Analysis

  • user interaction
    yes
  • max time kernel
    209s
  • max time network
    179s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    23/10/2026, 07:14

General

  • Target
    SmsM-v2_Slayed.exe
  • Size 4.3MB
  • Sample261023-h2watscd73
  • SHA256 86653bcec5854e7c4c4a51eb62777559d8c476831757ea042b16fe931680844a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

  • Drops file in Program Files directory 24 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 7 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 39 IoCs
  • Suspicious use of FindShellTrayWindow 36 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 47 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SmsM-v2_Slayed.exe
    "C:\Users\Admin\AppData\Local\Temp\SmsM-v2_Slayed.exe"
    1⤵
    • Loads dropped DLL
    • Checks whether UAC is enabled
    • Reads the TCP/IP host and domain name from the registry
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:3848
    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=SmsM-v2_Slayed.exe --webview-exe-version=1.0.29+103d6aed9fdf514a1c7230759ef86b0b196fe986 --user-data-dir="C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=3848.2356.18289735349798244203
      2⤵
      • Drops file in Program Files directory
      • Enumerates system info in registry
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of WriteProcessMemory
      PID:5052
      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x170,0x7ffb8906b078,0x7ffb8906b084,0x7ffb8906b090
        3⤵
          PID:4428
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView" --webview-exe-name=SmsM-v2_Slayed.exe --webview-exe-version=1.0.29+103d6aed9fdf514a1c7230759ef86b0b196fe986 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1732,i,2627092936594288123,2050270014837329379,262144 --variations-seed-version --mojo-platform-channel-handle=1728 /prefetch:2
          3⤵
            PID:4280
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView" --webview-exe-name=SmsM-v2_Slayed.exe --webview-exe-version=1.0.29+103d6aed9fdf514a1c7230759ef86b0b196fe986 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2024,i,2627092936594288123,2050270014837329379,262144 --variations-seed-version --mojo-platform-channel-handle=2032 /prefetch:3
            3⤵
              PID:5092
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView" --webview-exe-name=SmsM-v2_Slayed.exe --webview-exe-version=1.0.29+103d6aed9fdf514a1c7230759ef86b0b196fe986 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2364,i,2627092936594288123,2050270014837329379,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:8
              3⤵
                PID:4524
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView" --webview-exe-name=SmsM-v2_Slayed.exe --webview-exe-version=1.0.29+103d6aed9fdf514a1c7230759ef86b0b196fe986 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3632,i,2627092936594288123,2050270014837329379,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
                3⤵
                  PID:4432
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView" --webview-exe-name=SmsM-v2_Slayed.exe --webview-exe-version=1.0.29+103d6aed9fdf514a1c7230759ef86b0b196fe986 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4644,i,2627092936594288123,2050270014837329379,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
                  3⤵
                    PID:6072
                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView" --webview-exe-name=SmsM-v2_Slayed.exe --webview-exe-version=1.0.29+103d6aed9fdf514a1c7230759ef86b0b196fe986 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2164,i,2627092936594288123,2050270014837329379,262144 --variations-seed-version --mojo-platform-channel-handle=3792 /prefetch:8
                    3⤵
                      PID:2284
                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView" --webview-exe-name=SmsM-v2_Slayed.exe --webview-exe-version=1.0.29+103d6aed9fdf514a1c7230759ef86b0b196fe986 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4732,i,2627092936594288123,2050270014837329379,262144 --variations-seed-version --mojo-platform-channel-handle=4596 /prefetch:8
                      3⤵
                        PID:5760
                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView" --webview-exe-name=SmsM-v2_Slayed.exe --webview-exe-version=1.0.29+103d6aed9fdf514a1c7230759ef86b0b196fe986 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4596,i,2627092936594288123,2050270014837329379,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:8
                        3⤵
                        • Suspicious behavior: EnumeratesProcesses
                        PID:4604
                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView" --webview-exe-name=SmsM-v2_Slayed.exe --webview-exe-version=1.0.29+103d6aed9fdf514a1c7230759ef86b0b196fe986 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4240,i,2627092936594288123,2050270014837329379,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:8
                        3⤵
                          PID:5472
                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView" --webview-exe-name=SmsM-v2_Slayed.exe --webview-exe-version=1.0.29+103d6aed9fdf514a1c7230759ef86b0b196fe986 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4768,i,2627092936594288123,2050270014837329379,262144 --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:8
                          3⤵
                            PID:4740
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe"
                        1⤵
                        • Checks processor information in registry
                        • Enumerates system info in registry
                        • Suspicious behavior: EnumeratesProcesses
