Resubmissions

04/10/2026, 16:09

261004-tlwr7ssamd6

28/09/2026, 13:50

260928-q5ca5aws7m6

Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    04/10/2026, 16:09

General

  • Target
    ChromeSetup.exe
  • Size 10.3MB
  • Sample261004-tlwr7ssamd
  • SHA256 d0c41c72e135597876875e96195280da9a09eff3c6247d66ed797e31850d2e42
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 7 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

  • Drops file in System32 directory 1 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 13 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Checks whether UAC is enabled 1 TTPs 4 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 9 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 8 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 28 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 32 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Users\Admin\AppData\Local\Temp\ChromeSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\ChromeSetup.exe"
    1⤵
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2508
    • C:\Program Files (x86)\Google2508_2146518381\bin\updater.exe
      "C:\Program Files (x86)\Google2508_2146518381\bin\updater.exe" --install=appguid={8A69D345-D564-463C-AFF1-A69D9E530F96}&iid={F35FAE3E-40F4-BA25-D911-AC5E5672FD8C}&lang=sk&browser=5&usagestats=1&appname=Google%20Chrome&needsadmin=prefers&ap=x64-statsdef_1&installdataindex=empty --enable-logging --vmodule=*/components/winhttp/*=1,*/components/update_client/*=2,*/chrome/enterprise_companion/*=2,*/chrome/updater/*=2
      2⤵
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Checks whether UAC is enabled
      • Reads the TCP/IP host and domain name from the registry
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:4240
      • C:\Program Files (x86)\Google2508_2146518381\bin\updater.exe
        "C:\Program Files (x86)\Google2508_2146518381\bin\updater.exe" --crash-handler --system "--database=C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\Crashpad" --url=https://clients2.google.com/cr/report --annotation=prod=Update4 --annotation=ver=144.0.7547.0 "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater.log" --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x55e5fc,0x55e608,0x55e614
        3⤵
        • Drops file in Program Files directory
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:4536
  • C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\updater.exe
    "C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\updater.exe" --system --windows-service --service=update-internal
    1⤵
    • Drops file in Program Files directory
    • Executes dropped EXE
    • Checks whether UAC is enabled
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:1204
    • C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\updater.exe
      "C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\updater.exe" --crash-handler --system "--database=C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\Crashpad" --url=https://clients2.google.com/cr/report --annotation=prod=Update4 --annotation=ver=144.0.7547.0 "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater.log" --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x150e5fc,0x150e608,0x150e614
      2⤵
      • Drops file in Program Files directory
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:3232
  • C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\updater.exe
    "C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\updater.exe" --system --windows-service --service=update
    1⤵
    • Drops file in Program Files directory
    • Executes dropped EXE
    • Checks whether UAC is enabled
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:2856
    • C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\updater.exe
      "C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\updater.exe" --crash-handler --system "--database=C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\Crashpad" --url=https://clients2.google.com/cr/report --annotation=prod=Update4 --annotation=ver=144.0.7547.0 "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater.log" --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x150e5fc,0x150e608,0x150e614
      2⤵
      • Drops file in Program Files directory
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:3032
    • C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\updater.exe
      "C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\updater.exe" --unzip-worker --system --mojo-platform-channel-handle=1380
      2⤵
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Checks whether UAC is enabled
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:5240
      • C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\updater.exe
        "C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\updater.exe" --crash-handler --system "--database=C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\Crashpad" --url=https://clients2.google.com/cr/report --annotation=prod=Update4 --annotation=ver=144.0.7547.0 "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater.log" --initial-client-data=0x27c,0x280,0x284,0x278,0x288,0x150e5fc,0x150e608,0x150e614
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:5264
    • C:\Program Files (x86)\updater_chrome_Unpacker_BeginUnzipping2856_1003526959\154.0.8037.98_chrome_installer_uncompressed.exe
      "C:\Program Files (x86)\updater_chrome_Unpacker_BeginUnzipping2856_1003526959\154.0.8037.98_chrome_installer_uncompressed.exe" --verbose-logging --do-not-launch-chrome --channel=stable --installerdata="C:\Program Files (x86)\updater_chrome_Unpacker_BeginUnzipping2856_1003526959\9fb62c5e-964e-4e17-90d0-7537af833f31.tmp"
      2⤵
      • Executes dropped EXE
      • System Network Configuration Discovery: Internet Connection Discovery
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:3552
      • C:\Program Files (x86)\updater_chrome_Unpacker_BeginUnzipping2856_1003526959\CR_F2DC7.tmp\setup.exe
        "C:\Program Files (x86)\updater_chrome_Unpacker_BeginUnzipping2856_1003526959\CR_F2DC7.tmp\setup.exe" --uncompressed-archive="C:\Program Files (x86)\updater_chrome_Unpacker_BeginUnzipping2856_1003526959\CR_F2DC7.tmp\CHROME.7Z" --verbose-logging --do-not-launch-chrome --channel=stable --installerdata="C:\Program Files (x86)\updater_chrome_Unpacker_BeginUnzipping2856_1003526959\9fb62c5e-964e-4e17-90d0-7537af833f31.tmp"
        3⤵
        • Boot or Logon Autostart Execution: Active Setup
        • Drops file in Program Files directory
        • Executes dropped EXE
        • System Network Configuration Discovery: Internet Connection Discovery
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:2076
