome.exe	160
PID 3948 wrote to memory of 3748	3948	chrome.exe	162
PID 3948 wrote to memory of 3748	3948	chrome.exe	162
PID 3948 wrote to memory of 4020	3948	chrome.exe	163

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\alcatel-7750.gns3a
1⤵
- Executes a command shell one-liner
- Modifies registry class
PID:3428

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:6120

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x7ffcfae3c728,0x7ffcfae3c734,0x7ffcfae3c740
  2⤵
  PID:5176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1760,i,1193969692684331400,12909537789340800500,262144 --field-trial-handle=2020,i,10946217086550221195,14726787634931222235,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2016 /prefetch:2
  2⤵
  PID:6132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1688,i,13792262934674670870,12375152913549171620,524288 --field-trial-handle=2020,i,10946217086550221195,14726787634931222235,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2276 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,2440118816159204816,212805397136820741,524288 --field-trial-handle=2020,i,10946217086550221195,14726787634931222235,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2584 /prefetch:8
  2⤵
  PID:560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3272,i,1309079991751983958,5376760148943129097,2097152 --field-trial-handle=2020,i,10946217086550221195,14726787634931222235,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:4524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3164,i,14831090576293938689,5794756499626722599,2097152 --field-trial-handle=2020,i,10946217086550221195,14726787634931222235,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:3856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4480,i,507291154170313475,2675271059204620041,2097152 --field-trial-handle=2020,i,10946217086550221195,14726787634931222235,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4440 /prefetch:2
  2⤵
  PID:3116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4492,i,5467373637192294619,3269099942574063609,2097152 --field-trial-handle=2020,i,10946217086550221195,14726787634931222235,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4736 /prefetch:1
  2⤵
  PID:2436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5420,i,4193071554339078720,8922039816373238086,524288 --field-trial-handle=2020,i,10946217086550221195,14726787634931222235,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5428 /prefetch:8
  2⤵
  PID:4044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5836,i,2763611105625711022,6124602897438359347,2097152 --field-trial-handle=2020,i,10946217086550221195,14726787634931222235,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5856 /prefetch:1
  2⤵
  PID:988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4868,i,3826491599664857150,10184182774334937370,2097152 --field-trial-handle=2020,i,10946217086550221195,14726787634931222235,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5756 /prefetch:1
  2⤵
  PID:5668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4604,i,10876528552798993004,3638479846706337453,2097152 --field-trial-handle=2020,i,10946217086550221195,14726787634931222235,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:4276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5904,i,3057051349792746222,3824115479215807546,2097152 --field-trial-handle=2020,i,10946217086550221195,14726787634931222235,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5936 /prefetch:1
  2⤵
  PID:6084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4764,i,16967168867020321310,7919809616692882661,2097152 --field-trial-handle=2020,i,10946217086550221195,14726787634931222235,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:5824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=3304,i,16435750282228341203,18286738239478162682,2097152 --field-trial-handle=2020,i,10946217086550221195,14726787634931222235,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5920 /prefetch:1
  2⤵
  PID:1336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5836,i,12286605554765525456,16888809164804690232,524288 --field-trial-handle=2020,i,10946217086550221195,14726787634931222235,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5724 /prefetch:8
  2⤵
  PID:3448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4492,i,4344356965665273357,11137666234192509473,524288 --field-trial-handle=2020,i,10946217086550221195,14726787634931222235,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:4444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5720,i,1343861435243205473,9599703729955375590,524288 --field-trial-handle=2020,i,10946217086550221195,14726787634931222235,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:2292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5952,i,2918873038111447649,6434618342564286885,2097152 --field-trial-handle=2020,i,10946217086550221195,14726787634931222235,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5420 /prefetch:1
  2⤵
  PID:4484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5700,i,17453350459985212503,2191801201244046585,2097152 --field-trial-handle=2020,i,10946217086550221195,14726787634931222235,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5820 /prefetch:1
  2⤵
  PID:6036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5464,i,4821347997872648375,9916485879402503892,2097152 --field-trial-handle=2020,i,10946217086550221195,14726787634931222235,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3428 /prefetch:1
  2⤵
  PID:3428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3988,i,7743000894382835404,12507278010904009836,262144 --field-trial-handle=2020,i,10946217086550221195,14726787634931222235,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6108 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5816,i,1884503405594763491,14854709455521603787,524288 --field-trial-handle=2020,i,10946217086550221195,14726787634931222235,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6088 /prefetch:8
  2⤵
  PID:2576

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4296

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3316

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x21c,0x220,0x224,0x1f8,0x228,0x7ffcfae3c728,0x7ffcfae3c734,0x7ffcfae3c740
  2⤵
  PID:5504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2152,i,16739753755730377936,13713213927322964307,524288 --field-trial-handle=2040,i,10074502962559819306,6311892969944713966,262144 --variations-seed-version=20261002-010028.936000-production --mojo-platform-channel-handle=2164 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1752,i,495602043836434423,14027879362261645260,262144 --field-trial-handle=2040,i,10074502962559819306,6311892969944713966,262144 --variations-seed-version=20261002-010028.936000-production --mojo-platform-channel-handle=2036 /prefetch:2
  2⤵
  PID:4120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2436,i,8934834034375737310,8441606055659727416,524288 --field-trial-handle=2040,i,10074502962559819306,6311892969944713966,262144 --variations-seed-version=20261002-010028.936000-production --mojo-platform-channel-handle=2408 /prefetch:8
  2⤵
  PID:3836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3252,i,5512937393753939510,10250047935716622473,2097152 --field-trial-handle=2040,i,10074502962559819306,6311892969944713966,262144 --variations-seed-version=20261002-010028.936000-production --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:1760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3256,i,1356731976820106466,1092134415819498865,2097152 --field-trial-handle=2040,i,10074502962559819306,6311892969944713966,262144 --variations-seed-version=20261002-010028.936000-production --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:4164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4512,i,621741469335378039,4179538556947558675,2097152 --field-trial-handle=2040,i,10074502962559819306,6311892969944713966,262144 --variations-seed-version=20261002-010028.936000-production --mojo-platform-channel-handle=4588 /prefetch:1
  2⤵
  PID:5252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5268,i,13041698412031464247,18001707367907273553,524288 --field-trial-handle=2040,i,10074502962559819306,6311892969944713966,262144 --variations-seed-version=20261002-010028.936000-production --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5552,i,11305204272109960451,13406530984187468349,2097152 --field-trial-handle=2040,i,10074502962559819306,6311892969944713966,262144 --variations-seed-version=20261002-010028.936000-production --mojo-platform-channel-handle=5528 /prefetch:1
  2⤵
  PID:2584

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5508

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3488

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /4
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
PID:2712

C:\Windows\System32\control.exe
"C:\Windows\System32\control.exe" "C:\Windows\System32\ncpa.cpl",
1⤵
- Suspicious use of WriteProcessMemory
PID:5092
- C:\Windows\system32\rundll32.exe
  "C:\Windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL "C:\Windows\System32\ncpa.cpl",
  2⤵
  - Modifies registry class
  PID:5016

C:\Windows\explorer.exe
C:\Windows\explorer.exe /factory,{5BD95610-9434-43C2-886C-57852CC8A120} -Embedding
1⤵
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious behavior: AddClipboardFormatListener
PID:6036

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s Netman
1⤵
- Modifies data under HKEY_USERS
PID:2660

