Analysis

  • max time kernel
    150s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    15/04/2026, 13:54

General

  • Target
    2026-04-15_303dfb4194b64ed6558a85dfc6d7bbc6_icedid_njrat_ryuk.exe
  • Size 7.2MB
  • Sample260415-q7zt7sf14r
  • SHA256 deb459236ff87647eb6c063a2c137097b032a150ed99a2e14f8a1f769861ce35
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Checks computer location settings 2 TTPs 4 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 30 IoCs
  • Loads dropped DLL 40 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 18 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 35 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 41 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-04-15_303dfb4194b64ed6558a85dfc6d7bbc6_icedid_njrat_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-04-15_303dfb4194b64ed6558a85dfc6d7bbc6_icedid_njrat_ryuk.exe"
    1⤵
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:3172
    • C:\Program Files\PulseSoftware3172_108383028\bin\updater.exe
      "C:\Program Files\PulseSoftware3172_108383028\bin\updater.exe" --install=appguid={2F4E88B4-E690-4E1F-AA9E-B7A4617F881D}&appname=PulseBrowser&iid={8ce747ff-b084-2884-38ee-b0e91f066a32} --enable-logging --vmodule=*/components/winhttp/*=1,*/components/update_client/*=2,*/chrome/enterprise_companion/*=2,*/chrome/updater/*=2
      2⤵
      • Adds Run key to start application
      • Executes dropped EXE
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:1472
      • C:\Program Files\PulseSoftware3172_108383028\bin\updater.exe
        "C:\Program Files\PulseSoftware3172_108383028\bin\updater.exe" --crash-handler --database=C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\Crashpad --url=https://pulsebrowser.com/ --annotation=prod=PulseBrowserUpdater --annotation=ver=133.0.6943.177 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x7ff63695454c,0x7ff636954558,0x7ff636954568
        3⤵
        • Executes dropped EXE
        PID:3188
      • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
        "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --from-installer
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4564
  • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe
    "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe" --server --service=update-internal -Embedding
    1⤵
    • Executes dropped EXE
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:3076
    • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe
      C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe --crash-handler --database=C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\Crashpad --url=https://pulsebrowser.com/ --annotation=prod=PulseBrowserUpdater --annotation=ver=133.0.6943.177 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x7ff7ec11454c,0x7ff7ec114558,0x7ff7ec114568
      2⤵
      • Executes dropped EXE
      PID:4544
  • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe
    "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe" --server --service=update -Embedding
    1⤵
    • Drops file in Program Files directory
    • Executes dropped EXE
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:2976
    • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe
      C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe --crash-handler --database=C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\Crashpad --url=https://pulsebrowser.com/ --annotation=prod=PulseBrowserUpdater --annotation=ver=133.0.6943.177 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x7ff7ec11454c,0x7ff7ec114558,0x7ff7ec114568
      2⤵
      • Executes dropped EXE
      PID:1152
    • C:\Program Files\chrome_Unpacker_BeginUnzipping2976_1427600703\pulsebrowser_installer_144.0.7559.70.exe
      "C:\Program Files\chrome_Unpacker_BeginUnzipping2976_1427600703\pulsebrowser_installer_144.0.7559.70.exe"
      2⤵
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:1344
      • C:\Program Files\chrome_Unpacker_BeginUnzipping2976_1427600703\CR_0F54A.tmp\setup.exe
        "C:\Program Files\chrome_Unpacker_BeginUnzipping2976_1427600703\CR_0F54A.tmp\setup.exe" --install-archive="C:\Program Files\chrome_Unpacker_BeginUnzipping2976_1427600703\CR_0F54A.tmp\PULSEBROWSER.PACKED.7Z"
        3⤵
        • Drops file in Program Files directory
        • Executes dropped EXE
        • System Network Configuration Discovery: Internet Connection Discovery
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:3292
        • C:\Program Files\chrome_Unpacker_BeginUnzipping2976_1427600703\CR_0F54A.tmp\setup.exe
          "C:\Program Files\chrome_Unpacker_BeginUnzipping2976_1427600703\CR_0F54A.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Crashpad" --annotation=plat=Win64 --annotation=prod=PulseBrowser --annotation=ver=144.0.7559.70 "--attachment=C:\Program Files\chromium_installer.log" --initial-client-data=0x250,0x254,0x258,0x22c,0x25c,0x7ff6ad04a000,0x7ff6ad04a00c,0x7ff6ad04a018
          4⤵
          • Executes dropped EXE
          PID:4992
        • C:\Program Files\chrome_Unpacker_BeginUnzipping2976_1427600703\CR_0F54A.tmp\setup.exe
          "C:\Program Files\chrome_Unpacker_BeginUnzipping2976_1427600703\CR_0F54A.tmp\setup.exe" --verbose-logging --create-shortcuts=0 --install-level=0
          4⤵
          • Drops file in Program Files directory
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:3856
          • C:\Program Files\chrome_Unpacker_BeginUnzipping2976_1427600703\CR_0F54A.tmp\setup.exe
            "C:\Program Files\chrome_Unpacker_BeginUnzipping2976_1427600703\CR_0F54A.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Crashpad" --annotation=plat=Win64 --annotation=prod=PulseBrowser --annotation=ver=144.0.7559.70 "--attachment=C:\Program Files\chromium_installer.log" --initial-client-data=0x250,0x254,0x258,0x22c,0x25c,0x7ff6ad04a000,0x7ff6ad04a00c,0x7ff6ad04a018
            5⤵
            • Executes dropped EXE
            PID:1864
        • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
          "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --from-installer
          4⤵
          • Checks computer location settings
          • Drops file in Program Files directory
          • Executes dropped EXE
          • Loads dropped DLL
          • Checks processor information in registry
          • Enumerates system info in registry
          • Modifies data under HKEY_USERS
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of WriteProcessMemory
          PID:5024
          • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
            "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=gpu-process --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1848,i,17338687319067507286,13673048331029414808,262144 --field-trial-handle=2016,i,7126814574185505048,5542203502740094829,262144 --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2012 /prefetch:2
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:2556
          • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
