cca66af97e2bd0a0f5e249cd082733450aef113aad6d8607c7cf52aeca97ae68

Analysis

user interaction
yes
max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 15:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
deepseek_lua_20261101_01afad.lua
Size 804B
Sample261102-st2sraa121
SHA256 cca66af97e2bd0a0f5e249cd082733450aef113aad6d8607c7cf52aeca97ae68
MD5 d3d98bf070de167b00e82e1935f4804f
SHA1 01afad563816c69c8814985ffa5a32eb6d8d6771
SHA512 f73b620c7e884cff1a5690f29f5c8189c3d168644494e985c9044d861557387f735e0f9440eaf261e9b286ddae5a96faadbfd9a978e8aa79655be9ca877813d0
TLSH
T1FB01496E3BE16254646400FDD3370C4A3E68E1178A9D2363EF889735714C29EC5F7E10
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery execution

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4684	cmd.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1388	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{AB0F4EA8-BF6D-4CDE-8526-E717E3210FD1}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Local Settings	OpenWith.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
1716	chrome.exe
1716	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe
Token: SeShutdownPrivilege	4904	chrome.exe
Token: SeCreatePagefilePrivilege	4904	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe
4904	chrome.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5692	OpenWith.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4904 wrote to memory of 3028	4904	chrome.exe	88
PID 4904 wrote to memory of 1388	4904	chrome.exe	89
PID 4904 wrote to memory of 5476	4904	chrome.exe	90
PID 4904 wrote to memory of 5476	4904	chrome.exe	90
PID 4904 wrote to memory of 5904	4904	chrome.exe	92
PID 4904 wrote to memory of 5904	4904	chrome.exe	92
PID 4904 wrote to memory of 6000	4904	chrome.exe	93
PID 4904 wrote to memory of 6000	4904	chrome.exe	93
PID 4904 wrote to memory of 4224	4904	chrome.exe	94
PID 4904 wrote to memory of 4224	4904	chrome.exe	94
PID 4904 wrote to memory of 2068	4904	chrome.exe	95
PID 4904 wrote to memory of 2068	4904	chrome.exe	95
PID 4904 wrote to memory of 5940	4904	chrome.exe	96
PID 4904 wrote to memory of 5940	4904	chrome.exe	96
PID 4904 wrote to memory of 2408	4904	chrome.exe	101
PID 4904 wrote to memory of 316	4904	chrome.exe	103
PID 4904 wrote to memory of 316	4904	chrome.exe	103
PID 4904 wrote to memory of 2888	4904	chrome.exe	109
PID 4904 wrote to memory of 2888	4904	chrome.exe	109
PID 4904 wrote to memory of 4624	4904	chrome.exe	110
PID 4904 wrote to memory of 4624	4904	chrome.exe	110
PID 4904 wrote to memory of 5264	4904	chrome.exe	111
PID 4904 wrote to memory of 1824	4904	chrome.exe	112
PID 4904 wrote to memory of 1824	4904	chrome.exe	112
PID 4904 wrote to memory of 5184	4904	chrome.exe	113
PID 4904 wrote to memory of 5184	4904	chrome.exe	113
PID 4904 wrote to memory of 3196	4904	chrome.exe	116
PID 4904 wrote to memory of 2916	4904	chrome.exe	117
PID 4904 wrote to memory of 5320	4904	chrome.exe	118
PID 4904 wrote to memory of 1716	4904	chrome.exe	121

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\deepseek_lua_20261101_01afad.lua
1⤵
- Executes a command shell one-liner
- Modifies registry class
PID:4684

