hxxp://app-claude-ai[.]online

Analysis

user interaction
yes
max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/10/2026, 12:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://app-claude-ai.online
Sample261018-pl66qaxt8j

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2108	msedge.exe
3456	chrome.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupView = "4294967295"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\LogicalViewMode = "1"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a000000a000000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0100000000000000ffffffff	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\NodeSlot = "2"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\IconSize = "48"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1 = 3a001f44471a0359723fa74489c55595fe6b30ee260001002600efbe10000000657c56fcfe41dd01821f49f60b42dd01e66c2c2cfc5edd0114000000	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\Mode = "1"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\MRUListEx = ffffffff	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0 = 14002e8005398e082303024b98265d99428e115f0000	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\NodeSlot = "1"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1092616257"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByDirection = "4294967295"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\SniffedFolderType = "Downloads"	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 00000000ffffffff	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupView = "0"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 = 14001f50e04fd020ea3a6910a2d808002b30309d0000	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{F992770A-8506-4C0B-9966-B3A8E3594E1D}	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:FMTID = "{B725F130-47EF-101A-A5F1-02608C9EEBAC}"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1092616257"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByDirection = "1"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0e000000ffffffff	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\KnownFolderDerivedFolderType = "{885A186E-A440-4ADA-812B-DB871B942259}"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Mode = "4"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\MRUListEx = ffffffff	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\IconSize = "16"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:PID = "14"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:PID = "0"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\LogicalViewMode = "3"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 27 IoCs

pid	Process
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe
Token: SeShutdownPrivilege	3600	chrome.exe
Token: SeCreatePagefilePrivilege	3600	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
4672	msedge.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe
3600	chrome.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3264	chrome.exe
1464	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4672 wrote to memory of 3924	4672	msedge.exe	87
PID 4672 wrote to memory of 2108	4672	msedge.exe	89
PID 4672 wrote to memory of 1816	4672	msedge.exe	90
PID 4672 wrote to memory of 4752	4672	msedge.exe	91
PID 4672 wrote to memory of 1816	4672	msedge.exe	90
PID 4672 wrote to memory of 1816	4672	msedge.exe	90
PID 4672 wrote to memory of 4752	4672	msedge.exe	91
PID 4672 wrote to memory of 1264	4672	msedge.exe	93
PID 4672 wrote to memory of 4124	4672	msedge.exe	92
PID 4672 wrote to memory of 1264	4672	msedge.exe	93
PID 4672 wrote to memory of 1264	4672	msedge.exe	93
PID 4672 wrote to memory of 4124	4672	msedge.exe	92
PID 4672 wrote to memory of 4124	4672	msedge.exe	92
PID 4672 wrote to memory of 2132	4672	msedge.exe	94
PID 4672 wrote to memory of 2132	4672	msedge.exe	94
PID 4672 wrote to memory of 2132	4672	msedge.exe	94
PID 4672 wrote to memory of 2404	4672	msedge.exe	95
PID 4672 wrote to memory of 2404	4672	msedge.exe	95
PID 4672 wrote to memory of 2404	4672	msedge.exe	95
PID 4672 wrote to memory of 3164	4672	msedge.exe	98
PID 4672 wrote to memory of 3164	4672	msedge.exe	98
PID 4672 wrote to memory of 3164	4672	msedge.exe	98
PID 4672 wrote to memory of 4472	4672	msedge.exe	100
PID 4672 wrote to memory of 4472	4672	msedge.exe	100
PID 4672 wrote to memory of 4472	4672	msedge.exe	100
PID 4672 wrote to memory of 2384	4672	msedge.exe	101
PID 4672 wrote to memory of 5052	4672	msedge.exe	102
PID 4672 wrote to memory of 2384	4672	msedge.exe	101
PID 4672 wrote to memory of 5052	4672	msedge.exe	102
PID 4672 wrote to memory of 1116	4672	msedge.exe	103
PID 4672 wrote to memory of 1116	4672	msedge.exe	103
PID 4672 wrote to memory of 1116	4672	msedge.exe	103
PID 4672 wrote to memory of 4688	4672	msedge.exe	105
PID 4672 wrote to memory of 1088	4672	msedge.exe	112
PID 4672 wrote to memory of 1088	4672	msedge.exe	112
PID 4672 wrote to memory of 1088	4672	msedge.exe	112
PID 3600 wrote to memory of 5092	3600	chrome.exe	122
PID 3600 wrote to memory of 2476	3600	chrome.exe	123
PID 3600 wrote to memory of 2476	3600	chrome.exe	123
PID 3600 wrote to memory of 3456	3600	chrome.exe	124
PID 3600 wrote to memory of 4696	3600	chrome.exe	125
PID 3600 wrote to memory of 4696	3600	chrome.exe	125
PID 3600 wrote to memory of 3756	3600	chrome.exe	126
PID 3600 wrote to memory of 1784	3600	chrome.exe	127
PID 3600 wrote to memory of 3756	3600	chrome.exe	126
PID 3600 wrote to memory of 1784	3600	chrome.exe	127
PID 3600 wrote to memory of 1724	3600	chrome.exe	129
PID 3600 wrote to memory of 1724	3600	chrome.exe	129
PID 3600 wrote to memory of 4800	3600	chrome.exe	130
PID 3600 wrote to memory of 1692	3600	chrome.exe	132
PID 3600 wrote to memory of 1692	3600	chrome.exe	132
PID 3600 wrote to memory of 1756	3600	chrome.exe	133
PID 3600 wrote to memory of 1756	3600	chrome.exe	133
PID 3600 wrote to memory of 4988	3600	chrome.exe	134
PID 3600 wrote to memory of 4988	3600	chrome.exe	134
PID 3600 wrote to memory of 5108	3600	chrome.exe	135
PID 3600 wrote to memory of 5108	3600	chrome.exe	135
PID 3600 wrote to memory of 1064	3600	chrome.exe	136
PID 3600 wrote to memory of 1064	3600	chrome.exe	136
PID 3600 wrote to memory of 1492	3600	chrome.exe	137
PID 3600 wrote to memory of 2132	3600	chrome.exe	138
PID 3600 wrote to memory of 2092	3600	chrome.exe	139
PID 3600 wrote to memory of 2104	3600	chrome.exe	140
PID 3600 wrote to memory of 2104	3600	chrome.exe	140

