hxxp://nostr[.]heliodex[.]cf

Resubmissions

19/06/2024, 15:14

240619-smrn7sxcnm1

19/06/2024, 15:06

240619-sg2bfssdrf8

Analysis

max time kernel
360s
max time network
360s
platform
windows11-21h2_x64
resource
win11-20240611-en
resource tags

arch:x64arch:x86image:win11-20240611-enlocale:en-usos:windows11-21h2-x64system
submitted
19/06/2024, 15:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://nostr.heliodex.cf
Sample240619-sg2bfssdrf

Score

8^/10

discovery persistence privilege_escalation spyware stealer

Malware Config

Signatures

Downloads MZ/PE file
Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Executes dropped EXE 36 IoCs

pid	Process
3832	Vivaldi.6.7.3329.41.x64.exe
960	setup.exe
3276	setup.exe
1172	update_notifier.exe
648	vivaldi.exe
4136	vivaldi.exe
3244	vivaldi.exe
4968	vivaldi.exe
4668	vivaldi.exe
1884	vivaldi.exe
1544	vivaldi.exe
2032	update_notifier.exe
1096	vivaldi.exe
4472	vivaldi.exe
1360	update_notifier.exe
2892	vivaldi.exe
4196	update_notifier.exe
3912	vivaldi.exe
3220	vivaldi.exe
4984	vivaldi.exe
4000	vivaldi.exe
1136	vivaldi.exe
5828	vivaldi.exe
5980	vivaldi.exe
5452	vivaldi.exe
5984	vivaldi.exe
1912	vivaldi.exe
5296	vivaldi.exe
484	vivaldi.exe
5604	vivaldi.exe
5180	vivaldi.exe
3896	vivaldi.exe
2928	vivaldi.exe
5496	vivaldi.exe
1616	vivaldi.exe
1572	vivaldi.exe

Loads dropped DLL 64 IoCs

pid	Process
648	vivaldi.exe
4136	vivaldi.exe
648	vivaldi.exe
3244	vivaldi.exe
3244	vivaldi.exe
4968	vivaldi.exe
3244	vivaldi.exe
3244	vivaldi.exe
3244	vivaldi.exe
4968	vivaldi.exe
3244	vivaldi.exe
3244	vivaldi.exe
3244	vivaldi.exe
4668	vivaldi.exe
4668	vivaldi.exe
1884	vivaldi.exe
1544	vivaldi.exe
1096	vivaldi.exe
1096	vivaldi.exe
4472	vivaldi.exe
1544	vivaldi.exe
4472	vivaldi.exe
1884	vivaldi.exe
2892	vivaldi.exe
2892	vivaldi.exe
3912	vivaldi.exe
3912	vivaldi.exe
3220	vivaldi.exe
3220	vivaldi.exe
4984	vivaldi.exe
4984	vivaldi.exe
4000	vivaldi.exe
4000	vivaldi.exe
1136	vivaldi.exe
1136	vivaldi.exe
5828	vivaldi.exe
5828	vivaldi.exe
5980	vivaldi.exe
5980	vivaldi.exe
5980	vivaldi.exe
5980	vivaldi.exe
5980	vivaldi.exe
5452	vivaldi.exe
5452	vivaldi.exe
5984	vivaldi.exe
5984	vivaldi.exe
1912	vivaldi.exe
1912	vivaldi.exe
5296	vivaldi.exe
5296	vivaldi.exe
484	vivaldi.exe
484	vivaldi.exe
5604	vivaldi.exe
5604	vivaldi.exe
5180	vivaldi.exe
5180	vivaldi.exe
3896	vivaldi.exe
3896	vivaldi.exe
2928	vivaldi.exe
2928	vivaldi.exe
5496	vivaldi.exe
5496	vivaldi.exe
1616	vivaldi.exe
1616	vivaldi.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

T1102

flow	ioc
32	camo.githubusercontent.com
42	raw.githubusercontent.com
203	camo.githubusercontent.com

Checks system information in the registry 2 TTPs 2 IoCs

System information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	vivaldi.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	vivaldi.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_1575994506\_metadata\verified_contents.json	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\TC	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\NA	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\KH	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\IQ	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\BZ	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_749382679\_platform_specific\win_x64\widevinecdm.dll	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_1220181709\manifest.fingerprint	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_31930383\hyph-de-1996.hyb	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\PL	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\NP	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\KR	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\BS	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\BM	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\SZ	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\MS	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\AT	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_2101901415\crl-set	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_1433424305\manifest.json	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_31930383\hyph-nl.hyb	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\SB	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\RO	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\GL	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\EE	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_1575994506\Filtering Rules	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\RS	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\MG	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\GN	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_31930383\hyph-hi.hyb	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\VI	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\TG	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\KW	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\CY	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_31930383\hyph-en-us.hyb	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\PT	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\NO	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\LT	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\HU	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_31930383\hyph-pa.hyb	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\TM	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\MK	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\LK	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_1433424305\_metadata\verified_contents.json	vivaldi.exe
File opened for modification	C:\Windows\SystemTemp	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\TL	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_2101901415\manifest.fingerprint	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_1575994506\manifest.json	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_31930383\hyph-gl.hyb	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_31930383\manifest.fingerprint	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\WF	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\TO	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\CO	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_2101901415\LICENSE	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\PA	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\LB	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\BB	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\BA	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\NZ	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\MY	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_749382679\_platform_specific\win_x64\widevinecdm.dll.sig	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_31930383\hyph-ta.hyb	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\YT	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_110367589\JM	vivaldi.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_31930383\hyph-ru.hyb	vivaldi.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	vivaldi.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	vivaldi.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	vivaldi.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	vivaldi.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133632832094917856"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe

Modifies registry class 52 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-952492217-3293592999-1071733403-1000\{372FE485-562F-4171-8FCE-F0B3F649252A}	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\CLSID\{BFFA0D5A-543F-4FA8-BA48-86E21DEEEAE8}\LocalServer32\ServerExecutable = "C:\\Users\\Admin\\AppData\\Local\\Vivaldi\\Application\\6.7.3329.41\\notification_helper.exe"	setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\VivaldiHTM.PZFCQJTPFL7SBV2PKHI3ZQ5TAU\Application\ApplicationIcon = "C:\\Users\\Admin\\AppData\\Local\\Vivaldi\\Application\\vivaldi.exe,0"	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.xhtml	setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.xhtml\OpenWithProgids\VivaldiHTM.PZFCQJTPFL7SBV2PKHI3ZQ5TAU	setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\VivaldiHTM.PZFCQJTPFL7SBV2PKHI3ZQ5TAU\Application\ApplicationName = "Vivaldi"	setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.mht\OpenWithProgids\VivaldiHTM.PZFCQJTPFL7SBV2PKHI3ZQ5TAU	setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.pdf\OpenWithProgids\VivaldiHTM.PZFCQJTPFL7SBV2PKHI3ZQ5TAU	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.pdf	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.shtml	setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.shtml\OpenWithProgids\VivaldiHTM.PZFCQJTPFL7SBV2PKHI3ZQ5TAU	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.svg\OpenWithProgids	setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.xht\OpenWithProgids	setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\VivaldiHTM.PZFCQJTPFL7SBV2PKHI3ZQ5TAU\AppUserModelId = "Vivaldi.PZFCQJTPFL7SBV2PKHI3ZQ5TAU"	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.mht	setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.xht\OpenWithProgids\VivaldiHTM.PZFCQJTPFL7SBV2PKHI3ZQ5TAU	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\CLSID\{BFFA0D5A-543F-4FA8-BA48-86E21DEEEAE8}	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\VivaldiHTM.PZFCQJTPFL7SBV2PKHI3ZQ5TAU\shell\open	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.pdf\OpenWithProgids	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\VivaldiHTM.PZFCQJTPFL7SBV2PKHI3ZQ5TAU\shell	setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.html\OpenWithProgids\VivaldiHTM.PZFCQJTPFL7SBV2PKHI3ZQ5TAU	setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\VivaldiHTM.PZFCQJTPFL7SBV2PKHI3ZQ5TAU\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Vivaldi\\Application\\vivaldi.exe,0"	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.html	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.xhtml\OpenWithProgids	setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\VivaldiHTM.PZFCQJTPFL7SBV2PKHI3ZQ5TAU\Application\ApplicationCompany = "Vivaldi Technologies AS."	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.mht\OpenWithProgids	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.webp	setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.webp\OpenWithProgids\VivaldiHTM.PZFCQJTPFL7SBV2PKHI3ZQ5TAU	setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\CLSID\{BFFA0D5A-543F-4FA8-BA48-86E21DEEEAE8}\LocalServer32\ = "\"C:\\Users\\Admin\\AppData\\Local\\Vivaldi\\Application\\6.7.3329.41\\notification_helper.exe\""	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\VivaldiHTM.PZFCQJTPFL7SBV2PKHI3ZQ5TAU\Application	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.svg	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\CLSID	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.htm	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.html\OpenWithProgids	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.mhtml	setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\VivaldiHTM.PZFCQJTPFL7SBV2PKHI3ZQ5TAU\ = "Vivaldi HTML Document"	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.htm\OpenWithProgids	setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.htm\OpenWithProgids\VivaldiHTM.PZFCQJTPFL7SBV2PKHI3ZQ5TAU	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.mhtml\OpenWithProgids	setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.mhtml\OpenWithProgids\VivaldiHTM.PZFCQJTPFL7SBV2PKHI3ZQ5TAU	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.xht	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\CLSID\{BFFA0D5A-543F-4FA8-BA48-86E21DEEEAE8}\LocalServer32	setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\VivaldiHTM.PZFCQJTPFL7SBV2PKHI3ZQ5TAU\Application\ApplicationDescription = "Access the Internet"	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\VivaldiHTM.PZFCQJTPFL7SBV2PKHI3ZQ5TAU	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\VivaldiHTM.PZFCQJTPFL7SBV2PKHI3ZQ5TAU\DefaultIcon	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\VivaldiHTM.PZFCQJTPFL7SBV2PKHI3ZQ5TAU\shell\open\command	setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\VivaldiHTM.PZFCQJTPFL7SBV2PKHI3ZQ5TAU\Application\AppUserModelId = "Vivaldi.PZFCQJTPFL7SBV2PKHI3ZQ5TAU"	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.shtml\OpenWithProgids	setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.svg\OpenWithProgids\VivaldiHTM.PZFCQJTPFL7SBV2PKHI3ZQ5TAU	setup.exe
Key created	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\.webp\OpenWithProgids	setup.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-952492217-3293592999-1071733403-1000_Classes\VivaldiHTM.PZFCQJTPFL7SBV2PKHI3ZQ5TAU\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Vivaldi\\Application\\vivaldi.exe\" --single-argument %1"	setup.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Vivaldi.6.7.3329.41.x64.exe:Zone.Identifier	chrome.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
4476	chrome.exe
4476	chrome.exe
648	vivaldi.exe
648	vivaldi.exe
1204	chrome.exe
1204	chrome.exe
5980	vivaldi.exe
5980	vivaldi.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 27 IoCs

pid	Process
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
648	vivaldi.exe
648	vivaldi.exe
648	vivaldi.exe
648	vivaldi.exe
648	vivaldi.exe
648	vivaldi.exe
648	vivaldi.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
648	vivaldi.exe
648	vivaldi.exe
648	vivaldi.exe
648	vivaldi.exe
648	vivaldi.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe

Suspicious use of SendNotifyMessage 20 IoCs

pid	Process
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
648	vivaldi.exe
648	vivaldi.exe
648	vivaldi.exe
648	vivaldi.exe
648	vivaldi.exe
648	vivaldi.exe
648	vivaldi.exe
648	vivaldi.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4476 wrote to memory of 4648	4476	chrome.exe	78
PID 4476 wrote to memory of 4648	4476	chrome.exe	78
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 2616	4476	chrome.exe	81
PID 4476 wrote to memory of 4456	4476	chrome.exe	82
PID 4476 wrote to memory of 4456	4476	chrome.exe	82
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83
PID 4476 wrote to memory of 900	4476	chrome.exe	83