                        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                        • Suspicious use of AdjustPrivilegeToken
                        • Suspicious use of FindShellTrayWindow
                        • Suspicious use of SendNotifyMessage
                        • Suspicious use of WriteProcessMemory
                        PID:924
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffb827dc728,0x7ffb827dc734,0x7ffb827dc740
                          2⤵
                            PID:1304
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1696,i,3854564534991510935,4856066506629669948,262144 --field-trial-handle=2000,i,840033924970380721,14903417124644547906,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1980 /prefetch:2
                            2⤵
                              PID:4732
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,12774979859982577000,9875305073032082173,524288 --field-trial-handle=2000,i,840033924970380721,14903417124644547906,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2288 /prefetch:3
                              2⤵
                              • System Time Discovery
                              PID:3300
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2432,i,16737261924246027670,5489979372417993231,524288 --field-trial-handle=2000,i,840033924970380721,14903417124644547906,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2548 /prefetch:8
                              2⤵
                                PID:4872
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3260,i,15689014282332108642,7174837542850037025,2097152 --field-trial-handle=2000,i,840033924970380721,14903417124644547906,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3272 /prefetch:1
                                2⤵
                                  PID:2700
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3292,i,18173676285195280710,13712356417933238033,2097152 --field-trial-handle=2000,i,840033924970380721,14903417124644547906,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3316 /prefetch:1
                                  2⤵
                                    PID:4892
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4548,i,3565357418479845912,17173046850625055299,2097152 --field-trial-handle=2000,i,840033924970380721,14903417124644547906,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4560 /prefetch:2
                                    2⤵
                                      PID:2624
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4760,i,14453828958292539334,13037523594949537065,2097152 --field-trial-handle=2000,i,840033924970380721,14903417124644547906,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4732 /prefetch:1
                                      2⤵
                                        PID:1756
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5400,i,3920222873052222082,12922320652879044944,2097152 --field-trial-handle=2000,i,840033924970380721,14903417124644547906,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5500 /prefetch:2
                                        2⤵
                                          PID:3840
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5724,i,4462125048547666020,8157697958254215538,524288 --field-trial-handle=2000,i,840033924970380721,14903417124644547906,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5664 /prefetch:8
                                          2⤵
                                            PID:5132
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5612,i,11762977549377074671,1746766927256348780,2097152 --field-trial-handle=2000,i,840033924970380721,14903417124644547906,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5744 /prefetch:1
                                            2⤵
                                              PID:5328
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3344,i,10507352381823548507,13417874006025887464,2097152 --field-trial-handle=2000,i,840033924970380721,14903417124644547906,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3356 /prefetch:1
                                              2⤵
                                                PID:5404
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3532,i,13052028120137325879,10868627634772610745,2097152 --field-trial-handle=2000,i,840033924970380721,14903417124644547906,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3540 /prefetch:1
                                                2⤵
                                                  PID:5448
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5544,i,16009990449884690138,1915408266444591423,2097152 --field-trial-handle=2000,i,840033924970380721,14903417124644547906,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5548 /prefetch:1
                                                  2⤵
                                                    PID:5688
                                                • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                  "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                  1⤵
                                                    PID:1476
                                                  • C:\Windows\system32\svchost.exe
                                                    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                    1⤵
                                                      PID:5240

                                                    Network

                                                          MITRE ATT&CK Enterprise v16

                                                          Replay Monitor

                                                          Loading Replay Monitor...