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of WriteProcessMemory
PID:3948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x21c,0x220,0x224,0x1f8,0x228,0x7ffcfae3c728,0x7ffcfae3c734,0x7ffcfae3c740
  2⤵
  PID:4132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1960,i,3500229454231268752,10167237534837519027,524288 --field-trial-handle=2060,i,2691791487736725478,1983880054595604278,262144 --variations-seed-version=20261002-010028.936000-production --mojo-platform-channel-handle=2092 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1736,i,5607036862930095497,8158372842775820909,262144 --field-trial-handle=2060,i,2691791487736725478,1983880054595604278,262144 --variations-seed-version=20261002-010028.936000-production --mojo-platform-channel-handle=2052 /prefetch:2
  2⤵
  PID:4112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2340,i,11341148068788495485,5223524798442793225,524288 --field-trial-handle=2060,i,2691791487736725478,1983880054595604278,262144 --variations-seed-version=20261002-010028.936000-production --mojo-platform-channel-handle=2528 /prefetch:8
  2⤵
  PID:1776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3188,i,5083498604197785687,6172462930370137012,2097152 --field-trial-handle=2060,i,2691791487736725478,1983880054595604278,262144 --variations-seed-version=20261002-010028.936000-production --mojo-platform-channel-handle=3208 /prefetch:1
  2⤵
  PID:3748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3192,i,979340072805853638,3143013107299531836,2097152 --field-trial-handle=2060,i,2691791487736725478,1983880054595604278,262144 --variations-seed-version=20261002-010028.936000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4492,i,564320643387484191,7152240994241117830,2097152 --field-trial-handle=2060,i,2691791487736725478,1983880054595604278,262144 --variations-seed-version=20261002-010028.936000-production --mojo-platform-channel-handle=4512 /prefetch:1
  2⤵
  PID:5636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5244,i,8336582896090596313,9422809773458885826,524288 --field-trial-handle=2060,i,2691791487736725478,1983880054595604278,262144 --variations-seed-version=20261002-010028.936000-production --mojo-platform-channel-handle=5248 /prefetch:8
  2⤵
  PID:2372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5496,i,6725187530562906873,11922336572051252189,2097152 --field-trial-handle=2060,i,2691791487736725478,1983880054595604278,262144 --variations-seed-version=20261002-010028.936000-production --mojo-platform-channel-handle=5244 /prefetch:1
  2⤵
  PID:4044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4540,i,532100874619440113,12725566963728046727,2097152 --field-trial-handle=2060,i,2691791487736725478,1983880054595604278,262144 --variations-seed-version=20261002-010028.936000-production --mojo-platform-channel-handle=5852 /prefetch:1
  2⤵
  PID:3928

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4760

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4532

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1621d5a3-786e-4f55-a76b-463627728411.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\1621d5a3-786e-4f55-a76b-463627728411.tmp
Size 265KB
SHA256 de1e2ec736d842a91c68add1eac35da29afca4af8cad5b9a7b8170302803a3d7
MD5 653efd44839a9c1f3ab7a42bab057d8e
SHA1 ea23de94f4c93d75d8615cc5b293a841b9b8210c
SHA512 2f2e86f5c804910c2cb6b137e2aebe1a66bf8fc7cd968572b7c5e63471fdeaf692eb5114d83e7f3dacfbbc242c6d8ee4e20a43fcbb5ab285b011efc59e4568e1
SSDEEP 6144:UIQEqZU7Cneyiyho4eKFa6qR87Ptbmf1K49XLWbEPi4NTKlLza:9q+/hyhIubofM49s4NTK9u
TLSH
T17E4412603D98FC7499AEEA2250921C16DE74DD4E967F37E66CDDAF880642ADC4B01C33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

73a7cb5b-518d-4e1c-ac46-6a2b2dcf9231.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\73a7cb5b-518d-4e1c-ac46-6a2b2dcf9231.tmp
Size 131KB
SHA256 b38fcf1992ad1034c3c08bd66c8bc22195fee66e8b751f9bbe86804858b5abef
MD5 6dd989d9c46be13ce56cc70e0cfb1350
SHA1 9d2d93c1165ba2fe5a847889ca64a6a1385c7a07
SHA512 0a6dc6b3de1adc0a5db58c1c0ce14c639884c314fdf809d7c3847c7ba5e5eab720c113a89919a287b8ce82e98226f48d3e59c4294acea3a38894342e109f091f
SSDEEP 3072:AnIvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzS:AvPtbmf1K49XLWbEPi4NTKlLzS
TLSH
T167D302613D01BCB8E9EEDB61B1901A15EAF8D90B96397BE61CDE3F4805A36D9C304C53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

87cabd70-b6ae-4780-90b7-0ae522516029.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\87cabd70-b6ae-4780-90b7-0ae522516029.tmp
Size 266KB
SHA256 47f32a125b6da1e80a073b0d6f2c90ef025a7f11cd6756f8ecab4d29fd1d5419
MD5 383648287ac429b8f5c8475e2d9ea0da
SHA1 8808b3b5439fc9751b033e3938acf23b712a1151
SHA512 47d03505fe4c99bdeaa820c6d99163568d65719d63a3e1aa28ca874c9432a822a2a318b9d9ded99788541cb709c29a24dc1651cdc684bd3a44d7524370f4c995
SSDEEP 6144:DWtEqZU7Cneyiyho4eKFa6qR87Ptbmf1K49XLWbEPi4NTKlLza:Bq+/hyhIubofM49s4NTK9u
TLSH
T16C4412713C98FC7499AEEA6250921C129E74D84F8B7F37E66CD9AF8806466DC4F05C32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\CrashpadMetrics-active.pma
Size 1024KB
SHA256 ae1bddb9e2cc97b0c9cd78ef3cd17553be6e5204677bd67e0b8f7fa27007f189
MD5 b0366599d64b0fc1adb2a712dcd02ee1
SHA1 b7a1c09ccd2846664cab5f76bd80b8e9f107acb0
SHA512 d7de6d48285018f8b709c81ca01688126db7893ce9f48829524ee3122aa6f2200c7f78186b5a558d0b1ecf8157ee78a20064b63b45ab89f7aa0835b8409435d0
SSDEEP 12:bHCsEXhVMMBKEKSCemJKlkQyYVhYJ0I+pPK6BsyW1inP6:biPROMMBS+MkIYWIE1BtXP
TLSH
T117252786A30815EFC54288B589AE03602374F9E55F52079B2E2DAA1F2E271D80F45164
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 b4437d74885445ae5eb5a38de666b1d447990fc03fe5c3390f58a567b0cae36c
MD5 5c79a78859961aa6fe501d41bb13e4bf
SHA1 4acb477b4e56ef8f86b0cabdcf49e978ee97c2c0
SHA512 c9850d604fbce64082912875987f5eaa7043b5f9f2e6bead6c0ac61541c8a8eca6697dbea6337b6fa9e264eee0c0135451ae9f6273c1d843abac2eda2c03e7ef
MD5 SHA1 SHA512

Submit Download

0f990c10-04ca-42ba-819f-cd878f36848e.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\0f990c10-04ca-42ba-819f-cd878f36848e.tmp
Size 12KB
SHA256 ef3a9309c546fb6ed421ca62e1b76478f25757c8bcda411ce985ead4f2288dab
MD5 b7b92f5d019255b9b6abd5f37ec8d664
SHA1 2a05e703ec2627c50fdfae5ab5831cdbfc389fb2
SHA512 7250b20f1127016c0a29f547f78838bf9c7d6aef71d66b8b36024dd2ac6571e5480466610d0afc9fbceed76147449989bcb19e103fd40842bec90983d5c4a000
SSDEEP 192:WRTrostWBWv7mHhAPRp2O9FHsb+WNnAv0BX2X6YpyOYkw72jVyIsnAUgtaJ:WRTrHGiKH8XJnwU0x2KYMOYb2F8
TLSH
T18F42B62EAD10757B9CEBC21AF9627B97D3F9102131902F84E6FD892C24D75CC622B51B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