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://nostr.heliodex.cf
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff8ab78ab58,0x7ff8ab78ab68,0x7ff8ab78ab78
  2⤵
  PID:4648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1580 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:2
  2⤵
  PID:2616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1868 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:8
  2⤵
  PID:4456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2132 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:8
  2⤵
  PID:900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2908 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:1
  2⤵
  PID:3100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2920 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:1
  2⤵
  PID:3756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4184 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:1
  2⤵
  PID:4124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3792 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:8
  2⤵
  PID:2580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4464 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:8
  2⤵
  PID:1012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=4560 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:1
  2⤵
  PID:4676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4640 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:1
  2⤵
  PID:2128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4772 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:8
  2⤵
  PID:2912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4956 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:8
  2⤵
  PID:2012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=4900 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:1
  2⤵
  PID:976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=4264 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:1
  2⤵
  PID:872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=4220 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:1
  2⤵
  PID:1440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5124 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:8
  2⤵
  PID:3860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5436 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:8
  2⤵
  PID:4000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5380 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:8
  2⤵
  PID:4948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=1784 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:1
  2⤵
  PID:4696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=5664 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:1
  2⤵
  PID:1448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5868 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:8
  2⤵
  PID:668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3068 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:8
  2⤵
  - Modifies registry class
  PID:1392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5684 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:8
  2⤵
  - NTFS ADS
  PID:1132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5704 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:8
  2⤵
  PID:3748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5288 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:8
  2⤵
  PID:2844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5168 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:8
  2⤵
  PID:2096
- C:\Users\Admin\Downloads\Vivaldi.6.7.3329.41.x64.exe
  "C:\Users\Admin\Downloads\Vivaldi.6.7.3329.41.x64.exe"
  2⤵
  - Executes dropped EXE
  PID:3832
- - C:\Users\Admin\Downloads\CR_BD287.tmp\setup.exe
    "C:\Users\Admin\Downloads\CR_BD287.tmp\setup.exe" --install-archive="C:\Users\Admin\Downloads\CR_BD287.tmp\VIVALDI.PACKED.7Z" --vivaldi-mini
    3⤵
    - Executes dropped EXE
    - Modifies registry class
    PID:960
  - - C:\Users\Admin\Downloads\CR_BD287.tmp\setup.exe
      "C:\Users\Admin\Downloads\CR_BD287.tmp\setup.exe" --vivaldi-install-dir="C:\Users\Admin\AppData\Local\Vivaldi" --verbose-logging --create-shortcuts=0 --install-level=0
      4⤵
      Executes dropped EXE
      Modifies registry class
      PID:3276
  - - C:\Users\Admin\AppData\Local\Vivaldi\Application\update_notifier.exe
      "C:\Users\Admin\AppData\Local\Vivaldi\Application\update_notifier.exe" --unregister
      4⤵
      Executes dropped EXE
      PID:1172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4276 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=5720 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:1
  2⤵
  PID:2152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=6432 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:1
  2⤵
  PID:4936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=6224 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:1
  2⤵
  PID:5732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --mojo-platform-channel-handle=7068 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:1
  2⤵
  PID:5532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=6756 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:1
  2⤵
  PID:5616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6572 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:8
  2⤵
  PID:5700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6408 --field-trial-handle=1828,i,16856812893029256881,11365395945257995037,131072 /prefetch:8
  2⤵
  PID:5852

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
1⤵
PID:3872

C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
"C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of SendNotifyMessage
PID:648
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Vivaldi\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Vivaldi\User Data\Crashpad" --url=https://crash.vivaldi.com/submit --annotation=plat=Win64 --annotation=prod=Vivaldi --annotation=ver=6.7.3329.41 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ff897c12c90,0x7ff897c12c9c,0x7ff897c12ca8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4136
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=gpu-process --no-appcompat-clear --start-stack-profiler --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --running-vivaldi --field-trial-handle=1740,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=1716 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:3244
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --running-vivaldi --service-sandbox-type=none --no-appcompat-clear --start-stack-profiler --field-trial-handle=2068,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=2064 /prefetch:3
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4968
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --running-vivaldi --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2228,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=2124 /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4668
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --running-vivaldi --field-trial-handle=2748,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1884
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --running-vivaldi --field-trial-handle=2868,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=2772 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1544
- C:\Users\Admin\AppData\Local\Vivaldi\Application\update_notifier.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\update_notifier.exe" --launch-if-enabled --browser-startup
  2⤵
  - Executes dropped EXE
  PID:2032
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --running-vivaldi --field-trial-handle=4048,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=4044 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1096
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --running-vivaldi --field-trial-handle=4184,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=4084 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4472
- C:\Users\Admin\AppData\Local\Vivaldi\Application\update_notifier.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\update_notifier.exe" --is-enabled
  2⤵
  - Executes dropped EXE
  PID:1360
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --running-vivaldi --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5304,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:2892
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --running-vivaldi --field-trial-handle=5872,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:3912
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --running-vivaldi --field-trial-handle=5884,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=4088 /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4984
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --running-vivaldi --field-trial-handle=5796,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=5756 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:3220
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --running-vivaldi --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2856,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=2768 /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4000
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --running-vivaldi --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5456,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=5676 /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1136
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --running-vivaldi --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5984,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:5828
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --start-stack-profiler --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --running-vivaldi --field-trial-handle=4276,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:5980
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --running-vivaldi --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4172,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:5452
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --running-vivaldi --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4052,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=4124 /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:5984
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --running-vivaldi --field-trial-handle=4092,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1912
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --running-vivaldi --field-trial-handle=5096,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=1232 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:5296
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --running-vivaldi --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4224,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:484
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --running-vivaldi --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5400,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:5604
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --running-vivaldi --field-trial-handle=5168,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=5708 /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:5180
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --running-vivaldi --field-trial-handle=6132,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:3896
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --running-vivaldi --field-trial-handle=5808,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:2928
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --running-vivaldi --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=3720,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=872 /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:5496
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --running-vivaldi --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5932,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1616
- C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
  "C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --running-vivaldi --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2236,i,18285970336806981924,452884702406081866,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:8
  2⤵
  - Executes dropped EXE
  PID:1572

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3504

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:3776

C:\Users\Admin\AppData\Local\Vivaldi\Application\update_notifier.exe
C:\Users\Admin\AppData\Local\Vivaldi\Application\update_notifier.exe --from-scheduler
1⤵
- Executes dropped EXE
PID:4196

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

759e867b-ab07-48ed-a9e0-add82e8f3516.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\759e867b-ab07-48ed-a9e0-add82e8f3516.tmp
Size 138KB
SHA256 8f7002f920c1886ffe34fae9bc0674123336f3685817e298bfed905441110cf0
MD5 562fc5f709919b40afb6cb2a5520de4e
SHA1 07cd76ac0e473e09ba5dc90286b5d1ba3005961c
SHA512 080e74c05320f0e7ba14a5a5d62c07a0a5ddda484e9c7bb6e4d5504460632819eebf7bcb902b1903a01fbd013958bf3a380b65af1e5f40fede76a37f6a509e15
SSDEEP 3072:ecMw24LQfn5MY4R3q3m0qPaNjDpwU5mVXwU:fMw5Qf2RSTIadDpwU5CAU
MD5 SHA1 SHA512 SSDEEP

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 0bce972284a6d2401b980263cebb618e3190ce7bdbf565f77f4ba5d8f0bc83af
MD5 73b6dc716a95dc0429d88c6da87bbcb7
SHA1 c19eb5263aa67f51fb1a5eea73c325b58b2c276b
SHA512 a4c1013a7fd2af4f2750bda7e01fb2700cd9dd5ac022ffdcebf6353674fc29d9b954fd2c4addc93d5bac547db62fc6d2c68a0ef884853da136556ad57c03a5fe
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 a0d2e17429b7eb2c8a8c49fa97bdd2c104e867786d607590ec3fb122f1bf27f2
MD5 c85a612cce6948e49412700cfbf0e3cd
SHA1 5b747aeba8857b4df644387edaf102640cdb3ecf
SHA512 34ea9c3551903dc334d50442001a702eab084532cd80d170a00d572b95dd5fe5c89171ed8248bf7e723fd65cec51daeef4703445f9326017d30614630f84b0d8
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 72b337f3d88af4a0ac0934633edf1972c4d8959b7b8c636f7dd284bfc410345e
MD5 33e5a0f15b765643e3e8551181e23ff9
SHA1 efe7b97e8996a6b15e1fe34cd4996dc15def233b
SHA512 c3fc99cb3a597c3115e0e9747b34dc04d2b4965ec6221f2d31c804ef77470e5fe1b42aac72623dc3b6e463de72defeeca335374027e926f67e86493e091f7c08
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 916353e42f0ac3f841a2b6925acc5d781340e6f7415d61253a87b37081be19d9
MD5 29f4d44f6c3c1ff4f181b1859aba5f14
SHA1 05a662aebe4f875f81e7f7993c42ebcfb5c252f4
SHA512 5d71cb9273539381d72b4b4f434da0a54927dc6ddcad88e694bd88791913950135d7326dc638e17292000601f5bfcbfb3f9593571986061024098fca594241f6
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 c2e68d15b0ba015dc0430cb98164f04dd456e164ff5eb291745675f37e9ab66a
MD5 37380e3b160fcdda89c393feec48e3c6
SHA1 3efb073e6b2db4da39dfd16252e34ab28b39534b
SHA512 b04c40b60409b36d1e646e9789028a707ce88fdd871ea8e37c4cb9b6873f4493bb7bab321d21e843f4adf5bdd288b7703a1c72a5df0746c46a7591d66c75c2a9
SSDEEP 96:6HnHoHGqHhHHHqHG1HWHV/HPH6ZHGbJ/H8/H6r+HEH1EAHFHHHGlT6HGlsHGwHGr:6HnHoHnHhHHHqH4HWHV/HPH6ZHU/H8/p
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 b42b6b6be455a3038a6d597cc49ea596af8b8dc43283a837cc8773ff7a8eeaae
MD5 554067f37fbd017fcfe14840a0cfba5f
SHA1 16449f3552ed1998064453b70e092715d9770230
SHA512 e6af475c811124db80d2656088d8bf41fd74b01b555c2a6a81b338a526adb60204540c948b39495cf8b5760fe761d0e0f12f859a5bb37d5d44efa6b6e86d182a
SSDEEP 96:6HnHoHGqHhHHHqHG1HpH65J/H8/H6rAHiHGlTmHG1HGtHGKHGFEyHGNHGJ/HGGHI:6HnHoHnHhHHHqH4HpH6X/H8/H6rAHiHb
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 0d9a34faf3af7a82eae10e65e2a02ebdd10069b4f77e254a7ff6ba4b253bcea9
MD5 279cae12565c8ae84c6cf10d75f91a20
SHA1 ccb85656569fc5bb4870d1edba18f31c7480edaf
SHA512 b89e51625e13e663384e9bb4424d6bfe5ab28830ddcc724a93729e028af07cf71beb92cdd4b8b0dc0c010b1b0cf09fe8e3df89ce4b38f049066252de2d8232ea
SSDEEP 192:6HnHoHnHhHHHqH4HpH63HDHdH3HtHBHmHEiHmH5HIH5HzHTHMHbHPHyKHlrEHOHp:6HnHoHnHhHHHqH4HpH63HDHdH3tHBHmy
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 2529c604c863a0526ba22fdfa46f4d9374486f1df9c3f2ae23c26ae71d10fa07
MD5 99cb5c218d9d800271a20a0d13d7a947
SHA1 0a0eadd632fd3e6ed83d79f4ac1c61b2bfadcfab
SHA512 ae7e7945962b6cc8d5f04d986f5768f3c6de8f855beaace2a765ad57db9aa69ce038b6edc9f943098a1e228f30025facb21799393294dac54e96d67ecdb74f84
SSDEEP 192:6HnHoHnHUHqH4HpH63HDHfHBHEiHmH5HIHBHMHbHeKHlr/HaAHbH7HCHaH2HeHWC:6HnHoHnHUHqH4HpH63HDHfHBHxHmH5Hx
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 eb97bad09dccc1e6c78aff1c1fa5950e1132163533915cb63ece7d0260dcb045
MD5 a13b3157c04193c67fa2a68e4155737d
SHA1 1d16d225963a5cee42531d21d7f117fd3eff88a2
SHA512 699e27d4f4fe63680f6e2cb12bd6631c19e31601f9ee3c88b72ae4d88014b9dd49857c4dab135de4e2f7185c6dfcfb01c8baf32dc58d607779ec391a96e04157
SSDEEP 192:6HnHoHnHUHqH4HpH63HDHfHBHEiHmH5HIHBHMHbHeKHlrAHbH7HCHaH2HeHWHmHH:6HnHoHnHUHqH4HpH63HDHfHBHxHmH5Ha
MD5 SHA1 SHA512 SSDEEP

