ec9ca9135a1052109a310cbf594ce26b2d52545c6f254d7d042ec61f09dfea90

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
27/07/2023, 00:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
README.txt
Size 165B
Sample230727-azf45agf52
SHA256 06aa5daed7559bf36d3b0658ffe46bfa6c8b64a2782c9dc12e913be3ab225fd7
MD5 8442be2b02b3f221a2d921c51aaed9c8
SHA1 96dde1b75404f8efcfcdf999648084557c72d98f
SHA512 5ecef7a5e86454e1dd2c37e5907b8019b523232de317413176815ce8e82936e47eff16e1a8b62311c4affe159689c214a4d0ef3c682d49291b25f11fae02e496
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133348919859942353"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4176143399-3250363947-192774652-1000_Classes\Local Settings	chrome.exe

Opens file in notepad (likely ransom note) 1 IoCs

ransomware

pid	Process
3196	NOTEPAD.EXE

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1288	chrome.exe
1288	chrome.exe
404	chrome.exe
404	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1288 wrote to memory of 100	1288	chrome.exe	88
PID 1288 wrote to memory of 100	1288	chrome.exe	88
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 1720	1288	chrome.exe	92
PID 1288 wrote to memory of 3444	1288	chrome.exe	93
PID 1288 wrote to memory of 3444	1288	chrome.exe	93
PID 1288 wrote to memory of 912	1288	chrome.exe	94
PID 1288 wrote to memory of 912	1288	chrome.exe	94
PID 1288 wrote to memory of 912	1288	chrome.exe	94
PID 1288 wrote to memory of 912	1288	chrome.exe	94
PID 1288 wrote to memory of 912	1288	chrome.exe	94
PID 1288 wrote to memory of 912	1288	chrome.exe	94
PID 1288 wrote to memory of 912	1288	chrome.exe	94
PID 1288 wrote to memory of 912	1288	chrome.exe	94
PID 1288 wrote to memory of 912	1288	chrome.exe	94
PID 1288 wrote to memory of 912	1288	chrome.exe	94
PID 1288 wrote to memory of 912	1288	chrome.exe	94
PID 1288 wrote to memory of 912	1288	chrome.exe	94
PID 1288 wrote to memory of 912	1288	chrome.exe	94
PID 1288 wrote to memory of 912	1288	chrome.exe	94
PID 1288 wrote to memory of 912	1288	chrome.exe	94
PID 1288 wrote to memory of 912	1288	chrome.exe	94
PID 1288 wrote to memory of 912	1288	chrome.exe	94
PID 1288 wrote to memory of 912	1288	chrome.exe	94
PID 1288 wrote to memory of 912	1288	chrome.exe	94
PID 1288 wrote to memory of 912	1288	chrome.exe	94
PID 1288 wrote to memory of 912	1288	chrome.exe	94
PID 1288 wrote to memory of 912	1288	chrome.exe	94

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\README.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:3196

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffa31749758,0x7ffa31749768,0x7ffa31749778
  2⤵
  PID:100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1676 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:2
  2⤵
  PID:1720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1952 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:8
  2⤵
  PID:3444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2264 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:8
  2⤵
  PID:912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3032 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:1
  2⤵
  PID:4580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3028 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:1
  2⤵
  PID:3420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4628 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:1
  2⤵
  PID:3716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4804 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:8
  2⤵
  PID:2852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4964 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:8
  2⤵
  PID:4684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4868 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:8
  2⤵
  PID:4364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5304 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:8
  2⤵
  PID:4128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5364 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:8
  2⤵
  PID:1624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5516 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:8
  2⤵
  PID:4960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=1036 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:1
  2⤵
  PID:4304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=2488 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:1
  2⤵
  PID:4312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=5712 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:1
  2⤵
  PID:2776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=6104 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:1
  2⤵
  PID:208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=3244 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:1
  2⤵
  PID:4964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3272 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:8
  2⤵
  PID:3788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6040 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:8
  2⤵
  PID:2912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=5232 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:1
  2⤵
  PID:1204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=5952 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:1
  2⤵
  PID:2540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4592 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:8
  2⤵
  PID:2448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=5872 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:1
  2⤵
  PID:2020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4816 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5336 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:8
  2⤵
  PID:5052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6284 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:8
  2⤵
  PID:220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6476 --field-trial-handle=1920,i,15899546748274407761,1778481704525702649,131072 /prefetch:8
  2⤵
  PID:4512