            "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --start-stack-profiler --metrics-shmem-handle=2272,i,444690011200028046,16906685418742652722,524288 --field-trial-handle=2016,i,7126814574185505048,5542203502740094829,262144 --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2280 /prefetch:3
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Time Discovery
            PID:556
          • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
            "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2452,i,6978111802185515044,15891549522627211723,524288 --field-trial-handle=2016,i,7126814574185505048,5542203502740094829,262144 --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2464 /prefetch:8
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:1548
          • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
            "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=renderer --force-high-res-timeticks=disabled --start-stack-profiler --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3452,i,6242366976169447233,4132351325627630931,2097152 --field-trial-handle=2016,i,7126814574185505048,5542203502740094829,262144 --variations-seed-version --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3460 /prefetch:1
            5⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            PID:3068
          • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
            "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=renderer --instant-process --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3484,i,10068512090650176575,12784357496951697867,2097152 --field-trial-handle=2016,i,7126814574185505048,5542203502740094829,262144 --variations-seed-version --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3516 /prefetch:1
            5⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            PID:3372
          • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
            "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3876,i,6862578963939918388,18434575670511955577,524288 --field-trial-handle=2016,i,7126814574185505048,5542203502740094829,262144 --variations-seed-version --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3896 /prefetch:8
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:2320
          • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
            "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5284,i,675097108049148004,10600612893378417247,524288 --field-trial-handle=2016,i,7126814574185505048,5542203502740094829,262144 --variations-seed-version --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=5292 /prefetch:8
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:4200
          • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
            "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5088,i,17354413193998621500,15512120212375683352,524288 --field-trial-handle=2016,i,7126814574185505048,5542203502740094829,262144 --variations-seed-version --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=5084 /prefetch:8
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:4296
          • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
            "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5508,i,4342194028222519095,3254778719101420477,524288 --field-trial-handle=2016,i,7126814574185505048,5542203502740094829,262144 --variations-seed-version --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=5484 /prefetch:8
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:964
          • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
            "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5512,i,13130805399678111597,16307242793144975700,524288 --field-trial-handle=2016,i,7126814574185505048,5542203502740094829,262144 --variations-seed-version --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5500 /prefetch:8
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:5420
          • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
            "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=renderer --extension-process --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5520,i,316553451810116560,12854298336281622926,2097152 --field-trial-handle=2016,i,7126814574185505048,5542203502740094829,262144 --variations-seed-version --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5292 /prefetch:2
            5⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            PID:5588
          • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
            "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5616,i,754199514078787140,18411114545147552649,524288 --field-trial-handle=2016,i,7126814574185505048,5542203502740094829,262144 --variations-seed-version --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5728 /prefetch:8
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:5912
          • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
            "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5740,i,13063742535219479629,7317525328522122416,524288 --field-trial-handle=2016,i,7126814574185505048,5542203502740094829,262144 --variations-seed-version --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=5524 /prefetch:8
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:5424
          • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
            "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5824,i,10692695524575288758,6833617698480628012,524288 --field-trial-handle=2016,i,7126814574185505048,5542203502740094829,262144 --variations-seed-version --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5740 /prefetch:8
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:5548
          • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
            "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5804,i,15034980234852913362,16656763036933809968,524288 --field-trial-handle=2016,i,7126814574185505048,5542203502740094829,262144 --variations-seed-version --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5932 /prefetch:8
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:5568
  • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe
    "C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe" --wake
    1⤵
    • Executes dropped EXE
    • Suspicious use of WriteProcessMemory
    PID:4164
    • C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe
      C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\updater.exe --crash-handler --database=C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\Crashpad --url=https://pulsebrowser.com/ --annotation=prod=PulseBrowserUpdater --annotation=ver=133.0.6943.177 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x7ff7ec11454c,0x7ff7ec114558,0x7ff7ec114568
      2⤵
      • Executes dropped EXE
      PID:520
  • C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe
    "C:\Program Files\Google\Chrome\Application\140.0.7339.81\notification_helper.exe" -Embedding
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4960
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x1cc,0x1d0,0x1d4,0x1a8,0x1d8,0x7ff651a23764,0x7ff651a23770,0x7ff651a23780
      2⤵
        PID:4220
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
      1⤵
        PID:2836