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 523B
SHA256 6b4411b80ab482a2b0fd658206e61b7e9a49548dddae8201b6d7dde1a3270062
MD5 f292256e7232e8e2c65164c420670d24
SHA1 31292170f674c9c4e4fd3018051582a2dfe47ff3
SHA512 8beb6666679ce9258982b317298743398a6707891a10d6e4f781bf99b84badfd896edd9bb65ab4c8afb5c7fdc64e2f755ef9267bcacb8ebd0f24d89d45e36e8f
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 859B
SHA256 fab821e2bc8ace9774e610521a0777fcf7c7a36e19a7a9e3c186ac089737eace
MD5 a19a9a1d2f40378240af163852cede4d
SHA1 e8e7fe1b941e454872840020101c56a36004ba5f
SHA512 f7fbdae5de21d310c84621b005652bb382570450647e4cd8a1efb4927449cc9b27bdebec197f1516ed1a71d0947a8052152ec0db7bad3b433854edf2db5bc341
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 523B
SHA256 4c3373fdf4d5320f9e6bf38d5e31c0ed9a9e320824c3c990dc09983984793e38
MD5 02d57220688c194cd507c8a4f99cf025
SHA1 a2032548f8ae6ed9b582a371311e1cfc2ad939be
SHA512 89cf87162581a28ec5a8e128f18f4d04a065dfc63c38d85aff265a764f1afe2c67602f03e5b2733b551e87e2a09ae2363e4bb29aeecd965374278b6eea56adc6
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 d0411a902f2f34b88beaca009b7cb41068643e262f267267448c1b65725fe716
MD5 bcaacbc1f8837d24f0bb593b2b615045
SHA1 bc22ac2f548a523219cccf4897129c6a08289bc7
SHA512 99ff8ce8bee75bdedd087b1a4fcbcc508684b1b4b552969697bffba4a3528f252a55dfc786cec6d9067a33e4501187dd2a5196cae1c2798da7980efba36d8f2e
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 2KB
SHA256 bb66684fdd0a975e8a7cee34def5cbcb65fafdc44de3b8af76b0fe9cab43359d
MD5 85eab971c477ece12684fe9afbbf8f20
SHA1 bf9b4a187c509c1ee26ae76018661759750e8e88
SHA512 bdc3ba274046c37ecbd19121413483b9c16b2b6affd0a8e2e137a850a057f05eceeb41caa4f8d9dd77f46b46549aacc33a26de48e89013cabcf87169e88d8030
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 f9089bc5c54640d4aa59e74e827cea4e3ae0f5217691eede312e3239dfe93810
MD5 1d1009004f6980f68194f8e62a7a5663
SHA1 fe1f9431652114ebd783a9784cba63513857e77f
SHA512 520b7a0025ff3a599d893b2bde5675794b6a3146b8e7996664c99d0a2aae5b49106b2f3d3aa835e1229b4754e4907d54c2eedb5847f5be07233628a1946e5b4d
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 2KB
SHA256 7ebd7ff47ea0b03959c0d3a3a508140f95d22e82583631f22872d1fdb35cb6e6
MD5 bbdabf546d3f6ea2cc9910f9d9ec36d5
SHA1 ba3479a7dad52143424f0a2acabe51d12a4f4951
SHA512 231ce2666ab8deb688705f1224e8ca8b5b4d6dc1d77698e5fc1ae1e103eb9159caccb22a54caca201a0b0ea557aff34fa30ae45cc7c90ee63732cff467bdd34e
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 7KB
SHA256 6f6062c6efeedff72bc09d4ea7cd733e03dd55ceac19dba5d9b1e5831a49a13b
MD5 df0bbed21e325f0c21d4bfb87ac895ce
SHA1 d067a81d35d68736e1df2c7d3596100f59757b38
SHA512 378e68569a3b008f6d44e79034b7eb9a47ed04c9089b6db4de66f762e09c89dfc478c409444d869fa9bf6c796636c98537c0f3a6b2abe79d0100e660ece2a417
SSDEEP 192:kDyrc2kJHRZF/OYaJgKA8iyh+FalsbWiP5tjEsXtScR:kDyrcHRWZgTyqEwWetIsXtScR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 8KB
SHA256 8b497ded7563d24a92d0b443ff1eb5150c3ad5db75f6e5159ccd2be25182875b
MD5 98d440592dd1bc5d221e4e36bf4d13f7
SHA1 a86191533f2f74b74f7b3b3a42d8925253801186
SHA512 3c3e09dba07b309ac09eb1d7f04613254ef2cbddca2463ebb6f54dbe6ba2db5270b8a9cf476ac6af8393c90ae48a917649e7bd089752183f244d9f35b0de09ac
SSDEEP 192:kDyrc2kJHRZF/OYaJgKA86yh+FitltPSRzJiP5tjEsXtScR:kDyrcHRWZg7yqijtqRzJetIsXtScR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 8KB
SHA256 50eeadc1730a84af1aa5f3205eeff913c5916587ddd4cee7766aefb3811295ae
MD5 471367df14a2104a2c4362eec75524dc
SHA1 62d90e2f8163468d7db743e5ef670a300d302297
SHA512 a74d26f64174b4e415fedfebb4de4c6920b5e5cc3f598d88c3a357bc3836466b97a441c61872c28b890730b03ea4c38498533f4545894616a7b5f304898feae2
SSDEEP 192:kDyrc2kJHVZF/OYaJgKA86yh+FiAHeltPSRViP5tjEsXtScR:kDyrcHVWZg7yqis4tqRVetIsXtScR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 8KB
SHA256 ca01eef8fab3a449fa25d3457bbebc9d3adb30188131f62aa60be8d7da6d3005
MD5 1e78e21ec51d32243a1c18e6504f6529
SHA1 a49e9e70d1e8a4ce39216c54ee538443964de326
SHA512 d57959057d82e245365f6da7a400770f8ff74f7cdafc031753108ba9667473364579cf6c389445dcccfbbf56cd29fd8ec07a67b3102b08572fd358960a2b326d
SSDEEP 192:kDyrc2kJHVZF/OYaJgKA8Lvyh+Fi4Z2ltPSRtiPLtjEsXtScR:kDyrcHVWZgQyqiGQtqRt6tIsXtScR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 8KB
SHA256 c9dac7178ac6b3f4a148844516df669dadee5eedf9d16270dc1db69ced2e2b4f
MD5 02d5e9540eff5dc139c0ee99eca821a8
SHA1 86b50f48d94c76532d80a19257dee181a32bcd78
SHA512 7b900549c699d6ca062782867747b10a6856bd40ce919ac609e88f82075d318799b2e77f90d93106a8c1a34f85addb31e8e651ad7fc9e9e01ddecaf7f1c1b6a0
SSDEEP 192:kDyrc2kJHRZF/OYaJgKA86yh+FiqltPSRzSiP5tjEsXtScR:kDyrcHRWZg7yqiUtqRzSetIsXtScR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 9KB
SHA256 9767d6bf58c3872d41852d2356b9f781fbdd98bf0926cce9e6656bd351476aae
MD5 81a51161cde824a241923c64cbdcbe64
SHA1 7e82a2b18db4cb52e2beb00d2e27850ab8a2da88
SHA512 4cadb50d082b3d5c00878ab18b954ed89709b90fa24622427690d1d40033da7b05ef8c1fcbb331a362d39ea18d0d0beea8e16b1de14f84a910975bac6575bdf3
SSDEEP 192:kDyrc2kJHVZF/OYaJgKA8775vyh+Fi4Z2l43tPSRviPLtjEsXtScR:kDyrcHVWZgiNyqiGQUtqRv6tIsXtScR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 9KB
SHA256 c43dff416686608a9f31857451a6dacebee532c134fbfe47bbdc0c4cc1161921
MD5 db0c7ef23e7089f8dde5fbe12c0b8f5b
SHA1 9cf31f713dfd70472b82b46e49c3271025bc4f22
SHA512 9ff3444231c51b25c2aeb4444f5e9d97de1247e4fe97aa2b118d7b9aa5bfeb240e761b7e0ad25590f5588e403e28b42db6efd31874cc6e78372596f4f8383ec4
SSDEEP 192:wyrc2kJHVZF/OYaJgKA872/5vyh+FiFFslWytPSReiPLtjEsXtScR:wyrcHVWZgigyqiT+dtqRe6tIsXtScR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 9KB
SHA256 826d05b6b7bdbc3371d0c2bba27894753ed2fca17d20b3bde88b12131468debb
MD5 1743a6e832d10d8ec3c3efc3c31879d4
SHA1 70fb0215a6bae40bdbb5bec786518150c94e257f
SHA512 12b86456a931e38009e375bdfcbbd0ce508404852fce82e48fe8425615ce53a0793f2e7c8b04abd69091ba812d04da67faa8850dc5f5ffbea1f92aff68d91db5
SSDEEP 192:kDyrc2kJHVZF/OYaJgKA872/5vyh+Fi86klWytPSRxiPLtjEsXtScR:kDyrcHVWZgigyqizWdtqRx6tIsXtScR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 7KB
SHA256 176bb7ecb4b0d655135ca3984d198336b2ea46623d211b674d64e97efa4195ee
MD5 fc426cecee05ef2e283340ac097f8db9
SHA1 99839cf618cb7fa568a603f73963c0b146d02671
SHA512 5ee1a48f88bad6105e6397296a6e2d4d772a68b1811a6e0692b46e34b326992e97ec313a61f7a432f9c185bde401139384df462ad62adf124e3a434103a430c9
SSDEEP 192:EyXRZF/OYaJgKA8syh+FalgiP5tjEsXtScR:EyXRWZgpyqEgetIsXtScR
MD5 SHA1 SHA512 SSDEEP

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 56B
SHA256 c58cb79fa4a9ade48ed821dd9f98957b0adfda7c2d267e3d07951c2d371aa968
MD5 94275bde03760c160b707ba8806ef545
SHA1 aad8d87b0796de7baca00ab000b2b12a26427859
SHA512 2aabd49bc9f0ed3a5c690773f48a92dbbbd60264090a0db2fe0f166f8c20c767a74d1e1d7cc6a46c34cfbd1587ddb565e791d494cd0d2ca375ab8cc11cd8f930
MD5 SHA1 SHA512