        • C:\Program Files (x86)\updater_chrome_Unpacker_BeginUnzipping2856_1003526959\CR_F2DC7.tmp\setup.exe
          "C:\Program Files (x86)\updater_chrome_Unpacker_BeginUnzipping2856_1003526959\CR_F2DC7.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=154.0.8037.98 "--attachment=C:\Program Files\chrome_installer.log" "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater.log" "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl" --initial-client-data=0x268,0x26c,0x270,0x244,0x274,0x7ff70b52e568,0x7ff70b52e578,0x7ff70b52e588
          4⤵
          • Drops file in Program Files directory
          • Executes dropped EXE
          PID:5496
        • C:\Program Files (x86)\updater_chrome_Unpacker_BeginUnzipping2856_1003526959\CR_F2DC7.tmp\setup.exe
          "C:\Program Files (x86)\updater_chrome_Unpacker_BeginUnzipping2856_1003526959\CR_F2DC7.tmp\setup.exe" --channel=stable --system-level --verbose-logging --create-shortcuts=2 --install-level=1
          4⤵
          • Drops file in System32 directory
          • Executes dropped EXE
          • Modifies data under HKEY_USERS
          • Suspicious use of WriteProcessMemory
          PID:5244
          • C:\Program Files (x86)\updater_chrome_Unpacker_BeginUnzipping2856_1003526959\CR_F2DC7.tmp\setup.exe
            "C:\Program Files (x86)\updater_chrome_Unpacker_BeginUnzipping2856_1003526959\CR_F2DC7.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=154.0.8037.98 "--attachment=C:\Program Files\chrome_installer.log" "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater.log" "--attachment=C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl" --initial-client-data=0x268,0x26c,0x270,0x244,0x274,0x7ff70b52e568,0x7ff70b52e578,0x7ff70b52e588
            5⤵
            • Executes dropped EXE
            PID:5376
  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe"
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3176
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7fff4ee5c728,0x7fff4ee5c734,0x7fff4ee5c740
      2⤵
        PID:5036
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1704,i,6065066905960150684,9589966984608800085,262144 --field-trial-handle=1972,i,5747295268022005500,14615965215568991197,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1968 /prefetch:2
        2⤵
          PID:3744
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1628,i,3829259451645105320,4870265235612295321,524288 --field-trial-handle=1972,i,5747295268022005500,14615965215568991197,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2284 /prefetch:3
          2⤵
          • System Time Discovery
          PID:3620
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2404,i,3407615416971949659,8154883358617114707,524288 --field-trial-handle=1972,i,5747295268022005500,14615965215568991197,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2372 /prefetch:8
          2⤵
            PID:3604
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3240,i,7286646709618385242,3547187150222698136,2097152 --field-trial-handle=1972,i,5747295268022005500,14615965215568991197,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3252 /prefetch:1
            2⤵
              PID:2416
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3272,i,2316067821730968727,12020154047497408858,2097152 --field-trial-handle=1972,i,5747295268022005500,14615965215568991197,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3308 /prefetch:1
              2⤵
                PID:2864
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4516,i,5472655508603177966,14037956350716984882,2097152 --field-trial-handle=1972,i,5747295268022005500,14615965215568991197,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4636 /prefetch:2
                2⤵
                  PID:4488
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4772,i,17979806833789526830,7033343554096448164,2097152 --field-trial-handle=1972,i,5747295268022005500,14615965215568991197,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4808 /prefetch:1
                  2⤵
                    PID:2088
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5812,i,8807780272050778978,15037125930313513988,524288 --field-trial-handle=1972,i,5747295268022005500,14615965215568991197,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5816 /prefetch:8
                    2⤵
                      PID:4412
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3912,i,6363272713443916158,2532559200662363673,524288 --field-trial-handle=1972,i,5747295268022005500,14615965215568991197,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5896 /prefetch:8
                      2⤵
                        PID:5140
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4944,i,11643266130660913320,14847033172436833939,524288 --field-trial-handle=1972,i,5747295268022005500,14615965215568991197,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4936 /prefetch:8
                        2⤵
                          PID:5152
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4940,i,3230632929240321254,14044159496364185972,524288 --field-trial-handle=1972,i,5747295268022005500,14615965215568991197,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4992 /prefetch:8
                          2⤵
                            PID:5176
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4596,i,17799350806000041772,9555087279412494441,2097152 --field-trial-handle=1972,i,5747295268022005500,14615965215568991197,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4600 /prefetch:1
                            2⤵
                              PID:5812
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4196,i,14873952605191281796,4069402807585261950,262144 --field-trial-handle=1972,i,5747295268022005500,14615965215568991197,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1384 /prefetch:8
                              2⤵
                              • Suspicious behavior: EnumeratesProcesses
                              PID:1728
                          • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                            "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                            1⤵
                              PID:4812
                            • C:\Windows\system32\svchost.exe
                              C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                              1⤵
                                PID:5312
                              • C:\Windows\system32\svchost.exe
                                C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
                                1⤵
                                • Modifies data under HKEY_USERS
                                PID:5400