                                                          Downloads

                                                          english_wikipedia.txt

                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5052_108716927\english_wikipedia.txt
                                                          • Size 269KB
                                                          • SHA256 ff105c5b6e65386cd0af95272607eca296c5b8b786c2f0bb4a9ffef20b4cd4f1
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          female_names.txt

                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5052_108716927\female_names.txt
                                                          • Size 26KB
                                                          • SHA256 a15bb2c5f362b00b74eb4a25c538f3862cf76ba235e6ab84c32722e0d06235f8
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          male_names.txt

                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5052_108716927\male_names.txt
                                                          • Size 6KB
                                                          • SHA256 95b2b51e4d30946e0e3873663a9e191503f4b7926eac98639c65ae06c383be0f
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          manifest.fingerprint

                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5052_108716927\manifest.fingerprint
                                                          • Size 66B
                                                          • SHA256 6a5e20bbc41a5ac347d7b85b0e3709431710357526e4661387597225d49dbfd7
                                                          • MD5 SHA1 SHA512 TLSH

                                                          model.markov

                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5052_108716927\model.markov
                                                          • Size 44KB
                                                          • SHA256 8882d44cf3dff2e2ca5ec1af749460040e41b8d1f20b3da2308c4f976d321754
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          passwords.txt

                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5052_108716927\passwords.txt
                                                          • Size 233KB
                                                          • SHA256 8b58407da38fc0edac67ad09487ee195cc171960f4a72ab756c912f46a052468
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          ranked_dicts

                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5052_108716927\ranked_dicts
                                                          • Size 865KB
                                                          • SHA256 5820d0bf9cfc363ff929492b1eb6df430039f4ac0e212a5b5411f7c2614f79d0
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          surnames.txt

                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5052_108716927\surnames.txt
                                                          • Size 74KB
                                                          • SHA256 9c57664a651bed87b046ed8bceebd0aad634538a917a75de0a8ecffef06ac641
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          test.txt

                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5052_108716927\test.txt
                                                          • Size 15B
                                                          • SHA256 92b772380a3f8e27a93e57e6deeca6c01da07f5aadce78bb2fbb20de10a66925
                                                          • MD5 SHA1 SHA512

                                                          us_tv_and_film.txt

                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5052_108716927\us_tv_and_film.txt
                                                          • Size 159KB
                                                          • SHA256 49185c0fb29f08237602dadd236d919e4372fb1f0f5baad2936ec6f51586bb24
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          protocols.json

                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5052_1186972793\protocols.json
                                                          • Size 3KB
                                                          • SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
                                                          • MD5 SHA1 SHA512 TLSH

                                                          crs.pb

                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5052_44762309\crs.pb
                                                          • Size 286KB
                                                          • SHA256 1a5fc66d5c38a3a0e99b6a90120b7abd3c42bdc3fb9b62e99fca271898550d6b
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          ct_config.pb

                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5052_44762309\ct_config.pb
                                                          • Size 24KB
                                                          • SHA256 fb01dc73c575e6426d637f6c72d3ba253b21b8a183c3f9e8d5da67a4353fe24d
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          kp_pinslist.pb

                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5052_44762309\kp_pinslist.pb
                                                          • Size 10KB
                                                          • SHA256 fcd4c7afc4b9465b47e9f0eff7d7b01af9fb2a8ed7b812df123673d95823a2f9
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          manifest.fingerprint

                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5052_44762309\manifest.fingerprint
                                                          • Size 66B
                                                          • SHA256 7bfd6cbdef90a0201e9f1c180f12f2c67a0bedd1fbe517e9c4ac874570eb4dc5
                                                          • MD5 SHA1 SHA512 TLSH

                                                          manifest.fingerprint

                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5052_851409797\manifest.fingerprint
                                                          • Size 66B
                                                          • SHA256 946f3a9e019b0d80f5671de782f295132341f663f74aebad7628f22e528d6d52
                                                          • MD5 SHA1 SHA512 TLSH