Submit Download

index.txt~RFe57dfa2.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe57dfa2.TMP
Size 120B
SHA256 84ddef2098eccbdd1ee6ec4a2a38cfa4193c14685ca64374a0b0c60ad3d9d1e4
MD5 5ad562d5931b2fe3c29c34c47dcd0956
SHA1 f406150bd156c344eda11c528c81a5d47cebee80
SHA512 879bac24bfc0ff45eedc152bd2b6a947c884a1cc6cf9ac2e1819ed0ace9861aeaff54ae58794dc92164cfb3f35315c1e832dd877a158927e83871ad510da58d8
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\79918510097d037e5febd0dbb690489f6209c582\17e70cc0-512b-4591-a7e9-38933940542a\index-dir\the-real-index
Size 96B
SHA256 11215f47d3819d45608812d2604687519abc8a7977ab59efab043c521d93fbb7
MD5 6b93571b730f59b6c564fc41f2b7b19b
SHA1 8410ff064488191341a38f1132a5c2e4ee1361d2
SHA512 17004cd17498708826c912375d02b54959f0e5d3542d18dffb2f01a56225214a8bdd8c943b3385a57e645d9058e547576d24d3bfe4e8ed7e35bccaddc62cd7b6
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe59e601.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\79918510097d037e5febd0dbb690489f6209c582\17e70cc0-512b-4591-a7e9-38933940542a\index-dir\the-real-index~RFe59e601.TMP
Size 48B
SHA256 2ba702b8a86cef2562c028d95dfeea9047b9ecbc61e405d77b074405bda43ac3
MD5 5a86af8e55753d7b108ef983beb1b004
SHA1 be0274f20e609b46d46966c7653cc9a09dc9a378
SHA512 b8b73f7299febd4081354e18161d1d448e19dea47c0e7e4e4d4c125b234a2ebf2b93bd9ad1611eb4aded70f81a479e6439184412dbb806db3a3345297dc67e0e
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\79918510097d037e5febd0dbb690489f6209c582\46871f1b-e1d0-4740-bcdc-0429e85f2922\index-dir\the-real-index
Size 96B
SHA256 13b111a813f8c771b176837f4fb7258e8b8e72387da808b88cd3b48f92002576
MD5 8adff5116ce7d738212bfae12c284ec3
SHA1 a9fd91922a49f08285afb8b2d582cd8a4d52d80c
SHA512 99f711d6d465062b21e62012eecd3c90652be95ddf83ee24a71ca10a0615718ad1f5316ffd6c4f2ec0b00806014cd440b642138d475eb734a7614c40734c97e4
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe59e0f0.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\79918510097d037e5febd0dbb690489f6209c582\46871f1b-e1d0-4740-bcdc-0429e85f2922\index-dir\the-real-index~RFe59e0f0.TMP
Size 48B
SHA256 37df593f838cadcf383b4f1c10969f904484e08598323910739d78371f25aaa5
MD5 63969ece869d7d53e9b5baec5bbb046c
SHA1 d842a3a4319807a1d42fc49dc613d773ae9caa04
SHA512 883440aa611afce7f5c0c1961cda2a77127905cf15728d8b5167bad2cacb803dec3e3617f360bb2aadafef80d93321a3126de7eafeb42f22bb88937e051e9676
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\79918510097d037e5febd0dbb690489f6209c582\8bf3ace4-6640-4176-b90d-75e0b4d0224b\index-dir\the-real-index
Size 1008B
SHA256 74473d7327cf06cf911312ffaa837b928d2e52976b7845f4eca0631a4514d5e1
MD5 0b03316ef81429e5440f9242cfbc3291
SHA1 035d8fc0c088a5e97e6947572e89e80dc3f89ea9
SHA512 721554285ad63dd66ce98cda0dba18845c075a0087bfce5d4080954343c6281ef3d261345b8b8e291ea9767f14a5b89360f06d0310b954802a45738304af58fd
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe59dfe6.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\79918510097d037e5febd0dbb690489f6209c582\8bf3ace4-6640-4176-b90d-75e0b4d0224b\index-dir\the-real-index~RFe59dfe6.TMP
Size 48B
SHA256 176e1d7dc218f189db1d896fdf291364ed2f31bead438cead257b8611af05bb8
MD5 319050f495f9719d4b238713ed22bb6e
SHA1 395f57138bf3bbef4b73130702792aa94a9ebadb
SHA512 7e9496ce46e49ba5069347b23f7e77551d474cf43519796f3447814e1910de39d277537216896b2bc7bf93fd5053c68b1f7c80f0c035a89cf353fad083da6417
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\79918510097d037e5febd0dbb690489f6209c582\9fd8ca0b-75b4-4090-aef6-3af00a1c91a3\index-dir\the-real-index
Size 864B
SHA256 1aa3f2c26e55eb3748512ca21c3ead06ab1da910cd12bc7123cf66a7ab22db4e
MD5 b395ba10cff383f4ce74c3f787a18af7
SHA1 9ecc1837b24025e86f7afa6ef566fdb776396a27
SHA512 d6de798ad47bd4f1a56a3b5368131432ae14c86d9174f2f2ede3af23df2fcf5e01e4dc5d9f33c8738c51d89325eff8825fca75ce3fac0d8b2976325be0646980
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe5a1790.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\79918510097d037e5febd0dbb690489f6209c582\9fd8ca0b-75b4-4090-aef6-3af00a1c91a3\index-dir\the-real-index~RFe5a1790.TMP
Size 48B
SHA256 07c27b0f87023cc981dcae2b2801fc4e07692ed33f2b6ed8fcbc622f46b3c5a3
MD5 15bb796afa30119781d0accbb8cd24e9
SHA1 a59bb9d3b191938a5e0dc514ef9334af5a970cf9
SHA512 a98cd63a61386c982c74e8c501c0b591f9de38416b3e896998cb0fbb093bb8db8c8670609d754a307829f58c572cd382fc761742b83c2268e82a55df1598a3d8
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\79918510097d037e5febd0dbb690489f6209c582\ee73b772-eb2f-4e51-8bf2-793e68121e44\index-dir\the-real-index
Size 336B
SHA256 2a728819ca44a0a79a03612c20714cb28e7929818d1da055eeca6963e508ae12
MD5 97f4463a76e47b0a05fde0a68ad200da
SHA1 fd3a36ef4a5f60c0a61de8af88cdf68d08ff3488
SHA512 b4c129ad58286c0a1166359241e3df033e6d152f25ac3a3f3535ba61f0481bb08fd6d5207722fc6044e32001315306b6a51c71b74749f86cc3c4c6bb58eba2af
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe59fec9.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\79918510097d037e5febd0dbb690489f6209c582\ee73b772-eb2f-4e51-8bf2-793e68121e44\index-dir\the-real-index~RFe59fec9.TMP
Size 48B
SHA256 402c12f0ae0a83fe728fd4157f2152b5023fb9c84debb258b23dd20126e20e8e
MD5 754ae859523fa01b81323edec6716197
SHA1 a3dc43e4fe467e4763dd308474e3e880f3ed5799
SHA512 17b3d41ab1f5b2d532975c03a4a3fe5850992f2a45c00bee04a3df5a86b0b661950b890f8d39142687830245b46c2dd02d7319dd6f15f53d9beac20fca133e33
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\79918510097d037e5febd0dbb690489f6209c582\index.txt
Size 209B
SHA256 e59f26e587d91c711141cfbb3ece9f1b5b79ba9f06b0a31db895976b6aee96bc
MD5 83c537bf34e34d4da39e27ed7c9a01dc
SHA1 fffaf087d38331d9e14e4de597daccfcb8c76d19
SHA512 7dc5f65866b401cc5195636c208bd0567421e06aeaa99139da931aeda5f602c923d223ef069c5dfbd3bb2ddbb2d0daf3969227e8c90a9ec4e9d278225dbc7692
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\79918510097d037e5febd0dbb690489f6209c582\index.txt
Size 271B
SHA256 d597990181668badefb38cf0aff06e7fb46a90211155b03f2674d80841282142
MD5 252b3f918764c60db78998601b74e961
SHA1 0245715b15538edf16fbf99697ab67c0b828b897
SHA512 66e43ae55c4c70beb46b0a23bc95d53b104e316e7a871a6f28dbc2e676bdb5e455718ff85dbdc897febf0a8d85f3ba2da177b1a84d003bfff571fa116d251a20
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\79918510097d037e5febd0dbb690489f6209c582\index.txt
Size 332B
SHA256 7f3a0ace48676ce3f7c4e0000e498b91cd1a6b5e5cab6c15cd6013cb874d9255
MD5 bde50dc985074c3933f1eabe548a364c
SHA1 75a65faab385e7758f891720247d733aa24f63f2
SHA512 5dc73a3c8ed243d371e1e122d7f6260bdb87235767dac3d9c394fced090ae0c8fbbd75dfd62dc993444fcbd46f543dcc5fdc71e5dab2efc696173e40888e37f8
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\79918510097d037e5febd0dbb690489f6209c582\index.txt
Size 394B
SHA256 abbccdf044862f3a86ec02825f7e60de204de5710aef14162975903b786c2c43
MD5 5c984f8e5da141552c8bc4e138cb68ad
SHA1 4e9a2f785b1a820e0eb2b776e7a31d503a84cf4e
SHA512 f867420d990e2f055a05da0e0d2138aae628eda77db4816221946a2c23c702a671f528587b5c005acc53f740181a5734aa004d9cb487d120476b2c32d3466a21
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\79918510097d037e5febd0dbb690489f6209c582\index.txt
Size 389B
SHA256 3b8a3fbe05617b96409446c5f170f416c071df34505a62bf17cb0f0c3c8dbb37
MD5 ea7dc4384e07f6fe79cfe942e5d8b0ab
SHA1 e05966dc3e9f73e28c0cbc3698be1b482fac4e67
SHA512 79e4a8551f00848b34c19bd6902c3e89a46eb78469eaf0428dfea4793596abba6dabfa271701b6a303867f4d5cc00079dbf5151828854969b9f575e39196e5ce
MD5 SHA1 SHA512

Submit Download

index.txt~RFe5992a1.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\79918510097d037e5febd0dbb690489f6209c582\index.txt~RFe5992a1.TMP
Size 146B
SHA256 632329d6b0b30c2d48e3b820bece7968fb22e789d6ab65acf9985278c764bd8e
MD5 9ee7e5cf1eaeb93a0fa80086ab455ef0
SHA1 e2916acdb016e27715c38b858a810ccc8b7ae8a7
SHA512 b9d37d797e91ffb933b9a457a2db6e27def6e15fa35f2e871613d4a56ecca30ed00648bfa1d90d67b7f609d7fff5ec97803ec428b7f81c961c51057fcffd1a72
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 6a02a869b4bb5cb1f0560091668f5db386d9f578ae45f3cb61d5a71ae73cc53e
MD5 2485e40e0ad39bb370831bf17740c9bd
SHA1 ed4644c4d57a86d9faa0af61de8c39d38e476d17
SHA512 46ca9afef9751a5c7a432e8b6bc91e3b4a107af4a7d35cee5a6147ee19f549bbacba021fc2f57762d5792a3eb2c6c049dcb71f223089bc2fe0199faa1bea9420
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 98B
SHA256 1bc7e795deaba4ccd23323a576335d06a7af41df353d4f1fab0320b89c6b562e
MD5 48b904da6acb86a7034b6e0a7850a87f
SHA1 45327bf9e992afdc92312059919dc6c8ca0e4c0c
SHA512 1cd2d9ee3e0cac706fb42cb0501db083dbf22fdc3a4931b4a39ff68912fb3937b8f2e54f315835f409d56e3cd186a4f331c8ebcbc9d0eb5eda6f26fbf6cbebf7
MD5 SHA1 SHA512

Submit Download

index.txt~RFe599a52.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt~RFe599a52.TMP
Size 162B
SHA256 57611abf418f5e6907f09a00c8c6620f080e221522909816913cc5c0c3e813fa
MD5 da4b4891e6ea3dc3cdd29fa7217817d9
SHA1 b338faab98d9113f1069cca880ad2fed09969a6a
SHA512 c04b90432a632eec0e40f1f18dfa8a354c428e10fda0fc3ed363461bc2fbd31a69493287b9933bb61244d9ded3161af75801de4b5c3126fc5c771bd499459f7d
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 138KB
SHA256 77b43c1a8c0e99464d5ee42aebb20d50ab3c1fae344dd88c6bad189d14c8af48
MD5 b2bee0ab2a840da5805a1d4070744eb9
SHA1 d1de51a0fa0856d457774fca159c649912037cbd
SHA512 c7f8c07829997dd6bd1a9b4ff48b157cd1a89ea1e924edb4eb345076fad8d81e5ee124757d941258e07ebeb78fd67208ffa8d1dbd2c4e6af6c637e7c5e98428f
SSDEEP 3072:NcMw24LQfn5MY4R3q3m0qPaNjDpwU5mVXwU:qMw5Qf2RSTIadDpwU5CAU
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 138KB
SHA256 1d67cc5aaa64d0283e89c6e68b9c25ec6be3858793d732a3bd93452aa2f60e3c
MD5 cb1569320f8290707bec95b3630b523c
SHA1 178d3625762726786b7def2916dd87f9ad725562
SHA512 cc5399a1e669c3b5e2b429cb17186618ac1ec7bfbf3f18a755576e5bc769f82b057756e1ebb6b3d333ee674c3fffd3890482929408d72a4d5674e32d5ae7658c
SSDEEP 3072:WcMw24LQfn5MY4R3q3m0qPaNjDpwU5mVXwU:HMw5Qf2RSTIadDpwU5CAU
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 138KB
SHA256 ef5bac60ab3bed374528449f23ad69ec62ce6fdbb43dfa4178ef11b4fe8ceec4
MD5 8730c0bd1fc5e32a59d80f1aed89d228
SHA1 0e0371922bf9a1f515cf48331d5db7b3e8e11eda
SHA512 be944e7ab773aa13c03873d209d682e0cf95748e684af13191234235397c758b7dd86a5c60743e12540cc541a2efe2a312e83ba4cb6443104e66ef7c4a6dbfaf
SSDEEP 3072:0cMw24LQfn5MY4R3q3m0qPaNjDpwU5mVXwU:FMw5Qf2RSTIadDpwU5CAU
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 138KB
SHA256 d5e5457468a5a9f15dfbc7c9b1a4a43efb50edaf40a62169391f15ffd6ae6f5c
MD5 c7ccc4aa981e968f23e3dc37a41c2817
SHA1 47ea25acabf4ea90c78c17d53064b2898d9e750d
SHA512 510b3e827eaa892c057fb7fce51692902e7f6720711d9ee34181cce45a2305b51e4427d7358a4fee2b6730a35986e714898c91bbbb29f4ec79bfb4919d1e1cd3
SSDEEP 3072:dcMw24LQfn5MY4R3q3m0qPaNjDpwU5mVXwU:6Mw5Qf2RSTIadDpwU5CAU
MD5 SHA1 SHA512 SSDEEP