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffdd880c728,0x7ffdd880c734,0x7ffdd880c740
  2⤵
  PID:3028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,17393063821228373097,9350179980185294755,524288 --field-trial-handle=1600,i,6244474889940253933,138785983208712755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2068 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1744,i,3471139114792388570,11557189328305954392,262144 --field-trial-handle=1600,i,6244474889940253933,138785983208712755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2008 /prefetch:2
  2⤵
  PID:5476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2108,i,12881695968875478998,17195387282319558434,524288 --field-trial-handle=1600,i,6244474889940253933,138785983208712755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2448 /prefetch:8
  2⤵
  PID:5904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3196,i,14574855749886277982,15293005137943122612,2097152 --field-trial-handle=1600,i,6244474889940253933,138785983208712755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3208 /prefetch:1
  2⤵
  PID:6000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3244,i,6286623426009974267,13547395108068774798,2097152 --field-trial-handle=1600,i,6244474889940253933,138785983208712755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:4224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4496,i,655818885513468369,17552740901316741922,2097152 --field-trial-handle=1600,i,6244474889940253933,138785983208712755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4508 /prefetch:2
  2⤵
  PID:2068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4764,i,61147328485763000,12426978196089682462,2097152 --field-trial-handle=1600,i,6244474889940253933,138785983208712755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4792 /prefetch:1
  2⤵
  PID:5940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5572,i,16995147436504055249,13617545888295260669,524288 --field-trial-handle=1600,i,6244474889940253933,138785983208712755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5456 /prefetch:8
  2⤵
  PID:2408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5828,i,2683813631612342075,4606645954823791789,2097152 --field-trial-handle=1600,i,6244474889940253933,138785983208712755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5664 /prefetch:1
  2⤵
  PID:316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3280,i,15410144896079369337,6425310229615636570,524288 --field-trial-handle=1600,i,6244474889940253933,138785983208712755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:2888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3248,i,10569369106835665255,2552668250333070844,2097152 --field-trial-handle=1600,i,6244474889940253933,138785983208712755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3412 /prefetch:1
  2⤵
  PID:4624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3468,i,13173133416506015333,1119346114603475975,524288 --field-trial-handle=1600,i,6244474889940253933,138785983208712755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6004 /prefetch:8
  2⤵
  - Modifies registry class
  PID:5264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6020,i,7044595745868163086,812170120620686269,2097152 --field-trial-handle=1600,i,6244474889940253933,138785983208712755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6052 /prefetch:1
  2⤵
  PID:1824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6244,i,8009147166848672747,12906970803975938845,2097152 --field-trial-handle=1600,i,6244474889940253933,138785983208712755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6204 /prefetch:1
  2⤵
  PID:5184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6456,i,16517473403554954304,7679067578578503550,524288 --field-trial-handle=1600,i,6244474889940253933,138785983208712755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6408 /prefetch:8
  2⤵
  PID:3196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3404,i,14313957288434531413,13866202154960077714,524288 --field-trial-handle=1600,i,6244474889940253933,138785983208712755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3952 /prefetch:8
  2⤵
  PID:2916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3264,i,14630142157573281204,17576648871878386490,524288 --field-trial-handle=1600,i,6244474889940253933,138785983208712755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3200 /prefetch:8
  2⤵
  PID:5320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5800,i,18294712823638965744,13935403208184046749,262144 --field-trial-handle=1600,i,6244474889940253933,138785983208712755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4620 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1716

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:5692

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5028

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:6100

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

179922bf-fd09-4cb4-9ff2-e1c1fd97ef90.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\179922bf-fd09-4cb4-9ff2-e1c1fd97ef90.tmp
Size 269KB
SHA256 2567093e5e26d5bfa04d144b198e0ab45ead212a24666bab9f8bdce0c1d7d2de
MD5 c9a9e55ccb1ef7c83e9035f1070b3c4a
SHA1 3b68f189f6b769c37a876cd185d8a2e564c0af92
SHA512 14af59315e9917fa7169702f7aa8071d7a91ab7649fe98bde8f3cc2d3ffb6b1d1bd9734e25fee0542d9a11fa0feb9220c9ad93b0093f0f35b66712f155db8d0f
SSDEEP 6144:aLvHWe40m3otUf+8Wp53EX9pxsNTK+hFD+7t56OD9ZfSApprL:+493obX3ETxsQyFSXD9ZfS41
TLSH
T17F4422298EC5AC7BCDFC5187750BF7059E688DDA52DA9A0408A12F8F711FC5E06B3632
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