                              Network

                                    MITRE ATT&CK Enterprise v16

                                    Replay Monitor

                                    Loading Replay Monitor...

                                    Downloads

                                    uninstall.cmd

                                    • Path C:\Program Files (x86)\Google2508_2146518381\bin\uninstall.cmd
                                    • Size 653B
                                    • SHA256 099592ffa867124d16c0c6d868af1214fd2b7180fa76e4eee01abf2a5cf8f044
                                    • MD5 SHA1 SHA512 TLSH

                                    updater.exe

                                    • Path C:\Program Files (x86)\Google2508_2146518381\bin\updater.exe
                                    • Size 5.8MB
                                    • SHA256 810e9879fdb18d0a5d68cd455b7187c62eb44fe585346a34f17b8802ad065482
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    settings.dat

                                    • Path C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\Crashpad\settings.dat
                                    • Size 40B
                                    • SHA256 8ccbf9ac4fe2b1987988446490cfa9bebb77487aa09ce9d0bf561d50e3e79c77
                                    • MD5 SHA1 SHA512

                                    prefs.json

                                    • Path C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\prefs.json
                                    • Size 19B
                                    • SHA256 e03e9d262ca3b7d19e37c3a69c7d8b46bd3f5542aa555a17d864071c28257b2c
                                    • MD5 SHA1 SHA512

                                    8e64dd8c-14ea-432a-b2a2-26bc0b86949a.tmp

                                    • Path C:\Program Files (x86)\Google\GoogleUpdater\crx_cache\8e64dd8c-14ea-432a-b2a2-26bc0b86949a.tmp
                                    • Size 130B
                                    • SHA256 80282943939978bb852455d66d51659f37b6adf3b915ab0854d2e275c2f359d1
                                    • MD5 SHA1 SHA512 TLSH

                                    d846ccff-64d8-492f-818f-25c6ee31a422.tmp

                                    • Path C:\Program Files (x86)\Google\GoogleUpdater\d846ccff-64d8-492f-818f-25c6ee31a422.tmp
                                    • Size 421B
                                    • SHA256 9c1ed48b68d10a8c39189d53fb9635b9660b36ef76bbd38be7b60ac752b2ecae
                                    • MD5 SHA1 SHA512 TLSH

                                    da86f429-e1ea-473d-b8d6-a140d601c0d8.tmp

                                    • Path C:\Program Files (x86)\Google\GoogleUpdater\da86f429-e1ea-473d-b8d6-a140d601c0d8.tmp
                                    • Size 552B
                                    • SHA256 199d9945a653e1c2e079f1f6e85c8ce08e707777f82c1ca9bcdfad3b9f5ecace
                                    • MD5 SHA1 SHA512 TLSH

                                    e27a3663-db40-48df-9bb7-b3317d8806c0.tmp

                                    • Path C:\Program Files (x86)\Google\GoogleUpdater\e27a3663-db40-48df-9bb7-b3317d8806c0.tmp
                                    • Size 420B
                                    • SHA256 41252ff467477dd298dd1b2305b5753b4a979f499f7f086156fa4787ad93e1da
                                    • MD5 SHA1 SHA512 TLSH

