593bd2c56c9f8397f7a3120fbb5a6e163cc58bab2fa846e7223e2d7ea1ebe8fd

Analysis

user interaction
yes
max time kernel
749s
max time network
758s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/04/2026, 10:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
UniversalTool_41354.exe
Size 68.6MB
Sample260416-ml4pgsf17v
SHA256 593bd2c56c9f8397f7a3120fbb5a6e163cc58bab2fa846e7223e2d7ea1ebe8fd
MD5 4a9cbc780dc5a699a91510906977660e
SHA1 b0cbc93aedf3a28210019e5f89c4f7ee9a1c623e
SHA512 53492cc7661362ab215c42e6176aefa587937f72f0bf9049923394fc711c3a1983aadd4939961faba7ff6f080b0a90c4a8e5ace5de922c4c92bb8bf184700131
SSDEEP 393216:bsbEPQA5hBnWO+xg5Oy2GPZj0AJqYfbqye3lL9z6xQs:bsbEPQA5hBD2mOy2GPZzq2Ze3l
TLSH
T184F79F866319F294F3115AA489683B6108FB14757BA0CC777F87A9C20A2D1D9DCB3E73
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\6A1F.tmp	UniversalTool_41354.exe

Drops file in Windows directory 7 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe
File opened for modification	C:\Windows\Panther\UnattendGC\setupact.log	UserOOBEBroker.exe
File opened for modification	C:\Windows\Panther\UnattendGC\setuperr.log	UserOOBEBroker.exe
File opened for modification	C:\Windows\Panther\UnattendGC\diagerr.xml	UserOOBEBroker.exe
File opened for modification	C:\Windows\Panther\UnattendGC\diagwrn.xml	UserOOBEBroker.exe
File opened for modification	C:\Windows\SystemTemp	chrome.exe
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	UniversalTool_41354.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	UniversalTool_41354.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	FileCoAuth.exe

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
716	chrome.exe
2512	chrome.exe
3632	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134208111287775466"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 14 IoCs

pid	Process
2448	UniversalTool_41354.exe
2448	UniversalTool_41354.exe
5108	UniversalTool_41354.exe
5108	UniversalTool_41354.exe
2016	chrome.exe
2016	chrome.exe
2708	chrome.exe
2708	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
2672	chrome.exe
2672	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 26 IoCs

pid	Process
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	2448	UniversalTool_41354.exe
Token: SeDebugPrivilege	5108	UniversalTool_41354.exe
Token: SeShutdownPrivilege	2016	chrome.exe
Token: SeCreatePagefilePrivilege	2016	chrome.exe
Token: SeShutdownPrivilege	2016	chrome.exe
Token: SeCreatePagefilePrivilege	2016	chrome.exe
Token: SeShutdownPrivilege	2016	chrome.exe
Token: SeCreatePagefilePrivilege	2016	chrome.exe
Token: SeShutdownPrivilege	2016	chrome.exe
Token: SeCreatePagefilePrivilege	2016	chrome.exe
Token: SeShutdownPrivilege	2708	chrome.exe
Token: SeCreatePagefilePrivilege	2708	chrome.exe
Token: SeShutdownPrivilege	2708	chrome.exe
Token: SeCreatePagefilePrivilege	2708	chrome.exe
Token: SeShutdownPrivilege	2708	chrome.exe
Token: SeCreatePagefilePrivilege	2708	chrome.exe
Token: SeShutdownPrivilege	2708	chrome.exe
Token: SeCreatePagefilePrivilege	2708	chrome.exe
Token: SeShutdownPrivilege	2708	chrome.exe
Token: SeCreatePagefilePrivilege	2708	chrome.exe
Token: SeShutdownPrivilege	2708	chrome.exe
Token: SeCreatePagefilePrivilege	2708	chrome.exe
Token: SeShutdownPrivilege	2708	chrome.exe
Token: SeCreatePagefilePrivilege	2708	chrome.exe
Token: SeShutdownPrivilege	2708	chrome.exe
Token: SeCreatePagefilePrivilege	2708	chrome.exe
Token: SeShutdownPrivilege	2708	chrome.exe
Token: SeCreatePagefilePrivilege	2708	chrome.exe
Token: SeShutdownPrivilege	2708	chrome.exe
Token: SeCreatePagefilePrivilege	2708	chrome.exe
Token: SeShutdownPrivilege	2708	chrome.exe
Token: SeCreatePagefilePrivilege	2708	chrome.exe
Token: SeShutdownPrivilege	2708	chrome.exe
Token: SeCreatePagefilePrivilege	2708	chrome.exe
Token: SeShutdownPrivilege	2708	chrome.exe
Token: SeCreatePagefilePrivilege	2708	chrome.exe
Token: SeShutdownPrivilege	2708	chrome.exe
Token: SeCreatePagefilePrivilege	2708	chrome.exe
Token: SeShutdownPrivilege	2708	chrome.exe
Token: SeCreatePagefilePrivilege	2708	chrome.exe
Token: SeShutdownPrivilege	716	chrome.exe
Token: SeCreatePagefilePrivilege	716	chrome.exe
Token: SeShutdownPrivilege	716	chrome.exe
Token: SeCreatePagefilePrivilege	716	chrome.exe
Token: SeShutdownPrivilege	716	chrome.exe
Token: SeCreatePagefilePrivilege	716	chrome.exe
Token: SeShutdownPrivilege	716	chrome.exe
Token: SeCreatePagefilePrivilege	716	chrome.exe
Token: SeShutdownPrivilege	716	chrome.exe
Token: SeCreatePagefilePrivilege	716	chrome.exe
Token: SeShutdownPrivilege	716	chrome.exe
Token: SeCreatePagefilePrivilege	716	chrome.exe
Token: SeShutdownPrivilege	716	chrome.exe
Token: SeCreatePagefilePrivilege	716	chrome.exe
Token: SeShutdownPrivilege	716	chrome.exe
Token: SeCreatePagefilePrivilege	716	chrome.exe
Token: SeShutdownPrivilege	716	chrome.exe
Token: SeCreatePagefilePrivilege	716	chrome.exe
Token: SeShutdownPrivilege	716	chrome.exe
Token: SeCreatePagefilePrivilege	716	chrome.exe
Token: SeShutdownPrivilege	716	chrome.exe
Token: SeCreatePagefilePrivilege	716	chrome.exe
Token: SeShutdownPrivilege	716	chrome.exe
Token: SeCreatePagefilePrivilege	716	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
2448	UniversalTool_41354.exe
5108	UniversalTool_41354.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe

Suspicious use of SendNotifyMessage 52 IoCs

pid	Process
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2016	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe
716	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2448 wrote to memory of 5108	2448	UniversalTool_41354.exe	78
PID 2016 wrote to memory of 5072	2016	chrome.exe	80
PID 2016 wrote to memory of 2384	2016	chrome.exe	81
PID 2016 wrote to memory of 2384	2016	chrome.exe	81
PID 2016 wrote to memory of 716	2016	chrome.exe	82
PID 2016 wrote to memory of 4144	2016	chrome.exe	83
PID 2016 wrote to memory of 4144	2016	chrome.exe	83
PID 2016 wrote to memory of 5136	2016	chrome.exe	84
PID 2016 wrote to memory of 3176	2016	chrome.exe	85
PID 2016 wrote to memory of 5136	2016	chrome.exe	84
PID 2016 wrote to memory of 3176	2016	chrome.exe	85
PID 2016 wrote to memory of 6088	2016	chrome.exe	86
PID 2016 wrote to memory of 6088	2016	chrome.exe	86
PID 2016 wrote to memory of 1664	2016	chrome.exe	89
PID 2016 wrote to memory of 1664	2016	chrome.exe	89
PID 2016 wrote to memory of 4460	2016	chrome.exe	90
PID 2708 wrote to memory of 4120	2708	chrome.exe	93
PID 2708 wrote to memory of 2096	2708	chrome.exe	94
PID 2708 wrote to memory of 2096	2708	chrome.exe	94
PID 2708 wrote to memory of 2512	2708	chrome.exe	95
PID 2708 wrote to memory of 5728	2708	chrome.exe	96
PID 2708 wrote to memory of 5728	2708	chrome.exe	96
PID 2708 wrote to memory of 1276	2708	chrome.exe	97
PID 2708 wrote to memory of 3040	2708	chrome.exe	98
PID 2708 wrote to memory of 1276	2708	chrome.exe	97
PID 2708 wrote to memory of 3040	2708	chrome.exe	98
PID 2708 wrote to memory of 4064	2708	chrome.exe	100
PID 2708 wrote to memory of 4064	2708	chrome.exe	100
PID 2708 wrote to memory of 4876	2708	chrome.exe	101
PID 2708 wrote to memory of 4876	2708	chrome.exe	101
PID 2708 wrote to memory of 4112	2708	chrome.exe	102
PID 2708 wrote to memory of 2496	2708	chrome.exe	103
PID 2708 wrote to memory of 2496	2708	chrome.exe	103
PID 2708 wrote to memory of 4108	2708	chrome.exe	104
PID 2708 wrote to memory of 4108	2708	chrome.exe	104
PID 716 wrote to memory of 2116	716	chrome.exe	118
PID 716 wrote to memory of 4452	716	chrome.exe	119
PID 716 wrote to memory of 3632	716	chrome.exe	120
PID 716 wrote to memory of 4452	716	chrome.exe	119
PID 716 wrote to memory of 2148	716	chrome.exe	121
PID 716 wrote to memory of 2148	716	chrome.exe	121
PID 716 wrote to memory of 3140	716	chrome.exe	122
PID 716 wrote to memory of 1156	716	chrome.exe	123
PID 716 wrote to memory of 3140	716	chrome.exe	122
PID 716 wrote to memory of 1156	716	chrome.exe	123
PID 716 wrote to memory of 2300	716	chrome.exe	125
PID 716 wrote to memory of 2300	716	chrome.exe	125
PID 716 wrote to memory of 2376	716	chrome.exe	126
PID 716 wrote to memory of 400	716	chrome.exe	127
PID 716 wrote to memory of 5276	716	chrome.exe	128
PID 716 wrote to memory of 4440	716	chrome.exe	129
PID 716 wrote to memory of 1584	716	chrome.exe	130
PID 716 wrote to memory of 1584	716	chrome.exe	130
PID 716 wrote to memory of 2828	716	chrome.exe	131
PID 716 wrote to memory of 2828	716	chrome.exe	131
PID 716 wrote to memory of 736	716	chrome.exe	132
PID 716 wrote to memory of 736	716	chrome.exe	132
PID 716 wrote to memory of 2924	716	chrome.exe	133
PID 716 wrote to memory of 2924	716	chrome.exe	133
PID 716 wrote to memory of 1112	716	chrome.exe	134
PID 716 wrote to memory of 1112	716	chrome.exe	134
PID 716 wrote to memory of 3384	716	chrome.exe	135
PID 716 wrote to memory of 3384	716	chrome.exe	135
PID 716 wrote to memory of 4056	716	chrome.exe	136