26899474-347a-4906-82fb-46caa57aee10.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\26899474-347a-4906-82fb-46caa57aee10.tmp
Size 130KB
SHA256 46abdbad9175969e2b4ecf203eaae13baf5835e9d924e901c0595b9257cf3732
MD5 eca5a2b416fd0b3a012f534c2eb4a29f
SHA1 36c59e64aa081cd49a6e72a41294f0860e4d6ddf
SHA512 7094189fef508ce544ee555cee48d903f28914b34dc0a952edf55e6e79b57a02c4757844faaffcdad4507dbf735bc565604cd182f5b14a8513fbfcbcdff65bf2
SSDEEP 3072:UO+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gB:UO+hFD+7t56OD9ZfSApprB
TLSH
T1A2D31232AA91D8BBC9BC6141B157A300CE76ACED45DE3A09444A5F8EE05FD4C07B3A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4d8d24a6-9626-4234-a13a-649178aa1535.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\4d8d24a6-9626-4234-a13a-649178aa1535.tmp
Size 269KB
SHA256 26817d9fcae8e8d75a3be9095deae8b716e66816f5241d90f46403d82529d547
MD5 c9541b905404b2c5aea3a9da281ab711
SHA1 c219b659d16f309c03fb0286206183a07ced7a96
SHA512 2c12cdbb1d27ccabad9ea0f9dc7b5444d1580540f2f14d904f2b02628b1a56ed5eccbd1abe51c0009ebeef1457db5c9d6111fd8e52925048c8b52f3e70237c5d
SSDEEP 6144:pLvHWe40m3otUf+8Wp53EX9pxsNTK+hFD+7t56OD9ZfSApprL:P493obX3ETxsQyFSXD9ZfS41
TLSH
T15E4422298EC5AC7BCDFC5187750BF7059E688DDA52DA9A0408A12F8F711FC5E06B3632
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1a0f8026-f14a-48c0-bffe-0212b13c1279.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\1a0f8026-f14a-48c0-bffe-0212b13c1279.tmp
Size 13KB
SHA256 7f54d0f9b6e8f47934ff72aa9c6a7bafeaef30da88321a096645352b2a7734cf
MD5 2d140eeeeef7f143bfd295dbc0d90c22
SHA1 6d17ba69f82541f1363a8375e9305fb55659b3c9
SHA512 3312978dff218393e710a50d21ba7c625558a584bbd499c8b28db970e75b52e8dada94cbae508d47f9b54eed1ac0345fb5de2bc510786b0784036d9b5ce7bee5
SSDEEP 192:NR66cBhNnEHcKLv7vhAPRp2D8v/96Hsb+WN4ph34Qu22+eweE2rw+VyIsnAUgtaJ:NR66mhNKzD8XHswaG22+52rw28
TLSH
T16052A36ABA10793B5CDBD229F9217B6BD3F5102520D42E80EAF88D3C15E7ACC721741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

518faced-2abb-4be5-940e-899410561b7c.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\518faced-2abb-4be5-940e-899410561b7c.tmp
Size 17KB
SHA256 2402969cd2ec72ea72b513389c43205a9ee2bceca1c456ef576613e3544e19a0
MD5 ef2f6beced6ed991eb5f4b124485b70c
SHA1 13ae98461b417e18835295fc68f98db326a5bad0
SHA512 5adbe06b2aba408c8975b2dfc7f1c8c160dc3367ebb5f8a049421cc510b871c0310b3c4cd24506c3615f6972ff559c98cb7cd22bc47816248c6501f19779082b
SSDEEP 384:tyjCjRyjH7KxkXqKf/pUZNCgVLH2Hfgslqq7pLuLceSzyjDXODRyjr+ErU3J6HG2:Ie0r7KxkXqKf/pUZNCgVLH2HfgsMq7pw
TLSH
T1A0720A77BC0C9A7B0F94C68CD8167E4FEDB5024B65D9886443FA983503D5BDA110A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