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://app-claude-ai.online
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ff86622c188,0x7ff86622c194,0x7ff86622c1a0
  2⤵
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,9140572852176600639,4407833405371479848,524288 --field-trial-handle=2340,i,6648515466764265467,2145710600010062903,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,3429171473443651930,15010315007477831525,262144 --field-trial-handle=2340,i,6648515466764265467,2145710600010062903,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:2
  2⤵
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2392,i,975893870850848967,11797494968283748563,524288 --field-trial-handle=2340,i,6648515466764265467,2145710600010062903,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:8
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,17821319527142699327,7501781610988880851,2097152 --field-trial-handle=2340,i,6648515466764265467,2145710600010062903,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,16382179983374409667,15563286367300709091,2097152 --field-trial-handle=2340,i,6648515466764265467,2145710600010062903,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,13640800395490956772,4530838470631753598,2097152 --field-trial-handle=2340,i,6648515466764265467,2145710600010062903,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,460073217879817422,10636360589005989645,2097152 --field-trial-handle=2340,i,6648515466764265467,2145710600010062903,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:2
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4840,i,18162438254186238733,2425843772446872149,2097152 --field-trial-handle=2340,i,6648515466764265467,2145710600010062903,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=3408,i,17099132020701814653,7954044763163771904,2097152 --field-trial-handle=2340,i,6648515466764265467,2145710600010062903,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:1
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,18381823238157781550,4205525045701547298,524288 --field-trial-handle=2340,i,6648515466764265467,2145710600010062903,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:8
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,7341720358252331945,12458611579952531700,524288 --field-trial-handle=2340,i,6648515466764265467,2145710600010062903,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:8
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6020,i,6752383757064516304,9482193578259728746,2097152 --field-trial-handle=2340,i,6648515466764265467,2145710600010062903,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:1
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5060,i,2465394434302451794,14292215408297351767,524288 --field-trial-handle=2340,i,6648515466764265467,2145710600010062903,262144 --variations-seed-version --mojo-platform-channel-handle=6292 /prefetch:8
  2⤵
  PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5060,i,2465394434302451794,14292215408297351767,524288 --field-trial-handle=2340,i,6648515466764265467,2145710600010062903,262144 --variations-seed-version --mojo-platform-channel-handle=6292 /prefetch:8
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5360,i,7278453689007563523,5759089756998025693,2097152 --field-trial-handle=2340,i,6648515466764265467,2145710600010062903,262144 --variations-seed-version --mojo-platform-channel-handle=6308 /prefetch:1
  2⤵
  PID:1088

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4972

C:\Windows\system32\cmd.exe
"C:\Windows\system32\cmd.exe"
1⤵
PID:2144

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff864bbc728,0x7ff864bbc734,0x7ff864bbc740
  2⤵
  PID:5092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1724,i,16262924225320617875,16500172754547090489,262144 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1992 /prefetch:2
  2⤵
  PID:2476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,11932087948015328174,16982748779023786436,524288 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2252 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2420,i,6846891161973816965,12720122399972164298,524288 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2432 /prefetch:8
  2⤵
  PID:4696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3256,i,42450252026327201,15177735922128626958,2097152 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:3756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3268,i,7654356845183948344,6281917445943363563,2097152 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:1784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4524,i,532674735239600129,7641270584376280760,2097152 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4420 /prefetch:1
  2⤵
  PID:1724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5368,i,7740719843865404476,742635690667403416,524288 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5324 /prefetch:8
  2⤵
  PID:4800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5628,i,16011565790702577441,12887351750983386343,2097152 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5544 /prefetch:1
  2⤵
  PID:1692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4496,i,13511247261277583858,15409006399891451256,2097152 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5768 /prefetch:1
  2⤵
  PID:1756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3912,i,18399839491749641914,3029901132086866643,2097152 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4604 /prefetch:1
  2⤵
  PID:4988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5852,i,13272549918236591180,14286613850004427574,2097152 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:5108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3492,i,9782567783425549763,5662711135853252797,2097152 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:1064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5988,i,4619405991839035620,2296182721066263117,524288 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6092 /prefetch:8
  2⤵
  PID:1492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5964,i,17355360707127043227,201141441368055208,524288 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3512 /prefetch:8
  2⤵
  PID:2132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6068,i,17403916344787335957,130038943769172916,524288 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6128 /prefetch:8
  2⤵
  PID:2092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5972,i,9734893999385785317,17284176295062422912,2097152 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6124 /prefetch:1
  2⤵
  PID:2104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=3428,i,6685715130988475275,12987800342638951961,2097152 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=4552,i,14273055566318512847,15565369202226194747,2097152 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4564 /prefetch:1
  2⤵
  PID:1816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6428,i,12127632936303224650,9205996385892364931,2097152 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6524 /prefetch:1
  2⤵
  PID:3800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6312,i,8379282848056473553,3014566613417986688,2097152 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6680 /prefetch:1
  2⤵
  PID:4440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5988,i,7274062215733062530,13938815730911212653,2097152 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5980 /prefetch:1
  2⤵
  PID:1532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6004,i,1873157128514688223,4618675068536431487,2097152 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5944 /prefetch:1
  2⤵
  PID:5108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5992,i,14109221297652527001,1772073619638359317,2097152 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3376 /prefetch:1
  2⤵
  PID:1384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3380,i,4436560141464376098,1420449602188193649,524288 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3400 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  PID:3264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6108,i,8041815597880792894,11830467821079627531,524288 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6544 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  PID:1464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=3380,i,4292512019396741687,16341162916942540657,2097152 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3412 /prefetch:1
  2⤵
  PID:5000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=4704,i,6299957743995933802,3867033596615699492,2097152 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6100 /prefetch:1
  2⤵
  PID:4256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=4512,i,7409655864389681375,1595355535514746203,2097152 --field-trial-handle=2008,i,1377628601884865689,10810124940826720488,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6496 /prefetch:1
  2⤵
  PID:4208