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:3312

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x3f4 0x4e4
1⤵
PID:2824

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4736

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

f_000009

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009
Size 20KB
SHA256 bf7344209edb1be5a2886c425cf6334a102d76cbea1471fd50171e2ee92877cd
MD5 923a543cc619ea568f91b723d9fb1ef0
SHA1 6f4ade25559645c741d7327c6e16521e43d7e1f9
SHA512 a4153751761cd67465374828b0514d7773b8c4ed37779d1ecfd4f19be4faa171585c8ee0b4db59b556399d5d2b9809ba87e04d4715e9d090e1f488d02219d555
SSDEEP 384:kNMw20ZcZdIR049weTGXkBXju/W4irYjhPC09oOtbMDa9HVZycTvwxNTGup:UaxmXXSdiQPCjMvyugNiup
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b
Size 328KB
SHA256 92fb31f008c0143f157f3033a0036e9124f0774c083bae42e3a4634830a3e132
MD5 1ea693d4e240ba011d00c53e794f1ea4
SHA1 cfc104b9e5d0a1d10aef4d672099f55f3de88dc4
SHA512 e2c38855ffd9bb24e086a10d4577a161675d924aae0ba5dd893fd15c12bda4660dc8ff05365cc7822d510583af99b596b11b062346c90b9af85bb43f01520a36
SSDEEP 6144:DzI9soMRgJ/jg9EcL32ek30dXe/lz4vguUBVdSO+3Y9cBzF2qZNg/3s/GnRTON0S:Dtw/8j8wu/IU74dJ2C83s0T9e
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c
Size 84KB
SHA256 5388867e6654daa3b0160fdb9bcc43d39f42a9161380f23c8f41879a31e0b6a4
MD5 908e2a0ba346759856bd3fe5a8d2e749
SHA1 e97429a10c063e1a4dd626895dcea0a770408298
SHA512 a461ba24b8363f6c5519ef9c227c5cdd7db53b51cc09c70ee9652cd4fe0ca20db21e68ccfe8a88e2f3bad8c7a537d4f21367701bebf46579a4c8f6224ea53a14
SSDEEP 1536:4OW6Ch7JRu61f0lm/asmbm7RYVj7AXOXk2Zn/jIWBae+:lW6CVu61fgsd7eUeXbZ/jzBj+
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e
Size 71KB
SHA256 a907db059a3beb604c46bbaaffd9b1c763db1e1eccef2626355ebe9ced9d2ceb
MD5 ef5fda86a03c7d33d09c549fac55703b
SHA1 c978d8f28eae32a05fb117e29bd1f114add03ef8
SHA512 00d1e333af813291ceb436f76cb6bd75877c73a8deb71366272e0c5c94b59a25f697cc6c88f9f47815db7c617aae4a1ae09999ff463cf3f30450d685c5bc20b2
SSDEEP 1536:u/DO4UUrW+po7+87vnfFvTyuMVcpsDfvX0lbUIE4146SU/DRa2QQIR:u/DdBo7nfF/kfOECSSDRs
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f
Size 39KB
SHA256 caad3feace9086d27e006d538d2daf4dd50e2b33307232a7db6d5f8c48f73b37
MD5 500ecdda9ad3e919a1f41c1588266a1b
SHA1 d5ddf92dc08284a48701a4d3555590bda05f77e0
SHA512 5e47a0d0721ec0f9adb5a439ffc98c1b4da780e74270332313f8350f228bdb919d32c4812c6ede84ebae3ead1342c2eaf4c73f4dfca5a87e8887e1b5913c0d9f
SSDEEP 768:lYZhEFH7en2DsoTzwdnZ0NytsN+MDYWTaiF3u45HI18cXSObsd/09dPKbfwjGmXi:qwFa2DsA2n8p5p3u45HI1Fsd/09dPoYQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000020