Submit Download

Module Info Cache

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache
Size 102KB
SHA256 af371123d41f3698700f4a559260dcd1e9b3720219588d0fdfbb3bb42888b38a
MD5 18b4bf82783c36ad02d7c366653830a0
SHA1 a7bcc4d5385c5fa4660ba778b1196134c01b311c
SHA512 e077c0e2e683152f2a083f89e50477562fd74870f508960653678922e3bb1ba43476e42a33ee3b0d342e294ee3ce88f150d527715f99e78b5577bb566056b72c
SSDEEP 384:SvUdxEQ8rzrYiJuTzurNnkxdPZRC0VFwOa848iwAkko4DLr7r/l44iMpBL3Qcw7z:FiQ+eLS7pLHZPrDyD6hKK2B
MD5 SHA1 SHA512 SSDEEP

Submit Download

Module Info Cache

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache
Size 88KB
SHA256 9bdbe579efe2dceff760fe875ef6e357dedc7c1cddbcdc8c6da4b238340116f8
MD5 e04e5e072d6de7437e42ae55eb204749
SHA1 459b99e5d1880aee2be61f2d13477bc36bb5c315
SHA512 a90b69ddfa2dc7212d95b60d08541cd96c0cb818c060f43276797972c781ea672f31580de3dba42a431f1fb05c7e7ad04516415d3095a82fc83fb3883a2b0dd7
SSDEEP 384:pRvUdxEQ8rzrYi+zurNnkVPZ40Vsa848Zkko4nr7r/N4iMpBLPw71+dLr47yNXon:pGiQXR64u0ZPbD6hKK5b
MD5 SHA1 SHA512 SSDEEP

Submit Download

Module Info Cache~RFe57f194.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe57f194.TMP
Size 83KB
SHA256 26a02845d1294bfcbbfdaf5cd708d641b6ab36c8fec23c549b053f17c6946dd5
MD5 7163cb0a6a35fff9a2579f72b3dc2bb8
SHA1 28aa4c680e1fb4c8dee4cd68fbce0878d3b908ce
SHA512 2a8819223f9a6f86099a243eaf5198d6f5830f974b29222a513fab07b698c45e5cd9d90eeeef9581f87b38771b3a108d25524173cbc2ffd68bdfc8c08af73c6a
SSDEEP 384:GvUdxEQ8rzrYi+zurNnkVPZ40Vsa848rkko4nr7r/N4iMpBLG71+dLr47yNXorVC:xiQXR64MyZbp36hKK5m
MD5 SHA1 SHA512 SSDEEP

Submit Download

vivaldi_installer.log

Path C:\Users\Admin\AppData\Local\Temp\vivaldi_installer.log
Size 893B
SHA256 fe7a263a957e9136a609a4e73a9a4ddf9b3a00bb08f1f5101ab10e3c81a238d2
MD5 e0a14faa41234db6a20f6da5a76b865b
SHA1 8dcc4a6aaf8016ac62ecd218f6cb27ba5765e0a7
SHA512 4cd9e47afd7967718ad221480bbf48acc66beb3d548a3348750fefbaa2945e24bfad8ef6e1f6d42fd5f66a745a253ee35501530594eb3ca4ef8a6dbc7d1f9f54
MD5 SHA1 SHA512

Submit Download

vivaldi_installer.log

Path C:\Users\Admin\AppData\Local\Temp\vivaldi_installer.log
Size 1KB
SHA256 b2c7d20781bdd29e2b0bcaab66edcace32de768e1db0835eb9d997fdfdf4ff01
MD5 528e52507a25cdcbd0643d862b2c93b6
SHA1 7f4e408ae6f3f3fafea359a66b75cddfe0e18c2a
SHA512 c8493b5ccb02ca1e339ec8362fc7933a53d363791883b0133496bfad52ea95860f469cf0de87e98bc65b2ca5e062411edb0acbf2389ecd570544fc29a94ccd79
MD5 SHA1 SHA512

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\Vivaldi\Application\6.7.3329.41\d3dcompiler_47.dll
Size 4.7MB
SHA256 7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d
MD5 2191e768cc2e19009dad20dc999135a3
SHA1 f49a46ba0e954e657aaed1c9019a53d194272b6a
SHA512 5adcb00162f284c16ec78016d301fc11559dd0a781ffbeff822db22efbed168b11d7e5586ea82388e9503b0c7d3740cf2a08e243877f5319202491c8a641c970
SSDEEP 49152:KCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvhiD0N+YEzI4og/RfzHLeHTRhFRNc:xG2QCwmHPnog/pzHAo/A6l
MD5 SHA1 SHA512 SSDEEP

Submit Download

dxcompiler.dll

Path C:\Users\Admin\AppData\Local\Vivaldi\Application\6.7.3329.41\dxcompiler.dll
Size 20.9MB
SHA256 5b5aa8650ea96df984bd70addc43d48608a4b647414721db0ac567263f173ac3
MD5 e3f47631742a06a0a904c40810ce80df
SHA1 b2bec8b2dabbed619f007b50cc9300ca7c02ba9e
SHA512 19a2e028af22a17e0409dfb460dd6aa0149cbdd53f17a64c43d9b44545e8cac3047b32605a36e04f7cb274060be727d51c00ea9fbcd8c6c91b7e08bb9654ce6b
SSDEEP 393216:SUc3ghlcbPPiZ4cV+mReDnQiCFYDanG0d:z/YDMDd
MD5 SHA1 SHA512 SSDEEP

Submit Download

dxil.dll

Path C:\Users\Admin\AppData\Local\Vivaldi\Application\6.7.3329.41\dxil.dll
Size 1.4MB
SHA256 47ffdbd85438891b7963408ea26151ba26ae1b303bbdab3a55f0f11056085893
MD5 cb72bef6ce55aa7c9e3a09bd105dca33
SHA1 d48336e1c8215ccf71a758f2ff7e5913342ea229
SHA512 c89eebcf43196f8660eee19ca41cc60c2a00d93f4b3bf118fe7a0deccb3f831cac0db04b2f0c5590fa8d388eb1877a3706ba0d58c7a4e38507c6e64cfd6a50a0
SSDEEP 24576:LCfhbh3v3mtZDiAQeWj26k41ob2nrZ1rqpegQDJqoZtp22GkmgA9u808jQPEdkr1:LCfhbh3v3mtEAQrW41obCraeRhy9ou6r
MD5 SHA1 SHA512 SSDEEP

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Local\Vivaldi\Application\6.7.3329.41\libEGL.dll
Size 468KB
SHA256 877f07ace15e3087fdac15498b599c6e308b5fe2e9e2d89a730f64dfb61d6b37
MD5 2dc7e9c5fed44962a4e340cc1dcd680b
SHA1 883e14241d7680d7113ee2b9f768e7a09a953249
SHA512 acccf66a46870b4e751229c087724e970f5ccd21bce5a09079cc5e50d8a13e8d70367391b9013d19190875f6ac5329c8e747ca61c8cdda954e05cb8c509f7d4b
SSDEEP 6144:gzyLH9S5dIdOgMl+UuUTCXVYybdNlXiKW2qLNmPUksIfsG3yFQ8X:gzoH9/EgM8UdTCXlTPW2sNMUAH3o
MD5 SHA1 SHA512 SSDEEP

Submit Download

libGLESv2.dll

Path C:\Users\Admin\AppData\Local\Vivaldi\Application\6.7.3329.41\libGLESv2.dll
Size 7.6MB
SHA256 352f10138f7fa217c21abd2613aab4ff8fbf22f6bf7e0742fe0adacee609847d
MD5 58309518f1b819dfe76073d9fd2493a9
SHA1 78dd2bc9c3c81fe8794bab34c7d038e277c52cbc
SHA512 1da2c0b50daad33be08e8e9a6f52ec98196b307aad4ed1972803bef86ba616504083e5d48e8d7e46fcff71188d2598f1816c835acadf3665278e7cc6d69d06c8
SSDEEP 98304:xagBuIPrYVXqx//3xzcndquW1fRJUfXm3hyA:YgbTvx/viqBZJUfChyA
MD5 SHA1 SHA512 SSDEEP

Submit Download

vivaldi_elf.dll

Path C:\Users\Admin\AppData\Local\Vivaldi\Application\6.7.3329.41\vivaldi_elf.dll
Size 1.2MB
SHA256 3f7ed1eabc7d5d5c48b4d8757391050953743f53818c592e9eb959f2968ebc49
MD5 0e2796bdf4e96f6777befd414fdeb6df
SHA1 525b03da6f5a8c8dae7d5e07d76a52def2461d52
SHA512 ee1e1ac73fe58be7fa34ddf1d64aebc7cb6e0e47e9e46042db585e8568b35cbd0ce93b98d589f73f11145e0ad02b25a820463b08375040fce26da2175371e6b3
SSDEEP 12288:fDWz3m7JKAaK00CZhm2PuP+FYalhrdlgKvisEXsBZJZ8uhmy9yQAOTmggZcYQNQT:SW7JKA+I2PueVxlgLpAZ8uwy9TXNZZ5E
MD5 SHA1 SHA512 SSDEEP

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Local\Vivaldi\Application\6.7.3329.41\vk_swiftshader.dll
Size 5.0MB
SHA256 64165ae6b6d060a3f1a857d87e553d2bcb6e6da4b4affd96aa0f9a822e9883cf
MD5 050303e9cbe873d674d62b852b0d164b
SHA1 d094b31fd02859fef4bc6acef683de5a695c9885
SHA512 99b669a85a5504941d897c0c234c570cdf995f64b25a3e8ef54aa8191d6b7fc25d8e47cde9e40e582564dcaee91b7fbccc31e69182779488adbd926c41ce228f
SSDEEP 49152:MfUj4swLbcmoqCB/yOG8F9aAhfyGzviic42vnvxazs58Fx1yJCAJV9bUihpUfL6U:DDwLQad4dkYLijwetggob
MD5 SHA1 SHA512 SSDEEP

Submit Download

update_notifier.exe

Path C:\Users\Admin\AppData\Local\Vivaldi\Application\update_notifier.exe
Size 3.4MB
SHA256 b2e68b9fc98e3ac8dd3943fb697186d6481b3e5ee6dfe7829c413f2f1af2e794
MD5 98a775d4bc849c921ae897cef876f497
SHA1 28abd0a1c65411acf3236baaa71b138ab24fc341
SHA512 b96332700b469c5e3ade52ce8611931921aa85276378fcc9b16bf23592641e0ab294a9966fc06b674c899c0abae4bedd367ef0c8caefbcfa2e0fe33d3ab6c279
SSDEEP 49152:KeKeaxH60lYbQDL1dXSIqyuVIr8KCU9P/7nkO/6bFRWcRD14i2UR2OL/5/l28uOp:WHS8kIgVIr8KCU9TuH3h4i2guOp
MD5 SHA1 SHA512 SSDEEP

Submit Download

vivaldi.exe

Path C:\Users\Admin\AppData\Local\Vivaldi\Application\vivaldi.exe
Size 2.4MB
SHA256 e860e16ded6006f51a1b03613c7c0de5cb73b408547356667a8bace2ddccc5f9
MD5 d8b6a4a7c37fd844c264089d8acea982
SHA1 f3d1a5c07773169a926c701e7b8b9f52d4ddf038
SHA512 b164c5caa09f7a7e931eb196e05b254c2e724124b8cfcdf98a84bb45b1527a84b313392d6956f3eec4af5e249f6b3a30f1e819bae3c76bdcd712a91a54b2772a
SSDEEP 49152:I167/WAxfIp5TSYQlfup4DA+3zLfWlq1TF+JmaHuTgWh:JWARlfMdwfWlqQY
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preload Data