C:\Users\Admin\AppData\Local\Temp\UniversalTool_41354.exe
"C:\Users\Admin\AppData\Local\Temp\UniversalTool_41354.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2448
- C:\Users\Admin\AppData\Local\Temp\UniversalTool_41354.exe
  "C:\Users\Admin\AppData\Local\Temp\UniversalTool_41354.exe" /yqcyzq
  2⤵
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  PID:5108

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff8aacc728,0x7fff8aacc734,0x7fff8aacc740
  2⤵
  PID:5072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1600,i,14997858960300535308,358344654992539143,262144 --field-trial-handle=2036,i,12172610474653331825,3676761551231164010,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2028 /prefetch:2
  2⤵
  PID:2384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2224,i,16147933295671940641,3524449738919768915,524288 --field-trial-handle=2036,i,12172610474653331825,3676761551231164010,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2264 /prefetch:11
  2⤵
  - System Time Discovery
  PID:716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,12822329709725624748,4177406858249214228,524288 --field-trial-handle=2036,i,12172610474653331825,3676761551231164010,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2400 /prefetch:13
  2⤵
  PID:4144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3228,i,18432085881788147095,8541299259278535361,2097152 --field-trial-handle=2036,i,12172610474653331825,3676761551231164010,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:5136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3232,i,3944993388968691351,12786925544333387471,2097152 --field-trial-handle=2036,i,12172610474653331825,3676761551231164010,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:3176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4196,i,17644813858582600052,1098517997494316873,2097152 --field-trial-handle=2036,i,12172610474653331825,3676761551231164010,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4212 /prefetch:9
  2⤵
  PID:6088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4600,i,6264713080356209299,8920809174664262363,2097152 --field-trial-handle=2036,i,12172610474653331825,3676761551231164010,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4516 /prefetch:1
  2⤵
  PID:1664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5424,i,9447637855869110478,5468244030111066651,524288 --field-trial-handle=2036,i,12172610474653331825,3676761551231164010,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5376 /prefetch:14
  2⤵
  PID:4460

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3636

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2288

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x108,0x10c,0x110,0xe4,0x114,0x7fff8aacc728,0x7fff8aacc734,0x7fff8aacc740
  2⤵
  PID:4120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1624,i,5018632585254138651,330363037398031738,262144 --field-trial-handle=1940,i,6722534612191068275,8598214578770339612,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=1912 /prefetch:2
  2⤵
  PID:2096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2176,i,5565417422056959467,15222810484069033023,524288 --field-trial-handle=1940,i,6722534612191068275,8598214578770339612,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=2264 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2392,i,7147455017181738297,572563458297114836,524288 --field-trial-handle=1940,i,6722534612191068275,8598214578770339612,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=2508 /prefetch:13
  2⤵
  PID:5728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3252,i,4834020866014884774,13603928311608673600,2097152 --field-trial-handle=1940,i,6722534612191068275,8598214578770339612,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:1276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3288,i,8630592496081763575,3230565213742647522,2097152 --field-trial-handle=1940,i,6722534612191068275,8598214578770339612,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:3040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4372,i,4845269326368644327,9679711809751682946,2097152 --field-trial-handle=1940,i,6722534612191068275,8598214578770339612,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=4536 /prefetch:1
  2⤵
  PID:4064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4664,i,298170500684072604,16656698916046548080,2097152 --field-trial-handle=1940,i,6722534612191068275,8598214578770339612,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=4696 /prefetch:1
  2⤵
  PID:4876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5228,i,8684963172920032424,1389432938488560560,524288 --field-trial-handle=1940,i,6722534612191068275,8598214578770339612,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=5232 /prefetch:14
  2⤵
  PID:4112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5228,i,9088147535056972117,18040045983191345911,2097152 --field-trial-handle=1940,i,6722534612191068275,8598214578770339612,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=5348 /prefetch:1
  2⤵
  PID:2496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5732,i,2533838211184220995,14033006688776521900,2097152 --field-trial-handle=1940,i,6722534612191068275,8598214578770339612,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=5736 /prefetch:1
  2⤵
  PID:4108

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3064

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:6136

C:\Windows\System32\oobe\UserOOBEBroker.exe
C:\Windows\System32\oobe\UserOOBEBroker.exe -Embedding
1⤵
- Drops file in Windows directory
PID:6060

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe
C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe -Embedding
1⤵
- System Location Discovery: System Language Discovery
PID:3776

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x100,0x104,0x108,0xd8,0x10c,0x7fff8aacc728,0x7fff8aacc734,0x7fff8aacc740
  2⤵
  PID:2116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1620,i,17075309592616349614,3548118821445266536,262144 --field-trial-handle=2028,i,863127918380130491,15188379903274223829,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=2024 /prefetch:2
  2⤵
  PID:4452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1856,i,14455683839781001455,7816393577122244295,524288 --field-trial-handle=2028,i,863127918380130491,15188379903274223829,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=2076 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2340,i,18359837440305689464,606120014363613188,524288 --field-trial-handle=2028,i,863127918380130491,15188379903274223829,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=2352 /prefetch:13
  2⤵
  PID:2148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3180,i,7507532346638279348,2282761201426056422,2097152 --field-trial-handle=2028,i,863127918380130491,15188379903274223829,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:3140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3184,i,12016751934241100634,15713966906065022404,2097152 --field-trial-handle=2028,i,863127918380130491,15188379903274223829,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:1156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4432,i,4202477141014144248,3075082041144107723,2097152 --field-trial-handle=2028,i,863127918380130491,15188379903274223829,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=4456 /prefetch:1
  2⤵
  PID:2300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5204,i,8313383575323703434,742453162511269802,524288 --field-trial-handle=2028,i,863127918380130491,15188379903274223829,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=5200 /prefetch:14
  2⤵
  PID:2376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5572,i,17233793168745497597,7715358407794478660,524288 --field-trial-handle=2028,i,863127918380130491,15188379903274223829,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=5524 /prefetch:14
  2⤵
  PID:400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5592,i,11996703626791451546,7921016059057393433,524288 --field-trial-handle=2028,i,863127918380130491,15188379903274223829,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=5620 /prefetch:14
  2⤵
  PID:5276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5540,i,9635982971665576951,3059652606569198256,524288 --field-trial-handle=2028,i,863127918380130491,15188379903274223829,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=5648 /prefetch:14
  2⤵
  PID:4440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5684,i,2911833024619833806,8108726304902863426,2097152 --field-trial-handle=2028,i,863127918380130491,15188379903274223829,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=5532 /prefetch:1
  2⤵
  PID:1584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5728,i,3024132552637976940,8493375091328255962,2097152 --field-trial-handle=2028,i,863127918380130491,15188379903274223829,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=5752 /prefetch:1
  2⤵
  PID:2828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3800,i,977045983741577299,13651699466183226370,2097152 --field-trial-handle=2028,i,863127918380130491,15188379903274223829,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=4612 /prefetch:1
  2⤵
  PID:736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5428,i,6744758557057614239,5228676837310366460,2097152 --field-trial-handle=2028,i,863127918380130491,15188379903274223829,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=3388 /prefetch:1
  2⤵
  PID:2924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5892,i,3772187810350340697,8657370890816098189,2097152 --field-trial-handle=2028,i,863127918380130491,15188379903274223829,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=5740 /prefetch:1
  2⤵
  PID:1112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3292,i,10921019679450937801,12488741821102501677,2097152 --field-trial-handle=2028,i,863127918380130491,15188379903274223829,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=4340 /prefetch:1
  2⤵
  PID:3384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5728,i,1803474176722762375,11909048738146845622,2097152 --field-trial-handle=2028,i,863127918380130491,15188379903274223829,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=5552 /prefetch:1
  2⤵
  PID:4056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5740,i,13904075212329109638,4290672811250822788,2097152 --field-trial-handle=2028,i,863127918380130491,15188379903274223829,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=6116 /prefetch:1
  2⤵
  PID:3724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6052,i,5232275176053507254,6656086204201367900,2097152 --field-trial-handle=2028,i,863127918380130491,15188379903274223829,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=5904 /prefetch:1
  2⤵
  PID:2916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4448,i,12129715551737096920,12590595120048837641,262144 --field-trial-handle=2028,i,863127918380130491,15188379903274223829,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=4928 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=3180,i,6937299176280465654,4569960006622451479,2097152 --field-trial-handle=2028,i,863127918380130491,15188379903274223829,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=4508 /prefetch:1
  2⤵
  PID:5164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6120,i,12627293814442083839,3150277222994758927,2097152 --field-trial-handle=2028,i,863127918380130491,15188379903274223829,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=3428 /prefetch:1
  2⤵
  PID:3780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5728,i,12380516590546190358,11955708814223391695,2097152 --field-trial-handle=2028,i,863127918380130491,15188379903274223829,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=5628 /prefetch:1
  2⤵
  PID:4328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=3232,i,15014207833549149756,17416056597041996495,2097152 --field-trial-handle=2028,i,863127918380130491,15188379903274223829,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=3380 /prefetch:1
  2⤵
  PID:3972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4572,i,12514830168987655661,2114304337540279587,524288 --field-trial-handle=2028,i,863127918380130491,15188379903274223829,262144 --variations-seed-version=20260416-010028.122000-production --mojo-platform-channel-handle=5880 /prefetch:14
  2⤵
  PID:432