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020
Size 275KB
SHA256 a5403a8b9dee8513d4cc96ac3cbcaa01d05d7fbef17c803c24f745924ff61035
MD5 e20f18ea14b7f6c9751535a99c675f16
SHA1 c947587829716f7ffe39bd8c4b2e088db7f34e26
SHA512 d2c4925d7d36d2add6488544da792072ff3aa85f7e95ca78a713463527306b58b743353bc98aea4a69cf0ab6cc7b1c4e75feb410c9e50cdc3f6a01044afa12d3
SSDEEP 6144:cLCu3aPyOIfZ/MhzE3XpQPIQ/PzDMpdfCrkgVr9fxn49qGmvx:R8qka2QS/kkgV1xYJw
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 aa512b0ecc14f34f9f5116a7d43f47088e55b35fbf8252b557ffdc890e6dd9b4
MD5 ad05c9fca8738ce4673aa8e7dac99a23
SHA1 7c9c06a9c5a439550a732447b0f4a0940accda5e
SHA512 684f404d67a8dc99c606412e8a3861d0951f070c9604a2179390005dc4be6054067bdaa52d6df6e1548ff5476592b0e99a1ffc35278c088916ab36b858132c53
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 720B
SHA256 c183b55605cdb10781e5c42bf92eecbe2c6fa286c4a75ef342ddae0c021bcd80
MD5 d1c81e4fb57928bbfdb4420b152fc340
SHA1 d15c2ce0e0f8bfd16571be7acb1e9cf97fd4c6d4
SHA512 0a9b39d35d730f663354795a0e6f73eaae5bb0d12977c873d3b97283827e14a0d6b443a4f32a906d28472ce1d6fce6c0d3e514a36dcbf4b83d98a86681638ad0
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\Paths\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 ccef4a73eee26df6544005c7a8a7b1f7b9c40dc0e4eb44011726165a07e1ff67
MD5 70c33348d937a926eb19511300d923f4
SHA1 ae1f105f9388dab5bb38520ba882c2f76411698e
SHA512 e3b89d36961279731139c0df62c0f51654a6a088cd9918b95650c261883a220061e61a95849580e2f1c561d6ffb9185ccc1cc9021190a48383c91d11b5ecb5e9
SSDEEP 96:rd+Wpz8aliSpZ6rpBGuEnGvGIW8GnGXDGrkGmYo+G+EH:5nzVliSpZ6rTcnSq8SWD+kjN+Ny
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 539B
SHA256 9acb0111ba3d186c496b33746c2570e47599b9e7e00baab85bd7786d0e508ac2
MD5 513eb3646429e4d4b56d1d9bd5277e2b
SHA1 a827d039610dbc6b0b3c3514ad9bed65b259378f
SHA512 2710bf8d1b837ba3215848b5c43cd67a44c0794a94843c2df5699ebf29c6bf7d32c69c819045f1943ee091d9c35c4ba300a7698b996bc3f741f15d1481ca02b4
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 873B
SHA256 8435bc82637246b8fad1ac00a232af5aa1b42bd470022db29d7eb31cd1072d31
MD5 7b9cd7a09ab2a7d79e9492ebde9b1bdc
SHA1 7b8f08a9740b1f6f4fd43167a096b3ac8067b24e
SHA512 07688416fc11f42fd702c952f78aaec3a0fd3c6d58c3e9a38b2fbafb73991728dc9fa7812af380751b2bcee5babeb5dec39037eaea7f9bc801d7c2c00f3cce9a
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 539B
SHA256 6f0cd9058ad34c693b47b2c1a7f7e53e18cc7481e289346a771f52ab2834ee65
MD5 b60e56a378d09f24ce2eff30d2f83fd4
SHA1 49b912e7bed1534a6bac1cfdfccf4312e3b00eb0
SHA512 db65598a9f6e661dc514a4c25b9467d95df0c7f8ea7e06ff2c83e4fb1b2b79e619e0b56f07e02fc2967b3418d25443a49b0feb39a03d313ae372a23e04aa65b1
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 539B
SHA256 fa289e515c09896e97ee56fb8a8001e7961a523a69360215e08e6e2e64232453
MD5 9f6710bee38764d6cf0e422ba73038ed
SHA1 ce1c07d37d7f03579401881074667113f30b49d8
SHA512 a938128657744c267ebf43ee333c82b58427575dd72fdb93729397b1ec23570eb6550b80e17f6d4fb3fedd2a835d29309890470629c55d16d73af8d7e1a6049d
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 539B
SHA256 052e243c07a994ea5830241bc0833ff94ba3d42115044d2b3aea346ca01bdf62
MD5 41264e692c3e4a3c781abe5a2c7dcdd9
SHA1 ee3fb643665eba275b65dc51c28e9f933d8dee93
SHA512 8ece651274cc5e5e6790595c5169771deb61f142054e364d4cc16471ae301511cc30c6c43b35f21b74e785a6bf9110b27556199518f7d9365a41768a00863df3
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 371B
SHA256 d8de3976fc3128b69e7eebe5daa45214a93164dd5272272c94af043e632325f0
MD5 771450b464e51c34b42eb73599de295e
SHA1 407918b5aee7d879e27b70ab4e10f36e41131274
SHA512 1b2a7d6ea608006c290c9840c1b6ffa355683321aa557ad954d670b8a08cbe3e7d84fc3d64dc035927696e2fdd0c1fc5b786dcbe036670a6a942cdd569b1d2cd
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 371B
SHA256 85c2ff211f130e2ff6576293bcac7d0f6013227f231b62e866310e9f4e8f5825
MD5 051662808d061aaffc3c805b3fedb757
SHA1 bb99bbb9740ef76d01e64f3f965a6d09f8a50ad4
SHA512 81e3ca841a91a4596a56a4b205e4f5bd3c5d45fe0ef907d4ac689a4029d93c3d6e547c75d19e27c4fb622ade7ef842339ba975e5549110ef617918a9fd29a7f9
MD5 SHA1 SHA512