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Crowd Deny\2023.11.29.1201\Preload Data
Size 12KB
SHA256 09d2155be71880356a993fabacc2ce01f4fbab99497ec157b53a094b8927c039
MD5 aa3ef996bce08a9c34fe513d078d1ee3
SHA1 21688d164d442d37fd5471e13b41b1d216f88d37
SHA512 285c85ca55fa54a1a12c47909b8575e8388570a76f238dc75aedece12e58dc0a3fe15edeffc41af14bb7944a0682de76f0ee0d6502d15973f8d9b1c5b2f828bd
SSDEEP 192:2V4qoZExE6Bze5oKLJVeQvDpfYUIX7k2iLOZSK:2aC5peDLJoQLa77ZSaSK
MD5 SHA1 SHA512 SSDEEP

Submit Download

8a406986-f1c6-4703-8d6c-25f83cf42305.tmp

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\8a406986-f1c6-4703-8d6c-25f83cf42305.tmp
Size 163KB
SHA256 69403aa247e898b19fda7ef1ba99e1d3bf7afcb8b2f795934497fbdc229a6ac8
MD5 2e60b3761696e831e249d20abb168b23
SHA1 aa3a4d0d75f577a4dbd5e115a6c8ce7b5a404a09
SHA512 0554b1c72c8333f5dac213efa869714aec35235feecdd0a7530caf03519e399429d8d38ff8fcbeef73824c812c9b05a7fd16b4099160785f373b9ffebaac3d99
SSDEEP 1536:BnXzvJXBu/becxgpDrKgtZYIwz6N0mgBmpNeK+QbT0km3:BX98/hxmDGELwz6N0mgBuH+Mm3
MD5 SHA1 SHA512 SSDEEP

Submit Download

AdBlockState

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\AdBlockState
Size 13KB
SHA256 68ed7607044c28cec7f2af0c887623d9a54851bcc3db40870616128c4521aaeb
MD5 d0a417d7a30dcc07af32bb713106bca7
SHA1 4a1060ddb8f23d397b3eafca39bb5cdd01ade603
SHA512 d82b9e7449e1f78fc8feb3d4e17d2ad92453902ef585f36986117ff39e2c7e1f98b765de5e7ee5fd1f6900e5d33f6cb96d1571b5c22637fbd491e983349b6eba
SSDEEP 384:ftHSV3BJlwg4gEr2CpWBZGnw/GGgNjUhXU/b8IDmvIFCs/1nhneM0yB:ugZF
MD5 SHA1 SHA512 SSDEEP

Submit Download

AdBlockState~RFe58c5db.TMP

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\AdBlockState~RFe58c5db.TMP
Size 12KB
SHA256 2308678e33b47c05ebc08ffaa0105dab3fce8198d0d298fda6f3ad4d485f7694
MD5 bf8050931a5f62e61eb6be20e39fefa9
SHA1 f0720cc84264074e321c3f3f4da86803c1b03238
SHA512 e915432f0b6d845edc18d8e514e6d10745a123a59c8ec5b8f6fa06e2f3e9ae5c42e23c58fe97abf2edcf978b158161d8164d3deda1f39c3f6f0a531871cc8df0
SSDEEP 384:dtHSV3BJlwg4gEr2CpWBZGnw/GGgNjUhXU/b8IDmvIFCs/3PQtObY:ogZ4
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 228b83f081ed4069adde6c994d144eb8491f1aba932e1010c59ee726c3740380
MD5 058aab71ff7afc8add4db4e2db5d1a72
SHA1 af17fe3973cd7f1cd5f55477feb11c088c33c812
SHA512 a4a8bd9e164a1a4febdecba8b915f1ae3a2b4b27cb44d798cfef210ee8a4d0e82c366a0cfb5f9a8c540fac890b7ef9c3985caf0f5e3f87f5ada6c28209150ee1
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 672B
SHA256 1243e40f162d55c58bbff8642d0ffba857f43ca2165edf61f9387e8b7236afb9
MD5 1c1f5db64ee472fa6a57ece3a0151d0e
SHA1 f87554961ae83c07311a8a4dc0cf6a4c86757b11
SHA512 85df1865ad5603801f919b36616bf7637a989fb97be08b6096620f2794037005f1e62470ca0c7fd3451e59768cdb9b6585a56c56a278800872f0390205427262
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 360B
SHA256 6b08116785d521093fc730a2c1f4eb3c953e547991332e40cb26dfb5f0a92d91
MD5 d6efef9c2be090fa039deb1d5821508b
SHA1 bb5c09f86d6010d22aaea2dbcd34ebc3ccfc7ede
SHA512 0510416e1f28e2cc4a0f0c5b4b3bbc0b8aac2797e706fb3f74476469ae65fec67c55b988af04aa8da526b1d77821941e7d2fdd3e58e8348ee43d88077e86b11c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 336B
SHA256 4b411adc7909ba76ff0f20b372c2fe40cd142b4414cdf6deb8f9feb6e01acaee
MD5 069686b3feba5872447b561918150996
SHA1 68e838f8c8792674942f34bee5caacfcf4b913bf
SHA512 97119c3361b2f8bdf4f150efb53df56b663e048f97213edf41368a36efca5255a9a068c31533d6a88566b78a75b3f6a1e31a0b9d2531fbc8522c4e225402353c
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe58f596.TMP

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58f596.TMP
Size 48B
SHA256 7bf3e2d3f7fd69e6b31d8990b3d92749de5c774e84dc2cdb3e3420bbe6ca04ad
MD5 0ec9072a20de246fe36e886b5daa57a0
SHA1 25c0593618291c8cba36a0975ca7eeca393725c9
SHA512 f04c118a311ce4008e70dffedbee10ca3927363cd635331cf4021a2a6e7c3379a8c9486de6a8af94b1dba20ad89d1b19c79d6930fd7d37c8326fcbb728788dc0
MD5 SHA1 SHA512

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\DawnGraphiteCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\DawnGraphiteCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 5eee32fa92faf44e8455943dcd2424d2f51902025425ac7e0bf5fa0af4dcb09d
MD5 e7586ba39922b5545fd2241cbd6ef895
SHA1 9c7235ad0eb83b54fbd918a89d2348590371f274
SHA512 4dc573826b008991fdd3a6a81f82c71acf62d12c02ec854f0d97f5c845f018c27aed3c75d7db0bdabf9643f750c644f2986a82e552c3849110d6a033cb693618
SSDEEP 96:FuHOuHdsPuzYtuKuw9uYfu4huzuGuKuiu2uRuBuZu4Nueuyuc:FZHPltxf9FfThMjL3pm+WTNVLR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 2af2a8840d5f02e70034ec84561660190417f6b8fa13a0b848ff288ce645f6a6
MD5 23ad257a27380a093681761f771d1e0b
SHA1 943dc5d10124429585125187e9f2f917a28640c8
SHA512 bc28742abf5c2eeacdaeaac279c2450cc083439f263d3e6a0c04ff1b09b9762a29fb6a12bd273362279fc42d1b126a39a19af0de740b9d56fe116b0bac46536d
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Network\TransportSecurity
Size 691B
SHA256 9d854f9388809e147a1b8f074c0c799170bdd8ab546092bbea16147b131ae6d2
MD5 dab1566ba4b3348c42c73818c9c43d43
SHA1 2c5379eade302c9c5b6b4043510a6c8393414c0f
SHA512 8125035598fb09f4394589846f13605c11931bee68f10d1ab164b19efbf3f09e5e9d5c105a27fc7ba27543f4b81e9e505ee4faf4769c71c396122ec97a66413f
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Network\TransportSecurity
Size 523B
SHA256 86902e6132f5495dd2ab2df1d00508217015d79aaa1f4d4c104e83c24dfeadee
MD5 91130719475f82bb4a4c519caad443e3
SHA1 3f5128a99d1fc7b4a63ded6d3538f7cae1d595b1
SHA512 136889145f122f25625b664fb7856869c572f86f8d6a5841ae093d1ac91cc4ea233b4dfcd89cb39ebe535bca929561def49ad0e58df216bedf7d9c1951c079e6
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Network\TransportSecurity
Size 2KB
SHA256 b37641552f9795f69891e9cffbfce503f1d6be7387450ff21936ec0538269025
MD5 217cf75438e39c6b6b4b0c4bf76dfffe
SHA1 c9a31d3e5d7c72874067184f09167f6d23552f53
SHA512 d38fbe51053a5523411c65eefa316fa6fa2fd4432b0f1d3106318bccebcda6c2762648bfa504d3dfb17e5a3eee4e3b0dcd2a6bad9752f991702c998ec0437742
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Network\TransportSecurity
Size 691B
SHA256 1d377060d60d2ecdebec4fedfa22ff2027aa5d4e8299e899fd223a1add38f20f
MD5 895c123a92e823408b26ecbece9f2cee
SHA1 0645e551647f10c8db561bcb8a54bc31c1e4cb84
SHA512 20d7b4be57e5b77180d27c8ca925dda8c6a6af12e0d87acb0e73a64509b6d6a04be58256c057a5d507bce8207d22bb4c5378ff1361c40a1ed65f52616b5b18ec
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe595579.TMP

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Network\TransportSecurity~RFe595579.TMP
Size 523B
SHA256 a36dd800de83a1106ca537e996651622562daa9a25147646a0b93d83031c8d95
MD5 cc7c89135dc00b128abdee0e828279b1
SHA1 450f8a642a8fa481e33e1c7c233d6eed353d7e6c
SHA512 f8374737c6446b9587feb1c9aa2f65c5feb5fdb5784b7f900a5e87c296f069110c11f662df1eb0818076b3defc59c405d7e00ef0fb4a834c78c7cf44652b2f34
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Preferences
Size 8KB
SHA256 ad9ee9f4267e52512d70a088c7f09f3e7640683b751598a68c97e0e007f153bc
MD5 b4e71ec4c154f7c1a36838e302cd40ed
SHA1 33be233ed28c04e6dbd1221dfcbc0298ce5c6855
SHA512 bcdbf6c08d3697a095145b8cf86d3622c030d7d2d15c8db0a936a802c5f945e65ee66daa7c6e11fe15fca5c954cacf83c24d8699d3c04aa058cfb872b66beb83
SSDEEP 96:rT3WGIOd7IEQ6ZFX7/x+hHMSm+uecVR2MDAy8yIsnIefqA3gtgrjeoj0ehZ:rT3WGL/ZXV++X/PD6yIsnDf7guVIQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Preferences
Size 8KB
SHA256 c6b02bb20c2eb0522226f26f2a9e5cba17adc052388781a6724cad9ccbbb938b
MD5 758ee0a932dc799858a4b3735ae4e133
SHA1 10e7ab84ba811f0f5e0072f83d9ba371f36616a0
SHA512 03a0791e1261725952e0d03a3d1cb3e2fb2be9db4927ad79f7f2483d250eb374609a48a59e757c53a7853c9c763262086cfa0026a9a7cf4e15bbec4d770419d2
SSDEEP 96:rT3WFIOd7IEQ6ZFX7/x+hHMSm+uecV3Z2MDAy8yIsnIefqA3gtgrjeoj0ehZ:rT3WFL/ZXV++X1ZPD6yIsnDf7guVIQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Preferences
Size 8KB
SHA256 37ba010b54c0ec231709e9d98b1f50afbb263e1fe77cab8a3c7ac05a11687f38
MD5 dcbea96cddc27456bc0de4989f409f0b
SHA1 22bb33457ee58346c1abbb59a7a9a0db4cace7f5
SHA512 7adbde86a9f03b23c04cd2486f47b52e568a8fbbe197b25ef277e92e2eaabe191a22a50eb55d85d6d8e30ee091e20071c7643b72e1b7366767b09b0787bb01de
SSDEEP 96:rT3WGIOd7AEQ6ZFX7/x+hHMfum+uecV3Z2MDAy8yIsnIefqA3gtgrjeoj0ehZ:rT3WGLPZXV++T1ZPD6yIsnDf7guVIQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Preferences
Size 8KB
SHA256 ff53763503c3cef647abbb6965bb916c759811f7adf8fbae2d4f66d705f77dac
MD5 fc3da3933ac4211809d9ff2132ace2d6
SHA1 fe0f9e631ecd9fe0f340ccb3c2e4530d221fb3c5
SHA512 b7f8eb82792508b3f37a2427010120989d8897cd76e614267242c4b1cadf5ae1d7e2ec0c87eb3448ac370f3d29e5908c74d1e896911c93069c1a370992d774ec
SSDEEP 96:rT3WFIOd7IEQ6ZFX7/x+hHMSm+uecVR2MDAy8yIsnIefqA3gtgrjeoj0ehZ:rT3WFL/ZXV++X/PD6yIsnDf7guVIQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Preferences
Size 9KB
SHA256 31acf7dd8823b7badde0f5f3b51e98abee88ba133c2493eb95173366e8681e9b
MD5 9c7a2763350a7f4e2eee48111e5171eb
SHA1 65a25daca3c173f065c78aa41f05fcf68cff5e87
SHA512 317522e393a503493575f8221c4b41707570e30a3573dea0143072031c0aedddb961c31156476084468e64e52f83ad7716d579a377485f9cf11e7a031060d5ad
SSDEEP 96:rT3WGIOd7AEQ6ZFX7/x+hHM/jum+uecV3Z2MDAy8yIsnIefqA3gt1Qrjeoj0e+DZ:rT3WGLPZXV++P1ZPD6yIsnDf7g8VIR1
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Service Worker\CacheStorage\66022bdeec7622db1295dd8e0d3805f010fd31ba\fa4f4083-4281-49e4-8430-dc9ed10d95de\index-dir\the-real-index
Size 528B
SHA256 dec91d38ea78c796eaf3a05e35ff1a799acda4c0bcc0496674339dc3a4bb2830
MD5 57a5e5de9146e973c46d939dff4511fa
SHA1 80ba37b420ce2970ecb9f08068f6a6a377f67ec4
SHA512 046a69ffa63d4001dacfb39dd2b2ca6a9a2560531a45f3fadd45b1a88e83ce8998055f7c06e372629dd3e428d0ad46a5491f605132b8a83ec5c801c02187b8a2
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe5bf307.TMP