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            updater.exe

            • Path C:\Program Files\PulseSoftware3172_108383028\bin\updater.exe
            • Size 6.2MB
            • SHA256 1533d6455ae751d9845d29c671d9b3e17ce3ec5c4a925135cc39ff7afc50e2a6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            setup.exe

            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2976_1427600703\CR_0F54A.tmp\setup.exe
            • Size 4.7MB
            • SHA256 c35c6006dba712a0417e0710674fcc2a555dbbcedc53309fa824692470cdd4e7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            hyph-as.hyb

            • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping5024_518748640\hyph-as.hyb
            • Size 703B
            • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
            • MD5 SHA1 SHA512 TLSH

            hyph-hi.hyb

            • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping5024_518748640\hyph-hi.hyb
            • Size 687B
            • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
            • MD5 SHA1 SHA512 TLSH

            hyph-nb.hyb

            • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping5024_518748640\hyph-nb.hyb
            • Size 141KB
            • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            manifest.json

            • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping5024_518748640\manifest.json
            • Size 82B
            • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
            • MD5 SHA1 SHA512 TLSH

            manifest.json

            • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping5024_713500512\manifest.json
            • Size 95B
            • SHA256 23f081dc69cfbe61a4ffed24ab70f9e820ef0199de7237e59d5b86ea1d69db96
            • MD5 SHA1 SHA512 TLSH

            manifest.json

            • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping5024_868665443\manifest.json
            • Size 86B
            • SHA256 31a56f514d228a98683b8cbf7e8a3ced78857ef3e745a06fbc2c5b33162d3220
            • MD5 SHA1 SHA512 TLSH

            prefs.json

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\133.0.6943.177\prefs.json
            • Size 19B
            • SHA256 e03e9d262ca3b7d19e37c3a69c7d8b46bd3f5542aa555a17d864071c28257b2c
            • MD5 SHA1 SHA512

            prefs.json

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\prefs.json
            • Size 638B
            • SHA256 11339c8a2ab834732e2ad4eede7deef0ca6b42702134875d1453518015497cf3
            • MD5 SHA1 SHA512 TLSH

            prefs.json

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\prefs.json
            • Size 1KB
            • SHA256 341c494997ded22ce568e1f978d03c2e5dfbb69ae18e23774a168a23afb408d5
            • MD5 SHA1 SHA512 TLSH

            prefs.json

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\prefs.json
            • Size 464B
            • SHA256 57170fcba66af89d20c7630204041173b88d4a7b6299978d3b984e8a110630ff
            • MD5 SHA1 SHA512 TLSH

            prefs.json

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\prefs.json
            • Size 216B
            • SHA256 548b827d5de5dd654b58a28581e065b50942ab34b3e7264ef7c336e478dad6d3
            • MD5 SHA1 SHA512 TLSH

            prefs.json

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowserUpdater\prefs.json
            • Size 51B
            • SHA256 6dd1d1ee53584cd340ffaba4ac7d15625b2675c00c662bf4808314cf752c3852
            • MD5 SHA1 SHA512 TLSH

            bn.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\144.0.7559.70\Locales\bn.pak
            • Size 1.2MB
            • SHA256 3727bf93cc00fa39bdbb120c0647f9c568486f9a45670665c99333f19f9c8111
            • MD5 SHA1 SHA512 SSDEEP TLSH

            pulsebrowser.exe

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe
            • Size 3.3MB
            • SHA256 390d6c1a3af3ec89b3cc14db1d0302ea4e954acfaee6db8fb6b27fb31025cdf8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            144.0.7559.70.manifest

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\144.0.7559.70.manifest
            • Size 232B
            • SHA256 2269737cd3c209c01e00a68367d3ec15f73d2d99a07048c06a206adf44d62301
            • MD5 SHA1 SHA512 TLSH

            external_extensions.json

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Extensions\external_extensions.json
            • Size 99B
            • SHA256 a68cafd7d78d5c671c2560656653f2a4d83ab66d87a8728356a88fb1f477b3e6
            • MD5 SHA1 SHA512 TLSH

            iwa-key-distribution.pb

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\IwaKeyDistribution\iwa-key-distribution.pb
            • Size 2KB
            • SHA256 9dc3e6101aae59d527ef792193bdd515dbb0b08b8e5b94d905a2369807421e3d
            • MD5 SHA1 SHA512 TLSH

            manifest.json

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\IwaKeyDistribution\manifest.json
            • Size 115B
            • SHA256 0cec57205f53f792b87eeffc1c3738037321bebcf48655ba8767c8c4ebfcd810
            • MD5 SHA1 SHA512 TLSH

            af.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\af.pak
            • Size 527KB
            • SHA256 ed6fcac3da50323bd21a10b447b75903c528064b0ba21a3b6f9bb103669b0b1c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            am.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\am.pak
            • Size 854KB
            • SHA256 31b06f55400059406f47a259327be4abfd3c0417620565a5b54e14f0ad8e0a2c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            am_MASCULINE.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\am_MASCULINE.pak
            • Size 18B
            • SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
            • MD5 SHA1 SHA512

            ar.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\ar.pak
            • Size 948KB
            • SHA256 63ddd118a9fc95e03130cece455cf5f7cdf4c2670abf4de08f30b8a2a44929fe
            • MD5 SHA1 SHA512 SSDEEP TLSH