Submit Download

f0c1ab69-997d-4923-801b-7087dc9723ff.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\f0c1ab69-997d-4923-801b-7087dc9723ff.tmp
Size 3KB
SHA256 975a6c345595403dd735a76fa8b385a210c139f79ff692465669cdaf70c224d2
MD5 62165904580c9c08a08f70ad5b88049c
SHA1 844876e2907fd8695f8cf228dc5e81cba28b07e4
SHA512 43ba25f5a4fc8432cba4f7a55414e906f4c06b3f4987ff81907f96efbc9cec95140a6bd25e6004340cec33830a530675ee94810a135fc19929a1674b13273cd7
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 5KB
SHA256 003afe816aad893bc43702ffa0437ba092cca266a43f5c5e46da6ccc9f005564
MD5 39afd57629a34a2628d09056363f2ce3
SHA1 fa8b3cc76f50976d2bf2e69715c7d70a19e9af2c
SHA512 be4ab5610dd9428537e3fa07ac3fcdda86745a52fd9fbc591bc54c48cd4df70810e6f2527d2b067f8efe8eb1524ac483eeb056942a113bb1c7f1bb54892e8ac0
SSDEEP 96:2mD1sIKIRBs8iZRy7Di+6Msmde7rIOpN+VEqjVhYtjEsXt0/cg2Vup:2myIm8syy+FSmotjEsXtScPS
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 6KB
SHA256 16d6c6f8b056592baac7640a9796df68c9f8b0c55d91a5f66238ad0e2a45c922
MD5 84d5950706255c1a371b2cde069af9b8
SHA1 1de6d440dc65cd1a8b303a959f24f387e9c635b8
SHA512 09b11344129bbe65a72cd1838a526fdf37901173409a38cb52085352a411f4f682e9a737cf9c4f4c53e627321a21f4ca814cb0f349dbf9b04835c177ee6e8c6a
SSDEEP 192:Bm5c2kJIIm8P+yy+FkkrEyqUotjEsXtScPS:Bm5cIfyxh7AtIsXtScPS
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 5KB
SHA256 9c1b7b8607df8fe8f859c0033c1ea851747cb1ccabd4cb4daa5060d1b35fd713
MD5 d2716a3fe2815da39d10ac8b2253937c
SHA1 0a87f25e8dc8c51e7d4fec04b1f36b7669d2cfee
SHA512 31c9af1a605ac214359289863f191edc6f4e4b17612245a1f67db13897735f274fe664f233c2254a19127c81e5a539708b496d3774121e9c6f88955b9661b00f
SSDEEP 96:ZmD1sIKIRBs8iZRy7Di+6Msmde7rIOpN+VEqjVhYtjEsXt0/cg2Vup:ZmyIm8syy+FSmotjEsXtScPS
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 6KB
SHA256 c725b536905283413619fe2b1d438249bb8150311f962cc84ca02cb5b7fa1823
MD5 5e14191591021173232b334f2ce78142