591fe0c7-49a2-43ea-afc0-4ae1a30af833.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\591fe0c7-49a2-43ea-afc0-4ae1a30af833.tmp
Size 15KB
SHA256 9cdb6ed2a99dba2630c8c14f53f75072389c932bde6e69ed6335f6c19ec3b2f4
MD5 e74deefbd73f64abdbe6d972ad70ca0e
SHA1 0111ffca2583df3c7a3c6102228b0699d4326ef6
SHA512 b80cb04e457ab0b090c7c8e76a001ca8a04737b89aeae61149b13e92a745933139fc838be845eaf9122b36c9ece520117162254439c837844b97548f7b91c1b3
SSDEEP 384:KRJmzrHUrKH8X6nrKEDj/2L2KYMOYb2ne:QmzrHUGHHnr6L2Be
TLSH
T1D962B71EA860257B4CEBC21AF951B7ABD3F9112261901E88F7FC8D2C20D76CC7227957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5b4f3d20-cf32-4015-a07b-099e81a6b080.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\5b4f3d20-cf32-4015-a07b-099e81a6b080.tmp
Size 649B
SHA256 540359b60d8f9e30a2224126ff4474c6b3b7f616c943d119f10dbc26e66efb3c
MD5 20acfd567118b98e0f33158b41cdf5cc
SHA1 8ed33facc349ce587c1f1d5d2e62742a62c1f66e
SHA512 1ea78eb22c528b5b9b6cc6de02a44b54d0f4ded1a1a9f22398b67d46ee677192cf00849dc32c9395dcf7aa19f26c8716520808abdf2c73252fe79f54e461718c
TLSH
T169F0F9B9C821FC7B08FD0B1920941B8AEB5013272651894B363D810C5FB567F4685C2C
MD5 SHA1 SHA512 TLSH

Submit Download

6b6cff83-55a8-4531-b6aa-e7863d8fffd3.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\6b6cff83-55a8-4531-b6aa-e7863d8fffd3.tmp
Size 12KB
SHA256 ee55db88520c26d4442b100acdc7c740e1bb46e938d9bb966d20a09391e497b4
MD5 a16913fdbf764940f418f26833852f78
SHA1 54cc43f3da900dac80ce01d3cfc86dfc1d4ba407
SHA512 6655022701971e3fadd774b869a6a5803f3b6ecd9963eebfe9cda2b71a7134070d1d6c4f48d5387820f3cb4e15553ce77e323c2f26c61cacb6b04f0308f55c0f
SSDEEP 192:WR6rostWBWv7mHhAPRp2x/9FHYNyb+WNnAvzlC22X2X6YpyOYkw72jVyIsnAUgtK:WR6rHGiKH8XenrUE242KYMOYb2F8
TLSH
T1EB42B62EAD20757B9CEBC21AF9627B57D3F9102121941F84E6FD892C20D76CC622B51B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7968f613-f94e-458c-b0fa-2010f1ce0d3d.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\7968f613-f94e-458c-b0fa-2010f1ce0d3d.tmp
Size 17KB
SHA256 a01f3ad6b8f1a4a29c3e78d8a2edc9504a0b3bf6cd1cc2b244c3c3f9919648a4
MD5 056ef735e9510bf6287c81ff7e9587c7
SHA1 935b7a802760b8857034b2973104408d2d39ee56
SHA512 c3ebabe8c58d2375438e11fae62c6c0991de3bbbf03ab286a9941745971d41660ca5eb566f24445fb92be1add72d801602414f043279d8141e6ec642ceb7455b
SSDEEP 384:ywjmJ7KxkXqKf/pUZNCgVLH2HfgslmW7pLuLceSwxXODmh+ErU31qHGIyPjXlKGd:y0mJ7KxkXqKf/pUZNCgVLH2HfgsIW7p3
TLSH
T18772096778489A7B4F94C6CCDC267E4FACB5024B65E9886483FA5C2903D1BCF014A2F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7ddfcbb8-a69a-40d6-9c2c-00832baa819b.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\7ddfcbb8-a69a-40d6-9c2c-00832baa819b.tmp
Size 15KB
SHA256 4da14c0816745586d8bedf009f7fa72be7f358ce5ccbcbef1c17fb6bf230e508
MD5 68d3d04a541275139bb9e960bf0280e0
SHA1 907a8fd31b9587516a1f1119cf4e43eef05e49e0
SHA512 9d2314b47e021ad66b0302f48a2f42a40645113268a60d849366de0d8eea00b7fb02932be81d42ed7ab1105f3618c9cde23cfd676ce922aee03f0d890a5b2774
SSDEEP 384:KRqmzrHUrKH8X6nrGEDj/2Y2KYMOYb28e:XmzrHUGHHnreY2B9
TLSH
T18462C91EA860257B4CEBC21AF951B76BD3F9212261905E88F7FC8D2C20D76CD7217947
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

84877655-16e9-487c-9588-a045d2eb433f.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\84877655-16e9-487c-9588-a045d2eb433f.tmp
Size 13KB
SHA256 d731df22e3da2d3c4157dd391cc297b1b9df3306f42fc32fd5e0ac1e7c20d7ea
MD5 3828ad5db5b10c392f0e18a054c806bd
SHA1 9c233970eb4e5ad4df253f5d7b2191e17ccddad3
SHA512 e56ca088024edc6d0ff517ce1ae485c535353f4782cf8da4f957a53341d841ce80c6af03a7cb2d3eec6b3b5a7292c7514b90b2eaa8762817c33e7d7998cea5a9
SSDEEP 192:SR0rostWfWv7mHMAPRp2xAi79FHYNyb+WNnhPalCmN4nIHM2lX2X6YpyOYkw7sjN:SR0rHwiKHtX+nrh5D72F2KYMOYbsge
TLSH
T1B852B62EA920757B5CEBC21AF956776BD2F9102221901F84F6FD892C20E76CC7227917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8bcfae90-a4c0-49d0-8d29-91835d1a72ce.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\8bcfae90-a4c0-49d0-8d29-91835d1a72ce.tmp
Size 14KB
SHA256 9b4a3f87123ad45cb88e4839f72bc94d9adb28712538a11abfd63efac218a440
MD5 e224dfdc7a8f40ef7f4e0dda42be68aa
SHA1 3dc3ed69bd0c57bdc832235b3c20ff5c89447e2e
SHA512 151b854a60e2a122bc34684573b401e2c124e8ab37409a71fcdcfac077fd7e23d9b3397850a6a6b29dc2f211f85ea11475868ee419205912c41b7fca75be8b9f
SSDEEP 192:SR0rostWzFv7mHMZPRp9xAW79FHYNyb+WNNSChhPalCmNpuwHM2EX2X6YpyOYkw/:SR0rHU1KH+Xfnrv5Dj2e2KYMOYb2re
TLSH
T1AE62B81EAC60357B5CEBC21AF9557BA7D2F9202221901E84F6FC8D2C20D76CD7227957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

92632d4c-9ccb-4ec0-a3d4-3ec18da41c23.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\92632d4c-9ccb-4ec0-a3d4-3ec18da41c23.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