                                                          669caa69-2a41-4cef-90b6-b1d52537ded7.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\669caa69-2a41-4cef-90b6-b1d52537ded7.tmp
                                                          • Size 269KB
                                                          • SHA256 f2d3c9aeebb23fad326cf5834aee00598eea0c46564d0e4a892681464d7ea10a
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          82927bee-d746-424c-a50d-74cd83c4dc59.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\82927bee-d746-424c-a50d-74cd83c4dc59.tmp
                                                          • Size 130KB
                                                          • SHA256 95d2b9ffef7066378d6c55cf900309f63fc486db157741988cab46ab73a9aa55
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          settings.dat

                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                                          • Size 40B
                                                          • SHA256 84e6fd027ea8e630687c4c70bb82f9993501345987298d008342ed16c054e189
                                                          • MD5 SHA1 SHA512

                                                          03c15201-0964-4a38-8ba1-9c48a18103b1.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\03c15201-0964-4a38-8ba1-9c48a18103b1.tmp
                                                          • Size 13KB
                                                          • SHA256 7554050f71f25664c2dce72002702fb9e25cac1f85dfabaef8f5060100218189
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          0ebb462c-a3f5-4bcf-80cf-501df6dd11d4.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\0ebb462c-a3f5-4bcf-80cf-501df6dd11d4.tmp
                                                          • Size 6B
                                                          • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                          • MD5 SHA1 SHA512

                                                          4fa56f42-d97d-4e2b-9b63-566dd90ee2c4.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\4fa56f42-d97d-4e2b-9b63-566dd90ee2c4.tmp
                                                          • Size 17KB
                                                          • SHA256 d6ef7be1fdf322a98e133d0f16a9689d7b7e779ed80b3b246f7f0abd127671a4
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_000005

                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005
                                                          • Size 77KB
                                                          • SHA256 fa5b48622993f3cc7c569578515d98a06e386deb806f073cb24f66d6b9fa7060
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_000008

                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008
                                                          • Size 39KB
                                                          • SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          f_00000f

                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f
                                                          • Size 350KB
                                                          • SHA256 9213695e49135b2b4210878deefb3175bda171b6b435beac015f402684e5ddd0
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          temp-index

                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                                          • Size 600B
                                                          • SHA256 1a105b05f18c3b98cdee835f093046904eabdda8ce0531175ebde0d71704f815
                                                          • MD5 SHA1 SHA512 TLSH

                                                          4475beb2-48ce-4f90-9124-62e87fa2d58a.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\4475beb2-48ce-4f90-9124-62e87fa2d58a.tmp
                                                          • Size 517B
                                                          • SHA256 a83021b3b21adb4b2729da2c8cc70b245761bba1aaf29175b2acdbd782d21388
                                                          • MD5 SHA1 SHA512 TLSH

                                                          669c9a93-570d-4818-86d4-d32041628a52.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\669c9a93-570d-4818-86d4-d32041628a52.tmp
                                                          • Size 6KB
                                                          • SHA256 f4e4585204e0e6e08b56e0bf3ae36dbca0bf77e3ba0c8a2d0afd25d65ccdca8d
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          temp-index

                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                          • Size 120B
                                                          • SHA256 99f0f12f877a3d656d85f7b003887c280a6e8b98b1ad3c23c4686d7033d831d4
                                                          • MD5 SHA1 SHA512 TLSH

                                                          the-real-index

                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                          • Size 96B
                                                          • SHA256 26d1f6c998509827ab160fe15456271cfd9ca60dd53e260bb49830ceaa159826
                                                          • MD5 SHA1 SHA512 TLSH

                                                          temp-index

                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
                                                          • Size 72B
                                                          • SHA256 f4a30670de873ee9f69b3e51b1d624f6942f61f1eddb7930afee7f82781b6a62
                                                          • MD5 SHA1 SHA512 TLSH