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3228

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:832

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

5ad22b27-a1b3-4f98-b3b9-9e7c4bdc4f4b.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\5ad22b27-a1b3-4f98-b3b9-9e7c4bdc4f4b.tmp
Size 109KB
SHA256 0a46d5fa065abc58e1c41f92f8836a9f356316632b33eb45a02c78e504a31cca
MD5 d3221536f17f8a53886ef3c5839f7992
SHA1 1fa32e800b6c19cc772a16ea7ac4b54ab77f53eb
SHA512 fd7c90006cb7869c84b8b3365d6c1955e388389333a9aff5e724069d96163e717e2c1fda4090d60a2c61a0ec76b77603069a8a5d9f07157e560e98bfdb99bb6b
SSDEEP 3072:pZclh8kogWsVPlSH6pAF3SMwooRHXBOoWS:pZs9pWsVtyF3nw2S
TLSH
T1A3B312332DBD68435CADB14534A3460F8EA1A8F7D99B8BB18ADEEF0D134A6857647430
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\CrashpadMetrics-active.pma
Size 1024KB
SHA256 ae1bddb9e2cc97b0c9cd78ef3cd17553be6e5204677bd67e0b8f7fa27007f189
MD5 b0366599d64b0fc1adb2a712dcd02ee1
SHA1 b7a1c09ccd2846664cab5f76bd80b8e9f107acb0
SHA512 d7de6d48285018f8b709c81ca01688126db7893ce9f48829524ee3122aa6f2200c7f78186b5a558d0b1ecf8157ee78a20064b63b45ab89f7aa0835b8409435d0
SSDEEP 12:bHCsEXhVMMBKEKSCemJKlkQyYVhYJ0I+pPK6BsyW1inP6:biPROMMBS+MkIYWIE1BtXP
TLSH
T117252786A30815EFC54288B589AE03602374F9E55F52079B2E2DAA1F2E271D80F45164
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 dc16642704bbd372b6b47bd40a67b3413b4b7662236763e613a05a38e3b945e9
MD5 6c354b71b1035c9a05249154bf2c7eaa
SHA1 818a1522b5415c5dde6731dea3ccdd609647f1b0
SHA512 64495d08931e8c0d7fce3ed657eac2ade85545fba2df0ad2a6fcbebf2cadea317fef84c21734100265a8766cf23f22ade353123805ce79e3170a8a9be5feb6d4
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 1aaf3c40372e615cdeb172b8aee03a173842ff5bb995fc6f5464bc33840cff98
MD5 46606ab8951c99ab753a35324be95130
SHA1 cc014b9c512b5f4fc39bc1a00e3437c12152a8bb
SHA512 f721514c617c5b51f0787c1a79f766c307f64435672356b65a6a65816516104f3c1b122c6c258db63d12deb89f41f2d52cfcc6a0e6b725985ea78624abc89013
TLSH
T17EE02BEAC966EC370CFE075864908B46FA50136B27504A6B7B3D820C9FB063E5299C1C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 fe30e57b07c5d3bdac179f5a3792e48d8f71d1beb1853fd973cdbd056b83fa63
MD5 24dc3568866ff7441d18d891f90a5c43
SHA1 6db9f93509885b123d9861d8d1ba0441165f3a73
SHA512 b3c046025021becf315199720288ac734b58e8177d01ef8cbec8324ccf1b5e6c6b806d5939ba9f3d15b9533a0c8aab2c982ccf491d1d8c2eef71caa6898abdbb
SSDEEP 12:d6n/O8qNIO57oL/sccqUExgMu4aw4JH9eqjpgEafeNvH:d6/O8fO58kxExgua/9eq1gEaGFH
TLSH
T10613553D4AC8DB63CA8860B925C71F733BB28F0CC59116A37433E33635052302D02015
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 62828f1a6804042731a825aafb92bb258eb4f1c6ab7f2e19976baff5db00e74d
MD5 3a785875fd64849b212ed6f5a4f27674
SHA1 204e87218cf67e461d06ffbd8dcd59a70b6e688e
SHA512 06289f4bc285ccb918008f9583ad339dcb42d12139e09a443d91cf631df1e277dae79e7f71bca7e56a0a42a095296a8fb5c077c46ebd7c2adc5b50ad75e41c4a
SSDEEP 96:hkBRJH43/gloAJjWWVVOLHKWolVaBF0FNDWIPDqSCyOug9j+pj:CpwCjJfVSclA0NV30J6p
TLSH
T14344B9FB1905EDC6E72CCEB06C9082349D32672728A5BD37F67944A207565F33128766
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 9fb9b4ae2795ea56920411fbf3d28e9116d3f57756073a000732153c3e95943b
MD5 9a7483edd7578e2f9132f5258e22ac19
SHA1 4ecea2688ca9cdf2cd010bfbb50a499807f5bd1a
SHA512 3feccb31daeee422226e4049f9fd71dd50f6b6e91c8b4b97f75ae48a7478c5611afab686de8fc80bd43c64420af9d1cdcbf0e94eebeda98fd0ee996ee0511f67
SSDEEP 192:0vlSOxQ+N8XjzMuevq9HmlMYzI+fPwouxW3FY8/f:0vs+SvjbqzjHu83Fd
TLSH
T1B4257C7AFC4B9D89D5FC90B22F9094E2E2B08D5BD5C713E154E9C2C20642256A1DAC76
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 7f38c1564ba4dafc24d45f9df610650e2568b0d4092ac1546bc764faaaedf790
MD5 a671f13791a25f2dd94bb97ed4ac31c5
SHA1 c2413c10b26bcf66418fbfafeb0703787d32daf5
SHA512 ffb9e7d1bcc4ff178f19d1537bbe201f9604d9df38302cf372fb08c2a913ff1ac509c515bc9a84a251f104a423f6d13ff0a80e83729e4bbc76dd2d49b10a0f3f
SSDEEP 768:LU4dw4f474O49vUfDPLSgcRUv+4h4z8z49Pz4J4XEUfDPLSgcRUv+4l49Ee4w4mE:ovei/eKhtQr4Qbl2IwlbH
TLSH
T14C164DA60F28A942EA86EFB0BBCDEC1C7C702295ECD79882E517827D49F1FC4178515D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005
Size 35KB
SHA256 60da13866753c79c3c9181b356d2eff1c7f0bee8fc68ebd1a495cac9d4e6e2c2
MD5 93e9cc0680346e47a09785c84393de35
SHA1 8ead872aa9972ff9c00f161ae083c05deea8de13
SHA512 4ddc6fc346c8d506718b1b73fe4296012ed11d94a337886be2817fd1a9aafed824f5730d0a1311a338f45bc00ffb4065df458c2a91788463eb368e6d87cb800e
SSDEEP 768:LAjqVBKehzE/+q/23liBFtimacKoCwxsabuDpefqLwaX8hZZTKYxQuRrL6VPs:LJV9M/mlHm2oCwx3ClefqLHX8n4YxQ6T
TLSH
T1B1F2F14E4CE8D0A833451042D98615FA40FD43E9FB708DE29240A4E96DF7D7FC8BB229
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Size 65KB
SHA256 7bc424130eda2bae7fca759b777f9af68b2ffdd1db9799c7f5b482bbf3375a2f
MD5 2bd30bcdb6172c371ff17cac2fbc52c3
SHA1 17b341c22afa48bf9ac82b7525da4969ce516ec7
SHA512 6e5ec1b1aa0558d9ebc3439adfee842b7f31e9e307ce221f9c463ba6b1d40dfc938d9dbdcd8537980ca600778a97db6b76c15e5915045a9f817699000efd5016
SSDEEP 1536:uYZknOit3uYJaoHyR2Ebg/dEgINEX1b25IjcpXQzv3zC+VFNB:uYmOittLyRHb+dEPsb2Ojc1QzLC+VHB
TLSH
T1CD630202D4949D8DF6F31853F73309BA5F669E70E628CCEB64F8CF6F6818050740A5A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000020