SHA1 2e63ca2073e789d14705d75abb43822e5e160fbf
SHA512 eedd7a43a737e41f08da3d8bec552a391253c9a58aec27cb8224e83c341bed4c50510a4531c6eea7de83628f7ceb54ea2f13af36edb61d00638c4ed7ff693556
SSDEEP 192:2m5c2kJIIm8q+yy+FhkV8HotjEsXtScPS:2m5cISyxc5tIsXtScPS
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 6KB
SHA256 f31052605e7788a461a7a3021546ef7e3bdf2d63d73ec37aaa4df1b005094140
MD5 8d04a6de603cf7d8ccbc13be358107a6
SHA1 c44699a1098f4d4f7cb54898bae8b1b446d73b17
SHA512 e5f43e79dd92c78c3a481ddb6d7787d1d676f6fde7673f155bb542381f79d2935fa302f861f936cfe0f28cd9c469f44f2a67ca462962196b91b42898b6465474
SSDEEP 192:Bm5c2kJ5Im8T+yy+FQknOyqUotjEsXtScPS:Bm5c5nyx55AtIsXtScPS
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 6KB
SHA256 5bc7cda91ca2d4a8499048019df51a05f3e79191979cea124783da44fcfe95b7
MD5 f10e849f4c09eeb6a7f5dd9d0285323e
SHA1 eeacd64531eda5959184c899b07eaf0c76aad205
SHA512 cdc5d8d0e52896f18a1dc4d8ec191cd3040d56b7de7009a5e803244a7013aedc36006b93d8d60a1daeaa02b10106c13baa7d77002612fdbe863de907d51f70f0
SSDEEP 192:Bm5c2kJgIm8T+yy+FcmknOyqUotjEsXtScPS:Bm5cgnyxO5AtIsXtScPS
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 6KB
SHA256 bda417e3e295a34af8a23ea0b3f9c02d7afb98308e81a28f6c1f14c325a8bdb2
MD5 2396857306579eda95fa155e8005aacc
SHA1 92cba43b3d9d5dff7a788d0c39bb60583fa11697
SHA512 036b53a6d7069ecb338eac4d66daba16017eaa46cf65d8ed99729810f51a13a20846de9e97db5f31f59feae6da9d7b5f0bf6766a21c09167caa53edbb4518d8a
SSDEEP 192:Bm5c2kJvIm8T+yy+FcmknOyqUotjEsXtScPS:Bm5cvnyxO5AtIsXtScPS
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 6KB
SHA256 5c80da6085b4a7a933eb53c56ee787b2c9ba16a12780c2ec825f20149bdedf10
MD5 1dad24f655d8cdb2f2721e103fec5d4d
SHA1 8cebe14d0a46c29c0503e68670968046f70b36cc
SHA512 23b1ac998f3646bc9c06e17b7a224fb05e117afa3a5900e99a76015f20b6e920424433fc13cff5a1c9abaef43bffab7f1e032bcd92c1e34b82e86ccd8d358c34
SSDEEP 192:2m5c2kJIIm8q+yy+FhkVjyqUotjEsXtScPS:2m5cISyxc+AtIsXtScPS
MD5 SHA1 SHA512 SSDEEP