885e62e2-2a2a-4dc9-a408-8c0384018980.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\885e62e2-2a2a-4dc9-a408-8c0384018980.tmp
Size 414B
SHA256 de9250c61883705f88ca895352f2707655a13cdfe23b707fb1174b82ad839577
MD5 e30807e6d8fbb5485218b37b266dce24
SHA1 4c35d399f54817e7b25d40d56195d4fda8e76b57
SHA512 2238b062c08983ec02196f8ab5fd99f40aaf8cea2201c3b47d730482cfc1728fd7794a57b8027741484c10b192560fa28f3746fe62ff81c788a46e67bd0b1739
TLSH
T1B4E0E5F6C822F82B68FD5A1D54544B87F64A13562680850B3A3D45098FB4A2641CA85C
MD5 SHA1 SHA512 TLSH

Submit Download

957d339c-42b2-4064-a435-2634e18d42ae.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\957d339c-42b2-4064-a435-2634e18d42ae.tmp
Size 14KB
SHA256 c4f402f0641db9620e0777b0e0bfb10a87a4bb3b0424434936cf6487db3f08eb
MD5 bf2f3b0d52c21b679370c268b6901ba0
SHA1 ab7eea03edeb571014a6854ab244da6f4adf572d
SHA512 79be07a131c811f62b854184f761a181f65631c8d70cf2c70f396ce657d89a4305a67c281c69e7d166a904b7ba872739b911e2152ccb3dc30413f56aafea2eef
SSDEEP 192:NR66cBhN7EHcK+v7vh5PRp5D8v796Hsb+WN4ph3u5/+Qu2UeweE2rd+VyIsnAUge:NR66mhNm6DLXkswag02U52rd2e
TLSH
T16062B56ABA10797BACDAD229F9117B6BD3F1102524D42E80EAFC8D3C15E76CD3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

96e13c7a-7d4e-4529-aa13-da9ce36fd64d.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\96e13c7a-7d4e-4529-aa13-da9ce36fd64d.tmp
Size 14KB
SHA256 396dfd8ff48ce5362f1e6b01dd48080e9e674839cd7ee9f5540b682a64b06a14
MD5 2512e8849b51efe1129eaa4edc3b220e
SHA1 1da7c5d22eb8bab00172260115a88261d3dd7fe3
SHA512 bee9f7457ec278dc1734ac0bee3957573767bbf2383fb4ad1c6f1d1268d433aa842fc7d3bbc8b5b51f2dd942c1f67db442cd1e67df874c335ae6bc82ea12024d
SSDEEP 192:NR66cBhNnEHcKjv7vh5PRp5D8v796Hsb+WN4ph3u5/+Qu2UeweE2rd+VyIsnAUge:NR66mhNKbDLXkswag02U52rd2e
TLSH
T1CB62B46ABA10797BACDAD229F9117B2BD3F1102624D42E80EAFC8D3C15E76CD3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 346KB
SHA256 0f8a0722302d1b8e1050f1c7882af2c0feb056752c3feddcc0b4316891d60d44
MD5 cffe89fe76f974f10f591767becdc8ea
SHA1 63d099b0fca6062bb726f3c8bbbc704a1611182d
SHA512 69a6672dde71770eef237d7bedfb1a82317a68339abd399505acf995dc2132b0ef4e4fbd36b8453c8b9556877ba778722662b901166c77ef2c38a8d88a0a8a3d
SSDEEP 6144:kEen5NJZWrGd8LABzhu4/tZvMBhSoAxh/u0jd33ScBSNFWMI+t4A9AdHgndKrRqL:ktLWrGDdlMBhSoAxU033ScoNFWMmgnEa
TLSH
T1E774230B2E1DCA322357475B503E382845454A294BCF27921B689BE8853C9FBBEF51DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f
Size 437KB
SHA256 a451b8791f9183f16a2b30959f9f69e20f35117f8ca6e34e463916869328f3c8
MD5 15d9ce7fe8b446c91cc0598983dde50a
SHA1 b2ad1e9b11a41f5176e3cc495dac68aa26e0955f
SHA512 39e14f23bbde8278b586057eeb648777afc1e6d11b71f3e5529688341f7868b61d0d7ef43cc925189a70def4a6b53e863a06fc8d36e7551c9a50745be6607529
SSDEEP 12288:9SyJNj5Vy52pw6eyroMIW3/dJhlzOH7pVUa0Uiku:9vJzV1pw/yroMfCIUfu
TLSH
T10B9423CFDB2108E7FE76C411CDAD9FE8049BA554056D8CB35BB6066D825A0808636FEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003d
Size 39KB
SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
MD5 9a01b69183a9604ab3a439e388b30501
SHA1 8ed1d59003d0dbe6360481017b44665153665fbe
SHA512 0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca
SSDEEP 768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO
TLSH
T13703023A5E3CCF1A84157A703950F6D9A8481E548E9D143B4F1AC7BF085DDE2209B6D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000075