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020
Size 17KB
SHA256 9c430ff236c8f9fe8f47385fc4c0a15b8d45150af1f2b62340375731251a755b
MD5 db8897f3985046094323ccdbc3e66744
SHA1 51c76afa40ce9c4b9d6b30384f23ae6b98c56392
SHA512 f23cee24f5c6f003572f00983202dfcaedaa25e3274815c42af57340f3e2926aa9231aeb77a22f94a844521ccd27ae8a0805262a3c5f347c9b4ffa2e3633dbaf
SSDEEP 384:3LusvRqUdyphdexrMUmaGfTvDjHeSAPTbiCN8PWJNw8D0qO3d4C3pL8KOQ2QG:3LjvRSdeWHakTv/He13i+8PmNd5O3myY
TLSH
T15872E1035CD8A82857D308393D7A98BE742C1AC08C1D4690B93E0779DBFE6C771B2846
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 6ced30d86168563a0e8b210143a5292fff907436fee17540eecd076f647e9711
MD5 f310e8d7593e12c39ada3b80199005dc
SHA1 95068d8a38042baae1fabaae22abe3e11a8ab213
SHA512 bff08e33457a1b3379028f2b766134525e8e5c7e9eb6d9113d2f2848a37b6ac8e559d7da388b2015ad381f24764e304df99ecff2ccfe789304b0ffda859aff6b
TLSH
T15D41D806B9C8D374FF6475F886C019103A77AE088137AE0F29EFA07E6533BF58A25456
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 7fed232ff616301a197e336476c9e02746e49c7836932ee4a30a96e062aac04d
MD5 8bd79b772abe3785e8e448e1c2be8870
SHA1 5e8a68175a58d8b08f8ec7a8765794a6f60923d9
SHA512 1c8f0287e47f23c9e68128547995880f43c9cadc68e6a7f919d998f1d33c5885a298022114b0119adeb75c508794e5cb75ea697cc90bc097ef35ff51eff9d978
TLSH
T143414F46B9CCD375FB3876F842C009113A739E0981376E0E19EFA07E6073BF58A20416
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 be609ac65e3f01009f104b1041e8f7d7f73222fe747e0689f231f4bccf280b7b
MD5 425a79cdc8385a856a2bca2b5eb7d7ee
SHA1 5f30360656dd7a32a9e61d89491ad45596da538a
SHA512 4d5037f27cbee141a1844c2f2071234da6ac11a88b3ce33670b2aa675c3715151f03db77034bf63f481b4881ab5d0ef7b10bdb2208aa4ff765d635b771f8e751
TLSH
T1A3410F06B9CCD375FB3876F846C019123A779E088137AE0E18DFA07E6173BF54625456
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 8e152e828f42f1d65969848e8d5be070ebcf0fed22b5637cac41d6a129efb5eb
MD5 1d43cb2562982ef4bd333d252c7535ed
SHA1 3f475781f8a5a7dda802d0d6899643dffe3ef66f
SHA512 c3463d4500f0d6ce49c8b9fc789e9887b07902d7b72b28575593a3252c763729b9560cf089ab15a4fdc37776c9fb7c648b6066981a8cfda6a20477ed69b4743b
TLSH
T18031D606B9C9E3B8FF6979F846D019003A771E088037AE0E18CF607E6133BF58A24861
MD5 SHA1 SHA512 TLSH