                                                          ccf137dc-507a-4650-924c-884da6dcf1e2.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\ccf137dc-507a-4650-924c-884da6dcf1e2.tmp
                                                          • Size 13KB
                                                          • SHA256 b35bf4eb862526ecfd12967f89b05f0ff35f23f1d92f2174ac7f3f72ce894512
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          d7631569-f61d-4b44-abca-430cb3d5531a.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\d7631569-f61d-4b44-abca-430cb3d5531a.tmp
                                                          • Size 414B
                                                          • SHA256 e0540ffaeba689dd16d3e938ce45babeb73b1d7763660a74e3cc7386c4c38bfb
                                                          • MD5 SHA1 SHA512 TLSH

                                                          d497f15f-f74a-41da-ae0c-20e059973cf9.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\d497f15f-f74a-41da-ae0c-20e059973cf9.tmp
                                                          • Size 269KB
                                                          • SHA256 3e7a168e9e0aded6784389cffa49ea70f2290b927185e31f8759ca2b579c9d42
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                          • Size 2KB
                                                          • SHA256 b34594b93ac9ed8ed146d7c2e19bb20b13fed723040607a9018b89cef651304a
                                                          • MD5 SHA1 SHA512 TLSH

                                                          smsm-logo.png

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\Ui\1.0.29.0\smsm-logo.png
                                                          • Size 1.6MB
                                                          • SHA256 b587e76cd60f60fd6f635aaf757af0b4a5ea00da8d4e7b98c1f448d5ade54f56
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          ui.html

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\Ui\1.0.29.0\ui.html
                                                          • Size 79KB
                                                          • SHA256 912101213baca352805452f261cf0a9bcc14f1a63429d7783e82d83abbf67c51
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          WebView2Loader.dll

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2Loader.dll
                                                          • Size 190KB
                                                          • SHA256 3426dcc55fdfb8b5e7ac623cf33b4ccf283fbf68a0c5a65bddfdb4d749a8abee
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          1701cd4d-0aa8-4fd7-917d-e739837e8381.tmp

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\1701cd4d-0aa8-4fd7-917d-e739837e8381.tmp
                                                          • Size 16KB
                                                          • SHA256 49495874a83538d2cf6bfc4eaf78c6fe3e563f433c5a84671c8594c9994c6140
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          464814ef-ca3d-442b-9ff8-4e5d04f14a39.tmp

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\464814ef-ca3d-442b-9ff8-4e5d04f14a39.tmp
                                                          • Size 1KB
                                                          • SHA256 f413a6a19a1e27ab06525badf01e86f225a5f3d18a55dc7574a4b2b985d234a0
                                                          • MD5 SHA1 SHA512 TLSH

                                                          81766198-7e27-4458-bcdd-805745f7888e.tmp

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\81766198-7e27-4458-bcdd-805745f7888e.tmp
                                                          • Size 16KB
                                                          • SHA256 56d968a8a081169dcff57406b424ea51d02cc90594b4f34e3a77be2fd0dcc753
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          8dbffb36-9ae8-4026-9e24-ab5bbcf8b7fe.tmp

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\8dbffb36-9ae8-4026-9e24-ab5bbcf8b7fe.tmp
                                                          • Size 3KB
                                                          • SHA256 d95e01c87d5ba90e285e269a5b942112308570f39d9e6c5da64c17d14a98a736
                                                          • MD5 SHA1 SHA512 TLSH

                                                          9f16f576-2240-4e57-93fd-874edccd5c30.tmp

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\9f16f576-2240-4e57-93fd-874edccd5c30.tmp
                                                          • Size 17KB
                                                          • SHA256 f387dc0f4b1ddd6172a9f78306dc0335dfc6cb6df2f97fad5ec3adba6c469981
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          manifest.fingerprint

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\manifest.fingerprint
                                                          • Size 66B
                                                          • SHA256 e84df839eb3dee2a10ba66de65c372c6e2bba0cbab46a39af041f4eeaab1ffe8
                                                          • MD5 SHA1 SHA512 TLSH