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Service Worker\CacheStorage\66022bdeec7622db1295dd8e0d3805f010fd31ba\fa4f4083-4281-49e4-8430-dc9ed10d95de\index-dir\the-real-index~RFe5bf307.TMP
Size 48B
SHA256 0cb51bb3047c4b535baada0ac45e749525a6df2debb8f20272dcf7255e99c0a9
MD5 88f0705d624bc08bba893ce16f86a86b
SHA1 f0d14ae30eb6a1a10dbdc1c6fd606e74669d49b5
SHA512 10bd1ed4695d312053830342f9b58844e3b4c10350e5a18172402c66b260d298508a645657ac84c1e68c0f6c025715c1a307b99f41a668ec9b4a740b228b64c7
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Service Worker\CacheStorage\66022bdeec7622db1295dd8e0d3805f010fd31ba\index.txt
Size 138B
SHA256 8b44faca4200f8f8386741feba073b1ca24c9e5749698379ee72be9843cf9cd4
MD5 058c6abc4e3c9bc478cc5ea888a083d6
SHA1 f5fcd662efdac86eee4014c337e413a7050f7e63
SHA512 6e8fbd5ad72cfd28f4ca21efe4dc4bf2699191107806230adbd2699abdbd7ed40f9d520c3cd631a79ce9c2ada38ef57d3c294a8db13b7f03061ba6e879df6b7f
MD5 SHA1 SHA512

Submit Download

index.txt~RFe5bf336.TMP

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Service Worker\CacheStorage\66022bdeec7622db1295dd8e0d3805f010fd31ba\index.txt~RFe5bf336.TMP
Size 143B
SHA256 f3a8546ddbb2127ee71795c18b921c192097ed027ea83dbda08068c8cf2636b1
MD5 73d05802e5ee41d1ad72c772cbcb60f8
SHA1 cdaaca2996b0f23c33e22a8445c6cc609e6e8bea
SHA512 e919883c19836b74953c65d98428dc6cf1a0bc4f19dcc4767e05db9cb1b9c97a76e6df07713db00bacbddc99aef7a993b163e58760105941533b93d845df6e42
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 5b702c54a87104fe494a5e22f5efa618f82727f999e55a12f41083d628f7f096
MD5 5a146ea6cd4686284735ff7647124fda
SHA1 787088fccd12257f37c76d5daa3c78785f768475
SHA512 e63b56b5b66209fe7bfe8866b32bca35c98b7760f9a6ac5f458c35cec51e31bd32612af5b2c8f39be80a695f7a9a46f15cedd9c5a4f732ab09eeb8cf8f21fbbc
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe5bf1fe.TMP

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5bf1fe.TMP
Size 48B
SHA256 09b5f54168841ff0e7dd2a7f77618c649b5a22b1d053d7ac6f6c73d9410fa549
MD5 e26b193fda313d3729b27744bebedfb3
SHA1 892a833c9cdef88d501efe6f9ea5a0a02a8f90c8
SHA512 901e9029b94552e91d67c4d18fd0f78c8c2fba64f295bee3cd18b1c4861edf7b46cb24812fe13e989b4a4dfa6c9d849e8804f3d605c06cdd9a1c460d29cd405c
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Storage\ext\mpognobbkildjkofajifpdfhcoklimli\def\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 8c557b074144b26dc205f73a1e6f4b3dbc2ea88000f9c70ddb4b818b53284df8
MD5 380ade2adf4210eed7bcb0e924ee2580
SHA1 bcc1b3cdf3757696d03a7dec2225d9fbe2e53f8d
SHA512 6e8edbd37190b5617755fe84d9f754f92950b014af9e05dbebc84ee14e0114e90cb4e826b1a036d4574de7b532c8069882fcf967962d18f0831e11fef4c5173e
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe58f680.TMP

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Storage\ext\mpognobbkildjkofajifpdfhcoklimli\def\Code Cache\js\index-dir\the-real-index~RFe58f680.TMP
Size 48B
SHA256 919cdf391ebe6fda59121ab847ec7622f4b29d998b922cf8dcf03920b6bc669a
MD5 9f1f89f6ffae79644e01e67a237daef2
SHA1 46746a200684185466f28e5969c473c523e179b8
SHA512 53e56cf85142ed876d6c5f7ebb74fb20bc048b0662bc3dfaa17f5bbfb536501d2e52e4e652bcdb66b8620dff9362c174d935fe32fc1f78f5ddaebd8abe642fcc
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Storage\ext\mpognobbkildjkofajifpdfhcoklimli\def\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Storage\ext\mpognobbkildjkofajifpdfhcoklimli\def\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Storage\ext\mpognobbkildjkofajifpdfhcoklimli\def\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Storage\ext\mpognobbkildjkofajifpdfhcoklimli\def\IndexedDB\chrome-extension_mpognobbkildjkofajifpdfhcoklimli_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Storage\ext\mpognobbkildjkofajifpdfhcoklimli\def\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Storage\ext\mpognobbkildjkofajifpdfhcoklimli\def\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 d53116c72295631e4ab0edc6571446e164b682b5d02b396465bc5e0dcc6831a1
MD5 acac07a545656de1f54aa0da6b72e2fe
SHA1 8cd7976917f2e971a7e4c2a9a412d95c2a9aab5d
SHA512 10d194a84238a1b246448a42c760d6ffbfbe3e413df38557b8e13c97827f95fa34ca79ffb90c9e8cd1e059638d201d70969f85f9b4d388b315b1346ff13fe82c
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe5902c5.TMP

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Storage\ext\mpognobbkildjkofajifpdfhcoklimli\def\Service Worker\ScriptCache\index-dir\the-real-index~RFe5902c5.TMP
Size 72B
SHA256 cc84b66ff426e6c0091e8aebb64d005c874a744ab7c25979515943cec045aa65
MD5 886bd2d397d90310198599b13f21453d
SHA1 e674680b6cecb734928e6e7dafe2c3404780b256
SHA512 d2dd40b1336ea38450b8bf804cae419eb83401c56ddd248e49c8d94e20bac1448a6d173dfc3a88d1adb62cec0324483388725ece3dcbbb73da16af6532198d65
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\Sync Data\LevelDB\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

eaa81481-d202-4616-b02a-5545ef909dd5.tmp

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Default\eaa81481-d202-4616-b02a-5545ef909dd5.tmp
Size 8KB
SHA256 785b4b985ecefce85cf81a7a28cdf19703c24814efb50e66e837ece2c78f4f87
MD5 cf72ceae71aba8534c64b4643953902f
SHA1 56f987157364a20e09bf8ad21beb7d2bfe00c70d
SHA512 272fc3174471a2def8e4b6dacea5b67d18106534c9083473b3830e7c3f7d269844d4ddaaf1a374e9a94fca511f78a2400c1b1d28405c9c53d7ff9965ad35f0ca
SSDEEP 96:rT3WGIOd7IEQ6ZFX7/x+hHMSm+uecVkY2MDAy8yIsnIefqA3gtgrjeoj0ehZ:rT3WGL/ZXV++XyYPD6yIsnDf7guVIQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

download_file_types.pb

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\FileTypePolicies\66\download_file_types.pb
Size 7KB
SHA256 2f490c4adc51b58604c99546925f091dbda66ce6e54a0ea5b75e675d1fbe019c
MD5 b486a2d22e22545b4d7ce820c38245ca
SHA1 3be7e3d4e07c581b9638a73a062809fb1f535ca8
SHA512 5c47112085670e0726401d436984accf4ab21c23fd785f0031997b786238618a163cd194749b8f625c3ab18d211f31711cc904c3164671bbc9347550c3b72ace
SSDEEP 192:B0aEW8SsWk/pvtHB3Nf5Y10k6QKEa4pmifL1YbAnz1QRsO6v:B0aEW8SsWk/pvtHB3Nf5YKk6QKEa4pmC
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Local State
Size 6KB
SHA256 3cd0de14f28497ff4f07f88a05ff1368275f607ddaa41da37d07b0a9433e9fa3
MD5 519057ff2639215fcab354c497bb1c35
SHA1 b5424c66dd31eabd1278556c517a3a7ecf95cd44
SHA512 a0d7781dc6939201f75c25c13e5366343d3f298e6c555e2258b0f3191f5e6de2ff3498b207e4ae2c4e0f51e55d12ea79fba559d7197fac99adf4b5fb1fdd3b61
SSDEEP 96:qbJ8fmlqDotoeOO0BXklMsC9+59+L+voSQwdV5pwbG6NbaY7doako63JldYcVa:qtqDUsXaMhQ+HJ0HwNwYfMXd/M
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Local State
Size 6KB
SHA256 1861688fc4fa584176c297bb4b90e9fad9117091e7919f51175564872e8c4c9f
MD5 c329c7e2b082f66487183f606713a808
SHA1 acd3f47e9ae556397b45841159525f5b124c1f97
SHA512 02f2bd760d3f1f47290d57ce24a3d18a7033429b1aa1906755a0220603971a27931b671d65423c8aa1039f60595d5f996ecfce9908c326aee31dca0e5225c6b4
SSDEEP 96:LGUbJ8fmlqDotoeOO0BXklmqksC4+H9+L+voSQwdV5pwbG6NbaY7doako63JldYZ:LFtqDUsX3qkhd+HJ0HwNwYfMXd/M
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Local State
Size 3KB
SHA256 deb2ca9df92e8c2d9bb75f5a94258789f19b129395de4450029ea4be45960cda
MD5 2b4758e0f2607a8b5314533b134230c3
SHA1 3de017ac197a730b149b27df04cb879f5d6e94d5
SHA512 fee6fac797a2f6eb13ba0bbded4dae6d31b43214f711e67665e33e463542073060ed54f8c062232199405edbb848cf3d652cc1933cfe86ce1af37854ede3f97b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Local State
Size 6KB
SHA256 0c96a9475270bae897e71de1e5b0601f769b2523f3ad463f83c6328b6969beb4
MD5 ac28d5644ef49a3cb68aab32c37814fd
SHA1 9da0011551e1c4bfb1a53d1a2140c1ee4f417f2f
SHA512 cde2c97e6ca3a5a8e9c0a8b0fc4576ad6bb9f7bf2611ae76f53140e657ef7d92f25af2752d306d4568bafe0ef32a15a78bc3cda043216eb5c4925c3ec4c12525
SSDEEP 96:LGUbJ8fmlqDotoeOOyBXklmqjhC4+H9+L+voSQwdQ5pwbG6NbaY7doako63JldYZ:LFtqDUOX3qjUd+HJ1HwNwYfMXd/M
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Local State
Size 5KB
SHA256 30724343d0f9399b3deb4fb0ecf8d01a26796eea3f280f9b4f6708671c3186e8
MD5 f0880d1d4b63d14d46b808c9ad895984
SHA1 337532aefa789231611c898479dac87d239b7d1c
SHA512 0d23cf6ec2a856756a218501d9083f7391aec55ad658e74c3be514e376a76bbd6de27870fe9ca0ab8109028f2b4e48efc4c0a549245e1f52110274c20efa7b83
SSDEEP 96:qbJ8fmlqDotoeOO0BXklMsC9+t0L+v2SwB55pwbG6NbaY7doako63JldYcVa:qtqDUsXaMhY0rlfHwNwYfMXd/M
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Local State
Size 6KB
SHA256 d8383b7353126aa6a3ef0cedf64a6add2731e072664f3d788f980e7cbecbfb7f
MD5 150c4e355153470348256042f9310824
SHA1 6af856be2e75b5d4bbf63c68eccff3434377b6d1
SHA512 f3b9b197f52a8d7770414e6aecbf8ac5af8b29513f43127bdf7c2c8d30d8c1d9f508ccc8e5eb2c5a05ea12f2242621f28f9127d4396b59f866460292cdb5c85b
SSDEEP 96:LGUbJ8fmlqDotoeOO0BXklmqksC9+59+L+voSQwdV5pwbG6NbaY7doako63JldYZ:LFtqDUsX3qkhQ+HJ0HwNwYfMXd/M
MD5 SHA1 SHA512 SSDEEP