            bg.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\bg.pak
            • Size 975KB
            • SHA256 ef91612b7149b401edbfb3ca6fa945ce1884f1f74f1e7f7afbcb6a7365c73d58
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ca.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\ca.pak
            • Size 599KB
            • SHA256 7f8f106a6f5c59805da98f14001f42d01c206031462bc79c3bb70641f9a3bb7d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            cs.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\cs.pak
            • Size 611KB
            • SHA256 9e7e8670a8b3f56afbae941256edcc9199a6b17fe58ea54be5e7f69c29255aa9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            da.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\da.pak
            • Size 557KB
            • SHA256 844c321007c6e2f2f73a980914c44ca9966de589c646e6954058a7f174354f8b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            de.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\de.pak
            • Size 602KB
            • SHA256 90fd0956381f972784b065221b038233a8397989521be56b72391fa70410f4f9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            el.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\el.pak
            • Size 1.0MB
            • SHA256 2f47a893cedbe4cfe5b9502add9834537df769514df50f2bb4aa5e68f84d6f60
            • MD5 SHA1 SHA512 SSDEEP TLSH

            en-GB.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\en-GB.pak
            • Size 479KB
            • SHA256 7efc1dd38cd7b0e6a4a585e4fd5cfa205c05ecadd3677ed66a5eb33199e1841f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            en-US.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\en-US.pak
            • Size 483KB
            • SHA256 ca43214d77856f935f7c1a41a19dcb3e20c103e536d4b502d0791d08a02cc2ca
            • MD5 SHA1 SHA512 SSDEEP TLSH

            es-419.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\es-419.pak
            • Size 585KB
            • SHA256 5bc3e1af45d8a3b894c76644cfe32a346b512988a80ad039f71990a401a154f9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            es.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\es.pak
            • Size 582KB
            • SHA256 54d20f64dafea59666194f20dd0fc7d0c81e162c62f72341bce05905c29dde87
            • MD5 SHA1 SHA512 SSDEEP TLSH

            et.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\et.pak
            • Size 534KB
            • SHA256 2fb0a6aa7123928ff44680ff93a57b2b0c0f80d19160941a44c0ce5abf9c898a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            fa.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\fa.pak
            • Size 877KB
            • SHA256 87ebfb9077fca7840db2dd4a5d0380ff9881ec33d19bf317a538d1fa347a9008
            • MD5 SHA1 SHA512 SSDEEP TLSH

            fi.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\fi.pak
            • Size 540KB
            • SHA256 c251d6471a981a81974b230254f70edf8524dd9599e1f632a01c3c84299a513c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            fil.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\fil.pak
            • Size 615KB
            • SHA256 2fe59ad9beb60928b893ff9065e9ccc349f3f0cd6f8d86c70877852020e190a6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            fr.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\fr.pak
            • Size 636KB
            • SHA256 2eae1eb50fb0e8316ff2079f739c4024d547f784111693e5ab74ed10cc686304
            • MD5 SHA1 SHA512 SSDEEP TLSH

            gu.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\gu.pak
            • Size 1.2MB
            • SHA256 24b2e3afed88894849eb071cef49fb2903d7a45e4ec4beb0a84d76982f4ad66d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            he.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\he.pak
            • Size 772KB
            • SHA256 8c6f1c6eae333af2f8489b67841b73e15a10ce74f83cb9bdebc5b8d2ed86ba19
            • MD5 SHA1 SHA512 SSDEEP TLSH

            hi.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\hi.pak
            • Size 1.3MB
            • SHA256 d2dec78d66ab76318fee54f879738203ef1c95ec36cbf30bcc8a5ea9b6544869
            • MD5 SHA1 SHA512 SSDEEP TLSH

            hr.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\hr.pak
            • Size 591KB
            • SHA256 3e87ad732807f87bae23d734df28f1e51930f36401c934e2c641c8d044d45321
            • MD5 SHA1 SHA512 SSDEEP TLSH

            hu.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\hu.pak
            • Size 635KB
            • SHA256 f9af1a2495f5d0f01624140cbc9ef4081a3434ea53e773b1672f482bb052b7f9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            id.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\id.pak
            • Size 524KB
            • SHA256 dad989d078311c12bcc55d1dcd4262b0bc143ce24d27b57f86b3ae2d37366fb3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            it.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\it.pak
            • Size 582KB
            • SHA256 53e5ca0afe9c2aa99ea67ee898466af184ef3ca63fa734e3d69fbc24c3d3b0eb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ja.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\ja.pak
            • Size 703KB
            • SHA256 ebe7b6291cf54475fba6affa79442635da5615e6b88bca27b27e1aecb32ab614
            • MD5 SHA1 SHA512 SSDEEP TLSH

            kn.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\kn.pak
            • Size 1.4MB
            • SHA256 992fd448c6535e2fd8340a8103a216774e0af539372cb949bbeb446b59b92eef
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ko.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\ko.pak
            • Size 595KB
            • SHA256 e9a94cb014de3660e1e4f4a2ace8dbc5ee8395e091e69b7de8f89be225946a00
            • MD5 SHA1 SHA512 SSDEEP TLSH