                                                          manifest.json

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\manifest.json
                                                          • Size 135B
                                                          • SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
                                                          • MD5 SHA1 SHA512 TLSH

                                                          settings.dat

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\Crashpad\settings.dat
                                                          • Size 280B
                                                          • SHA256 fa338db5b4f07116383ef9c2462db4ae956edccbaf2974c7b6cdadffbcda90ab
                                                          • MD5 SHA1 SHA512

                                                          settings.dat

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\Crashpad\settings.dat
                                                          • Size 280B
                                                          • SHA256 08a3c29a031bd40e3b86b76a1e73b7ad00fec4df614ee907331a16234fecba16
                                                          • MD5 SHA1 SHA512 TLSH

                                                          throttle_store.dat

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\Crashpad\throttle_store.dat
                                                          • Size 20B
                                                          • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                                                          • MD5 SHA1 SHA512

                                                          9408132d-e547-4c93-962d-fd07aef8a324.tmp

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\Default\9408132d-e547-4c93-962d-fd07aef8a324.tmp
                                                          • Size 6KB
                                                          • SHA256 2574bb2a41658b02cc475b69607a6447864a4f60b06e80d91d748574e8057b73
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          9428cf06-d5cc-4677-be4d-f3c94df0fd31.tmp

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\Default\9428cf06-d5cc-4677-be4d-f3c94df0fd31.tmp
                                                          • Size 6KB
                                                          • SHA256 c312f61a2744522641bb551d2caef27f7d8e3a2d0bb292ab9d255024d0226b7f
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          index

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\Default\DawnGraphiteCache\index
                                                          • Size 256KB
                                                          • SHA256 78619eda57ee354d4cae6592f1b13553386b06f8aa52e733d2f1f9b2facd3d2d
                                                          • MD5 SHA1 SHA512 SSDEEP

                                                          CURRENT

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\Default\Extension Rules\CURRENT
                                                          • Size 16B
                                                          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                          • MD5 SHA1 SHA512

                                                          data_0

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\Default\GPUCache\data_0
                                                          • Size 8KB
                                                          • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                          • MD5 SHA1 SHA512 SSDEEP

                                                          data_1

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\Default\GPUCache\data_1
                                                          • Size 264KB
                                                          • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                          • MD5 SHA1 SHA512 SSDEEP

                                                          data_2

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\Default\GPUCache\data_2
                                                          • Size 8KB
                                                          • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                          • MD5 SHA1 SHA512 SSDEEP

                                                          data_3

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\Default\GPUCache\data_3
                                                          • Size 8KB
                                                          • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                          • MD5 SHA1 SHA512 SSDEEP

                                                          Network Persistent State

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\Default\Network\Network Persistent State
                                                          • Size 59B
                                                          • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                          • MD5 SHA1 SHA512 TLSH

                                                          SCT Auditing Pending Reports

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
                                                          • Size 2B
                                                          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                          • MD5 SHA1 SHA512

                                                          a6baa19a-c076-4e35-b99b-492b352c74d5.tmp

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\Default\Network\a6baa19a-c076-4e35-b99b-492b352c74d5.tmp
                                                          • Size 821B
                                                          • SHA256 8d2720cbfabe0b0f4d03ff39f24fbb788311e34663e31759d43d8bdc11474339
                                                          • MD5 SHA1 SHA512 TLSH

                                                          Preferences

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\Default\Preferences
                                                          • Size 6KB
                                                          • SHA256 cc8ed99a33224caebb0e593e765342958b02b4c526d4247b3353272d9cbf4993
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          MANIFEST-000001

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\Default\Sync Data\LevelDB\MANIFEST-000001
                                                          • Size 41B
                                                          • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                          • MD5 SHA1 SHA512

                                                          Local State

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\Local State
                                                          • Size 1KB
                                                          • SHA256 a90f9e74ad93ab21c05db34cd95827ab5cfa3bb95b4304659bbd27a250d74387
                                                          • MD5 SHA1 SHA512 TLSH