                                    e84f81bd-f23f-4192-ae7d-c00d6eec3544.tmp

                                    • Path C:\Program Files (x86)\Google\GoogleUpdater\e84f81bd-f23f-4192-ae7d-c00d6eec3544.tmp
                                    • Size 519B
                                    • SHA256 b7d7d3c0161867dd2f53fea5cdf75b075b3aa4befb80f16207e771b9fb1e8423
                                    • MD5 SHA1 SHA512 TLSH

                                    updater.log

                                    • Path C:\Program Files (x86)\Google\GoogleUpdater\updater.log
                                    • Size 27KB
                                    • SHA256 bfdc0037d6d4a3bd7e78f06054b9f309c043f2c08f7ba46c509e0ea4e61c4c52
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    updater.log

                                    • Path C:\Program Files (x86)\Google\GoogleUpdater\updater.log
                                    • Size 29KB
                                    • SHA256 5a63d665eb68b1b5e6b238a4cea55b07c433250b49eb22108491e37d47c7c1c0
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    updater.log

                                    • Path C:\Program Files (x86)\Google\GoogleUpdater\updater.log
                                    • Size 472KB
                                    • SHA256 9006623c1f42e2785f5a491815b1660a90ee48382e1d32ff814f7e49f1a24028
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    updater.log

                                    • Path C:\Program Files (x86)\Google\GoogleUpdater\updater.log
                                    • Size 474KB
                                    • SHA256 42298486991e7369b853ca2964df58af0a8ad6aef4aa07dc3684e47b23127108
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    updater.log

                                    • Path C:\Program Files (x86)\Google\GoogleUpdater\updater.log
                                    • Size 34KB
                                    • SHA256 b06e339076121db18fbc2e9d93046cc6494347429de167bd577e4c464516965c
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    updater.log

                                    • Path C:\Program Files (x86)\Google\GoogleUpdater\updater.log
                                    • Size 35KB
                                    • SHA256 caffbf16f3ba2207759454c60860aabfb027bd43e8f317e31e4937b0c7e063b2
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    updater.log

                                    • Path C:\Program Files (x86)\Google\GoogleUpdater\updater.log
                                    • Size 42KB
                                    • SHA256 29ad3e20fe4afe8efd8719080af6c4ed7c1953647e09fc20871abbe8a84654fd
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    updater_history.jsonl

                                    • Path C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl
                                    • Size 565KB
                                    • SHA256 80e0ea6089e49cc13d2a55b0ab650f3a54c7f5220ff6ebacef1152eb6a9a9a9d
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    updater_history.jsonl

                                    • Path C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl
                                    • Size 1KB
                                    • SHA256 63c6910b168543112796b4f06d264624658b45a7d94a948c8ba8355570d8d306
                                    • MD5 SHA1 SHA512 TLSH

                                    updater_history.jsonl

                                    • Path C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl
                                    • Size 565KB
                                    • SHA256 5636006e23f741df766e78c004e2bc55f09d06ec59e63d40d1399486bfbcd010
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    updater_history.jsonl

                                    • Path C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl
                                    • Size 2KB
                                    • SHA256 4d42745910fd3565f0be26c44b0bb3f15a56b4c8bef4a2d7b5a7c1b6d12d4f8a
                                    • MD5 SHA1 SHA512 TLSH

                                    updater_history.jsonl

                                    • Path C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl
                                    • Size 3KB
                                    • SHA256 5c15cf97848916dd729f532d83ad1d32596b5d529bf21de69441a30caaa8b7ff
                                    • MD5 SHA1 SHA512 TLSH

                                    updater_history.jsonl

                                    • Path C:\Program Files (x86)\Google\GoogleUpdater\updater_history.jsonl
                                    • Size 5KB
                                    • SHA256 402057cc675f0235692e426d1380e7cf4179a66bf97c9d2634936ef1d2916990
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    9fb62c5e-964e-4e17-90d0-7537af833f31.tmp

                                    • Path C:\Program Files (x86)\updater_chrome_Unpacker_BeginUnzipping2856_1003526959\9fb62c5e-964e-4e17-90d0-7537af833f31.tmp
                                    • Size 408KB
                                    • SHA256 76b0cfca8daff2461b1ba558af5a92d786593edef626f72bbfe8a55db6087076
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    setup.exe

                                    • Path C:\Program Files (x86)\updater_chrome_Unpacker_BeginUnzipping2856_1003526959\CR_F2DC7.tmp\setup.exe
                                    • Size 7.7MB
                                    • SHA256 eae657e356c23bd5a192129d9c5cf98dc2123c514b25b8d40f0a9685e53a93b4
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    settings.dat