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5008

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4652

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0169b629-4500-4b28-9dfa-d383718d51af.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\0169b629-4500-4b28-9dfa-d383718d51af.tmp
Size 267KB
SHA256 9fbc0a4c7f002cdd4454901e067cb37420e8a666aa8b2c0051ba89b5cc9c1c65
MD5 2b21232920dff6f92fbcebaa74104628
SHA1 34988bc42d1adca74f168dd88167b6490aa044cd
SHA512 48add0f8f59a04f514475d7c53b6fbd7a5cd8b5dd2f838200ebecc1e28dae9bad9c9d28ecec4abe97e13a65083eb62a1e6f291fce4ce9cc84ce853ba50ed02b2
SSDEEP 6144:voDub2A+jb94+tSuHYvRSJ+hFD+7t56OD9ZfSAppr+:vnb2A+X9htSu4vRSJyFSXD9ZfS4M
TLSH
T1E34423737AD26EF388B93805914233048E7196F791DF5D1A80858E4EB2DF58E4A93F72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1a4c5237-dd9e-4dcf-9c16-0fed0201c623.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\1a4c5237-dd9e-4dcf-9c16-0fed0201c623.tmp
Size 266KB
SHA256 589dce22c846c88beb6c29720497ad1fe2d8b9d8542c08433a37cc42621ab346
MD5 08d62d07ab44919df44cca0ccb0dc6b8
SHA1 00e4dca401412446db2708e021883df48386faea
SHA512 74d25399c500534f1975e2038371f03c90fe2dcf7c35162485a433fab42354ab181d40669627265ea921e3fd7d9a569798beea4436931521fe4b715c26b65fa2
SSDEEP 6144:uiub2A+jb94+tSuHYvRSJ+hFD+7t56OD9ZfSAppr+:uTb2A+X9htSu4vRSJyFSXD9ZfS4M
TLSH
T1184423537AD16EF388B83401A2562704CB7155F790DF5D2A80C58E4FA2DFA8E06A3F72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

32f36beb-7dcd-412a-a05c-42515d2ba0dd.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\32f36beb-7dcd-412a-a05c-42515d2ba0dd.tmp
Size 266KB
SHA256 f6370784ed3dc528a8fbabca61e2239fc83d881fd2b6ecb946e6b2f77a0951d3
MD5 dbd092b98f1435f73df411f06dd45e68
SHA1 8df838eecd77d0f01189bb0c54d84342d4a795ce
SHA512 ce896ac71f81d99f7c22c9ea6bb3053c0225eb01b18461e9bf869dfb76600d2662e3e3a59f8bc3f72f226bbf0d9a227b9214f8505d5d7ffe6717e8cfb1626532
SSDEEP 6144:Jiub2A+jb94+tSuHYvRSJ+hFD+7t56OD9ZfSAppr+:JTb2A+X9htSu4vRSJyFSXD9ZfS4M
TLSH
T1F64423537AD16EF388B93401A2562704CB7155F790DF5D2A80C58E4FA2DFA8E06A3F72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7f9aa6b0-7159-4d6f-86e7-7cc093d341da.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\7f9aa6b0-7159-4d6f-86e7-7cc093d341da.tmp
Size 307KB
SHA256 966183ab4b203e23a010a69484dcf18d678306d4c548b44460d45fb85053ae28
MD5 f666d208a13782682d09b446e79f9fde
SHA1 e93e0bdedd4684ba0ff88217adc4f7719f60292b
SHA512 7c33f3ac7437b51ab679a7f66c5f2a4b77470f1e2428c89e61f685773ac3239cc6c2bebf6b8188a6e1469b4bbf60a74c5a0cd7db6d6d3773468ecac1362bd873
SSDEEP 6144:v/yiDkDub2A+jb94+tSuHYvRSJ+hFD+7t56OD9ZfSAppr+:v/F/b2A+X9htSu4vRSJyFSXD9ZfS4M
TLSH
T1466423737ED26EF388B93502914733048E31A6FA91DE991A84459E0B62DF58E0593FB2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

168cbccf-1903-425d-b3a4-36aa5fb9655b.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\168cbccf-1903-425d-b3a4-36aa5fb9655b.tmp
Size 414B
SHA256 13e68c5174dc5dbf4480515326f351540a477524c2795438dee6ae03025c372a
MD5 033de81aeb27dd2e4c07e750a6e4edde
SHA1 90861b2851016484e9cced7fee7bce8d6103e3ed
SHA512 7c4fef6b2211cf3306341844899f6d57ecc41a0a3be56020fa4d0c4c74a0270d292b24c242e9b640b0eac94a636462ff5e85cf0a334349431c04eeb3cf0468c9
TLSH
T1DAE02BA9C9A5AC7719FD072C34944746E650136727514A5F373C990C8FF92370187C6C
MD5 SHA1 SHA512 TLSH

Submit Download

2ac44fdc-356c-4b19-9277-967d60537a50.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\2ac44fdc-356c-4b19-9277-967d60537a50.tmp
Size 12KB
SHA256 c4ceab54f5a3eacde74f2585f226c4cf5f667a921e74fbf4b5f8ca62d99062be
MD5 e3acb2fb1c62988c8972053699855fd1
SHA1 8645154733f4440240d9d7e8918cf4cf04523417
SHA512 b042105c0de06ffafdb032b503834aafa67066fa9024e7cfe78f15869e12d6d8b0b48e88acea720068cbdf9ca882fe5b496c421f1a210de045816bc93ad7808d
SSDEEP 192:RRFYw8Hcv7UhAPRp2UGgr9/Hsb+WNnEjNX82u12bdFhIEVyIsnAUgtaJ:RRFYJIA8XVhw4q262bdoA8
TLSH
T16342B329AD607A3B9CDBC62AF9627B17D3F5202124942EC4E6FC8C3C19E76CD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