9de49365-855b-4d73-8aa5-48461ce87ccc.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\9de49365-855b-4d73-8aa5-48461ce87ccc.tmp
Size 13KB
SHA256 d0e80a947b6e763bda6a96378c73122e61e471ec80d196c7826c155a390265d0
MD5 4da00b68c86642dcb6d2d3f3d822c9e4
SHA1 1cb4cded38fa21ec6536c25520a54167e4bad40e
SHA512 0cd13f8dd56bbf2bc051d77b513c78b2e71fc802c918425ef9df60908a109c93cba9f43a8302cf4cb7425339ed09e7f080101404264d46edaeff6c51c6a768fa
SSDEEP 192:SR0rostWfHv7mHMZPRp9xAi79FHYNyb+WNnhPalCmN4nIHM28X2X6YpyOYkw72jN:SR0rHwPKH+Xznrh5D72m2KYMOYb2ge
TLSH
T1DA52C62EAC20797B5CEBC21AF9557B67D2F9102221901F84F7FD892C20E76CC6227957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005
Size 73KB
SHA256 f3da3acb05ffefdc9ae669d4d171476ad2d7f4aefefa8fa9e0245a7a3b5ac2dd
MD5 9a896a1d99d04ee0f3fd1b7983fdf1b7
SHA1 a8e793d6fcdf858eceb9f42a9f75665d6a92abc0
SHA512 227c7027b7c944a7472f41c28056bad40b0d3116a3ea88fd350cd9f3c1a44f36d475ae8fee82b558619be48bf78982da14e87617a7a4e7a2241b94ab8272ef8a
SSDEEP 1536:O77BHwf0DFsAQtr1cHixbkJJqPrfkqrFDMllDv4nhz7y4vj:O779wTAwr1wGYJJkfDMXAnhny4b
TLSH
T1887302F82C92C0851875371B2FCEEC37990BBCE11295CE64368DF065D6B7A1B8E16D68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 168B
SHA256 f8d713d1d21a6e81922b782f0ce28344aaacb7b4249bc9b9bef9a48927762223
MD5 f3e10d4f521a67688f5b31282833bd79
SHA1 01f8059ea3d81b616a9902ad1b24d933984000a9
SHA512 d38c3324dc0fe502789bf32a861647d06ac108a377d5e2043145f98756e0dadb677b67d1c89fc4f2e290d08a3724da8fcbf9a965d35584304b294573cd46dc4e
TLSH
T108C09B9CD4D0A485CFD062F83C907C653F35B5399F151303449518B3BE4F7E15549211
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 216B
SHA256 99069538d063e9f45000f52f944d500778018b3701dc55dade863563b4bcb4c0
MD5 1daea4b829010b9b16a3781e63ab965e
SHA1 bf8d8f2e9e360c5494223120fd5b7ffd1e8e5771
SHA512 26cbe3889c43eab5a0d3bba4a86c9fe0f9ae11eb3b76a125f8e199a69616185c365eb812c7fc0720f1889465c6ee3da7e9fd4af89d34b77351b375387db1aee1
TLSH
T192D01294D445624DC7C057B03891B8D47E34B0B9EE653755489414757D593E0350A051
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 240B
SHA256 e16ac55726813dc674078b9347264cce3d10e61439211fe3be7b238d986cf02d
MD5 38d120ac108d2e88986651d15b4dfcdd
SHA1 9301cfd33a61ed663938d8680bafb121c2996344
SHA512 fa0152ccfce9a277f6ebbc4b3fd6c553d1bd54c04c92c78a95d57235034fa07460f8b178967498a6ac784c9a97a0cd2b19dd76376fb00855df505f9b14a2aa3e
TLSH
T1D0D0228CD012B088CBC042B03880B0CC7F3070748E642B4544900CB2BC3A3E03A05061
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 512007de39ccd7967f510d098a54b65b2d474ca51cafb6a109fbe68be4000877
MD5 4a50b9a00ce3e023532fe88145c1cee6
SHA1 3493775822661e03722754a47908d08945c76111
SHA512 d1d7ace06959c82abea00c1aae8c9e53bd796cb84dfb9120880a501ffa33c6f9e90c0731b862d7e4ccd5f280d13b16097ba5b131ced59406f70b864f75fb8914
SSDEEP 3:MsEllllkEthXllkl2zELDK/:/M/xT02z
TLSH
T1D2440454FFD00405C54070745013D3501770F4300511574335D15C33FFC55410C01000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
Size 317B
SHA256 007593f4a20b7e4d33baa93af6381a43b9a0b1cc81e8b0b4bae7bdd9f8459f39
MD5 49ee46756356b5ab76eec20db48d4d83
SHA1 4a9d0e7be2d0e09dc562967dd5b83a0e4cd8f939
SHA512 b8185ed9f77ec50a18138bc4e951a8958f96515533bd8936d8ad937b2e1df2fd292ad859d5c44b6eba80ec3e4e0fc14805626f57d211ac73c8de5cb42c19941d
TLSH
T1DAE086996899C23E726C84A79676630DCFD4B405B6E5390F178EE8402397D08A3D43B0
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Favicons
Size 24KB
SHA256 e0613cde9b3c3dd8518339e8bcfa656b179507c073fc0f8b6a69457fb47a9268
MD5 4006c6ac958751d06d2580406a282cd3
SHA1 f2bb562abc295d2a1911ed7ef56d330ae6c161c2
SHA512 20b660b54267150b5f93a6b21cddced34f1f5438578f33a00ef447c96fa2cf0dd91a3d169a9c9fb7017a23c30c4529659372fcc5e7f402ee5d0679682d2f0c03
SSDEEP 96:neBCP7Giy88Qg/C0OdzI+yx+j32JLmJp1:ncJiy88Q4C00M+L21U1
TLSH
T1BCB2FA471E743423D7800E79AE1E5275CDBBD13D6FEBCC147828442119F4662D4258AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1
Size 264KB
SHA256 faf2f3ded978c3f309fd224bb3c15b02d525aeb3e7b3dbb4a837db7e5562b934
MD5 91305c99782331c1c6abc4d3c5bd5a14
SHA1 6701346057982181519f40aebd961c120baf3e2e
SHA512 ee84af6e54f8df8fca0e4f25b945be6da7fe2e49711c4c06a8aea322da2ec8ad19eda6f82dcb48fe27692ed0b0c5c4c8787e44a4bff53975f38420714ea3b1ca
SSDEEP 3:MsEllllkEthXllkl2zELAdV:/M/xT02zndV
TLSH
T1114404047FD00405C54050345033D3504770F4700511D7C3355554337CC5F430C10000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History
Size 160KB
SHA256 daad356fbe848941e17d348cd1a29f1e5361535cc9a15163e30054db827de2b3
MD5 bad40d72c4655dc2d51c804dd2c2df93
SHA1 9fcbdf0934152d89c27263bb8a02aaeecad8e995
SHA512 3c83c23d408685b2f528b3cee6ff2aa26697cad757121c80965cb62ed1c693927b7287436189f4072b6d4af12563aa93e566f86b5ac7bce3e90de3005b566feb
SSDEEP 96:AJpgbwh3QP0Abv5/uejzH+bF+UIYysX0fxQp97GEHt/DfLcLq2piRk/E0aM0fAlM:bUh0/tH+bF+UI3iWGVGWNkqp3xM05
TLSH
T139F3606E5F303201CEAE5236E8D654E7987EF07F875359C6686508B0CFE2756B01C8BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
Size 222B
SHA256 c20add0e9d2d8e932d39f6bf87cf68dc41af8264497a208b2518d6502c46ccea
MD5 1ce1f9305701967f1d8199b8c0f72620
SHA1 4a3eb9c29b799c265162e8c151e2d2959bb7f799
SHA512 fa9a05f529045c2bc1d10ad6df765635e4c1f77d582af00c71eecbc50c3ca2b236b76d52b6b44a7bef8f4c3d02d338e055358c0619d684231cbf9228515c8395
TLSH
T1E3D0A9A3201A446AFB890278F61C7AE9F263B13C0E9889A2C10C290023C0AB0A4119DA
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
Size 332B
SHA256 76dffec9d255437f8b0f6922bbeff272e076c511759fe9d268dc52ae54f6481e
MD5 d9a6b2d6dda4cd1162495fa7277dd252
SHA1 d8d9336da2a7d82ac1d21ad0fd82ae6467ce30ca
SHA512 1959d0e63db80ec3d8916479052fcddad0ad9d72dbddc68aedc2f4c40a88bf177c40e1ebb78eeb2483b0158fa4b7c5d8a9f5da50ed7f40d8427ff708408945d7
TLSH
T149E0DFE6249EC36E231C901F0227730CCFA0B409E6CA2A0A0B8AE585B48A108A3D07F1
MD5 SHA1 SHA512 TLSH