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000075
Size 34KB
SHA256 1a5f55a95ecd7bb13261d765c57883366ef18f480746523bd6d1263afa3133e5
MD5 0fee9bca7b95eb8f86336bfece97c6ff
SHA1 93108ae767bd45bfd017e50301558742dca142b9
SHA512 28a8cc8dafc2b2ae2bd108041d13979ff03363060f0a02c75bf3994e162b82f12f2938eb593932f74b0203fe6e57d43f28c7eb2051b4d497263a2f5b172837f6
SSDEEP 768:0Ppm11YyP3x4tnHfJ1CrqynVc343iwjwCG2m2p:0w11YY4F/3CrqynG343iw+2t
TLSH
T167F2F173765A16C8DE788131BE0A9C223C49E357A2C5D7E267892CC03AB1DC1A33C636
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000077

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000077
Size 34KB
SHA256 95795831365e2d809f5800ac14d191b74cbe34f5b1bc756d2badaffbaece963a
MD5 3e886f90af804326c5a578ef2262d4e0
SHA1 8f5a3ef4891e21301ec62e5d5b02471babae98cc
SHA512 fd8a15f4526f7bac6663c10ce7f4145d5d8b9025729045b2c085d748bed09b424b04dfe650506820d0ad9e77f01292c0999a88a34757a914c8cfac3f6f6a2da9
SSDEEP 768:KmfpEhdRkFiveOf5WhApnfB+TLbZrr7MFjLUFP8YyFPr8K9CyGfgEVfgnM:KmfpEhRmOf5bnZ+THtrwe8H+vfgE+M
TLSH
T154F2E1DAFD54F203EA292DC111BDA08C6DDD35B979EF95F52668CE0935A6D08C00AA06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000078

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000078
Size 34KB
SHA256 e1938cb55e6f1fabd08218dd1876cd4498341dd577cceca1e40e94b295c319a8
MD5 0e651db015baaa2adfb96ae73e5e3ae1
SHA1 2b7ce1d6f7ae7b4dcea6ff2d54aa67bb360073d1
SHA512 8cbcde1ebe508e8edfb8587642f073942b5a3daefc3a5bf25a7473c0a03c8791b55fafd4fe115a27b4fcbd6add652505f929d871d033c196657e84f320fd1616
SSDEEP 768:T3yCKXsDxMHmew4dI4cry7G08ehYuRQeIrapoctY:TJKX4xMHmew4c27R8dFeIra6p
TLSH
T1ADF2E1D6B5C91C29E593A7A140E41324A436BCB40CFE7C8EF750A6784F68E734191BA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000079