40532340-0258-4547-80c9-fbdaefb31938.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\40532340-0258-4547-80c9-fbdaefb31938.tmp
Size 14KB
SHA256 089733cdccad93fe9d7860223076552de15eb2fbfe6de405c11ac8643bea98bc
MD5 6c78e7c2061fa3a33860b79a6281b209
SHA1 412dcb955e40ca435133017ecdfe2634fa2ae2db
SHA512 7b0b03dee614e1f1e4db3d9c5f60c16791d490f8a78fa4c9cc9e594d3c861a98921779c007fe6dc964d894a038ed3b46892f07d612b0c276cff5c6b9a72595ff
SSDEEP 192:NRFYw8QMv7UncEePRplVlmGga2C9/Hsb+WNyn7AkTQjX8qV8L2P12bdFhIpVyIsB:NRFY+YAn8XHhw7/Q12N2bdoPe
TLSH
T1BA52C629E8606A7B9CDBC616F8527B27E3F5207164901EC4E6FC8D3C29E72CD2217413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

413b87aa-f69b-4e41-8715-b7d3abcfca21.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\413b87aa-f69b-4e41-8715-b7d3abcfca21.tmp
Size 13KB
SHA256 f50e3df860a738e0c70c549548fd1cacc423cb0bd7fd8ae62798977dd7c910f8
MD5 fc63550e3c423639dfa977ecebb6aede
SHA1 f8a325fffc391f028e385339d9c5e6d102057cda
SHA512 976117cdc396b118f397274a861de92964597897d61da5203dd90d6c5c2a15c49886bf2999275ebdd116ab3d231ea8472647584961edb782cb0fbac4583c0765
SSDEEP 192:DRFYw8QMv7UVAPRp2lmGga2n9/Hsb+WNyneN/TQjX8qV8L2K12bdFhIdVyIsnAUp:DRFY+YAgXVhwTkQ12+2bdore
TLSH
T1E252C569E8607A7B9CDBC61AF8527B17E3F5206164941EC4E6FC8C3C29E76CD2217413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8457d4e9-ce95-43bd-8c21-68b88084e5e8.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\8457d4e9-ce95-43bd-8c21-68b88084e5e8.tmp
Size 13KB
SHA256 a61e7f06b00b1d02bbf13541e38731ac3a6dcc61000e4f60934429ca4a232338
MD5 5df008d39be43ab5daa0953238a3a3fb
SHA1 85fbc438b43b23a511007b58013183ed9393f615
SHA512 bc5b62a0b6e8a31beaa2c35457f46c4ae33a779e1d189e0d033d6b9e511ddeca70eadf85b064399849f435a90431030406357e710711c1f7054cf9147d7a8ca7
SSDEEP 192:DRFYw8utv7UVAPRp2lmGg89/Hsb+WNneN/TQjX82112bdFhIdVyIsnAUgraJ:DRFYINAgX8hwckQ2P2bdore
TLSH
T17A52B429AD606A3B9CDBC62AF8527B17E7F5203164941EC4E6FC8D3C29E76CD2217413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9396fbb3-9535-4532-afa4-7f057eaf1998.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\9396fbb3-9535-4532-afa4-7f057eaf1998.tmp
Size 14KB
SHA256 cd933db7125148af4437d5ad2e094cf08184fd73e11a41485e5bc3a753e208db
MD5 e105bcd82747bc5eaf17632182be487d
SHA1 b4455ebb16aa5ee50c5296717e338b83890a2185
SHA512 96f894dc1ce3c9471edc201531a3caf5efdc2c44359305cbfc31887154ae84e2935893c963f7c96f42ffd54b64b444880aad0d14257f8b11648c16bdc9a1f269
SSDEEP 192:qRFYw8KMv7UncEePRplVlmGga2C9/Hsb+WNyg6s1ZoAWTQjX8qV8L2pw12bdFhIG:qRFYIYAn8XHhwNHZZQ12pA2bdoPe
TLSH
T13C62B529E8606A7B9CDBC626F8527B27E3F5207164901EC4E6FC8D3C29E76CD6217413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Bookmarks

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Bookmarks
Size 1KB
SHA256 2b538a2737a0ec3c7f4c4932ad04af9f4a80e493a1a5be9324dca86778912fa3
MD5 d1ab1dd72d1532ccb576d53c86204b07
SHA1 ccdeeee383e2e8dda7f63e41f8eea41e66eed614
SHA512 7fbb34e87e52e80c87946bf2267b610759489ee2abbabe910d77ddd494496ba6211bb0749bbbfbd3960342467fb600afa3305503a7772bb305859453fac14f3c
TLSH
T11121053BE667AC9B84BD66D688B08707FE44133F62104C87397C289CCF728265285F19
MD5 SHA1 SHA512 TLSH