            lt.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\lt.pak
            • Size 641KB
            • SHA256 4d3aee826fdcafb2abe126991a1354f5d9177baa1b5e2c562a1ccf7876d25391
            • MD5 SHA1 SHA512 SSDEEP TLSH

            lv.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\lv.pak
            • Size 639KB
            • SHA256 b54a2703caef983869624fbaa6190f1bacf71582b6e4c0638bb2adf79149f833
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ml.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\ml.pak
            • Size 1.4MB
            • SHA256 2c1f81f1b81a70da4cb90bdddbc17d9072ab7d506ebaf6be776c6bb46d0a6560
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mr.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\mr.pak
            • Size 1.2MB
            • SHA256 6b85c1f4afc86115fc44b2169ceef6f8e9b587d5f24bed951ab234207c310cf9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ms.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\ms.pak
            • Size 551KB
            • SHA256 1f97eb0f972853484555def69549b2c3ed1415f57b461b1886327101e2a727d5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            nb.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\nb.pak
            • Size 530KB
            • SHA256 bade71c21b574c721405d426d7f92535f173e5ae4ab019f2fc30a04d90a324ac
            • MD5 SHA1 SHA512 SSDEEP TLSH

            nl.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\nl.pak
            • Size 552KB
            • SHA256 11c6d62846fbb42a081dde68d782849503cbfbedc67781f0f97c517ce6de9de6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            pl.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\pl.pak
            • Size 615KB
            • SHA256 3f869b6fe2df7b727ce47e1226e0408d758f427abd40265e03a9c7d972f6a823
            • MD5 SHA1 SHA512 SSDEEP TLSH

            pt-BR.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\pt-BR.pak
            • Size 574KB
            • SHA256 e8f3a727ae2fb7c3139255ed0447fdfcb03985b93bbf9ad8a28ba940d7c4bf66
            • MD5 SHA1 SHA512 SSDEEP TLSH

            pt-PT.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\pt-PT.pak
            • Size 579KB
            • SHA256 0130df6b4ad0a19a6b8b4b3e77d6a029990cd458d5432682e72c019648a38279
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ro.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\ro.pak
            • Size 600KB
            • SHA256 7879a7295c865cda5ccf2d96f7bc4f0e1a1ab7aeb3e89a545d42ddcf8c780930
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ru.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\ru.pak
            • Size 991KB
            • SHA256 309dfca51e843409614b25cdbb982134c25029fb8dcd9e5be111e41327917e7c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sk.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\sk.pak
            • Size 622KB
            • SHA256 d2063c776a0355968164ae852adcc60f33bcc9c12727b0f9760c4881e21ea9cd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sl.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\sl.pak
            • Size 596KB
            • SHA256 cca1e35b4aa4beedb55baaaa2628bf7c5506e95a36fc9c65dba6686fea81bd49
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sr.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\sr.pak
            • Size 917KB
            • SHA256 f5cdb7ea6c962edbcdaad7508acff51dd6557593e9dcd6db39004a094d9bfcb0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sv.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\sv.pak
            • Size 534KB
            • SHA256 aaff05a258345492a7ad8a0edf14b1c396b668fe79f3231943d951c3ba86e1f2
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sw.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\sw.pak
            • Size 565KB
            • SHA256 9bfa827880eca70c67d695a69ee00f447468b4f58c1d2cde6b524a1a7a3c89bd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ta.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\ta.pak
            • Size 1.4MB
            • SHA256 851b5b5682aef871e593c44fcff36cdc484e5f69a0ac987aac78a1b561abbe12
            • MD5 SHA1 SHA512 SSDEEP TLSH

            te.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\te.pak
            • Size 1.3MB
            • SHA256 00a35091104eb30e5680d121756309d769b209a72710fca9395c118b0cefc286
            • MD5 SHA1 SHA512 SSDEEP TLSH

            th.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\th.pak
            • Size 1.1MB
            • SHA256 b60bf7b73fcaf45f8f85ffd03f59dbbc7f7ecb6f783e190f0c370275a0cd4486
            • MD5 SHA1 SHA512 SSDEEP TLSH

            tr.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\tr.pak
            • Size 575KB
            • SHA256 b2d8db449ecc6411237749483ebbf7cd16ea10bd2973ed3fda2491186f6c38b5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            uk.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\uk.pak
            • Size 996KB
            • SHA256 cac81dc08f0bc622ced831010c70b4cf537f169ad755d08862513646fd674b32
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ur.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\ur.pak
            • Size 864KB
            • SHA256 af23f3bad82ca68ef980946829ac6f2c0fd9087a3e6da3c363ae877eeba34144
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vi.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\vi.pak
            • Size 686KB
            • SHA256 d03d1174a608d80e7fe74d7e58a59a75483d3ace4377bb564cee767f13abb239
            • MD5 SHA1 SHA512 SSDEEP TLSH

            zh-CN.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\zh-CN.pak
            • Size 490KB
            • SHA256 9e49a51957bc767fbdf5aacb23b51cc9a0f2fea13e1ab9970339d84652336ca5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            zh-TW.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\Locales\zh-TW.pak
            • Size 485KB
            • SHA256 78048080dd4cf8780f7c62ee6a97063bae8a6bf927b04d1ab65dd260a845aa9b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            manifest.json