Submit Download

2b4ea94f-8c4b-4c8e-8aa1-35d21ffd47dd.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\2b4ea94f-8c4b-4c8e-8aa1-35d21ffd47dd.tmp
Size 523B
SHA256 16f340f24ed4108729250c790b23f7648b025cc6d3a9183a10e4dd0003af9a35
MD5 4775bb4b937dc0a5799adf71657619e9
SHA1 47000a2ae9f0edde3f2ed51102ef7edf740fede4
SHA512 985566477809df10319b12967019225a543ae2b6a98edf7c9c167a984b5b248dce6470a629463a746bcfeb6e4302abe66a0f925e096fd4386a837a1d82c610e3
TLSH
T1A6F0E9A7A7FD746710B945EB2D04B8095BBAA8350241A8E0CE9B826DB0815B72B16547
MD5 SHA1 SHA512 TLSH

Submit Download

3bb6e779-e0aa-4921-b838-8fc655776fb2.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\3bb6e779-e0aa-4921-b838-8fc655776fb2.tmp
Size 4KB
SHA256 09c5ece0e8689c01e8f9402edca7e955a9c6afda247079af15b68c239a86927b
MD5 3722951bb600f9893d7fd1bcdb589d3d
SHA1 98a71827a335c6e1b3a583d41151d4fd341317a4
SHA512 37a51eeb356ba2697debe00d454d1f9409a2184f0b0ec34cc089d42e3c28ba0c22f7bfad185f74add8a17b082c583c4c1533dc8be581eee29a8c4f14a07de03b
SSDEEP 48:YALlqpqEhSE0hRkbXkbxPkbqsoRsRXLsyfoKsHMgmzsPHnsXf4spvfsbosD/Ks9C:D+lmnkLk1kSa7oM0HehyLDkZk7kh
TLSH
T1BF91AEF3C7E8866D841156F49B14BE2FCE6A0918522C3C66C8D8AF4F93E2571E35174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5bc0929c-5d89-47ff-b4e1-a50c9d72d5ff.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\5bc0929c-5d89-47ff-b4e1-a50c9d72d5ff.tmp
Size 6KB
SHA256 8b099886dc49808c202a4e0c439b459eccfde4eec02853bd98eb25f461a77a41
MD5 258964384ef8fef3f19ddf175a27e855
SHA1 fa7f2e0b7191978d90713bbc47aa8b1e56b605b3
SHA512 cb0e3031d9adfb864444539bcc36a43ea53fcab7092286f6a16f7ec6f349400b0c81dc1ac333d3b4240a88e7ab5eee9d10324e513c56de8691c4ec2568372884
SSDEEP 192:D+lmnkLk1kbmpya7oMiEkPkfkGkAyTV/xGRZR:D+lmniAompya7/iE8kTkAyTV/xGRZR
TLSH
T1CFD1AEF3C7E9862DC81156F49B15BE1FCE6A0918432C3D26C8D8AE5FA3E2471E25164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

62799b12-21a7-435a-91cf-f0a0ace5f7d4.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\62799b12-21a7-435a-91cf-f0a0ace5f7d4.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

7dbd6df5-d2cc-4918-9514-3c4102f4f83c.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\7dbd6df5-d2cc-4918-9514-3c4102f4f83c.tmp
Size 519B
SHA256 ede3beb62e9e89cdaf55a674ac15aa8626e6d3c14998d0b6d5b66690862b94ee
MD5 7f2b5d6ae0263ea5277586c6298b8856
SHA1 e798302ff1ffa5b19f03932f796073fe9f5989cb
SHA512 f0f832f721034ce3885e7dba4e3921c490bf9d980e9a83b2ec9ba451010f04f90cd3fff678ad03bff0e0ad46275b52191e9ebe3e9caf49eba18273ce0735e312
TLSH
T150F059779B7D742750BD86BB1E04B8055AB5A4300240A8F4DF9B422DA0850B72F1240B
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 78ad6c2ac8a6eccf37e4e48bf85c91955984f7ef459ce6e9c73589fb5b991f74
MD5 f8fcaa4892676fa2398b4e43281a3eea
SHA1 66d43f020dca9a72225852555ff649c0eca95fe7
SHA512 008fecdcffc7129790488ae13a1be9d8918c3d336e7340d8e487b14bdc8ecc54f44bf1def4c48cf18c497fc42838ced7d4d3538fc281a8d4978ba553a1e48794
SSDEEP 48:T2/IopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSBiN:i/IEumQv8m1ccnvS6+dcojdJm/eX
TLSH
T138F2F2FF1715B500D0D495B1E2805BCEFD6A002C4BA6FFD09A9849F3B7C61A3B03865A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3e79c8c-0f2e-4e51-aded-8d25dd0145a7.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\d3e79c8c-0f2e-4e51-aded-8d25dd0145a7.tmp
Size 4KB
SHA256 341c26e5344605fa23693242f09981f07ec12c1929d500bbfb390af6ab907f0b
MD5 0fa63483f6b5178fde4bee6975921c47
SHA1 211425aae214c35be3ed838e52ad5f8b9cb51032
SHA512 37b501abcc84d1914b3e885efcf6860f2ebf0ca40a9084bb2cf19977d92d1b7aa5f8b28ce37e3efb6ee60e8bb4ec517c2fa43909c136a41b61105d4495e11033
SSDEEP 48:YALlqpqEhSE0hRkbXkbxPkbqsoRsRXLsyfoKsHMgmgnsXf4spvfsbosD/Ks9kkzn:D+lmnkLk1kSa7oMiehyLDkPksgmkh
TLSH
T12E91AEF3C7E8866D841156F49B14BE2FCE690918432C3C66C8D8AF4F93E2571E25174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\000003.log
Size 4KB
SHA256 2fc471af937550aac5b2b5771a04d5abe003a5cc59f5dacdf2a8322d3da26d67
MD5 fbca1f5985c86e04a88be2f0461060ae
SHA1 76d673e3af87aa2dad9c2b8acf63a5a22a3eadc2
SHA512 587fbf16ee198ee4be1d3ab4758058e2059870c11af235bbcab70ff7151d4972a68655e42a71633e941de5c828f045a1892a3287b7952ede84e661c5c44cc01b
SSDEEP 96:F1mKPM7RwcnDh1JC8BLXbXFXKXTtFXSXTjv6VXFXKXTwxhXsXb0XbXNXKXTYKuZw:F13UamDhqmL1ajTCjjiV1aj28gL9ajYy
TLSH
T119A18B6EB80A184EE4A94937CD74571B6FADCF1C27FE3767A9DE8A0405B066701086F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG
Size 336B
SHA256 62069643f1592eff11010074ae5c1032087681dc19c246384b7f9c7959b30ea7
MD5 2a2251801bf5c3c8369daa42843346ed
SHA1 3834c674637b1f3ad29b1c2a4edd6260f3133231
SHA512 49689f4b3b1f6c274f93d7b0d91b03f7d2cc5f492200f8d0eed7c54b97f867989078d2f5e7a9dda9b15e791aeb0822df6df19f38610471af966524be5f24c953
TLSH
T18BE0DFA525C8C63F326980470226930DCFE4F427E3C928061F86E68411CA80872D12B0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 120B
SHA256 d899c44085905df4527b5159b37329495cf0fc5b7013b451ed86bb9310cdd2ab
MD5 0a0f086ea769030c40d204d36ad4308c
SHA1 7c20ab1de7be94f1aebdfd495a5028d2e3014395
SHA512 f939a732ee7c8f21fd015129470ed4e5ccd9bd34eb063ecbeef64f9cc29cea1c75192484bd5b201aa2cc8af9a034fd331bb5a4b35af6bfbf56e45d8c119cad57
TLSH
T111B012C4C4415301C00302F861682C8C3A68EF21A725130182F00D019C35150903F064
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 9a560d831636f0747d89c9953f67715708464c0623e148d5eb2bb5067c7b5c50
MD5 edc0b506c090706c10d9b51675fd6f2e
SHA1 5861dd051ba3801d22942e39ee0d01b30ddda1eb
SHA512 3f452a59e51a6fa54106d00e10b41204eadba0d6bf3f7e5e934c8a257d861f5dbc6aae970c820ccb2b4cb8fe4acc80eee44427a4b92e3f7b60af90dcad45dbd6
TLSH
T1EDB0228AC002220AC08203B03C82E0E8B020CF38C203230FC3E00AA2EC203A80030A20
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
Size 320B
SHA256 bcb84a553678436fc06661f2815e0d78f5d7ebd4e02758a1f7afd9dabaca61ef
MD5 15f692e0115484bf9fd7646bcb7fabab
SHA1 3cfa15b1cdadff6a3ac65457a3402e417a95a525
SHA512 befffe696dd80d90c4f71f06bf5233b198ffe3a76744abc2a9ba277dc8bf56642793f4e790f35af34dd710da6a8a2afb582a1a9f1ba5a167a47f75e98cda13e4
TLSH
T150E086AA289AC27E6269942B1263A30CCFE0B415F7D96D0A1B47D591268A60CA3D07F0
MD5 SHA1 SHA512 TLSH