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005
Size 76KB
SHA256 1cfed5d288f1e80c28b8266f0e42d8c04915c242d3aa22b7d7562460fc6f84ac
MD5 61b8455491073461cbe4ed71d872b819
SHA1 e6645fb73065a832c53643528eea2b45bf262c8c
SHA512 1ecab34542121c267c33197f331dafa1ab67d1d019b44f1b76f57f9a248de84498c90bb5f10a815a5bf65a7b49664af3445e2ae0299464bde4075a0865078a6b
SSDEEP 1536:PjYb/R8sNTLhFpiU51nvrvtr/QfwmZahEQslCDLz1peFXVSn:+jvYqFRr/QohhEQslCRpsV+
TLSH
T1C37312075EDD59D5215B419CF0E0B9063F22CE9A4D1FCDAAC0D1BE6E17F2AF7A409228
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d
Size 61KB
SHA256 3aa939979f607d02610700d8932983423affb4de841aaf47d340a2c637fde65e
MD5 5c8a905992d3dce988a2c8a0321a6861
SHA1 d2238efb566bd863849e9e008cd8d4ad954aba20
SHA512 cc70c63fa4cb9f078738d26b17f0b77161ee4e810765184526b69c81dd3ada96f18a3333295c01f9a28d089488193276973ccf07329e5e9cfa8f01492dd17244
SSDEEP 1536:dBWL4/OWiwzhi6iE5Cx/KAMePlrTAszehYz//a7gZxy8X:fDwwtiJbgAJPlHESz3a87X
TLSH
T1515302CFB89F01E15B65069BE68DFF32338A684C98D5344087D49F9E955059F136F02D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e
Size 158KB
SHA256 4d86a67bc2c7839b13e00f89fc3986a02ae20716aa23bea479ebafcd05a57560
MD5 6d52f4bafaa26327cb23054c7aa261a5
SHA1 c33079f6b21e64c33fe750b42e2e7709449bc9d7
SHA512 134425ccee07f70c198c6178398e25c8c500b8509c716a0e0b4f56ad24e2bbe4fb48c0f48f12b223f344022e04bae8504a4cab5723005edaf3078e299762e0a4
SSDEEP 3072:OdcfG3OdcD5n192OQ0RCoDxYTon64TJ8StbZw8+fVtlWfu4j7d:2c+3OdgSqxeKZw8+9tMXj7d
TLSH
T1C1F3128E5981C23243F0C96B2EE64D3A4C21F541E6210FD11189B206FDB6BFEB87897D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f
Size 64KB
SHA256 5ea711bceb7c49ea8d1d9e1d40719d507782defa25f8097bf84548254b7a2bf5
MD5 c05944f0b17015a343d070aafcb904c6
SHA1 951ee04a048594e334665ab97b39300314e180be
SHA512 99fd58c6d3456f4c584db178a045f50494830af683fbfb42892b0fcaf553814d270ac2f2b6b37d28d0eea134d27a8559b57c5df36a132640ba9e049bb638f6a6
SSDEEP 1536:E5rDoM3f/rfaYTF3FO2Sg0zHpO60x9r2/:ECM3f/riwFc2Sg0eB2/
TLSH
T13A5302166A44853D1BC9F8DC06FDF5902A2A8AF8CBD3F5D1F546130DA40326A52B7F2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000010

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010
Size 16KB
SHA256 abbb45d34c4123c34134fe212ca3b7952d1519cb40ea75f92fbd1695d08e7a31
MD5 44ae76064a4507d74dd36306159195e0
SHA1 abb970b4cece0cb4b259e1852fc0fa169dfceb88
SHA512 ce2fab2773617bc505ce322f2503e2fe91fae7ebcb929b6a513184cb47b4814db9bce44f083d683ec7cc788eb3720c1cf94590063239518a271bb98f12654df7
SSDEEP 384:VRaxWz1VE7fHcP3pNzqGylSbp/rEMZhWGg5xdtHoRD6fJwrL:mozbEbM3pNzqVMp/rEMmGGdFxCX
TLSH
T15472D1A7465257960409EB0E3FBE2D7B0CF47EDE6813A00F64D70900D27F8D55A972B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000013

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013
Size 346KB
SHA256 12d9d79dfebc7af3bc8f51865b297aae3799b2fa2ce9d188b5741e85350062ff
MD5 a34ac27ab2e9ba9da6a4d1430444fe6b
SHA1 358cb9f7f84a731f77a3f1dd0e4057659a29a224
SHA512 1a2185d4ff72d4d8a759938f1a042d6dac394e83c405382b596e7df04822d6698568be11f51d7b6e26a7bdf4bbde0775ce72f379d28dd66d908a00205d88b264
SSDEEP 6144:5JterkJiB53lK9lud6XRJs4GqwCXjiKjvZbJ7qVZQf/C2v4gOcpv6kWWNbe:5ebsk6zGqVZt70Qy2v4gth6F
TLSH
T19E7423452F6F760DA5489B60BDDA36A24C665B7C460178FC9213C6BE8609FF9D2CE0CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 312B
SHA256 e5469285cf6d6a99c0a19a13f54026a1d4b9dc8f9028ac2b081480aa003b1001
MD5 f2e89ec1b12cce2313ffdc5458e84c34
SHA1 abc87d5778aa2ee73cc0a6c11e4ce934ec025ed8
SHA512 dddc3cfa476201733d3ad444bb4398b7b1efa51a307c7a4371c2e5c69590b9dca002dbcefcca03988115db1bed8fb5070c3e87c8fe7d6723f1c3b868c8eeec32
TLSH
T147E05E1806805B96EFDD20BADC6148903370D91311632B56C0E1F7F7C893790AAF708C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 888B
SHA256 c1bf98b7dd6ac37ae2a33168ef79eb5aeb3b9dbfa420e2d0645048e3cd35f99c
MD5 99869c71b7b235b0f76a4f61834b60b2
SHA1 99e2e9ab31276718a0aca2c00b0dfe72c8420ed1
SHA512 2af9b64cc0fe9b29f863cbbcd7af451fd3fe0e20d7fdff15ec01ffe47f2489dab4d95ff28581cd3924555866afe12b5a082b5ae7c55bcd6b8489473535c9ba71
TLSH
T19311472546C007C5CF4D2078AEA2088237E3912312136F8790DCB7F1D7AB3C1A973288
MD5 SHA1 SHA512 TLSH