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000079
Size 36KB
SHA256 725985871fa72c8755e3e625709cfac9e1beb252c7787243c1a2894c3b0c03b2
MD5 d602932f31ff8f5945af6339711ec319
SHA1 4b3aa4937061ca2e02c746307957ccd4afacde65
SHA512 650556e3a75f4a1e285d7f665e859f71ef89b28b157003cb1886801124456da62d6cb657522e54fb1cfe5f54c0a4b0b047772057dde74f5758a90a0cacb4b705
SSDEEP 768:LBbixScDAsBQu4hv/+B9mhY7aq1hzdM09Gi9WKp7L0Ccy9hDph:LBbKX8sBQth+B9DWq17Ei9Z7L05ehVh
TLSH
T17EF2027303E7BFA85965DE738860FB7B0A83B71913E05E8BC4612809F059EBB5510F25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007a
Size 34KB
SHA256 76ca78302e0fc0a9c25e4eaa3d5730c57e33432d733b99cca15573d3c1f0bab3
MD5 4d44b7556307cc5ecd7f7c21335cf9ac
SHA1 812f89b6a8708a9ce022e89ed7b5ad7dedeab941
SHA512 4d0ccfcbd2657094d50bfbd855d881cc62a5bb812dfe8246c2d6eacf97a96ee000d70ee878e98c61e4d8384f17bf5e3bb776ff4ec7a9da4810a8f7992719764b
SSDEEP 768:sK9OjyS29RMOBJT29CwZaZr8v71rohITX3t+AO1Mr1cgnvhbHpaHZmO:h9OjR29Okwq8v7iITX3kQpcYCZmO
TLSH
T1DAF2F102CFAEA100F3809CB6A8E8CA9F305C99B50231E4C54C047E759F57AF9F9D193A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007b
Size 37KB
SHA256 d0a2df81eb1456959e55db155d9fdf2a476e9fdf1437e575d8bf731c4ed16bf4
MD5 7800dda8ce5526783756169bc9af13f6
SHA1 986191ed906515bfad443d2559a8816faf47956f
SHA512 a88e626c8ac0f40e34cc816fcb60f8adfa63b66ae43563bdbb1038064524de50052c787b0b524d585238126fac29e91407f2d2989641089c437af0be573125f4
SSDEEP 768:dWQFK21TniUB3UcIBQGa73kDNftrQJbAlgmtRRMptZ:dVTnHkcIBQjIllgSSb
TLSH
T1CE03E1C81E66EDF1B0ECBD708446EA3F5B172C59EA1AFA0B59FC100576498399BC61C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007c
Size 43KB
SHA256 22fa7d2707e3ddfd2df3d05354e8292ca817054ec02c2c142c82a4d04c8ac689
MD5 01ccc24e2bf203fa5a9535323cdbdf98
SHA1 76c5267b2eeaa4d9075e791723a5dd5a8c9c0e30
SHA512 ebd2946bdcc840fc933d329adc6905ef1cb23ca89009a8e391f5211f4d997775869c6e75709302bac5472b9db2410ca8b370464f47146bcce62752172b359f59
SSDEEP 768:9GRC8kdZiBrRBuD+NHx/LbcDB9DUti5TQxG1hwPabiZdFNDb7qhs1rU:4RC8kdO5rsDB5Ug5poT3/bxJU
TLSH
T12B13F29848C0216D0844F6FF9F61E53991AD9BE0210069727F6F4E4EF56A47E7ACFB40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007d
Size 2.0MB
SHA256 5038198f911c8c2548c421af57302e7add1a6ba57f2f5e04147085890a927083
MD5 0cf71866056994dbce06139f6d21cc9f
SHA1 fe0373fbec088282505efa868de2803358c65e1c
SHA512 3686af4e732b92e617c7a5cfb649831e0b865261bbd2c443375768eac3d492c01dd57add1b3951514948d665d2de38a6a0e9b7ea17958b05b853222240892eac
SSDEEP 49152:99NZYYoKH1tx7xaE38v5KRZsHwHvUXB2sf3MMvLJ:Pp5Ht0E3F+QH4bvMMvLJ
TLSH
T145A533B9863623E9E0FA4896547FD84B27907F0B2733F505B11CA35543A287B43A4DFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 993a02d8629fc7625b3630d024a3446c71ce98b1ff444a7600f7d97440c2178c
MD5 e80e63ff2b898de240974f24326249fa
SHA1 5d828f3fd3a856336f885094956b200a9da8bf84
SHA512 deb99cd992d7967d7d3cab04b0995953157def0e6d8b0ce7b745debaa0c9defb0eb1de3d6dbcc1050197da9c293f300e9bf692569196a6231476372581b2748a
TLSH
T12371F92EB0C36214EF7CF971A97A4F25665613DCC1D56B5BCDB2E83227836C821920E4
MD5 SHA1 SHA512 TLSH