Submit Download

DIPS

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DIPS
Size 36KB
SHA256 71aa78233acf1f15f66888b9754560939caf9f269abc3f85cb18247298a6ea24
MD5 5161919a1eeb86942b0b5b63ad7bc990
SHA1 d4ffa4fb2d0f99ae69e27447e27f454ef474c9a5
SHA512 eb737e3f9025502ea513642cdbf55e777b83cdd726063cba018d20d984bff31966f514caaccd131c2537005bc95976d1ba500c45da8053d7390af1367a80f8af
SSDEEP 48:TJqQq3qhmr/O43b/Y8uaLNW9WjWbfl4pwU1cx2B:tCEmrm43b/LuaLNW9WjWbfltxW
TLSH
T107F222078E393C61E4CA863789C18AE70F79075C935B6E6859A804615DD2A4480BF0FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
Size 320B
SHA256 dddcf7c71fdcbf006fc319c5f0978a8e337e7857ea04468ccfd6293d99c12659
MD5 e2d1038671b92c891bab4802c080b33e
SHA1 8a7f89de1bfa7048f78a4965be3991ce506f2d57
SHA512 43a9143fa5ee86cdc9dcbdd209ff37b1bb25b6afbe4be93a0faee4299621488a17650685aa0eb4074d7617fcb7f7de31bde942d5b2d377894b477319da947d6b
TLSH
T1F5E086B9AD9AC5BE50D684679378730DCFD13404B7D83C126B86DC5071C7A08A590654
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\000003.log
Size 3KB
SHA256 50e8c8921806a6643683e9c63518cea4e8ea710e19b74d370da44d7604d1087e
MD5 d716d77553af98616a3427deb226f12a
SHA1 b640ce2b37bf2f88dd9b98114ec751bce0eee0ca
SHA512 dd7f1f6d1c3694b064023298c64ee083a5b7639f0ba284de0319c9851b912e45d169c11e131b39bc9bb93f815fb255aff1b44f44afab539dbfa576ec061585d3
TLSH
T17561537D97C43A6BF67608BF7C8517036B35926091E2A4920BFD86E11DC6F251F1908F
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG
Size 330B
SHA256 1dae6f593de4610623f7d212562c7cd0d589d0f489871a9c1e9c0abb351a4731
MD5 cd70118cc0d170216d76a7731d0bcf01
SHA1 f9720082aead1e461ad8d9b8f63bef09c010e6ee
SHA512 a778dc40668b6cd577ba1d77a06f20b12c2260404730bfee38fdf85920e4542f83e0002548ce95bd485cc6879317a8a147639679c8e3caced9c8385e25ad0035
TLSH
T1C3E026D52DABCAFF119B941356B4B30EDAE53408AAED1A027F5058C46080E04FA82254
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\LOG
Size 305B
SHA256 714ed4d9fe7469d3f46e1f3442c23ac807ab61a4bba29201db1bbd0999c45f7f
MD5 37b4a17dc18f45c99b988ae4258f901f
SHA1 4f402ee35d9871bb4b4f0ca9d9af355de31618c3
SHA512 f318f9a3eed064d18d992acb94b6e92440cb56212c616e511b3e41798a88fa5ec6f30b296ab0b44e61f79fbe318973e4f3f89de409dfbf3dfc6357db2234c8cd
TLSH
T146E07D9739EBC6BFC082900B03A8B30DCBC87401E6FD1C82A74158407282F04E1C0745
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
Size 332B
SHA256 1872cc873cacd83943cefa27c61d402061daefe4b33ff2ecaafee1191f966626
MD5 87cb7fced3aeb8661114329eb9d67355
SHA1 eae189b030de5251c8817a5c7e6b26dacdcff521
SHA512 0fdc5d8ef9841271f654f303fe77eb6394a5f60c522a3bb475c97737793ba630bdd49fe5468428cfbc7156773dd93d2c8f801baf7d80e1ed92d8356a13599d90
TLSH
T16EE048F15D9EC5AE51458017537D734DCBA03404E6EE3E465B899840B18A508D7D0295
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Size 20KB
SHA256 fedeb61765939e4db71586e87b965d22e07739f78570115e650d231f47c68d93
MD5 c7ed25ce9ab20bc61f594781a3bfd83a
SHA1 e85a6f5ab1e1f26722865da9d42cd7a4b46d1a47
SHA512 7f0d8bd1fcde1ac5bf6efc2c57f75a68a622a9f4739fb9f022ebf26d92c5ffb5f0c422d2d7e83ddb231971c9d89598a6b795a50d543c19cda0f36cb7cd0e3008
SSDEEP 24:TL/91kweka6cLbXYFpFNYba5+6UwcQ8PAl5fBld52GwEQz8D9TD7lvOjJXj:Tb9aw/aHLopFMavU1iBlHrb5D7l0p
TLSH
T1DA92DF8F1F302621D0F84B73E9C1456A2EBC151C5313A689EF5060B39D9759BB5061A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 c530d7cbce461857a75592afa8c89c6ec29bcc1068a91de3130ced4efd84688a
MD5 93a2b92c7d8f13c486194b0fe0dd8287
SHA1 930e62718ffb73dc1a2cd549283e0d05dba85d5d
SHA512 fc9a109de25651135e751e9441ebf6e20ad0f77a89fbc0b1ee4b6f36c33e609f6f8a829245ba4e42f1a0d26f8f28d2335b20ebc5271748f7630b899280784342
SSDEEP 192:DmL1itwm8IxTAkjEFldEaIaAv+SZnbUmAmmmDmME3mgmzp5dx8mosodhMjhnbaiv:DmL1itwm8IxTAkjEFldEaIaAv+SZbUmX
TLSH
T1BC22AEF783F5862D892256F4EB14FE2FCE690524432C3C7689D4AE5B93E2572E20174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 1b32060919a52d4634569a3fb2e946da0133582dc41497baa58475a4903890df
MD5 3c6f3e0c70f46814ada42df4ec263a8c
SHA1 a24a392fc80a6f619b71bb16a2343ec109193544
SHA512 e8164cc4038a84a26eb7264b0bcb2a56de132bef6c0692e06305e44bcb4be5f4be468e41085b94934e5a4efab0ac60496417342b3cebc0ac88e43bc7d3bcb380
SSDEEP 96:DPg0y9+mwaIaACWEW+qzVSQbPNmAmfmDmME3mgmOLw:DPg0y9+mwaIaACWEW+qzVSQbPNmAmfmB
TLSH
T17AC19CF7C3E4852DC91156F4EB15AF2FCE290A24431C3C66C9E4AE5B93E2872E21135E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 90608200cec02f8bf3ad4797690679f2a25c0b465444539c91f7b1155e7fe034
MD5 269aadfe9236da67e56db928ced0cbe6
SHA1 716c46186b74bd508dd068194bcbc6aa2c24d6a9
SHA512 4f60837e361e29a0964ac527194509869b6707a20e7f8cfef5e2b4cd433604095aaa4cca5e259bf0d6ab6eda31aa8f54954c3e03ac4dc22942bae0edb907777d
SSDEEP 192:DPg0y9+mETvEeLyDaIaAv+qzVnbUmAmfmDmME3mgmvp5DxBSc1USSt6iy4suGJ+:DPg0y9+mETvEeLyDaIaAv+qzVbUmAmfz
TLSH
T19A2271F7C3E9852DC92256F4AB14BE2BCE6D0524432C3C66C9D4AF5B93E2572E20174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 b27f197442861c624e46b8f918a6c4008d8484ea635b26221b28cd925b320d83
MD5 aebdbf6a74593f436f6396ce4f7aff05
SHA1 5d0d167d14b9b930f063db185112cc91388ddfe9
SHA512 bdc716fdc22a21f4381b383d79062558695d9567b943abf08ed36bb2062c23221c0124b12222a51cf38c4f08b385b62916b74a2e8c5b3f73230b2c632069611c
SSDEEP 192:DaLbFQvmTTvEeLyfsNZ2aIaAv+qzVnbUmAmfmDmME3mgmvp5DxjuStI4susw9Bsr:DaLbFQvmTTvEeLyfsNZ2aIaAv+qzVbUK
TLSH
T1134292F7C3E9862DC92256F4AB14BE2BCE6D0524432C3C66C9D5AF4B93E2572D20174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 2c3ebb4104b458a404db27a3f6f563cdf2eb3547e6c5e6386aa55f4ab3619bad
MD5 90992bf1a53ac17a27286e5513858a4b
SHA1 dfc89b16e503bf05ce4d8d7aedb6f5c5105c2615
SHA512 0be8448d9e5227e3a8de813161a41684e1962a031997e7b6e1b8f5a9064907b2ee30d6e98a3fb1322c386bad2fb25a9a0c8a8457f6845aa69791a70045f3ce9f
TLSH
T1FB41AFF7D3E4897E850196E4EA146E2FCE6D0954131C3C56C8D4AE1B43F69B6E20034E
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 051063b552c0b846256bc109b1b2aba65f7abb53d495cf44ba8bb0ef5099e8d6
MD5 47673849416c4f8c8110557a7e48829c
SHA1 ae44e4a82bfee16c669604e115069d6d104ec487
SHA512 96531aa70934b669d5a7e8557c1eb446f9d9dc4a0a252cbb7c2f4622b5f438576e0055fdbccff8156956bf4051cce86d9746fe161f3e9b80b10cea4b2c62578a
SSDEEP 48:T6IopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSBLRU:OIEumQv8m1ccnvS6jUD
TLSH
T1B8F2EFFF1B05B601C0D491B4E5810ECFFD6D112D4BAABED0AA9809F39BC66F39528259
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 523B
SHA256 528abfb047e2cdf71a4803ee7e994ae3d498ed60986a7b8d008303363fbe0682
MD5 34f77b293df3b4a17973f89be115097b
SHA1 9cd921ea254948b1295909cfc69eb44ed5ec1761
SHA512 93fa7c31ded649a433c079b4e5ed4c5347882fa016d88180781151c9fc7855a07005dd139a8a46597fcf2df09bebcd595e77135c5bf5ae385719d176c9d1a4cb
TLSH
T122F059A7937DB47720AD45AB1E80BC0A65B9AC340A4158F0CFBA813C91864E71B13507
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 40cc54c915faeba421ad6e41fbd278a8a5d698e73f663f935761ba20326253f7
MD5 66c36f18a3482beea66338623638fc29
SHA1 1398af0090fb1bc1c9e470abc825899eb784bdb5
SHA512 38e72fe599c4c6ef49a693448e693c892561af21222340d0670bc7789a786b133d7120cca4a16d757dc955a0bcbe7da1cd37116e3db74ff03a07e68cd0e37b2a
TLSH
T15A31BEA7E27FF857206D48671D04FC465979ACB4129290F0DFAAD62CB0C50FB572B01B
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 cadd6fa03456d091a0ac24d3d5f635a389f0b542a2275f314054253972d9976f
MD5 aa2a92c48e48b769325857776ae3af65
SHA1 d8d0c1171e226159bac57e20a31cc2081ca7b66c
SHA512 0752c244ad8f0cd0a3057a0ac361ed2a03aced8d8aefe2236516ff7445a85ba97c1e08bfa8b66f175b45b7072c73292dc2761fcc678336f30fe3ba10617b144a
TLSH
T15341AE97D67EF82B206D48771D04FC0659BABC754292A0F0CFAA912CB0C54F75A5B02B
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 9238a0b918ce9a395642e12b20e34250d9a199024c367b250ede6dde53c6a7f1
MD5 95b86c69f0be4590c67b8a4c2a2fea6a
SHA1 6e97ed4e9a343814f48ceef2edbaa80e822a7703
SHA512 d71e867de70a5033236a62b9f5d3197ffedb519171613ce37cbb3ef50bb2480fdaf5d2540ebee43e9c70bced9605b8df5b7c01164f9045e9abfb456c3294b4f5
SSDEEP 192:JRncBzsY7GcHtALtv7+FpAPRp2kzgw29hHsb+WNPTyGQI54n82LcO3VyIsnAUgrK:JRnmzsUOLN6FUXEbwWiL2A4e
TLSH
T16E62D76BB950697B5CEBC229F911BB1FE7F5102164901E88EAFCCE2C11EBACD2117017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 3736e2f7f32aac3dc1e3fc73a4263d8be2a11c8fc703d3e3d943c91b01903618