Submit Download

a7e30646-34ae-4ad1-a6d4-64e618eeb3a3.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\a7e30646-34ae-4ad1-a6d4-64e618eeb3a3.tmp
Size 5KB
SHA256 5c69cb453ca62af20b8541116357a472a7d4c32fd663e16f628d48863e035593
MD5 c5e9c5edc2ce208ced0d1e8e3836faa6
SHA1 014ee0af77a565ea48c5080b5058aaeec5f142a5
SHA512 7bb087dc14090ca32a0b68bfc5102cb466da7a4c2e5f1699de17424c05f36072c23a8bca67f56b3fc76081978b4a5eafb41fce1a1972de2ad80427aff68e7bc5
SSDEEP 96:Dt6iuJBWzqfaIsZbFIob8MHyT/Au0xuoTu7O9U:Dt6vJBWzqfaIstFIE8MHyT/Au0xDTMOq
TLSH
T12FC16AF783E8852DC8556AF4AA217E1FCE2A495853183C36C8D89E4F93E2572E34164F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a6233dc5-6ac6-40f7-bb8c-84aeb04fd621.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\a6233dc5-6ac6-40f7-bb8c-84aeb04fd621.tmp
Size 12KB
SHA256 eae51e721b6e02350229d983f98225d8bd842043c29aecc4856d975b60ce81d0
MD5 f3c75833231b83b9c1fd7688a09d6cc8
SHA1 9ec3b8e6715fb3c44edc74bb8016c27840c5c183
SHA512 38cd18a1611002b4fb5baca4bc9ab3813856b0a1bae63d00718029e3ceb99439987d7ff94af749d2ab742540c57f68ba905f5dc918581f8c09d054c6912dde89
SSDEEP 192:DRFYw8Hcv7UVAPRp2UGgr9/Hsb+WNneNGX82112bdFhIEVyIsnAUgtaJ:DRFYJIAgXVhwcp2P2bdoA8
TLSH
T1A142A329AD607A3B9CDBC22AF9627B17D6F5202124942EC4E6FC8D3C19E76CD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bcdf20e5-2d8c-435b-9788-f94300cd12c2.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\bcdf20e5-2d8c-435b-9788-f94300cd12c2.tmp
Size 1KB
SHA256 d124b066334ef75df781d46f2d4f2389ce28b328be230cb43846f547bb032935
MD5 0f0a03e9af5e9654a845676d9fd314f9
SHA1 61d0c0185f66bb4abce0258caa33a2a1da4d50a0
SHA512 ea8be5879853a25f26b5b6b5f21e14873ef57c93fab7774becdf04f57b6a8e49cdad0a4c2f61d15da5b36758472f3bc0abc7ff67958ee5c6bfecc9951b596a3d
TLSH
T1E521F63BE2539C9B84BD26D948B08307FE05137F76114D87357C289CCF3586A5286E19
MD5 SHA1 SHA512 TLSH

Submit Download

c76beec2-9f48-4498-9bed-e971c4f9913b.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\c76beec2-9f48-4498-9bed-e971c4f9913b.tmp
Size 13KB
SHA256 cbff59adc7b520f0de2985ad921ee12da5b00aa0aaadd64b2862a8b11ece7f19
MD5 8620b09f169758aa6d92f2e7b8a4c29c
SHA1 c265bb3d46a3af238c08a66240583a655be69a0e
SHA512 017bb2738ebc633e2b1824b1fe90215df48c3e3ec2d222610a597c250ca9b406bd8560dd6e15c6ddcea319cc301407ec464c4569fc29dfb4f74923aa99fdceb8
SSDEEP 384:s2jGN7KxkXqKf/pUZNCgVLH2Hfgsl1/XODGN+ErU3pxHG4xHk4V4:s2GN7KxkXqKf/pUZNCgVLH2HfgszvO61
TLSH
T1C4520A27A88C9A3F0FD8C54DD8177F4FADF101566268492452FB9C1903A5BDB114A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e55c998d-36bc-40e6-9c29-177ed1f9db42.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\e55c998d-36bc-40e6-9c29-177ed1f9db42.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

fe77cf8e-f6ab-4278-b8ef-ceb8490e187a.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\fe77cf8e-f6ab-4278-b8ef-ceb8490e187a.tmp
Size 14KB
SHA256 40c9210035d6917d2a3c68f875177732bee6ab2f9923f6c078bc2519966439d0
MD5 c417b9298743c6803462102a555a62f3
SHA1 98a4f34c972b36c90221c6878271e279253b0842
SHA512 df55792a1595603199882abfc802e60fdb7e1a0a00fcca5b74effee51bad52081ed5cb26438ec9f87a767ddfc5d3140ada13feb86f1cc6497678766f6ea8859b
SSDEEP 192:NRFYw8QMv7UPEePRplVlmGga2C9/Hsb+WNyn7AkTQjX8qV8L2P12bdFhIpVyIsnB:NRFY+YArXHhw7/Q12N2bdoPe
TLSH
T10C52C629E8606A7B9CDBC616F8527B27E3F5207164901EC4E6FC8D3C29E76CD2217413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b59b8431-8ce8-4e7d-8a52-cb33e55ee152.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\b59b8431-8ce8-4e7d-8a52-cb33e55ee152.tmp
Size 267KB
SHA256 7ddfd783b65ca5b01faa3929f97d53a81cd24aadbf6e8237ba7f7cc9e3307a71
MD5 9eea20d16ce413f0565faa6d54fa496e
SHA1 7a7805dad598bfd2dbe9af4d2474019c2eff8ed1
SHA512 fca1b75b3b1e65b960eb44031e29cbfe7a5faacb07b7db10734cf6f74ac2f0669e0dc541ac6aaf7f0281541f963fba73cfd5d78d992befdacdcf07ce2859b40c
SSDEEP 6144:GoDub2A+jb94+tSuHYvRSJ+hFD+7t56OD9ZfSAppr+:Gnb2A+X9htSu4vRSJyFSXD9ZfS4M
TLSH
T1B84423737AD26EF388B93805914233048E7196F791DF5D1A80858E4EB2DF58E4A93F72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c750ed75-ca9e-40e1-b001-2c08f72df2bc.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\c750ed75-ca9e-40e1-b001-2c08f72df2bc.tmp
Size 266KB
SHA256 41f4366e2f893faf1992b23740e8ce8365480d5c1a7cf86ecf83d937088564d9
MD5 a9ea7c5695088c76053ee93f5dca5524
SHA1 e98473d0487dc0f9e667bf627b643df8646b7355
SHA512 797c863042201be1bfad3098b17bd16afe840782789486aff558422232fb48e3d3c7096b1ca8725490f9ca704fea75317112436ae2c4c009d6cebbf42b0cf605
SSDEEP 6144:Biub2A+jb94+tSuHYvRSJ+hFD+7t56OD9ZfSAppr+:BTb2A+X9htSu4vRSJyFSXD9ZfS4M
TLSH
T1834423537AD16EF388B83401A2562704CB7155F790DF5D2A80C58E4FA2DFA8E06A3F76
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d33652d-9c13-40dc-9795-f970ce65b0e8.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\component_crx_cache\5d33652d-9c13-40dc-9795-f970ce65b0e8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