Submit Download

Tabs_13435452170258235

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Tabs_13435452170258235
Size 6KB
SHA256 fdd8e60cf836d2fc553b3c66fd4073067641a57e8cd7399994a1478f860cd050
MD5 095d71cf853a19953d20797d46c19ec6
SHA1 2812a681de9e25df1115d744b73b8e50c37ba275
SHA512 8b2c1cd1645f7dc937218c0fa80d36ea1d089c81ab5abc11b1ef985482214e78dfa93646dfd5f996b9e55ae0f67cc43437277671a81884cf145563b37d80ee69
SSDEEP 48:3Q/19oai+iJEMNRitfdQLkdN6rTKt1S8A19ouihwiaDeiiSZhheBe7mv98KQxi5z:3QvQOxD9pYGSZ+k7mtQxi1SmsIZMEBz
TLSH
T145D17B2699E8023ED37F4538E4BA10F2BB36BA2135D28F1F51A451190DA3743BBB1DD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
Size 96B
SHA256 e622ccea12dc2a9111a5bdd2c112e858ddf806ca953b6168cc6387d440facce8
MD5 73e5dcf674326cc6945f1d8fd47c1579
SHA1 0255939f20c9f9939da1af2ffe78dea884042c34
SHA512 bec29a1ff1fe1fe273c0492edf6423619b23bcb6b92ad29de9c62a6468e9ffa6ee84b91b44cb61da8f1e122dd7ed9ed3f44670f5e60b4294da8c740e8d23466d
TLSH
T132B011882000AF00EA0003B2B0A288C02320E830822200A280B08822A822282820A020
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000003.log
Size 247B
SHA256 6f192c9effb2b41266f116052f8e2ae81209ccff372364f062548731c9b5c6e0
MD5 aa09ccaf440e676afa88b8fb952c9e58
SHA1 40626dc8599db540d3f637d14d1c78ba3cdbb06c
SHA512 68780b0b127e92b375f83c435ce5cd2751cbaeaa85ef192a00c5610accae65c508e04b459098367f5f9be4b4a3d99d8a8e7695c9119cf781672c8aed0f43cdc6
TLSH
T121D0A7447B709322CC899AB6D25C9355E390F21314A3945391949BD55D1EAE02E21696
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
Size 345B
SHA256 5155ec3e489d4655bdf45cfcf19c05d8e23e50dabef32160db2002fd373ede96
MD5 b1ffb319b2fbf9a79b157539268345ea
SHA1 53d7660f0119299d726656eac2b1e938b64753e1
SHA512 885ca8b2fcb570267b0225008171317d85e3a9cc49da23c93de2c2c52b66f3a4731622bd113a695a60e43eca085e37cc0407db20ecd243c01857b263804cf55a
TLSH
T12DE0D8F625D9C72F225A405F5336E30DCFE1F402E6D918151B4DE148928B504B2C13B0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
Size 321B
SHA256 bb506397bc7274f03084b17ad0fb278c84e479c53c8004dfdafd84eac9d3639c
MD5 1d0b836853e1fa91a83f5fe9f0e91a5d
SHA1 de25e847dd6ec5e399e12c8cf9f32ad3d27bd6ae
SHA512 03f91ec0a68e2dd1f27cc9d130b9e3ada346db0568f35ac0e2b0496b853b021949dc7876c98497fc7fd4645f9353cb03101174889636aaa2fd2d7d3fda917b25
TLSH
T14DE086F665E9C73E2259C05B4376A30ECFF4F806A7C5394A574DD448A587604A2E07F0
MD5 SHA1 SHA512 TLSH

Submit Download

Top Sites

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Top Sites
Size 20KB
SHA256 58ef8198486e70881f761196e868ce0dabea9162b330ccb7e6bf1ec886a5728d
MD5 9413d6c9daee211a6a3d21325652305c
SHA1 431b2c9f8d013c992ddd25123bd16a2a86f0c611
SHA512 7cebe0f8cdb1b8c622ca150adaa5a6ae20f5da567bd0805c7b42371081222140a6a0388d31b41936799f714cc98ee8956919440cbe12692119ccf81158a1b38c
SSDEEP 12:TL17CZhDu6MvDOF5yEHFxOUwa5qguYZ75fOSbgk7XvTjccog2t7XvuvccogL:TLVCZwE8I6Uwcco5fBH7fTlG7f+L
TLSH
T13E92BDCF1F252863E5B14739E7D740D9AE7AD51DC782AF8580A8082159C1740210BC6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager
Size 40KB
SHA256 890d83b7f6bbeb56e7376d5c200f3455d2356f115910ce0fc36f11a6b48e650e
MD5 efac0035511a1797c45605fe3966a3f8
SHA1 c18a05cdd145b93682db6c59c12be5523ce10437
SHA512 62795ca7df407e5325e4d9c9cf56d4f7df1688feaab528e7d7d1abf5ecf9f01a0f418b63a33ce7061a9a38a8b5d14a7ccfe89ad0f076ecf51facaf25972546df
SSDEEP 96:f7doKsKuKZKlZNmu46yjUKVXwX4B5+XvXuog:7ZT0nzXgghfe3
TLSH
T18E03418F662880F3E0B2C23EEDC245D6FC7C5608A7133DD529E907754DAC13390542A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager-journal