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\MEIPreload\manifest.json
            • Size 238B
            • SHA256 44844cf3dde6e80087ae0e6bf0d9326d7ef7d23326d24ac83af0850be26923d2
            • MD5 SHA1 SHA512 TLSH

            preloaded_data.pb

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\MEIPreload\preloaded_data.pb
            • Size 8KB
            • SHA256 c6070a157b4e28d16fbccbd233e93846ddb070c85e1a1bc64469b7a5f1424fad
            • MD5 SHA1 SHA512 SSDEEP TLSH

            manifest.json

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\PrivacySandboxAttestationsPreloaded\manifest.json
            • Size 122B
            • SHA256 51c311a4ba03140bcd1c827f8d93dba50cadda736925903b26e95609275dbffd
            • MD5 SHA1 SHA512 TLSH

            privacy-sandbox-attestations.dat

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\PrivacySandboxAttestationsPreloaded\privacy-sandbox-attestations.dat
            • Size 7KB
            • SHA256 59e345dc13aedee9ea46b92e58300ecaca944aaea9384c7af885400ac2ae8806
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Logo.png

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\VisualElements\Logo.png
            • Size 13KB
            • SHA256 e3d9c29125a0d398a76faf588a9e9bee843f70839d0c163678ee397da3c7618e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SmallLogo.png

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\VisualElements\SmallLogo.png
            • Size 2KB
            • SHA256 479fc6c35bbf483a22994608dc2418087c6487930f73d99fd137a8e76b3ab61b
            • MD5 SHA1 SHA512 TLSH

            d3dcompiler_47.dll

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\d3dcompiler_47.dll
            • Size 4.5MB
            • SHA256 c8e25abd3d45dfb55966a74613258c39b4a83ea2ac77f2f80903499f4d5c03f0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            dxcompiler.dll

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\dxcompiler.dll
            • Size 24.4MB
            • SHA256 34117a222bd4e9e15807035c3d5db467b65fc05cea1c5a55e9226f58939205c3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            dxil.dll

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\dxil.dll
            • Size 1.4MB
            • SHA256 436f128f22050ae27323da61321a469de0678def7a4e6d86f9ccad4858724f0a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            eventlog_provider.dll

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\eventlog_provider.dll
            • Size 17KB
            • SHA256 9a871b06aac4a2635ab84f04fc6dd9933417ae8d1d3571fb4df17dd283fed4fb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            icudtl.dat

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\icudtl.dat
            • Size 10.3MB
            • SHA256 1cf67874b5a87a8363a86fb3f81e3cbbed54d389062dab8fb52308d5cf8c8612
            • MD5 SHA1 SHA512 SSDEEP TLSH

            libEGL.dll

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\libEGL.dll
            • Size 496KB
            • SHA256 9a812d76e03abb22e1a07183ce0bef93f8a3388f6dbfc97bb6da3e9922b0083b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            libGLESv2.dll

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\libGLESv2.dll
            • Size 7.5MB
            • SHA256 98f72f3672a349161c5a9f4f3dc3e18a5e6b4f8b5916cef353bae2ff9fb00a29
            • MD5 SHA1 SHA512 SSDEEP TLSH

            notification_helper.exe

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\notification_helper.exe
            • Size 1.7MB
            • SHA256 e860e097cce1fed3ecbef7a6ccc6abe18ff327e591fc5b91bec8a2dfcf55e12f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            pulsebrowser_100_percent.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\pulsebrowser_100_percent.pak
            • Size 699KB
            • SHA256 b2d8cefff009594a0ab040b1d8a2caab24340443dc4d9314d65c1b41ae79e974
            • MD5 SHA1 SHA512 SSDEEP TLSH

            pulsebrowser_200_percent.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\pulsebrowser_200_percent.pak
            • Size 1.1MB
            • SHA256 7e8130fe4cc5bb1535904d5589134a7792c538d7127841ef00fa02882403f9c1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            pulsebrowser_elf.dll

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\pulsebrowser_elf.dll
            • Size 1.6MB
            • SHA256 41ec443de80eda30f79e85c735e49e83e9b72f5961ab44650767f5dc8e0bb645
            • MD5 SHA1 SHA512 SSDEEP TLSH

            resources.pak

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\resources.pak
            • Size 12.1MB
            • SHA256 c867145db099c36cac587a9bbcde678f4717056e2d0fc1b406b2bcfdddd6b287
            • MD5 SHA1 SHA512 SSDEEP TLSH

            v8_context_snapshot.bin

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\v8_context_snapshot.bin
            • Size 696KB
            • SHA256 012772b3e148777f31583d28669a048ae5863208319ce85d43483f44b268851e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vk_swiftshader.dll

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\vk_swiftshader.dll
            • Size 5.2MB
            • SHA256 ef96c9ec0d2ce875376acf03ab13ccc997b0f6e7254f54c9870c70b4600959be
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vk_swiftshader_icd.json