d1bcb854-6a72-49ee-ace9-8f87fe8ab83a.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\d1bcb854-6a72-49ee-ace9-8f87fe8ab83a.tmp
Size 130KB
SHA256 ca28c542161e5f24120e298548f3de6323fb3cf3b71cc0a3ed51378901299e4f
MD5 74eb812454d378894a922a43cfc502f6
SHA1 f49688fde7b2263ff2ab3ba9566fe79b9e8d8dc4
SHA512 330f3fa1da7ee13e539db12a8edf804a206ba4d87d7dcd0f944ae12d5729efdff8c6f675c06515a9b975c38bf8262b9fc2ede77c421b50a139cdc06c8ba6fc4f
SSDEEP 3072:xgf+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gE:Wf+hFD+7t56OD9ZfSApprE
TLSH
T1AED31232AA95D8BBC9FC6541B157A300DE766CED41DE2A09444A9F8EE09FC4C0773A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

076c0bcd-08ba-4018-8071-9adfcca0a62b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\076c0bcd-08ba-4018-8071-9adfcca0a62b.tmp
Size 18KB
SHA256 b7582622fc7f01c9300897f2b345d3b0b52af6b3fc91fa6ff8e85b2c5afc7ae0
MD5 d9a036212df46f5bcd4a7d6c9888f085
SHA1 0947064afcbee7e585595b4f08b62422497b54e0
SHA512 2976c3429400793526a73ba9fa702e0403fb4bfe7c920642368c3fcfa037b8ea73e4127183d369e5685d66a38414ec2d1420c4345400a6a37c41419c33048519
SSDEEP 384:HQkUSv0sN+8dCK6bC3tgh//z8ExUXQVgMT4IIlx:Z0kJF8/D8QVgMT4LD
TLSH
T1A5826C3A7875AC6B1AA36551F18E32139FB48427EBC41F54DADDAB1C02CB29C2307D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

435c7f2a-8c81-47f5-8a7f-0d407458ab49.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\435c7f2a-8c81-47f5-8a7f-0d407458ab49.tmp
Size 8KB
SHA256 165f0b82d3cf20d49187d945743bd80111d60bc4c8e8d40b2b9205e37dc5282c
MD5 572243eadde74e5f9a3ce78956f2da4a
SHA1 508f512043c699c4bb902c92bf0617741a54ae05
SHA512 964ab8814c62fdad540be32524b6e7829b82d086a485112f9d1940144254a7f121df8863f579b3f6e1a3a7a84a78aa75d355eb4fc028aa30947530a5741fb2a5
SSDEEP 192:BONN6JUm0QmiUyq3so//jjzorB6ywxWjBC4aU6:BONN6+mEhso//z8ExHTU6
TLSH
T10502C838B868BC7B9AF3AE45B48737239FA4107BA6951F40DAE81E2D01D715C1306D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6400d06f-cd67-4bb9-916a-e1ab181f5735.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6400d06f-cd67-4bb9-916a-e1ab181f5735.tmp
Size 8KB
SHA256 f1c3c5253b7c6c3a4f6df0748411b1ac65a8500f77d93ed47160908133d690e9
MD5 e5c837c8b5917a9939fc65a7681cc2b1
SHA1 14b13feaa58b83fc7c18071ebc3d22c98b1bc765
SHA512 07a3938444d5acfa6b12013f743b7ea6d2e4623823bf24009f507e4abd9c7bc35a7ce76abf2745db471cda40b73e868b6a437b72f1445b1da2710f6fcde51f74
SSDEEP 192:yONH6JUsQmiUyO3Ao//jjzorB6ywxW5XQ2NxPqGsU6:yONH6+8RAo//z8ExUXQEgU6
TLSH
T149120B35B878BC6B6EE36555B08732239EA44137EB896F90D6EC2F1C01DF15C534AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b16081f284f8892f4e3f5e38af0d9f3f230dcfa25330e0ee1ca4b8dd2d80ddca
MD5 e7e2778f85ce7e3948c2a2bc1267dcc3
SHA1 d8284eb08b882d207e7472a25799c9c84b60dcd2
SHA512 9daddb87da054bf7a2f6a79224f4024a3b31a0e9fd94e7216fa03e6f6d81ff4af82158fb4c8758299d8eaca9d230fcbe02088c4d8dbdb79d46a88485153ba63c
TLSH
T10BD0C02132263DDEC32E20330190878018048AA3402001100E030C0C07E804798C1DD8
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

3b6bf57c-e58d-4fc2-96b4-891fb9d594d5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3b6bf57c-e58d-4fc2-96b4-891fb9d594d5.tmp
Size 9KB
SHA256 fb51932855ad57b82b7ba56e724e89856d62299ee901ed9ffb5523e706bd99ba
MD5 32eed72fb45267fcc1d90ace59dac363
SHA1 783352b10e107c36fb6fb33c0c76a49e05a772cc
SHA512 9c8d292899e2cd103b10a7e577e3b5e9bc24435408a00728c9e2c3e8f21feba1d6672b5bf706b54cec692eda04be5c0407d090e04829843b8611118bee23c844
SSDEEP 192:sxZ9RfWK/ffsM8ivIdpAMHCe76+WNGY36WBX6IgrJ:sxZ9cK/ffsM8iAtH9AGXL9
TLSH
T1EB22B6526E28A97B8CC7D20DBA65BF13D6F95032A5D41E58EAFCC61C04E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8499b535-0b5f-4f08-9722-db856ee7ab9e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8499b535-0b5f-4f08-9722-db856ee7ab9e.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