                                    • Path C:\Program Files\Crashpad\settings.dat
                                    • Size 40B
                                    • SHA256 bc76ccc6ffe9251b3fcac2eead5afb79343c38a9bb646aeddb66efb0ade03f6f
                                    • MD5 SHA1 SHA512

                                    af.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\af.pak
                                    • Size 550KB
                                    • SHA256 5084bd33e38da84b5bd893f86fec3259b906463fd4efa956497a8c119ef31bf2
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    am.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\am.pak
                                    • Size 887KB
                                    • SHA256 095647a7b660709517520c330d93367f98d2312c9a3c41ed374b7406c35a2608
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    ar.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\ar.pak
                                    • Size 986KB
                                    • SHA256 9c4be38d6626c91d5491e647c00b78725bbaa8bef271446b9e0e344c657e6057
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    bg.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\bg.pak
                                    • Size 1019KB
                                    • SHA256 edf39548de96dd484316fdf6a49215bbf9d7f193cb3280faf460b26088ed3fc2
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    bn.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\bn.pak
                                    • Size 1.3MB
                                    • SHA256 bdcc2f04c77850b9fabc22172791115b924b06c13d30e0d4e8105e87ed101e11
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    ca.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\ca.pak
                                    • Size 627KB
                                    • SHA256 e0c8ee0e4ce0cf540a44111f4d5236fbd2336cc15957505cca5024fe6cdc6cea
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    cs.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\cs.pak
                                    • Size 640KB
                                    • SHA256 ec902af607f068c27f07e4f598175d31a1c07984362e4e0e254e0458e4b6c97f
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    da.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\da.pak
                                    • Size 580KB
                                    • SHA256 e7cb0e3a4bd803e2b890aabbf7a212cb45273bab416a8a851a3f45e4f762baef
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    de.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\de.pak
                                    • Size 629KB
                                    • SHA256 3e3be95f21acf4a6614a11f76d14abb27a2ed7ef14aac455d7ad096c7ded7c75
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    el.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\el.pak
                                    • Size 1.1MB
                                    • SHA256 1f1f8645ab0503f64a49b02531f261b56e6a0d5c2c8aab54aceb9c1e765d8188
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    en-GB.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\en-GB.pak
                                    • Size 500KB
                                    • SHA256 5f97a324fcced2ebb7c0db1249136aef0b76f5eeb3ceee12faed94f31d62dde4
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    en-US.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\en-US.pak
                                    • Size 506KB
                                    • SHA256 d77c9ea8395006a90af7e2381cb4135271ad5eac8ce494345c107fe288bda68d
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    es-419.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\es-419.pak
                                    • Size 613KB
                                    • SHA256 b62ad7b75016b06ba9ca98077a5632ad45d6eb07c82289639b75e5355964c53d
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    es.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\es.pak
                                    • Size 609KB
                                    • SHA256 c67e30f6a893c8b226359f16100ca8b3be3a1c1ea537fdd07cc504fe2d908db7
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    et.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\et.pak
                                    • Size 558KB
                                    • SHA256 67d5e392b5816fb29008cd129be9eb52f9788f30f6b14a1f5696d5fc01ef15aa
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    fa.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\fa.pak
                                    • Size 920KB
                                    • SHA256 66e40355b3fe9602c58b8c9ba6283c04cb7c0dccd655e8b9a7d8319df105420a
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    fi.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\fi.pak
                                    • Size 567KB
                                    • SHA256 156c5c01104de3282b7cb20f8f0cb6cf66027321de133978368d781052990949
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    fil.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\fil.pak
                                    • Size 641KB
                                    • SHA256 91ad152bcdbb2ef587232d2402eecb34d0ebcec79ee1def6a408a8924878871d
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    fr.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\fr.pak
                                    • Size 667KB
                                    • SHA256 bc37cba05ab03cfb07d5416da435bc1f5b07271d944fed7236edcceb39006627
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    gu.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\gu.pak
                                    • Size 1.3MB
                                    • SHA256 7e05e49b52add7dfb92d08b9fc64034836aca78c4e96969ee84ff944924cc9e4
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    he.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\he.pak
                                    • Size 805KB
                                    • SHA256 049ba8a4f6f1778ff4955e2922521b79ffff2414a26c5fda98da11577d16acdf
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    hi.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\hi.pak
                                    • Size 1.3MB
                                    • SHA256 935b0c0bb94cb47920a04d8525a0d3351bec279b53d6772e374327d38a40868e
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    hr.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\hr.pak
                                    • Size 619KB
                                    • SHA256 e50f9762b3177a82ac3efce2bec972fdb84acdfc1572539c1760e61f40967924
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    hu.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\hu.pak
                                    • Size 664KB
                                    • SHA256 81cebdf9ecb96573a4c8d9aaa7296ad92f6cb858141da7bb564e46af8db2d576
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    id.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\id.pak
                                    • Size 549KB
                                    • SHA256 4110c528cd2169f493ad35e02f01d721e523b5d3de8b449b9c939544b2a23aed
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    it.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\it.pak
                                    • Size 607KB
                                    • SHA256 f53b64c5b5e5d36338cf87f4b353790c86c4b7e9467e2417cf2e121c54c4f6b4
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    ja.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\ja.pak
                                    • Size 735KB