MD5 94c65ddd060405a66929bf1bbfcb4e22
SHA1 a09104052c0a028ba2e71a25c14ec441c3a38848
SHA512 57e7eb759efa0ebc91fd476296ba32395689f2f113dd43a12fe1ba7e4a4032d49d71faebeefc1ef693862b18493f0f6318845ff61347a40ee6a672eed5784df6
SSDEEP 192:JRncBzsQ7GcHtAO0v7+FwFPRpxTkYlOgwGn9hHsb+WNPTXgqSQI57HMIn82Nnacm:JRnmzscOOw6FeXdbwFiIb29qvL
TLSH
T16D72D75BB560297B5CE7C225F951BB2FE7F5202254901E88EAFCCE2C15EBACD2117017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 bc46d164c91fd4c4015e74ec961eda684a29b489b97311a5adc8edd0917dd2cf
MD5 b719a8af6d58ea7e708146e4e9e4ffa8
SHA1 97b13a67b1b4341a5bd141ff0a852698fb08b9a8
SHA512 01c70fdc221e751ec690b7de3daf564f49ef7f637e30bcfae71713cfd68ac9d7bb823fe0bfe351cd6cdc453dd3f5730df46b185626495cbb9e788766b6403179
SSDEEP 192:JRncBzsY7GcHtA3tv7+FpAPRp2kzgw29hHsb+WNPTyGQI54n82LcO3VyIsnAUgrK:JRnmzsUO3N6FUXEbwWiL2A4e
TLSH
T14162D76BB950697B5CEBC229F951BB1FE7F5102164901E88EAFCCE2C11EBACD2117017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 79d2bac4462ad052d7698b9ffecd2c5bfae2c949834088a15f96b0bab70118a5
MD5 d5806b513b0249a4a1662b99afdfc046
SHA1 6b08f67beb03cf55e8c140875cc1353703dbcbcf
SHA512 4fd5a749cf17d34cfeed2504db70b1a7ee854b107dadc568ac75511e18bc76fa8ff75b3bd71209137502ce6e1242dd8f27ca723a44e9895f54f25a53172f3c5f
SSDEEP 192:JRncBzsY7GcHtADtv7+FpAPRp2kYlTTgw29hHsb+WNPTyGQI57TIMen82KcO3Vyq:JRnmzsUODN6FUXsqbwWi/7x2X4vL
TLSH
T13362C65BB950697B5CEBC229F911B71FE7F5102164901E88E6FCCE2C11EBACD2117417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 5f13145602ca56a32ce63928638c20d5aa59e6a090fef66ff5f77f714bdb231e
MD5 2873b0543ff83a4a1bfcbeecac6b6fc6
SHA1 8b1d8f06eb7ed8826c55868c424c7563d08a1686
SHA512 346740dad1b1ee3944aeb6025fa8ae91063efbf5f6be6a5c984c087ec3f47a551edb31637841c20884f60b9c85c5095e88a60cf763ba8115cb40d7e8f03ff7f8
SSDEEP 192:JRncBzsY7GcHtAktv7+FpFPRpxTkYlwgw29hHsb+WNPTyGQI57SBcn82FcOrVyI3:JRnmzsUOkN6FzXRbwWiUX2mqvL
TLSH
T1F362C65BB950697B5CEBC229F911BB2FE7F5202164901E88E6FCCA2C15EBACD2117017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 14834b591f4fb00b284e9005e46f12c4a2e3982f1b73f62e7e6cd040e41f40a0
MD5 1316e3d397e532afda72656c1be6505b
SHA1 07773a6f301d8473ac6f548134377a107a3086c6
SHA512 e040ffba04aa428419e982ee89ff468d6ffd5e6848a2e2e572175df0a45e4b5c576767f2c273bbc3d4528335fc427d27d1ae1137a62554eec9c372bbc8c55eab
SSDEEP 192:cR7sY7GcHt/Ruv7+FpAPRp239hHsb+WNnmN0L/PyIsnAUgtaJ:cR7sU7K6FUXQbwk0H8
TLSH
T15D32B61FF914A53B5CDBC21AFA217B57E7F5102164902E88E6FCCA2C15EB5CD222B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 de7bed7b40122f22db156c76347c35ad7dce3b6eb43211a721c3215a783f30d7
MD5 4aa75230b9cd484bf52d5851a1e1e2c5
SHA1 ac8e331ff64df972e707954f66c8dcd409c66159
SHA512 6edd43632bcb45b4cbbb123bfcdcda86539d52c1a79ff94079c91cbc68631bd51b07870d41f2d39a4d57bb0313f2906b1b54ba4b93525da8707462eda9fe318a
SSDEEP 192:JRIcBzsQ7GcHtAkXv7+FwFPRpxTkYlwgwGn9hHsb+WNPTXgGQI57HMIn828cOrVH:JRImzscOk/6FeX/bwsiIb2NqvL
TLSH
T1E062D75BB560697B5CEBC225F911BB2FE7F5202254901E88EAFCCE2C15EBACD2117017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 fa43b0666bffde8e5194152f1a797a324ee3d844391134f5f034592c40482632
MD5 4113c69cd58bccc12ad560c73268efe1
SHA1 8b29a2021fd17819e7321a728daf2958170b09d5
SHA512 395ef20282e85d0e251049df81f3a9a690f6ba1ace1a8473fd6091bf4f09d9fdeb92b339c774bd07c7ab9155e392100a2eb868ac28440b6407f6378340d0aee1
SSDEEP 192:JRncBzsQ7GcHtA80v7+FwFPRpxTkYlzgwGn9hHsb+WNPTXgquQI57HMIn82NMacm:JRnmzscO8w6FeXqbwNiIb2mqvL
TLSH
T17372D75BB520297B5CE7C229F951BB6FE7F5202254901E88EAFCCE2C15EBACD2117017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 b6e185dedc56e9cefe9b9a849efb6b26fa9a245bfe2cfbe39df5315ef5d670a3
MD5 18f1aa7a8f87a266e044bbbce1f1eab6
SHA1 841b80367f4977d8a65077ffd9b1642a3724284d
SHA512 fd445f721f343dcf65a012d9389bed608db99420a341d0b443d5f70e5aa542e8a90af20a415b5df3cfbcc0e83b23797b49927c1b91aaafd33305c5279c1a8add
SSDEEP 192:JRncBzsQ7GcHtAxXv7+FwFPRpxTkYlwgwGn9hHsb+WNPTXgqYQI57HMIn82N1acm:JRnmzscOx/6FeX/bwfiIb2PqvL
TLSH
T1B772D75BB560297B5CEBC225F911BB2FE7F5202255901E88EAFCCE2C15EBACD2117017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 c1be37d7f4cbf0ae33da17717efb54b96f7b9e353161b5e4dcc082ddaeb199a3
MD5 4a08e14ab011f621e2969c57d3efd374
SHA1 41fd3cb18e218e6698e039a1e1715ea020c74e89
SHA512 78191ff4acd696b98383f63b67d5cd33654387156e1c5eafcad88d79cb9cb77a4ed10fe6b0c63f91a3aeb1e6b4fb93867463449764e5e46c53be73b3df2effe7
SSDEEP 192:JRncBzsY7GcHtA7tv7+FpAPRp2kzgw29hHsb+WNPTyGQI54n82xcOhVyIsnAUgtK:JRnmzsUO7N6FUXEbwWiL2iG8
TLSH
T1E362D72BB950697B5CEBC229F951BB2FE7F5102164901E88EAFCCE2C11EB9CD2117417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 690670cfee07ebe0707fc0356721605c4888de5f1858069970c431b52ae10db2
MD5 016626f36e14d95cbe91153d9e6f04be
SHA1 faf1658bebd6126e4318a78b423a56b35e84d1e1
SHA512 61d725f2667435ce118ea8810b9a93cfa980b3599e374a04d023f68e846d8d0800305f5e594c136deb15ce1c92718ba2a316014fb4bfcec11169d57213529904
SSDEEP 192:qRncBzsY7GcHtSKqv7+FpAPRp2ksw29hHsb+WNiG2FBn82DcOqVyIsnAUgtaJ:qRnmzsUXm6FUXobwWW2o38
TLSH
T11252B51AB950797B5CEBC229F951BB1FD7F5102164901EC8EAFCCA2C15EB9CD211701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 297c8e4d519174719065d99a36085bf99b6d6e70ee8f4ec9c49ca109e574526e
MD5 84543ec1035ce1334eeebd3cc42ea02e
SHA1 810399770d382f2e5d9e2bf1ffa7edd95e0666f2
SHA512 93593e57894004405d1c6ef4533654694d0bdc02d73e4f5aea92577e524e9959447f43556c852bf558b10b3534088987f9bfc0229e04e4ed7c239b66249aa408
SSDEEP 192:JRncBzsQ7GcHtAkSv7+FpFPRpxTkYlwgw29hHsb+WNPTyGQI57SBcn82FcOrVyI3:JRnmzscOk+6FzXRbwWiUX2mqvL
TLSH
T17E62C65BB950697B5CEBC229F911BB2FE7F5102164901E88EAFCCA2C15EBACD2117017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 8bf6f744a085c998de6f187fbc86f9382a6caa209a6a6647c10a5b06fc34754a
MD5 ee0c41d283b5f94f93dba01d3f571d1b
SHA1 9591a3d297be2809a05cb789cddb21f2d623d7eb
SHA512 d71c7957a03e96fba51dd7561af9e4d2942d563ddccf4e5191256904c8a18f4da10cd28c79ce1b351e1bde2b2fde56476dcd765cf88aff72471d57ad3914de52
SSDEEP 192:JRncBzsY7GcHtAFtv7+FpAPRp2kzgw29hHsb+WNPTyGQI54n82xcOhVyIsnAUgtK:JRnmzsUOFN6FUXEbwWiL2iG8
TLSH
T16862D76BB950697B5CEBC229F911B72FE7F5102164901EC8EAFCCA2C11EB9CD2117017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 cb1657f4b66933d0a38d22872f97a5f3eb530b69b9b2adbeab24ea40d408db63
MD5 14f0a29b54f577492f09b8539641cbff
SHA1 597870bf97ef338d8e56fd5daae7cb959ea15f95
SHA512 7aa919c99ce1cb25cd1c6b540a364cb5f88f7cb48130f85577b220a53e23200ee07f61c71a0e5174a10f4ef0e6864bd560acdb3a3ff83c14dfd7ccc6fc8e046f
SSDEEP 192:JRncBzsQ7GcHtAOlv7+FwFPRpxTkYlagwGn9hHsb+WNPTXgqYQI57HMIn82N1acm:JRnmzscOOV6FeXJbwfiIb2PqvL
TLSH
T19A72D75BB560297B5CEBC225F911BB2FE7F5202255901E88EAFCCE2C15EBACD2117017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 82f19bdaa200c3a3056c6486f8d9171c832143077338572b10c4c0ee03580c4b
MD5 80e775e497e26256725722f158c1a7e7
SHA1 24ed3e37ba5a437a46beacb73c33c43eae3aec98
SHA512 09ac01744410777e518bc948ab2c8649e18de947108d5d4afd77f70e32dbc68ce133ca9306edde725939c3c02ac6e14f160c2e4f358579e678e152b19c349bfd
SSDEEP 384:oSj0X7KxkXqKf/pUZNCgVLH2HfgslrL7pLuLcifyTXOD0b+ErU3wRHGU/QT:oy0X7KxkXqKf/pUZNCgVLH2Hfgs1L7pY
TLSH
T1E77219676C4C9E3B0FA4CACCDC16BE4FADB5024B65D9886843FA582903D5ACF11061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\000003.log
Size 4KB
SHA256 1756feaf441c7845773376977748a506eaa79b75cba8c3f76ea5852d5870331e
MD5 88c1adb64f0088aea116394deb3879c6
SHA1 5051410cbe4f536357ce682106aa2858020182ed
SHA512 ff73921977331458062ead42ebe7ce0bd32ffc6e0895c8df587bb0e9f3d8bb305ee3dea1414c5fb9219c135adf7bea0c4d8f389ac7af2d90e929cb1ad1b040d5
SSDEEP 96:F1mK9MrRwcnDh1JxI0LXbXFXKXTDFXSXTdXFXKXTWxhXsXTw0XbXNXKXTeuZXIGU:F13GKmDhp7L1ajxCjd1ajw8bL9ajR4GU
TLSH
T199A18E6EB50A084EE4AD4937CD75571B6F7DCF0C27BE3767A9DE8A0405B0A5711082E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG
Size 333B
SHA256 f3ec7a25f2dfe5aff290dddbc43c4334460ddbc67c733c81dc5e43111b4669c3
MD5 40d69f72a2ca065e44c3e206949a1b86
SHA1 cf25b8641f2f66125a9788c2e99757ed1d4cd596
SHA512 64025dd5a4bb5aa51a4cb1fcd08845975b3ffd63f345a09366d1ac39fbc6802f37c85c5a9e9da8efd922901afa49569fae616d51c02cd6cadfbd2c6e3728b262
TLSH
T115E048605BD5CBBE109741171294F31D8AD47405E6DD2C012FC3994066DA91CB592254
MD5 SHA1 SHA512 TLSH