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 56B
SHA256 1b11047e738f76c94c9d15ee981ec46b286a54def1a7852ca1ade7f908988649
MD5 ae1bccd6831ebfe5ad03b482ee266e4f
SHA1 01f4179f48f1af383b275d7ee338dd160b6f558a
SHA512 baf7ff6747f30e542c254f46a9678b9dbf42312933962c391b79eca6fcb615e4ba9283c00f554d6021e594f18c087899bc9b5362c41c0d6f862bba7fb9f83038
MD5 SHA1 SHA512

Submit Download

index.txt~RFe5896dc.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5896dc.TMP
Size 120B
SHA256 53d5ea8fe75cbdde1fd8d6f55bb0fd26216d622565f775437c7663f3e48a912d
MD5 54a2206d84f27ccbd91a638056b17eba
SHA1 28deecebbee29408b22406b7c67a58889435a243
SHA512 7931f3529f24e8544a46d5e37887a8d1a211b5ecf30ab983be7423bc84359d16b1b87ca8b34541fdacef43b6b334a17dc4b3657632ca97a596e9cfbf157fd87e
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 44eefaf341bf9385dd8b34b9c2bcd56f26270d217e0b2b14191a58e0344abc0c
MD5 a9efd6a0bc71d3eb9fc2f8d673a1af06
SHA1 a138a1aad94a179d99af9fff7fb24f1d4a83e872
SHA512 7810691d1df52e23f5f39fbf88c066ada4b60702cd340785dde2063af6d96df8303822f3bde831e880f304ddb947bc99e4650f8bd329f526244e3e42d036e5c6
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe5a1435.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a1435.TMP
Size 48B
SHA256 28c8c674c8dcc7ea267452157c96293b5549fb8975bf894a3a7f2c47c5c26d02
MD5 80cb0600384810b2b2ab255008016821
SHA1 0954aef17c30e9dbec1e74b1f38538a31e3cc134
SHA512 9ccfec683125dadc4cb2957604c8a7e328b4a8cbcd43b61a9e7b7018a23f9d298aa26f95aedc09b3f89fe515ba360b808733d26ed52fc06a89e0d53538b4b18f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 175KB
SHA256 f30db9ee7d9a4cc307132f1239ba31783db20d36ff5693a06847282d5b6f7bfa
MD5 5337449b1290bf55c091aeff03a9b52f
SHA1 1092abc3a6829067cddab96cac07df62d8238d33
SHA512 516db40ede4cb309a5a50995e80a17e02e786cf59170e5426ea7b792c3d096bb7a4e00d90c9bf70b6893f8bc6a1192bebb6ae85abf62774ff5904f53cef84833
SSDEEP 3072:Tya8N4ZNEN/5wF1R+wE6lmOoXBhd7/0FQ4Wl3/quHKvx1K2P9wjV3R:Tya82A58wql1KBvyQ4GGx11P8B
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 175KB
SHA256 45a49b4861b33baa2b8542cca7d5d0eee0d6a0201997b7e71ecf998e4e49f231
MD5 75acd684af4f429fc65863b01da92b65
SHA1 9306e98a5be2fc4666d1dc583c87ab1bc09831c4
SHA512 f5d7e8b4680b347a568c89253ee1c8f91d47496017625a7ac7aeb8596fdfe9eaa848b351fc817713c92e88b41eb9da296b3d83a2faf839c482ed67d0875fec8b
SSDEEP 3072:TZa8N4ZNEN/5wF1R+wE6lmOoXBhd7/0FQ4Wl3/quHKvx1K2P9wjV3R:TZa82A58wql1KBvyQ4GGx11P8B
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 175KB
SHA256 f3cb6ef4d314bf62d65460743f37d1d1eef51c8337e0317035a7e6c60dbea465
MD5 fd5b29828f86eee043114dfeb3d1ed8b
SHA1 3f8a0a4616e671bccf2e597c96a605d854ad3b64
SHA512 bc8b3bde4c632d92922d9a63402b4147a4f57414a714a8df5ada3e471ed7300f2d77d5d97e0876e3106f1b8cdc3a6889a1146a75894b18bfa89d23cc75f192fe
SSDEEP 3072:TTa8N4ZNEN/5wF1R+wE6lmOoXBhd7/0FQ4Wl3/quHKvx1K2P9wjV3R:TTa82A58wql1KBvyQ4GGx11P8B
MD5 SHA1 SHA512 SSDEEP