                                    • SHA256 9ab1861188480b3c79cda20f191843f0572228d17a0321bd91ec7f4e423f5a30
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    kn.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\kn.pak
                                    • Size 1.4MB
                                    • SHA256 df3e9dafaa97abfd71662fa1c212faccf5045b9a9f311392f62129621fb98768
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    ko.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\ko.pak
                                    • Size 625KB
                                    • SHA256 fd290309e1b20a47bc616570ccc720f14bca63eb8ba19bd5ba87d115bc7cabf6
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    lt.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\lt.pak
                                    • Size 673KB
                                    • SHA256 ecf457cbfb2253230408a2285c5acddff597c81ac66143e3bbfbd6663a8ab2fe
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    lv.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\lv.pak
                                    • Size 669KB
                                    • SHA256 1c851036ff1bf217242f6351eb546dadada0d9bb2db555f9618e942b56a86514
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    ml.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\ml.pak
                                    • Size 1.5MB
                                    • SHA256 57ed8749a6dbd0bf4bd466037e8ba11ee69848743c482e2e37822fa7efded42b
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    mr.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\mr.pak
                                    • Size 1.2MB
                                    • SHA256 6c277b1d2b7d51c323279b08a76561c1a07e315d78c2ad1eb97c0f98c69cc22a
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    ms.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\ms.pak
                                    • Size 577KB
                                    • SHA256 004aa2cc5ffe2e078af1e10bd1154f35e22a9e6f1063f4838d05dcea9ff66df2
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    nb.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\nb.pak
                                    • Size 553KB
                                    • SHA256 cf1d00a15ba395d4223adc96263cf348ee5b8174571197123f01d44b82a2b42a
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    nl.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\nl.pak
                                    • Size 576KB
                                    • SHA256 c51227591606b9e3b7fa390024dc56ac01d7876a4d697c43f6dcfa07d0fbfa56
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    pl.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\pl.pak
                                    • Size 644KB
                                    • SHA256 d0c4cdf1889463836959f77c9634184820651f904c97a57b44555e5c6aa0ed97
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    pt-BR.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\pt-BR.pak
                                    • Size 602KB
                                    • SHA256 bbbd0eeaae44defde422cd8852882a8c75eeb1cac77cd36ff24a47203c2901e3
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    pt-PT.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\pt-PT.pak
                                    • Size 607KB
                                    • SHA256 b626d5320833b7675e695fdae5f60005e61435d84b429ffe75c4114fdfdd3be2
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    ro.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\ro.pak
                                    • Size 629KB
                                    • SHA256 4999f16b824b336311d0825d943def5fdc6595bdf8364ffb39f3b64a6a0e377a
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    ru.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\ru.pak
                                    • Size 1.0MB
                                    • SHA256 1fd3514092c98a06a203fbebe7ddb9c3657279d9a4a61f5d35aa00b7a1500c9b
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    sk.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\sk.pak
                                    • Size 650KB
                                    • SHA256 7ac91413a3efb1f747c247778b524e398b783f57ba6aa51480a048543e773320
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    sl.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\sl.pak
                                    • Size 623KB
                                    • SHA256 2b9a4a79e5ee49d77d87dbdf0e31709c7e75391d416ec1824d22bf6e0cc16612
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    sr.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\sr.pak
                                    • Size 959KB
                                    • SHA256 7ba50c524c2b5bb507f50a995008538a2dd084ba9c6a318936599986ea9daf7e
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    sv.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\sv.pak
                                    • Size 560KB
                                    • SHA256 0048a6d308c9aecbd9253a999cf5cd32e53d267dcffb25318ac7d796da10cb49
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    sw.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\sw.pak
                                    • Size 591KB
                                    • SHA256 1b4ff599c043374276d9c200d54c49eb422c3a6d33679064d9e3faccae456887
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    ta.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\ta.pak
                                    • Size 1.5MB
                                    • SHA256 adf25e5042ae989d7acfdf153dd5340767a7bf9fa7626540e64561501fb53421
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    te.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\te.pak
                                    • Size 1.4MB
                                    • SHA256 50d9adba00ad0768e3fb99518b8928fee3cc052c540f0bf78749b5a5f9ea6c51
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    th.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\th.pak
                                    • Size 1.1MB
                                    • SHA256 2b10cfeb2c130a6e520128feb5f2aa5ba7c8b9994e6036bdc1a79886f526e666
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    tr.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\tr.pak
                                    • Size 603KB
                                    • SHA256 4e6d7674eba280a6d917260f64c4ed1f5e47331ed7c373834b64e725eb8ed2d9
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    uk.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\uk.pak
                                    • Size 1.0MB
                                    • SHA256 32a6ebd1fe94cc3935e51c48fd7724dd1e89cf31f962c102f3fde6ce26424798
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    ur.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\ur.pak
                                    • Size 901KB
                                    • SHA256 57c7de1e9ff5adf77d0aa92ffa49dd7c1002d28978a5b96e87802e8ba87bf52d
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    vi.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\vi.pak
                                    • Size 718KB
                                    • SHA256 f411b5b41688ffdd9288c35219fb493d1b94e53a518b13013359864c1d891ede
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    zh-CN.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\zh-CN.pak
                                    • Size 515KB
                                    • SHA256 af096c59b1c5b2694fb0368af274486e74a77606c0c57aaa1eed4df55e73f172
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    zh-TW.pak