Submit Download

013888a1cda32b90_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\013888a1cda32b90_0
Size 40KB
SHA256 7ba5e307787aea749fef9fc7fb52e8865cfe1ce57653bb9e83e24ad5a5cb49d3
MD5 4287a16e1fef2c072830ca2a15e64282
SHA1 ad36da17ac4d9b5654ad8f0eb4b5df2b8eb27c19
SHA512 89a3e289030279852376461923fe99ba0f901246416dd4166ebcfdb29f842018bcc7e05164e87317ca412ff8834ed2ae6e43c9a0f71f4737f1f4608c8d091b36
SSDEEP 768:DNTOVLvit8f8rjwUFD1mqxoHQEIo2ewrm8veN:pTOc8wjHwu0I1bq8WN
TLSH
T1D51383CDFAD3B51A9393A1FE54BF2046B63F6C18940E0500FA69D6DA7C7A009C637A74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

013888a1cda32b90_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\013888a1cda32b90_1
Size 101KB
SHA256 770f52999aea0d829365a13c4c7f6c6b9534c4953d1da51859c41cc605e4d2f0
MD5 84470904f5727901114af094e1ddd011
SHA1 6200387eefa0561aad5d5ab70ed2493eab882a1f
SHA512 711d3bf2d800bf3968731992405c6463a54daa2de157f28cfde5f32ce5d712b28921d9e5c87c035d9d5c1011ecd77fd361936ffe3993f95e1eb84eb637cef918
SSDEEP 3072:0Yl35OKuLkOTV6VmcLArcGxW1vI/qWbYJ:ABcGxmISWb
TLSH
T15CA3E84267509A2ACE7743FA56A34567333C81083FC3F30B52E277B99C243F7995A84A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b6c28cea6ed9dfc1_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\b6c28cea6ed9dfc1_0
Size 22KB
SHA256 e091084d2ea63d4ebf66c57fb9cdf245979545d5934ce2ba0c4757514d78e9bc
MD5 e0f4d214a32eb4d4f11eab76761a5cce
SHA1 9256033d1163a61330e3640ed36b264f5f8541b4
SHA512 08d18d1bd23799b39ecbe7b05df5f5a5bbd6264db7d4718d8f6a931357428381766f0d54529bc710d939f51dac86393b7d80a630480fbd5096fb150149629975
SSDEEP 384:Ccq9EarScee7MORRKT6dSR4VCPH3ZaSKLxkW2aaz2m9A:SNrb7MOHKT1DaSe62mq
TLSH
T15FA2C69CF7E2B063479351B4453F310BA33E2958984C80A8B55DE4E69DB290F916FF78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b6c28cea6ed9dfc1_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\b6c28cea6ed9dfc1_1
Size 47KB
SHA256 3b343d7f15789c1884e89ae6d5d75e3baeed97a54a528e69f615bae027b94cde
MD5 66a0cfd5dd21d7110ce8043ea98b5be5
SHA1 935899e21f2f537635a1b5777b43d894913ae310
SHA512 324b2a7901aa382bc8b704c6568746dc1fd26174a5280e221161e8c1b1d2525281b4d2f29f82e953ee4e6254b8925b30c6ccc31f864c3cf9c2c0347da4934ca9
SSDEEP 768:l1CtmQQ/pRYmWjufP2wDGoDezRNTMaB1cG40OpyDDit2dGySIq7arY7MxSV:lVQRmWjufP9DGSqNpbhtO6j2aU7WSV
TLSH
T1F923D7056361967BCD7607FA52A3496B33BE81143FC3D30A15E263B52C223F7E58A897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa813c9ad67834ac_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_0
Size 6KB
SHA256 fde19aa6d52b7d0ecbd722c1f18c4d20deb785783ca3d3172743b563c3100dd1
MD5 28be1c987bb8a32779da857d35d19585
SHA1 5af24031619ada52b6c2395f6ffdf716cbb04e62
SHA512 4a28182e5ffcd023d9e478f94379f27e21e3166229f1dd768b00eb3b40c7ec45ecb4d94a9ae6b12f432931853c697228907cbc1a16550c37ca7e7e4aedb98958
SSDEEP 96:CPstP0RDSx6KLdyQt147GvDIGCm0pOgozxo8XSt+l+OqS66fdne:rN0Rm0KLEe1MGrI00wdxo8w+Fqete
TLSH
T1A5D1D8C51A71E4618EB34224EA8BE814FD3670573A975002B75E8F249F72780A397B8C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa813c9ad67834ac_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_1
Size 4KB
SHA256 4a3c13a51aa8b593006c4a9c40b819d51455d26f538aab04ed7e5c181bca8c4e
MD5 a21c6bcf236262306d158d8c832027bf
SHA1 5c912610d6f40f2d68ea944508a374c68b6bb0f9
SHA512 e03939a45c1cbb6b2b82014401d72d280e59f3ed452c9de0affd6150acb1b27f52fe00350355812444b67396ffdb9073ed3be1ff4c26bf19d3578053ea1e7011
SSDEEP 96:0tsLjxzMHrdV6FaPBQQaq3cPEG7optGidv/M6OFb:0tsLdQGoADPEFpgMXb8
TLSH
T14591FAD6D3AAFC37DE7607BE116B84722277830C6B47D14E22526FB05D453B39AD204A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 192B
SHA256 ded2e10b0e7d4987d295416d97cd6588bfb9ee78eccc0d09c05ced0ddf65fdc8
MD5 bb7f93e90bbd97403412db534c17f623
SHA1 0fe8b889800bef7f1fdb387b3cf5c8b786275b51
SHA512 8443521556c107b6a1e182d31fbf1f09e8dab088a50ed44504a4098a33ab225d6b22323029804fa1654d782885aface428c8e8dff6c81b22feef400c847d60ff
TLSH
T110C02B1544009002C4B5237511A2A4CC323CFF118B09030313B4767B9CB7231100B213
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 01561465b379ef2a56891e3657716b82e1689db3e3b2ab9b0d54238933df256b
MD5 90f45859d636a1890a1adc9053445758
SHA1 ea304d335a08e283ddff68f5b60b837ec615c8d7
SHA512 da26a5bab60751d10b372ddfa2ebea0017fdb3dfb3073d30df359e95ae7a46dfd1490bcf00c29dff70dfcf4433af32ab3826c5d4eb54467d4f5e25ffcc351198
TLSH
T132B012218101D600C00701B5254204D82244AF14C6051701A3F16B7698260B24014160
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d992.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58d992.TMP
Size 96B
SHA256 32228048102a4d71cfc1cda4112742475570e0f0516e98fd0268c704f3b8254c
MD5 0596f971294304911810e6cea266aa5c
SHA1 e1538ea7b81693e05069f0ed592644ad034aba0d
SHA512 f095b3f0d3b09510d4b064664cdc1a8a11b305e403182790e4d2b08a6b4cc4138e3ab031e2b3313d7e7773760981dbefa6ef77259fe9b7b72bc29b28a4d76d06
TLSH
T1C0B02200C002A282C08283B82B82C3C83020CF2ECA030202C3E00B32ECA0A300020030
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
Size 308B
SHA256 cbee1100a2c9add47776b7e416b58a809f6feb9fe458bef8185b0c176b5db340
MD5 4e7982b86b3d7d916b7722aa3b3f0669
SHA1 ce4e874903cb71d9012cc7654ca7a6ba5e4f7efd
SHA512 c4dda8b36e90a327061dab901730f47fc23cca129b02a157f1ed0c566a1d6dddf272a4e74d3acbf14eb3a7fac0820387a584db9e19ca299724ed7f3030f891bb
TLSH
T1E3E002D812C1F027FCD986300D4723302F21D8BD1F311D43C4CD35D0061FA653401441
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
Size 320B
SHA256 9d21c890606019cda282d81ca2fa0dfc49bab7f76d87abf708cd2e16d5145b85
MD5 104f926c7cfdf0f4cc2d0cc8282f2110
SHA1 e312eb69090f7cc28fee59c7db8b8129ea1d282c
SHA512 2720e299ac57cb78e3bad140dfdd67f1a1535016cd5138992758866f3ead350d148abcb045be5d0afa1cce04cc62d44c824a72aa0388be2233f1b5f1c2f8d489
TLSH
T154E086B46DDAC5FE5196822B1379730D8BE13404F7EC2C036B45D840728B918A6D02A4
MD5 SHA1 SHA512 TLSH