                                                          manifest.json

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\OriginTrials\0.0.1.7\manifest.json
                                                          • Size 43B
                                                          • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                          • MD5 SHA1 SHA512

                                                          manifest.json

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\PKIMetadata\71.0.0.0\manifest.json
                                                          • Size 102B
                                                          • SHA256 4a918873dddefc4e395c8a9f8580c8f03c9a37512eb7da6e6454730be756fdac
                                                          • MD5 SHA1 SHA512 TLSH

                                                          manifest.json

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\ZxcvbnData\3.2.0.0\manifest.json
                                                          • Size 69B
                                                          • SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
                                                          • MD5 SHA1 SHA512 TLSH

                                                          e33c6f56-5653-4824-a518-9f8d65838808.tmp

                                                          • Path C:\Users\Admin\AppData\Local\SMSM\SWYF-Installer\WebView2\EBWebView\e33c6f56-5653-4824-a518-9f8d65838808.tmp
                                                          • Size 2KB
                                                          • SHA256 382469a2cc9a0f06285e297ae6e6a6aefcad3c7a25e760ba67e184c8c37431a1
                                                          • MD5 SHA1 SHA512 TLSH

                                                          memory/3848-16-0x0000021F6AD10000-0x0000021F6B238000-memory.dmp

                                                          memory/3848-5-0x0000021F64750000-0x0000021F64760000-memory.dmp

                                                          memory/3848-1-0x0000021F64750000-0x0000021F64760000-memory.dmp

                                                          memory/3848-2-0x0000021F65AF0000-0x0000021F65CB2000-memory.dmp

                                                          memory/3848-3-0x0000021F4A710000-0x0000021F4A71E000-memory.dmp

                                                          memory/3848-4-0x0000021F68620000-0x0000021F686CE000-memory.dmp

                                                          memory/3848-241-0x0000021F64750000-0x0000021F64760000-memory.dmp

                                                          memory/3848-9-0x0000021F64750000-0x0000021F64760000-memory.dmp

                                                          memory/3848-240-0x0000021F64750000-0x0000021F64760000-memory.dmp

                                                          memory/3848-239-0x0000021F64750000-0x0000021F64760000-memory.dmp

                                                          memory/3848-0-0x0000021F49E50000-0x0000021F4A296000-memory.dmp

                                                          memory/4280-34-0x00007FFBAAA20000-0x00007FFBAAA21000-memory.dmp

                                                          memory/4432-152-0x00007FFBAAA20000-0x00007FFBAAA21000-memory.dmp

                                                          memory/4524-115-0x00007FFBA9A40000-0x00007FFBA9A41000-memory.dmp

                                                          memory/4524-116-0x00007FFBAAA20000-0x00007FFBAAA21000-memory.dmp

                                                          memory/4604-660-0x000002AEB9AE0000-0x000002AEB9AE1000-memory.dmp

                                                          memory/4604-653-0x000002AEB9AE0000-0x000002AEB9AE1000-memory.dmp

                                                          memory/4604-652-0x000002AEB9AE0000-0x000002AEB9AE1000-memory.dmp

                                                          memory/4604-661-0x000002AEB9AE0000-0x000002AEB9AE1000-memory.dmp

                                                          memory/4604-654-0x000002AEB9AE0000-0x000002AEB9AE1000-memory.dmp

                                                          memory/4604-662-0x000002AEB9AE0000-0x000002AEB9AE1000-memory.dmp

                                                          memory/4604-663-0x000002AEB9AE0000-0x000002AEB9AE1000-memory.dmp

                                                          memory/4604-664-0x000002AEB9AE0000-0x000002AEB9AE1000-memory.dmp

                                                          memory/4604-658-0x000002AEB9AE0000-0x000002AEB9AE1000-memory.dmp

                                                          memory/4604-659-0x000002AEB9AE0000-0x000002AEB9AE1000-memory.dmp