Submit Download

7d032a52-aa51-4a0c-b650-127905753e3f.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\7d032a52-aa51-4a0c-b650-127905753e3f.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

92af3f52-bf39-4d9a-a445-b1976d2443ef.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\92af3f52-bf39-4d9a-a445-b1976d2443ef.tmp
Size 11KB
SHA256 7e557229b8f6a7f27fe7aaf7a9c6c4d37a9972932ba039b697f89a454ea02444
MD5 f706cebe0c06bdf62b74791c0d82979e
SHA1 198751a19b09498b6a9144ce60d79391b76e6a45
SHA512 e848599505302522b5152fb065ec89d2bc639ed1b39cb2f6a605471f36e80a49782d8be05b756e04beb3a28b8ce9a716f9ce7d824980e2d5f62f0fb51b871b63
SSDEEP 192:DtkGmc0xA0Jq1JxJA8HwiaI9h40D1ESIuI5I0aPxvu2IDGNPsfPh/DCeU51SNHu6:DtkGmc0xA0Jq1JxJA8HwiaI9h40D1ESs
TLSH
T14932CCF7C3E8C62D890156F49B156E1ECE1A1A28432D3C67C8D8BE4BA3F2471D21579E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c676147c-c6d8-419c-b7bb-fbd2ca8f0d59.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\c676147c-c6d8-419c-b7bb-fbd2ca8f0d59.tmp
Size 12KB
SHA256 596f44bf72e2c8986409e69663bb14fc4c9b734574f70245c53d94aad5d5719f
MD5 7109bff1879846325f47cbcb0ff632de
SHA1 49b6c5f7689ae28ebc5e32351d348a2e675b737c
SHA512 1e87d67d56c801d62847b03cec709df6d1f3841b53f500737ac5a5c1c7aedd29ccd16c9ac6517533d178a0764ace894205cf5cc16d49fd7194d9e61b06b4e9cb
SSDEEP 384:DtkGmc0xA0Jq1JxJA8Hw6baI9h40D1ESIuI5I0aZW2IDGN0fp/DCeU51SNQQHzg7:xTgRC7aeo9A
TLSH
T1EF42BDF7C3D8C62D890156F49B156F1ECE191A28432D3C67C8D8BE4BA3F2471D21569E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 120B
SHA256 ae5ca146222bb1737f8858caf2a44da43210fa1ba6703c9ef59b057c9952152c
MD5 f3f9cce37b9ed594bb086e7930ee55b4
SHA1 e1d892d195027bcbbc9c61be30c6c63590cd4107
SHA512 e893250ac139c302bdaa84dcb00a18cd20f8572ee8558561fa3810443222e25c41e2ccd4c4540224fc7f681f80d0b3f85bd0ea2d7e5c771ad240f591aed6d415
TLSH
T1A3B01255D1862B01C00103B11150949432E08F34D11213C5C1E10D328C311D0505B118
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 77159788de0b0f1a04b6d2838df5dca86239e331a209b673cb09fd3e753e2a81
MD5 845d9e69774eac83acf04d92f9b9f3b1
SHA1 9ad62e36a9afeadf6973f25efe7add5c22448fa0
SHA512 f5d8659e91ac9776f9bb89d0a0970c7025a8ee63ec2bed5ff47000892caf55ffd37253ee9e26331556346a287214551fec37ad87ecdfa1230acee0fe2c0a944b
TLSH
T1CBB02230C0822232C08303F02880AECC30ACEF2AC203020AC3E80A32CC232200020CE0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
Size 72B
SHA256 e20dffdbbcfa7e8ccfa6cdf9d6655971f112b17f2e9d87837e7ebef248cfbbbe
MD5 7b3c4a3814c3427f6fa43e1c036c3d93
SHA1 9bc954ed5ea07d6ad5b25860d816250118d6d6ae
SHA512 12616cc190cd8e758f3e9582ab580e5d69a46fc88b82eeba1cdc8abddb3877b0e38a4eeac41452cda47b17b40798aa7a10eab9537a08e8e6ca11b3715857d3c9
TLSH
T10FA002A465800701D12186B0939611C423147B2087435B1190F096559D592937282284
MD5 SHA1 SHA512 TLSH