                                    • Path C:\Program Files\Google\Chrome\Application\154.0.8037.98\Locales\zh-TW.pak
                                    • Size 508KB
                                    • SHA256 638fb416e24f89504cc869eb19c87645283cbe428c614fef451d91f6381d17f8
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    2076_13435603834370016.pma

                                    • Path C:\Program Files\Google\Chrome\Application\SetupMetrics\2076_13435603834370016.pma
                                    • Size 3KB
                                    • SHA256 1571c897efca4096ae682ccd591f8d6470179e19ef7ae243fd75d69d55c521ed
                                    • MD5 SHA1 SHA512 TLSH

                                    5244_13435603834339453.pma

                                    • Path C:\Program Files\Google\Chrome\Application\SetupMetrics\5244_13435603834339453.pma
                                    • Size 344B
                                    • SHA256 fd668d6edcf6b6cc176edd9bf7b0d7f1881fe2f0d94ebae656127c27a359550e
                                    • MD5 SHA1 SHA512 TLSH

                                    new_chrome.exe

                                    • Path C:\Program Files\Google\Chrome\Application\new_chrome.exe
                                    • Size 4.3MB
                                    • SHA256 6849d2982038de9f9489a7b3858f3b785b7fec06a842c93c517281d21995c8ca
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    new_chrome_proxy.exe

                                    • Path C:\Program Files\Google\Chrome\Application\new_chrome_proxy.exe
                                    • Size 2.4MB
                                    • SHA256 10370a022ca3bfb277f4595b659269150a253f023ac4ef0a16ff15c36e3274b0
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    am_FEMININE.pak

                                    • Path C:\Program Files\Google\Chrome\Temp\source2076_926671280\Chrome-bin\154.0.8037.98\Locales\am_FEMININE.pak
                                    • Size 18B
                                    • SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
                                    • MD5 SHA1 SHA512

                                    chrome_installer.log

                                    • Path C:\Program Files\chrome_installer.log
                                    • Size 35KB
                                    • SHA256 eaffe336ef39099d1d6e52de705cb75079b3264b07fc702adafb15b11620456a
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    6c8ca559-a5a6-4eac-88ce-30f70beebcdb.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\6c8ca559-a5a6-4eac-88ce-30f70beebcdb.tmp
                                    • Size 265KB
                                    • SHA256 b7e8736c6bac6f8e72cd968cecde842ecf4e58fc8f5b5025075dcb5762f8098f
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    99d0e7c3-f470-4a95-bbfc-2b3e7531f212.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\99d0e7c3-f470-4a95-bbfc-2b3e7531f212.tmp
                                    • Size 264KB
                                    • SHA256 03786b1a6d5ac7cb4430f72706669b9864fed76d49baf000d6b42ba253790e19
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    08c8bcbc-9f23-4899-a170-570b17e74e58.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\08c8bcbc-9f23-4899-a170-570b17e74e58.tmp
                                    • Size 12KB
                                    • SHA256 93c0a477f5df303d29ecaf3bf44086cb9aa3f0b292564982239a20479c555fb0
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    0bcc7d31-5926-4e44-9227-0efb3fe91aa6.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\0bcc7d31-5926-4e44-9227-0efb3fe91aa6.tmp
                                    • Size 12KB
                                    • SHA256 cf51208845f9e37c1cb56b1c5615386c6eaf1563473f444dfdfc8c723e884a36
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    98ec36c9-8457-4704-8206-7669b40a5c6f.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\98ec36c9-8457-4704-8206-7669b40a5c6f.tmp
                                    • Size 6B
                                    • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                    • MD5 SHA1 SHA512