Submit Download

Module Info Cache

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache
Size 110KB
SHA256 e429bd8ab03a919489e9f182e7a24195cc77e446197064dab48cb7581a657d5a
MD5 ba8ea6a18bdf2d405e503f9e73120799
SHA1 43324c9e1ec05d515cb0f915077932cf3c2649ec
SHA512 32dfe751485977f75c252e89b838f375f3242697e04db5c92ab1211d5c621545f1e9ec2cb10f59a4474b13954005a698f5f457ec280d5753b94cc223607f0d78
SSDEEP 384:nzJa+YWVzdPJakQioNHbpQpJ1hmqxEoi7lA6PYDqJBLfAU+bQ7zruQzbFMJ+mCpH:Q+YtiRfgTvf7TdO+6KlW9q
MD5 SHA1 SHA512 SSDEEP

Submit Download

Module Info Cache

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache
Size 101KB
SHA256 f2040bf909ed2e780d861e853c78e6bf7c27dec3803a00f53206ce7e07532c45
MD5 b75b3f2cf0a9da09965917843aeacf7b
SHA1 a5860961bc3f41e0b6183e4865a05eb068c408db
SHA512 e5b9a4f48c5cf59fd1207220688cbd8dc994063375b0797c0bec4886a1952f3e5688eafac4d7e809079011e314ab6e9c3ba66b2337d8a5e0acf6cfc946115b74
SSDEEP 384:QzJa+YWVzdPJakQioNHbpQpJ1hmqxEP7lA6PYDzBL2U+bgzruzbFy+mCpvjjz7cI:z+YtiRUgToJ7OxO+6KlW9N
MD5 SHA1 SHA512 SSDEEP

Submit Download

Module Info Cache~RFe59d363.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe59d363.TMP
Size 98KB
SHA256 0412ef2e5d1abdbf763486600503135c468a9867cb740b3e581bf22efd4a18ea
MD5 9f3f37772915eb4ef6bf7b360ac8d511
SHA1 2fa58dcb005620ae340474f7fb9febe0a7902265
SHA512 787cde3ff6f85c37d007b97f98f95b61f1fb7d67832c967fd5bb3eda2c21d9934d4c68952569f9935e0f9680cdbba5d2a91d32b84a8869c996321af804357e89
SSDEEP 384:LzJa+YWVzdPJakQioNHbpQpJ1AqxEP7lA6PYDzBL2U+bgzruzbFy+Apvjjz7ckXm:U+YtiBvgToJ7x5O+6K0W92
MD5 SHA1 SHA512 SSDEEP

Submit Download

persisted_first_party_sets.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Nitro Generatorr.zip

Path C:\Users\Admin\Downloads\Nitro Generatorr.zip
Size 593KB
SHA256 f8a317a25a7d9c161a9a5ba3037de37df51b932a779b953bfe1f87d91a629999
MD5 dbfedeb2c7d737409e0b0a450006ecc5
SHA1 a24125d52a9a8bfc815a54a535e7324e9589bed9
SHA512 417ffeaf309cdb5f533ef2ce022547a1b062c338d3f184065b2296f2881f2a0aabf257d6557469dff0c863b5200acd02e25988874940a78eb6b5b5b590f72b7e
SSDEEP 12288:ifWor/vPCbmDen3ua+N1H0YwBof4b9U09Wla9Wt/lRC7eR:qvPCqS3uTXH0YwBof4STWys7a
MD5 SHA1 SHA512 SSDEEP

Submit Download