Submit Download

c7badd1d-4cde-4357-9d60-3fe1ea2203df.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\c7badd1d-4cde-4357-9d60-3fe1ea2203df.tmp
Size 13KB
SHA256 e1f0515c0912aab945e3deb2c0f83ffe9cc3b0496b77e01746eaf8c313da20e0
MD5 d6e30e4d26d53d24f29661d4adcb6e8a
SHA1 b7e4b1c15ccbca80763fd06e814dfe37b802aa1d
SHA512 3271cc6b6892bdea1f777bf521ef4b007ca3dd5666ce0a6cbf59985125f17fe683cc2ca825390cc1291d599426c58bb5c7d52d17ff05105d7659418b6d4bbf64
SSDEEP 192:NR66cBhNnEHcKav7vhAPRp2D8v796Hsb+WN4ph3uJn+Qu2teweE2rR+VyIsnAUge:NR66mhNK2D8XjswaI02t52rR2e
TLSH
T19652A46ABA10797BACDBD229F9217B2BD3F1102524D42E80EAF88D3C15E76CD7217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ed720e65-c9e5-4832-ab7d-c74f8b537c65.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\ed720e65-c9e5-4832-ab7d-c74f8b537c65.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f217278b-0409-4958-9528-ce27c75eae85.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\f217278b-0409-4958-9528-ce27c75eae85.tmp
Size 12KB
SHA256 58ffc51f630e88f9b84e20c1fe09375d1c07036cb918947e839a41f59f04da5c
MD5 8e970436c5a26a6dfc4e8be277caf1ab
SHA1 2f57f2ef5de10e2d85b8c2d37555f513e69d076d
SHA512 29816938fe4be98d708411e466bd030c25347fae6fa71fa0db307929fefea44904ad0bbbcb37966b3615a855e02525a3e752547a4e6ce654ce46052289428cd4
SSDEEP 192:NR66NnEHcKLv7GhAPRp2DLf96Hsb+WNnh34Qu22KeweE2rw+VyIsnAUgtaJ:NR66NKzC8XmswtG22K52rw28
TLSH
T12252A36ABA10793B5CDBD229ED217B5BD3F5102520D42E84EAF88D3C15E7ACC721741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f3028fea-bea0-40b7-aaa6-594155645649.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\f3028fea-bea0-40b7-aaa6-594155645649.tmp
Size 270KB
SHA256 b097e26554437cc47f57db11eef9e4fc11be3e8b882d5540b9c201b23428a518
MD5 abb833875b6eb20663d1e59ffbbe5087
SHA1 1ab37c819b457e6ab87b09bc2ac4eeafb8d0dffe
SHA512 c2135da0d188127fe26ea405c39b8f686b5e7e0087c1b8b9a4acc1d9bbacd92ed8cfd08e9d39e26916eed2afd97c048d943e7b41c9f706997ba2ce577cfe76f9
SSDEEP 6144:pUrvHWe40m3otUf+8Wp53EX9pxsNTK+hFD+7t56OD9ZfSApprL:A493obX3ETxsQyFSXD9ZfS41
TLSH
T1F84412369DC59CB78EFC1186740BF7055EA88DDB929ADA0408A13F4B710FD5E0A73A32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download