                                    9bddec52-1f25-43ee-bf7a-5357f3bca3a3.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\9bddec52-1f25-43ee-bf7a-5357f3bca3a3.tmp
                                    • Size 649B
                                    • SHA256 af10e04a6313b939fb5cef9db691c13f43b62ecbb683ff6c8a653f6bd007232e
                                    • MD5 SHA1 SHA512 TLSH

                                    9bf1634f-319d-4a5d-8b8a-41a9889a57c4.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\9bf1634f-319d-4a5d-8b8a-41a9889a57c4.tmp
                                    • Size 12KB
                                    • SHA256 f33a3898af8389d28ee0f924cc5a6d3c11df49a44afbcdfcbec91a2508817624
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    f_000006

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
                                    • Size 26KB
                                    • SHA256 20e9c16713edf2f62880b40500895077a27188ef4096868ecf45bb10a773ac2c
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    temp-index

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                    • Size 216B
                                    • SHA256 bc01420cdbaa8d39d81a6f658cdfe0e63b9a2fae96235a170fe54d103d8791f6
                                    • MD5 SHA1 SHA512 TLSH

                                    58d64e6e-5ada-4a16-b44d-7c389f6b3d42.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\58d64e6e-5ada-4a16-b44d-7c389f6b3d42.tmp
                                    • Size 5KB
                                    • SHA256 a4f7821efd771bda0ed2fa9e5e8d37276e128a7151b45e4a9cc16a93f4c65ee0
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    6f3df48c-602c-4d0f-90e9-57e0f40cb192.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\6f3df48c-602c-4d0f-90e9-57e0f40cb192.tmp
                                    • Size 2B
                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                    • MD5 SHA1 SHA512

                                    8911d337-83a9-490f-8f33-c725e842c81b.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\8911d337-83a9-490f-8f33-c725e842c81b.tmp
                                    • Size 4KB
                                    • SHA256 2a2905f68a137cb5031bf16fcf415047d4b03c2723b95806b5de48cd5b0a7514
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    temp-index

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                    • Size 120B
                                    • SHA256 e297ea49f452b2067e5555545506b2ae2bd096d1a37d34cad72456befe0d18e2
                                    • MD5 SHA1 SHA512 TLSH

                                    the-real-index

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                    • Size 96B
                                    • SHA256 7756a8d7f410f180d87608d3a0d7cfdf6cbecb05b39fb8731c32c12e591d848f
                                    • MD5 SHA1 SHA512 TLSH

                                    b26ad751-dd66-43e7-a581-d48903dfd903.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\b26ad751-dd66-43e7-a581-d48903dfd903.tmp
                                    • Size 10KB
                                    • SHA256 4249176713db845ba0132775f2b7f3b549d40e2c7fba9c2290877480afe524b1
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    d5891352-2610-4bee-8ade-efa8cca98a2b.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\d5891352-2610-4bee-8ade-efa8cca98a2b.tmp
                                    • Size 16KB
                                    • SHA256 79f9e17cb8b3dd65a213857d1e88179a1532ca867b065802fe16153491298c18
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    ebc976d6-d855-4525-99c1-9f5582434d4d.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ebc976d6-d855-4525-99c1-9f5582434d4d.tmp
                                    • Size 131KB
                                    • SHA256 43314a32202d56d0cf8e5472ab0bffcb628fb4d21b7b524664589dd31dc508cb
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    fbe1e0fc-5ece-4466-b275-9a6aa310614e.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\fbe1e0fc-5ece-4466-b275-9a6aa310614e.tmp
                                    • Size 130KB
                                    • SHA256 7beb4df5025ac07f8fc92b03db41aa10a7dd0274f589b036b91da89fd01c0917
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    default.dic

                                    • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                    • Size 2B
                                    • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                    • MD5 SHA1 SHA512