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager-journal
Size 8KB
SHA256 d47e57b02653e10bcb15eccc8e1cb65e4569ff043caf8c21f17a5c7fe58c1a56
MD5 0c30291b12e3ba7ae39a5af232290071
SHA1 0239930708c5700f2aac55c08e0485d2306d8481
SHA512 3a13e30faaa098ece7ed15f0d49b53796e66de48e28d9d562d2b78853b442efeda5fbd01e1e64a2fd8686faee3467b694c387e92c75b7f58d15c31dc97566a66
SSDEEP 6:qmlfqVkLIJsC/at+Bcc/XKuqHKu42nSLmZCc/mLEJOgLEJLMN:LlfqVkkt/Y+BXXwX4BimLULIM
TLSH
T1E202209FB404C44BF851413DD9AD59456F3B4DAA3B433A5939D54D041C7D10380043DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a9ff5676-af7d-47df-a910-b954070a718f.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\a9ff5676-af7d-47df-a910-b954070a718f.tmp
Size 13KB
SHA256 f6acf19ccb77abff67785a9e73eb591eb0e20a88f1360c8b5810437a854af92b
MD5 0614ba4e91024c417ebf59803e90d7af
SHA1 a1e902c8c7af1a22e4c7b90c0ce09077ff5c07b1
SHA512 e0efde47dc5a48bb7e3fd469f3437893c8d721515412db76c3917b1f44fc45b381e3ab03e0ca9f91750a344e78128ebb745c4ef18f2826686c0677c46bc1ed1e
SSDEEP 192:SR0rostWfWv7mHMAPRp2xAw79FHYNyb+WNnhPalCmN4nIHM2lX2X6YpyOYkw7sjN:SR0rHwiKHtX4nrh5D72F2KYMOYbsge
TLSH
T10152B62EA920757B5CEBC21AF9527B67D2F9102221901F84F6FD892C20E76CC7227917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d52a78e3-0e4c-4820-b753-14e687fd3923.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\d52a78e3-0e4c-4820-b753-14e687fd3923.tmp
Size 14KB
SHA256 2d5547206366cff14923cda0bc93e4df2806640715594bedcaa34f6d9710ffe4
MD5 0bb08c29e5a9cab05575a985633a3d91
SHA1 ad57d20ded896e90a3c0a5c6359e96bbc7930cba
SHA512 7e7e90057f6a0b782405973d18310e0f5723e658bc38e3e8e073d398559d5ce53a91f3cb4f2d7743bdd799bd6515eb2b120481192d8c33ee4943b14de720087e
SSDEEP 192:SR0rostWzHv7mHMZPRp9xAW79FHYNyb+WNnhPalCmNpuwHM2tX2X6YpyOYkw72jN:SR0rHUPKH+Xfnrh5Dj2d2KYMOYb2ge
TLSH
T17252B62AAC20797B5CEBC21AF9557B67D2F9102221901F84F6FC892C20E76CD2227957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000003.log
Size 27KB
SHA256 49325eec283f7ae7797054515caa252971710f20b85416503533c685785793bd
MD5 80ce1a180470c5f4d679ebadf5457375
SHA1 46dd372bab3b78065895921cf9aa38b2b94af4d6
SHA512 fe559519a9b395830a6aa4af5b71b6a2184fd35a2b8dd4bd6dba83b07474b912c9cc12c59d20725cf50bc053105e0b84973f4447186c6c480647e7286224aefe
SSDEEP 384:B8D0sdGJS935QkIIIbbLMIMqByzyksdGDz3QosdGiaksdG1dGYR+Z+eVLfsdG1dm:TSfQGSZ+r6
TLSH
T147C2C8BA93711B81DCDF97FFBC5A8D2E0772AC8D4C5E1001A4935A7A38B3D0A4845BD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG
Size 317B
SHA256 eca801e69870c5c565b5b264497046381d41352c4d4e469c07633b84f85cda9b
MD5 4b81021450aebfeb1418d4d7afb51e01
SHA1 14d948f3565b09fea0cd47c0668c6c1c4387d559
SHA512 34396e012d606ac6ae79a2d9f33003898de136aee8f2b6cb638cec1c107c1ed23d39a88ba5d2c29053ed15970df48f7233b21486b5c7fc406512b120032c32e4
TLSH
T18FE026A578C8C6BF76A880AB2132530CCFE4BC12FAE4150A0F46D04450CB404E6F03B0
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 6683c1d65356fcb2878dda7d4af3041a0db12edebe3968809b60cf1f4d123217
MD5 7297ce6258d442f8798ee921da6364fa
SHA1 805a83a7b549998a059a33ef609048cc38065866
SHA512 eec3da214c6f5e8820fec04170c22916ea3dce43edc5db886147c93ff02540ce3a580c42215ec5d4dd809dc3195805f466392ee4359ab1734d06e85a07935152
TLSH
T17A212491F331C249C559437A603EAB251374E492AFF8FD0F58B534683EB2E000D4B2E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
Size 335B
SHA256 c76bf00cdbbc7f3500dbe1d226baf73ddf9058b23f19f2d92bb8e8515a0da3f9
MD5 c64033f6eb0bb27f56bf92b375357209
SHA1 c74aa7aad89574039d8a8e3b8b4c1395b724eb81
SHA512 8a1061305c28b9bbd4d4b8072a1a72e9839f42f86888737e08d223f5866aa9fa92e76a4186df9db1faf577e011f51af5ece7d94a9c9380fbdfb825424b3b695c
TLSH
T1F4E020557585C2BF712440972172A34CCFD47801FAF41F050F49D94455C7504F6D53B0
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_1
Size 264KB
SHA256 044d2a5c2eb89c8fbfe7f2dfb60ebe2627a6ac37a5c28589f54b8f00f4fe92a9
MD5 202a85f5bab0902826e615b6d965526e
SHA1 b26d15799c2f44b374722762e27fe3a0ad65f17a
SHA512 409068793515956bf81d7eda6479f5efcb955515307f8014fccc299c752e17402fb6215aded6f6ac04d78216a6226e8cd538a3594248c4db8743023a409823c2
SSDEEP 3:MsEllllkEthXllkl2zEgltV:/M/xT02zj
TLSH
T1F5440444FFC44505C5403030D433D3705774F4740511F74374DD04137CC55410C40410
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
Size 13B
SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
MD5 43ef949d3c6e9956545979ace65d0085
SHA1 63f2b2de8727854597e49a1216e8e74c68117c07
SHA512 313a5ab7ac9b5efd955beba4615784bdc2a9058ddaa804d85fb2d0c651dd3de07e382d61a1bb482499520a80e0b64c004ff2af03459cbc1daef47f540f0a6905
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 291KB
SHA256 ff53f5216f07843f38fe578324f5d2039dc33441f9fed38fc4ecaafec786443b
MD5 6c2e527f7591795661a96fbf02adcb26
SHA1 42d326674e90d475096dcda1322bd71e31ce25bd
SHA512 b5c0173eaffa74d220bed1382c034d4452d1d29273443d56732f7d0aebc177c6114497c8a0f1229bbec7dc7a330dc438170eea1da08799a2072bca02ed1987a8
SSDEEP 6144:D4Oy3cd0X+EqZU7Cneyiyho4eKFa6qR87Ptbmf1K49XLWbEPi4NTKlLza:0r3Zq+/hyhIubofM49s4NTK9u
TLSH
T11E5412707C88FC7499EEEE6654921D119EA4D85F8B7F3BD92CD8AF8806466DC4B01C32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 4c5fa33a900cf9f5a88f7fff42138219d2fb5c0dcb51bae504f480916cf346b2
MD5 ee66800fe0034566a863c35d6cc0fbfc
SHA1 64220891aa4360d47a0353ae4e10bc54c058a6c4
SHA512 e77aca8986150d0f2642cc651f5d4b97e2e80a053ed068a0d128f404e8c5caf47455b9e52b4430ea4187663e15187df75cf1e66dccc0ccea02c70c428e9faef8
SSDEEP 3:MsEllllkEthXllkl2zELu:/M/xT02z
TLSH
T1014404147FD10C05CDC031745033D3540771F43005315747775174337CD5D410C00000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
Size 85B
SHA256 b26da4f8c7e283aa74386da0229d66af14a37986b8ca828e054fc932f68dd557
MD5 bc6142469cd7dadf107be9ad87ea4753
SHA1 72a9aa05003fab742b0e4dc4c5d9eda6b9f7565c
SHA512 47d1a67a16f5dc6d50556c5296e65918f0a2fcad0e8cee5795b100fe8cd89eaf5e1fd67691e8a57af3677883a5d8f104723b1901d11845b286474c8ac56f6182
TLSH
T1F2A0120384738407E4144051C45C1341287C84570119C0012068931304240CB039643A
MD5 SHA1 SHA512 TLSH