942c6bdd-b504-4c63-9154-28c880779b46.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\942c6bdd-b504-4c63-9154-28c880779b46.tmp
Size 27KB
SHA256 b491146d7b1a8295924af57e5a1d6f2e7fbedc1b824a5bcb5dd84b9d132cc1ed
MD5 b6813b41df4e0ecfa3d96f42da2bcd3b
SHA1 c2daeffe146190b5e4bf74bb6241baea87521c43
SHA512 c2cf30a107a43ddac9b85dd26b2ccbb422d28d2963bf05eec12de080fe826ab7186be86d4c8c42d046feb849112ff845a034d29cee186bbdee12c2c1ff8531d2
SSDEEP 768:YiKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/XroL8:YiKlm7QWvUYe0u1ja8/L/E/EL8
TLSH
T1ECC2FA3B640CCB7E4FC04A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 994e20ed3ac1b5a65e286aee6c37fb8f2f8f75798a15f8ce1f17c941e5eac0bf
MD5 67e69add1b758d83cc9966f9aab15739
SHA1 ecd2d922de396a6fece93e23f6140c0a7b2f59f9
SHA512 63c3abf2510cba31a8933cc88d81123856f8abb0109c1b35ebad70c844ec8ff55bd9edf7c226d9319b4542c22b3371b121e9de91b10262c4233d29ce83c6edf8
TLSH
T1C8618050BFD078A1F7A87FB9DFD7048336B7A7C01AA7ED40A180D8F95E067905060354
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 8d9055e5f4e99f946703293e0307850cbb7ce3d9d72341337d683f5e173fd031
MD5 94e314736b530c54c318ae1e1fee235e
SHA1 c42558526ab6500f260238571025f9841ad9ebad
SHA512 b86b00edf9d8e59064c10004747bd64d51634a0b3a1f1d14218133475e923eff79f2d305982ad7b006ee011c6f249de7c19944d2c7f9bff837f50d1166214a8c
TLSH
T1EB618050BFC078A1F7A87FB9DFD7048336B3A7C01AA7ED41A080D8F95E067905060354
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

ce25f1ba-82a2-405f-a92c-381494047dee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\ce25f1ba-82a2-405f-a92c-381494047dee.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

203380f0-f1a7-43f1-b024-796f816b0f19.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\203380f0-f1a7-43f1-b024-796f816b0f19.tmp
Size 949B
SHA256 cefa3b8609627dabeeff712bd74dce716dc734182f6da71be53db43bc513cf83
MD5 d989ac163c59e13cb60341d135aeb3b3
SHA1 d9c69ce92106e752096f1da7a6a145e4c1a49098
SHA512 859b011b608a0b50fff97e18a8ebd37665b961cb9761a55e042abc98efe88e800984614e388b7885f897de715810526e978a1beea8ad58febefd8341e3b70dbe
TLSH
T1071190F3C3E5866E890516F05A24AE2BCE1D0546422C7D16C9D4EF2BD3E3075E10259F
MD5 SHA1 SHA512 TLSH

Submit Download

668cb844-cac4-4316-94f2-3634f2df1d41.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\668cb844-cac4-4316-94f2-3634f2df1d41.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

ec52ed7b-f459-4c5f-beeb-1c72101ac198.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ec52ed7b-f459-4c5f-beeb-1c72101ac198.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

cc02c3b7-409c-4113-95da-57f7360fa896.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cc02c3b7-409c-4113-95da-57f7360fa896.tmp
Size 10KB
SHA256 56f2cd54882f80c4b0d9b114e33f586de2289c86d624252eac5fe7706667cef6
MD5 db59ca7783f6535780076a75df498ab3
SHA1 aa1396918d43b07496aba6c6f33087c5cd7e3d21
SHA512 55e7242b6cb13e7b38781598b902a9e076d579e28a053b7a7161cd5f4b6b2e82432e5b865bef77edc8b6b9ed5240c4e39fc4493d872ef476410f7f875e30b3b1
SSDEEP 192:sxZ9RiWK/ffsrGWpV4ivIdpAMHCe76+WNGY36SOhEIgbllJ:sxZ9jK/ffsrGWv4iAtH9AG70R
TLSH
T1E132C751AD28A97F8CC6D21DBA65BF13DAF91432A1D51E44EAFC861C01E76CD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 bf244742ab75705a8eefddaec40936bbbd31a9a8a5ee4f12be37467422d56d15
MD5 1fb7d97ad59c8ed9cb448d268c07d489
SHA1 7b72f617ea93f6157a7268ce3640d0b18be2b3f0
SHA512 b8d6117d1740f7760b90f07d0674c2b3fe21271bd00c6155add40f6723ea957133b348177b485bb59af8bb505a6476d111a3bc1edac991f0e85cc3ec7e37891d
SSDEEP 384:cQkUSvlsN+8dCK6bC3Egh//z8ExUXQVJRA8t/ZdoZkL6MT4IIlx:clkJc8/D8QV08mZkL6MT4LD
TLSH
T19AA24C75E8B56CE745A2E9C1A14AF6136EA44037D6980E5CDAF9BB3C208F1F81712D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f11f983a10c57366221d12f0231f62314a71edf9f9bd0783e3ba38e0bbda8af3
MD5 60b82a7c4bf4a1dedabcaad2b75c7a2d
SHA1 0ce677f43a0755f463dac72e59ade01f407c68f5
SHA512 581511a121b2baafdc3add7176009abd2e36b3cf076ac100fd2b779523f9f1c5bd7ee522752dc341fb5803909479340bc79ee26c9579fd79859f2a950dc68e7e
TLSH
T1ED41D558A6FE0008B3B37E5AABF6A8AD447EBD372F0BD45E10110D4E4662A40C961B37
MD5 SHA1 SHA512 TLSH

Submit Download