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\vk_swiftshader_icd.json
            • Size 106B
            • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
            • MD5 SHA1 SHA512 TLSH

            vulkan-1.dll

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\144.0.7559.70\vulkan-1.dll
            • Size 930KB
            • SHA256 8cc57c71f67b13dabc52165f4887b357fc4d5307ac4093cb663a5e8b88e7aaf2
            • MD5 SHA1 SHA512 SSDEEP TLSH

            pulsebrowser_proxy.exe

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\Temp\source3292_574729466\pulsebrowser-bin\pulsebrowser_proxy.exe
            • Size 1.5MB
            • SHA256 9f988ab06d5aa41bde683ffeec214de21ff5766ced210be0404cd19aeac6f09d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            crl-set

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\CertificateRevocation\10465\crl-set
            • Size 1003KB
            • SHA256 1d4e6c3e00f4c719f0ef49dba1f0e54d1eaa568b2e5c5ea66df2abbb90a934a2
            • MD5 SHA1 SHA512 SSDEEP TLSH

            settings.dat

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Crashpad\settings.dat
            • Size 40B
            • SHA256 ad23e65df499099e972a482b828a4a09e71adedbb64d0624921b61a7a22f9352
            • MD5 SHA1 SHA512

            DefaultConfig

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\DefaultConfig
            • Size 41B
            • SHA256 c82a4ddd32147a318c346bde0904d0f46d031088d50c6e47e2ee4f4e96a4856c
            • MD5 SHA1 SHA512

            1197abea-7661-41a5-99d1-02a0f0865581.tmp

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\1197abea-7661-41a5-99d1-02a0f0865581.tmp
            • Size 175KB
            • SHA256 a6c8a9a503d94e3db1354495676a4c9ddc4b7b5960d5c6b80efed9cc9c3fa776
            • MD5 SHA1 SHA512 SSDEEP TLSH

            3610409f-6fda-4e9c-8245-887778132d47.tmp

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\3610409f-6fda-4e9c-8245-887778132d47.tmp
            • Size 10KB
            • SHA256 98630579389c755612b345fae88e86313f8c21e30e8c61d1816b8031007bd2fb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            index

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\DawnGraphiteCache\index
            • Size 256KB
            • SHA256 3ab1ba505d7f0b92986a020bd56ba23a8f7be9b87e9c40ca54d0d14dc3d785fe
            • MD5 SHA1 SHA512 SSDEEP

            index

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\DawnGraphiteCache\index
            • Size 256KB
            • SHA256 199d631a7a4ca4e83a6a0d0979109210f78422ffd5907e7f57f1a8395f7eb803
            • MD5 SHA1 SHA512 SSDEEP

            background.js

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Extensions\chiflgcemplicneemgmpmaphbfhekkfm\1.4_0\background.js
            • Size 8KB
            • SHA256 e4065c4d1c020f42a92e02a035649a29b2b37a518005eed754046e018c7ab704
            • MD5 SHA1 SHA512 SSDEEP TLSH

            logo_48.png

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Extensions\chiflgcemplicneemgmpmaphbfhekkfm\1.4_0\logo_48.png
            • Size 2KB
            • SHA256 9089cc13d35a4b04abaae2ab915f3a507e27e6290b46043af2c0f38835013e48
            • MD5 SHA1 SHA512 TLSH

            Network Persistent State

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Network\Network Persistent State
            • Size 1KB
            • SHA256 bd08c943bf4210bc26e1b4aff62ced95ea7d0041e16476ab418fb1e1a33b0456
            • MD5 SHA1 SHA512 TLSH

            Network Persistent State~RFe5a3673.TMP

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Network\Network Persistent State~RFe5a3673.TMP
            • Size 59B
            • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
            • MD5 SHA1 SHA512 TLSH

            SCT Auditing Pending Reports

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Network\SCT Auditing Pending Reports
            • Size 2B
            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
            • MD5 SHA1 SHA512

            Preferences

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Preferences
            • Size 10KB
            • SHA256 d33879a31b2c0f7b391d9a59f9ad29219a615ac18cd2fbb2c5d1fbfeda754bd3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            the-real-index

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
            • Size 72B
            • SHA256 d561e9dfa337e93762584d17a2829c1880b9ce1f16c346ffca97b6e0dd03239d
            • MD5 SHA1 SHA512 TLSH

            the-real-index~RFe598776.TMP

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe598776.TMP
            • Size 72B
            • SHA256 ad668c528a6377c7245b4cf859bb9118617c2c201d7f5588ce98345a5734fc43
            • MD5 SHA1 SHA512 TLSH

            CURRENT

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Site Characteristics Database\CURRENT
            • Size 16B
            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
            • MD5 SHA1 SHA512

            MANIFEST-000001

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Default\Sync Data\LevelDB\MANIFEST-000001
            • Size 41B
            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
            • MD5 SHA1 SHA512

            download_file_types.pb

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\FileTypePolicies\145.0.7584.0\download_file_types.pb
            • Size 7KB
            • SHA256 a1391aa8d42be124bd50c493886fe7b3a709059ee20b0e012b421390f4a3864e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            data_0

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\GrShaderCache\data_0
            • Size 8KB
            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
            • MD5 SHA1 SHA512 SSDEEP

            data_1

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\GrShaderCache\data_1
            • Size 264KB
            • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
            • MD5 SHA1 SHA512 SSDEEP

            data_2

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\GrShaderCache\data_2
            • Size 8KB
            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
            • MD5 SHA1 SHA512 SSDEEP

            data_3

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\GrShaderCache\data_3
            • Size 8KB
            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
            • MD5 SHA1 SHA512 SSDEEP