Submit Download

a9af43fd-9b63-4ee9-9c57-af3febb1ee27.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\a9af43fd-9b63-4ee9-9c57-af3febb1ee27.tmp
Size 265KB
SHA256 0ac576e92479be3d21d414bb6dd730f5864ad697f761820bdecc1e118895a080
MD5 d0bf45e6f973a1ec6d2b4bbf202968fd
SHA1 243efd83f391ca86e5d9e828e289ed580d007c3e
SHA512 7b01b4dc99b6038edaebb078ba3db8f6a1371792f83b719c0600353c0f81d157bd9ea4addef072b1b383507af8ae0f2d724a89118c0933b043a96557286d0f69
SSDEEP 6144:7jQEqZU7Cneyiyho4eKFa6qR87Ptbmf1K49XLWbEPi4NTKlLza:Hq+/hyhIubofM49s4NTK9u
TLSH
T1164412603D98FC7499AEEA2250921C16DE74DD4E967F37E66CDDAF880642ADC4B01C33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba811c76-68ed-4910-a478-bc15bf99c6a4.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ba811c76-68ed-4910-a478-bc15bf99c6a4.tmp
Size 266KB
SHA256 38857f0d01220bfacd4b8c3352bfd5b5e3c3b5928b3a44cea73c6f3964700644
MD5 d3ee4bede91052d8dcf1063e3038e27a
SHA1 26cb1ae5be6c5854873fdb8e1227d2c671f6bf8a
SHA512 011fbca3af24bef1398464fd8dfed77961931b8bf2dd4fac4092de60880337c53134289456145b85f83577df39dd5646c690aef04d2909ae83d514a3c2d52b5f
SSDEEP 6144:78xEqZU7Cneyiyho4eKFa6qR87Ptbmf1K49XLWbEPi4NTKlLza:zq+/hyhIubofM49s4NTK9u
TLSH
T1394412713C98FC7499AEEE6250921C129E74D84F8B7F37D66CD8AF8806466DC4B05C32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c430c795-39f4-4119-bf0e-d6db302e5c42.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\c430c795-39f4-4119-bf0e-d6db302e5c42.tmp
Size 163KB
SHA256 fa3c9eb10e5d4b9f6dee8a2b8a6f615c2d1f7e558636bd6469e67c5991168b5d
MD5 70761abbdea35af6778030de4a93bc33
SHA1 4e927924a431d63284540f60c9b379f8a3639d91
SHA512 03b3de4dfa09e11f9a5dbdb05d4417390920003558d5a44b7e0037c6c542dfeefa1bd5e1268e9d18eb3670c20f5150798af0265d419845e3434448d9af861aa3
SSDEEP 3072:iDOy3S9VE+r0678mTEqZw8cLXDGndcy0n3GEZyho4XgPS/Fa64vR7MM6cw:iDOy3cd0oEqZU7Cneyiyho4eKFa6qR8X
TLSH
T1A0F312A098DDDD3695FDF8AE68A70C12CE10696993FB2AD52DD0CF8816096DC0F93C35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb5a2c63-4e4b-4262-9875-3f003f93082b.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\cb5a2c63-4e4b-4262-9875-3f003f93082b.tmp
Size 163KB
SHA256 38b14988ba01cbb2bacc7d9b356ee54cd607588e0f6aead6f7f9f326e823e519
MD5 402060e485e41d3ce6477cf176ba9351
SHA1 5e467feab50f56007fe5144bf085ba1d6aea59cf
SHA512 27bbb95cddf659e45b799e5f9a809d4adafd9851cf95e882928914924dd4caa5bef9ec66f76c87b6496c4e2c6d4ed4d299fa124ff2e9fb24bf9e1f83fbf6c815
SSDEEP 3072:i3Oy3S9VE+r0678bTEqZw8cLXDGndcy0n3GEZyho4XgPS/Fa64vR7MM6cw:i3Oy3cd0nEqZU7Cneyiyho4eKFa6qR8X
TLSH
T17DF312A098DDDD3699FDF86E58970C12CE10696993FB2AD52DD0CF8816096DC0F93C35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\component_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

ukm_db

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\segmentation_platform\ukm_db
Size 48KB
SHA256 2e5c0a0f0c8310f8555fca840f94b3a5568f14b5de61acc892b83e3be2189f75
MD5 edd295d792fdd7862614bafd5985922f
SHA1 55bd1de458313f26bbe3a22859e19e3dc31d3ea2
SHA512 2105382d9a0790ee35601e7c61601cabf1d831959070337e09636a34f43ff20b86a2883e32bd929b0dd8e81981d238f4bd2237d090e43c858ba679e0541acdda
SSDEEP 48:TkkhCU2QB2zbBxxUPO8KO+aR15/xxdS0TOyiMwFuE7flqpXzZRNEDCTCdmh/3wOz:QUcfR25/hwtGzjsCTCdw3w+
TLSH
T1A623414E162428DDF4A42639FEE20892BCAC5BB09B17C88178D01C746EF259BB40F5BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

memory/2712-543-0x00000124A05B0000-0x00000124A05B1000-memory.dmp

Download

memory/2712-541-0x00000124A05B0000-0x00000124A05B1000-memory.dmp

Download

memory/2712-542-0x00000124A05B0000-0x00000124A05B1000-memory.dmp

Download

memory/2712-547-0x00000124A05B0000-0x00000124A05B1000-memory.dmp

Download

memory/2712-553-0x00000124A05B0000-0x00000124A05B1000-memory.dmp

Download

memory/2712-552-0x00000124A05B0000-0x00000124A05B1000-memory.dmp

Download

memory/2712-551-0x00000124A05B0000-0x00000124A05B1000-memory.dmp

Download

memory/2712-550-0x00000124A05B0000-0x00000124A05B1000-memory.dmp

Download

memory/2712-549-0x00000124A05B0000-0x00000124A05B1000-memory.dmp

Download

memory/2712-548-0x00000124A05B0000-0x00000124A05B1000-memory.dmp

Download