Submit Download

safety_tips.pb

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\SafetyTips\3033\safety_tips.pb
Size 150KB
SHA256 574f584b1eb99c8b3b72dbbeaef489ad2a41a998185374ab06337ba19edf4689
MD5 3e3b6ddf8fee9a502253ff810e727efe
SHA1 039bb227ee6a33bd9a5702992757302b7e261562
SHA512 f71de8802493d8a15d1ec10293379e2e6c8d7f2355fc5ffdd7b37a27676b26641127e52cd7bd08a6d68da687ed3058a901775a1dd041a31134d15298a968c206
SSDEEP 3072:K0G4+GOBtT5f5BF8ucWVCQDrQfBVkDpZNEcVDl7sM6zVFk6CAO:1GP7J5BF5cNQDrREm9AO
MD5 SHA1 SHA512 SSDEEP

Submit Download

Filtering Rules

Path C:\Users\Admin\AppData\Local\Vivaldi\User Data\Subresource Filter\Unindexed Rules\9.49.1\Filtering Rules
Size 68KB
SHA256 ae2fd01d2908591e0f39343a5b4a78baa8e7d6cac9d78ba79c502fe0a15ce3ee
MD5 6274a7426421914c19502cbe0fe28ca0
SHA1 e4d1c702ca1b5497a3abcdd9495a5d0758f19ffc
SHA512 bf1287f502013308cdd906f6e42998c422ef1e272b348e66122dc4a4e471d01333b418f48d1bb2198c72845bdc950612597e179e612aaa1ba6cf8d48fb8f0cf5
SSDEEP 1536:5tl3vXzj/oGmZSxdCqbP5PfgJgCR4Kdst6zf2Lu4semcjS:Vvjj/VmZsdCEBwgC2ist6zf4u4TmcjS
MD5 SHA1 SHA512 SSDEEP

Submit Download

Vivaldi.lnk

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vivaldi.lnk
Size 2KB
SHA256 e9720e9cd6c9cc0f5aa410e320255a8703a6b11297c2f520f664d2ae355b9484
MD5 0926bdb771437e2d34ebfb33e3165e8e
SHA1 9c773d27552767f8916213ec51eb33daf33cfbf0
SHA512 034a3f065f2dc979760a4511181809f9a58d3fad1881a9cf05ca1acabda1eca0ef8684c82077cbada9daaf2188440fba19851bfd48f3683d29de509ee281ed77
MD5 SHA1 SHA512

Submit Download

setup.exe

Path C:\Users\Admin\Downloads\CR_BD287.tmp\setup.exe
Size 19.0MB
SHA256 9bb2dc20e873cbc14615c2ce9746504a2e69127763c054171b5b1cd1e749dcb9
MD5 4bcfc171e7b8cf0c5c7577624fb3d7a6
SHA1 116e896bbd1f92acc37c995aace5ef6ff9850119
SHA512 d7ec66be90d5afbfc9e87a3a686481bda760e986cb4f4fd15f023374ac58355df58e7b8767f8f2d136092c8aa5bad83da71208bc2de9b7b308c9f6f7d962b726
SSDEEP 49152:xdwJjuNceF9e6aT8X6gfDDAs7HTG0JHKlO7c2lWUWJQlc7M4oqPtxqpWg3dEDCUC:MPTYfDD77HTFzWSqFqAC
MD5 SHA1 SHA512 SSDEEP

Submit Download

Vivaldi.6.7.3329.41.x64.exe:Zone.Identifier

Path C:\Users\Admin\Downloads\Vivaldi.6.7.3329.41.x64.exe:Zone.Identifier
Size 26B
SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
MD5 fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1 d59fc84cdd5217c6cf74785703655f78da6b582b
SHA512 aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_1220181709\manifest.json
Size 111B
SHA256 98306b21c0aaf9546301f4ab7fed785dc369c67e2fd2ad4d62fc63f072a51e3c
MD5 225c08f039684dfb54aac162dd9d5b9e
SHA1 426bd1044bfcd5e1a10b58ed1f217a6b33b2e9c3
SHA512 d6ff6cea0c08d13a642996a110432792048d21160c04543fbcacc60abcde362318e13a42fcd7520bc7673e98544a68a3eb6cc4338f4f4d8e90e0dfd5c40b77b7
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_1433424305\manifest.json
Size 72B
SHA256 0425063c480769e254f7b23b7d850db2f9ac5ebc130777f0878e48bbc5337052
MD5 5be67ca403afd6d1a47f0c56578bd8c2
SHA1 434f0f82a741dd869c20af9d87a7c8b74ee6a132
SHA512 d008b88aba3f76a3165e31b137be6a2b29ee70831c393119d5c652abfb784d61c7229293f289c4112db593592d86b0a2ba4586bfee292154136a2447e9b2249a
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_1575994506\manifest.json
Size 114B
SHA256 0152e17e94788e5c3ff124f2906d1d95dc6f8b894cc27ec114b0e73bf6da54f9
MD5 4c30f6704085b87b66dce75a22809259
SHA1 8953ee0f49416c23caa82cdd0acdacc750d1d713
SHA512 51e2101bcad1cb1820c98b93a0fb860e4c46172ca2f4e6627520eb066692b3957c0d979894e6e0190877b8ae3c97cb041782bf5d8d0bb0bf2814d8c9bb7c37f3
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_1979837637\manifest.json
Size 76B
SHA256 082775d5ea6bacc6bee71f31a68e966b4a7cf8d39adc681894b0e1f89bfbb47b
MD5 b5dabcb6b1744da449b7ee8f85258f7f
SHA1 6602da5eb5d1e64644f5427f210ce1e57544bfbd
SHA512 f89296d1dd2f6acffc102c45e1d51516937f4c143eb642cdf6c79d35b121a1c712063f56fdb6636765882246fadacd67cae71131831346f7b5770952070d76a9
MD5 SHA1 SHA512

Submit Download

hyph-as.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_31930383\hyph-as.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
MD5 SHA1 SHA512

Submit Download

hyph-hi.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_31930383\hyph-hi.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
MD5 SHA1 SHA512

Submit Download

hyph-nb.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_31930383\hyph-nb.hyb
Size 141KB
SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
MD5 677edd1a17d50f0bd11783f58725d0e7
SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgk:p73HEUP8dsiinTThjy90VKk
MD5 SHA1 SHA512 SSDEEP

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_31930383\manifest.json
Size 82B
SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
MD5 2617c38bed67a4190fc499142b6f2867
SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
MD5 SHA1 SHA512

Submit Download

cr_en-us_500000_index.bin

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_536450054\cr_en-us_500000_index.bin
Size 7.6MB
SHA256 b85c30009ca7ef550de3185e38fb4f4a2d8d1d5df4241be121ea785b40f644af
MD5 4f7e1f228ce9696334193e43f509dd5b
SHA1 9b12defa5d0f051433da7253258f120c82bfb510
SHA512 82e4b5f13c6c09638e7fac377acd9836a3a88952925fece38015d3456ae047fdd2ccc90f91d0a771028ccb545f3e27adf43a6b69d2a6f2f6ea705a4c71093b10
SSDEEP 98304:SDFfZSIj9vC7iR6ecO4XZwtUfi4vxq0kQjVXBsql:EFhnvC7WWO4XOtYiyxq0Z5
MD5 SHA1 SHA512 SSDEEP

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_536450054\manifest.json
Size 108B
SHA256 91a685c5fb8ad368cee83d9150fc52722df59fa3a86fa7b4c14140da6d390b8e
MD5 c222d99ced7896b6fbacf293ef54adc0
SHA1 fdc8dc8823b10c732114a3eadc4e02d542e7f990
SHA512 088731fa049c646af1cc3582bc59ca7a5e89760ca397b515b36228a1d93a410c73001cb9eca91ce3a132e87e522ba6438ea46fc2bb9ef798bd5e9d6065ea5587
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_749382679\manifest.json
Size 1001B
SHA256 68a3d7cb10f3001f40bc583b7fff0183895a61d3bd1b7a1c34e602df6f0f8806
MD5 2648d437c53db54b3ebd00e64852687e
SHA1 66cfe157f4c8e17bfda15325abfef40ec6d49608
SHA512 86d5c3129bec156b17b8ebd5dec5a6258e10cb426b84dd3e4af85c9c2cd7ebf4faea01fd10dd906a18ea1042394c3f41a835eae2d83dc8146dfe4b6d71147828
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping648_980047740\manifest.json
Size 300B
SHA256 dd43b3afeac53c5756b53b5a987feb96ca78d2016c5513a971b2d570a959c0d0
MD5 db7eb7e54eed7c7a94fabef1ff06ffce
SHA1 59ec7c4812b8281eedee765e052d280ef6d14be1
SHA512 eaae4182dbbd8c53a83cefc0070c1ba4542fdbf912e39537054f2fd5eef3ab0a6247f37d17acab31859a72fe69b2008d5ea5ff04fde3fb31666c2cada205ea53
MD5 SHA1 SHA512

Submit Download

memory/3244-529-0x00007FF8B9470000-0x00007FF8B9471000-memory.dmp

Download

memory/3244-892-0x0000022C37060000-0x0000022C37091000-memory.dmp

Download

memory/5828-1843-0x00007FF8BA1D0000-0x00007FF8BA1D1000-memory.dmp

Download

memory/5828-1867-0x0000026C5CF40000-0x0000026C5CF71000-memory.dmp

Download

memory/5828-1844-0x00007FF8BA1E0000-0x00007FF8BA1E1000-memory.dmp

Download

memory/5980-1875-0x0000011C02340000-0x0000011C02341000-memory.dmp

Download

memory/5980-1879-0x0000011C02340000-0x0000011C02341000-memory.dmp

Download

memory/5980-1880-0x0000011C02340000-0x0000011C02341000-memory.dmp

Download

memory/5980-1881-0x0000011C02340000-0x0000011C02341000-memory.dmp

Download

memory/5980-1878-0x0000011C02340000-0x0000011C02341000-memory.dmp

Download

memory/5980-1870-0x0000011C02340000-0x0000011C02341000-memory.dmp

Download

memory/5980-1871-0x0000011C02340000-0x0000011C02341000-memory.dmp

Download

memory/5980-1877-0x0000011C02340000-0x0000011C02341000-memory.dmp

Download

memory/5980-1869-0x0000011C02340000-0x0000011C02341000-memory.dmp

Download

memory/5980-1876-0x0000011C02340000-0x0000011C02341000-memory.dmp

Download