            Local State

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Local State
            • Size 6KB
            • SHA256 b543b726d3ab08801259c7befcba99e76b374a17a47eaef23a16c0e6f0538c2c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Local State

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Local State
            • Size 3KB
            • SHA256 92a978b9bd5d3596c513c18e0ccbfc658484bbe7d34b544767bacccdadd2e148
            • MD5 SHA1 SHA512 TLSH

            Local State

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\Local State
            • Size 1KB
            • SHA256 c8a341fe8945cecc11f82b8743354a1d1e6cbb4fbd54ed437692419aa6c52e10
            • MD5 SHA1 SHA512 TLSH

            metadata.json

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\component_crx_cache\metadata.json
            • Size 236B
            • SHA256 2f944482f1ebfbe931811001e72da1448241168bc0b10b9861a6326afc941b45
            • MD5 SHA1 SHA512 TLSH

            metadata.json

            • Path C:\Users\Admin\AppData\Local\PulseSoftware\PulseBrowser\User Data\component_crx_cache\metadata.json
            • Size 13B
            • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
            • MD5 SHA1 SHA512

            40b8a3ec-90f8-4957-b2ac-fd6babc8fe7d.tmp

            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5024_664505814\40b8a3ec-90f8-4957-b2ac-fd6babc8fe7d.tmp
            • Size 15.7MB
            • SHA256 e6dc7752da8dec8426e0dd1436f87480431c34eeb7cf112d30a2b12ab2fcc189
            • MD5 SHA1 SHA512 SSDEEP TLSH

            logo_48.png

            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5024_664505814\CRX_INSTALL\logo_48.png
            • Size 1KB
            • SHA256 b1aabc9cfa8f04287b6133dddc0a5a1571bd5e0f5e79cbc03a34b62dd00e2b79
            • MD5 SHA1 SHA512 TLSH

            Pulse Browser.lnk

            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pulse Browser.lnk
            • Size 2KB
            • SHA256 37d5c5ad205bd180cad5c4abebd0dab3cba84dc401c3ff9a95aa2f0fb701afef
            • MD5 SHA1 SHA512 TLSH

            Pulse Browser.lnk

            • Path C:\Users\Admin\Desktop\Pulse Browser.lnk
            • Size 2KB
            • SHA256 bc8b884abdc4d54a592aceb4ffe1103f13f4f3c463c6db9991ffbeb95c55e579
            • MD5 SHA1 SHA512 TLSH

            memory/520-61-0x00000246E16C0000-0x00000246E176D000-memory.dmp

            memory/1152-53-0x000002C0B9CA0000-0x000002C0B9D4D000-memory.dmp

            memory/1344-99-0x000001FBF5D30000-0x000001FBF5DDD000-memory.dmp

            memory/1344-1830-0x000001FBF5D30000-0x000001FBF5DDD000-memory.dmp

            memory/1344-73-0x000001FBF5D30000-0x000001FBF5DDD000-memory.dmp

            memory/1472-39-0x000002321C760000-0x000002321C80D000-memory.dmp

            memory/1472-40-0x000002321D820000-0x000002321D82C000-memory.dmp

            memory/1548-1450-0x00007FFE8CC80000-0x00007FFE8CC81000-memory.dmp

            memory/1548-1451-0x00007FFE8DC10000-0x00007FFE8DC11000-memory.dmp

            memory/1864-1634-0x000001E4CA480000-0x000001E4CA52D000-memory.dmp

            memory/2556-1789-0x0000018D18570000-0x0000018D1861D000-memory.dmp

            memory/2976-51-0x00000242D7DB0000-0x00000242D7E5D000-memory.dmp

            memory/2976-52-0x00000242D99F0000-0x00000242D9A2B000-memory.dmp

            memory/3076-42-0x00000212CB5F0000-0x00000212CB69D000-memory.dmp

            memory/3172-1931-0x00000234991B0000-0x000002349925D000-memory.dmp

            memory/3172-38-0x00000234991B0000-0x000002349925D000-memory.dmp

            memory/3188-41-0x0000028B5D320000-0x0000028B5D3CD000-memory.dmp

            memory/3292-694-0x0000019FB61A0000-0x0000019FB624D000-memory.dmp

            memory/3292-1391-0x0000019FB61A0000-0x0000019FB624D000-memory.dmp

            memory/3856-1383-0x000002B0F9510000-0x000002B0F95BD000-memory.dmp

            memory/4164-60-0x0000020D28010000-0x0000020D280BD000-memory.dmp

            memory/4544-43-0x0000024A25950000-0x0000024A259FD000-memory.dmp

            memory/4992-695-0x0000021000650000-0x00000210006FD000-memory.dmp

            memory/5024-1814-0x000002810AC20000-0x000002810AC47000-memory.dmp

            memory/5024-1815-0x000002810AC50000-0x000002810AC8B000-memory.dmp

            memory/5024-1640-0x00000281026B0000-0x000002810275D000-memory.dmp