Submit Download

Session_13420811128809638

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Session_13420811128809638
Size 2KB
SHA256 52d02d090e160466ae76a7a4b0205f034fc7f131d9b65bb449514047f2515e38
MD5 4cb1789f00d8f1b52c4baa67eb5890c6
SHA1 79c6d5b6facd738b63bf5d0c8f12cc94c0308344
SHA512 1111fecc1f9e60b4126d16c20c79969066042a9da2e503b60cced2df9bb0043b8e016d086d30265d32bee3e5a0fadfa93671b1b0c932d64825212a7d67dd0565
TLSH
T12B517F17ABD1043EE73F873985B515E2BA72BA11B1818D1F90A251140CA36835F65DED
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
Size 345B
SHA256 130e675d6bfe0def48ba26977f15ad6da775ab287e24cd2adda91251aef104e3
MD5 2ce24505a18ecb99abd607b9de1da78c
SHA1 c55fc13e8947067a3ce4808b3db5de37d1d00d76
SHA512 d64a207c47a47fdb1476901267f5f9a748c519fe1d1a84cb3c1dfc268d1bfc07926409133af5c0c958cca2142af32e79d72090c03cfcce19f85a6bc96b73d059
TLSH
T19AE048706AD9CABF5086906B6394F30DCAF27405E6ED1C112B8AA584628A9087A92794
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
Size 321B
SHA256 cfb9922726812608f9b2df1bdca66b3a04d1d29484ccebb203b4d9921be70c61
MD5 2a294bd1c37874370405f87ed80d8c82
SHA1 5099e0e407aafcf0655cd6242c78ec562319b110
SHA512 6fc11a1826ba216dbf2f5c7cffb3e12b202ce5a02d9075397fa8d0ac6c60502a545656890418076d17ddd4a5bbe7a3100b559c90d0f22b0678547df12c046d1b
TLSH
T1A7E026B0AAC8CABE4080C8034364B74ECEF07809A3D93D02678C68847186A0862A0280
MD5 SHA1 SHA512 TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Data
Size 138KB
SHA256 95b8e1be95c7f6b46c5491372cebeb54d71b2350d062531ff1cb1501860fc649
MD5 dc4de68c3fe1b85fc3ce7ce8ccf95050
SHA1 ce31c521c9a282cf5cc51881ce3e568553080b1b
SHA512 7b027ad78cd86f23f5a3e3cfac602a3ff2599105e6e1a4d178850597c8dd0b32b268580cc9c6162f16f2e4f19e1e11b8fe8fc82d320972e22a548fdc3bfae1e8
SSDEEP 384:jeuvBnhJsueMEGvIW1DcP2O5xXjVumfnKa:1nbZeMrv/hGt5xXvnKa
TLSH
T1CDD3774B3A743002EDE59A721CF055BB5D3C716D8F11A5D428B620688EF2963B63D4BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data-journal

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal
Size 6KB
SHA256 6aacb974c2a1f0bda1b4ae55bafca0329cce8ced0997c4ca4503e2f8438ebd57
MD5 0029f44bf95f0ff73d26ae3185365718
SHA1 3d6551ee106f7667347df81af369c4c3eb3f405b
SHA512 eed03ddfe9abbf393964361a010b5e6902f70cc2a0f7bdf13b72e03b034693b0c101bf789644a3ef7105c401ecbf833fd25f4668da07672bb0740d87c234bf7c
SSDEEP 48:9eNJzc6s5MYOdq+4LWSNm6zgaMXBVwWOquu3Br3TL/eOEErjQ10wY0wi0wN0wBgD:9eE3SYYCWs3qviKwkO9dQa6
TLSH
T137D110A335D42153FCBCDABCB8977A4D8B0A715AC840E2FC647410580AA6F23509A4FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager
Size 40KB
SHA256 bc23fcb65a2690f1bd71b40593afda5bece50b4c49e6d4453db5a98206abb4ed
MD5 68c00b40140c50b5bea008fb24c1fb87
SHA1 012e66f0c150dc5f0fb5b1ba0704b8cc20b5f08a
SHA512 9300d228f1de457b40af0d98b43f0fa20a95e966a9ddd50f8ee413cba46468cd383c0a8dbf84c2b969b667a3ba85d7de1833fe955746c4699a6977fc75919777
SSDEEP 96:f7doKsKuKZKlZNmu46yjUKVXwX4M+XvXd:7ZT0nzXggAfN
TLSH
T17B033D8F5A2C40F3D0B2C13EEA8269D2FC7C160CA72279D419F90BB15EAC13350156AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager-journal

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager-journal
Size 8KB
SHA256 3265fbd032cffbd922a53dad5a091731ca4b991808a9b8e701ebd65e530941c1
MD5 8226f8c91ad8b7034a5dca5f5599a742
SHA1 965a640f1d6c05a4c36930435c629cb39e5810bf
SHA512 30dcf8685212f23136694dba2c514e20d5fdcb73ae028ad7d44242f6d367a99e6ca18b29b934a568e0b2704f5f935c0cd8b70640490001bbdd76a5025bb3891a
SSDEEP 6:BqVk8h2Gsr+Bcc/XKuqHKu42nEWCc/mLEJOgLEJLXk:BqVkw0r+BXXwX4umLULIXk
TLSH
T15B02DF8F7C0C444BD427003EC79EB88229390D9C3B52291928E64D142CBA213804ABDB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000003.log
Size 22KB
SHA256 53084badf83febd109e24145be92cb94dc2a07766f17e9d50c989ff2537996c7
MD5 fdd57630be7cbae08e0b3d2f2b49c180
SHA1 31435015bdef8f51b823ce3b53020f44b59d3127
SHA512 3561b81f4165cd4dffe5de0c9408e968046389f83af14c3c8199ba3bd829f1b2d7006c71de696731c125bcd7d3f831a87a85e5560760445555fb99a0822bc7b5
SSDEEP 384:mgdksdGLjTqMchQvIIIebOMIM1BWb1W+sdGeIIXbesdGe+fNAmisdGKm:schQNlIGum
TLSH
T184A2E99EA3F41B92EC9F97FBB895DD3A0772DC4D5C560401B4E1966E3833E0B0A81399
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG
Size 320B
SHA256 8c27e99514be21673c20e1ff273f07e6faf402cba6eb7c9a9518ed08ed91cb11
MD5 0c49d89424f30539d4994f558c17f295
SHA1 26aa31ea45d358fcfb08ae9ac8447fe64aa15cc8
SHA512 53a1235fc169eb686c3a9a958a5d5dab42d1318823ba1ea1f7eb584548fdf64c74ed690fe310ff20037010b56e350fe9087b9fd8fc15fc636778b6f95449a609
TLSH
T156E0CDB0BEDAC5FF6096805B33A8734D8BD53805FEEC1C472F42C844B18AA05B5E0354
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 08be7dfeba793740b27859f9b673af3dafc1ad2ed6452befd8df616c318a8a7b
MD5 cbc5bcedf3c26e2ea88ec44e0dd9c527
SHA1 715e2eb3653429606442548d847f08956d1ba4c3
SHA512 a035760d159d42d3ba1a125ad3523d8b912fc9117f0356769ae92539a6d495c787cd5cbef27247f3ea12720fb6c053a1dff728a82ebc3b019e96b8127cdf097c
TLSH
T18721F556F331C104C299867A207E6B650774D496CFF8ED0F25B520283EB2E140D0B3E6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
Size 338B
SHA256 2fa61bb117c6998a15a7735435867ea575874a5fb397b438064ec278efe09eb3
MD5 2b37e770f75cab34c672f5b9db28df9d
SHA1 a80e597a27c3f00b0f9e0de6f8de143a75a5556e
SHA512 233829217de96af9e4614f1e491476ade17c8e4a8e2c5b182b19be2f7efadbc96019cd628d7a6dc11151151a2a6ef4a2858bd4d9e79281532c63a2d3b5bac76a
TLSH
T179E086B1BD9AC5FF509780571268B34D8AD13805FEEC2E162F81CD44B18BA09B5A1654
MD5 SHA1 SHA512 TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Browser
Size 106B
SHA256 3615498fbef408a96bf30e01c318dac2d5451b054998119080e7faac5995f590
MD5 de9ef0c5bcc012a3a1131988dee272d8
SHA1 fa9ccbdc969ac9e1474fce773234b28d50951cd8
SHA512 cea946ebeadfe6be65e33edff6c68953a84ec2e2410884e12f406cac1e6c8a0793180433a7ef7ce097b24ea78a1fdbb4e3b3d9cdf1a827ab6ff5605da3691724
TLSH
T1AAB0112033FC0228F3F38200AE333BA00F3FF8230000022CA008228808B38288880FB3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
Size 13B
SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
MD5 43ef949d3c6e9956545979ace65d0085
SHA1 63f2b2de8727854597e49a1216e8e74c68117c07
SHA512 313a5ab7ac9b5efd955beba4615784bdc2a9058ddaa804d85fb2d0c651dd3de07e382d61a1bb482499520a80e0b64c004ff2af03459cbc1daef47f540f0a6905
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 110KB
SHA256 110177e0752ecc5d4227b9e665cd1fba845ec55ec886a1b0362b03f8b2fbaf0d
MD5 d298fd281d785f9fa1bd41c7bef03ff7
SHA1 39f33640188a6ae28658b714e00907d2578827c5
SHA512 f14268392d97006deb700d26a2d7964cb4f1997589d163e21b1d4fb35bea39aa8be5c0da882e5510d55aa99078946d5bd907f2ece562c4d8efaca2e2f353346f
SSDEEP 3072:aRkclh8kogWsVPlSH6pAF3SMwooRHXBOoWQ:aRks9pWsVtyF3nw2Q
TLSH
T1D8B302336CBD28835CA9B1853493460F8DD1A8F7CE5B9B7589DEFF0A134A6857647830
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 109KB
SHA256 2f0fa47b310c22e2392d014fa5350c5bfece90df123d18243ba4dca8d920a90a
MD5 50c690ffafad57b18167484f5d30fbc2
SHA1 0800f2039bf8a0ca061404b2e717b079cfe0c388
SHA512 e2f500237e2f7aa8c209803e1728d0a7c64c4e987f14a2cf1feb61ac23cc76cded0cc56ee87a58a2adb13e89a7a1f48bd1003c8217368038562c530a587f420d
SSDEEP 3072:LAclh8kogWsVPlSH6pAF3SMwooRHXBOoWS:LAs9pWsVtyF3nw2S
TLSH
T11CB312332DBD6C435CADB14534A3460F8EA1A8F7D99B8BB18ADEEF0D134A6857647430
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 110KB
SHA256 4b2c75f9e871eba21f8fe4dce3dd5fc601dadf58cf99d05622443604de8c8a0f
MD5 feeab6e35650d6698263cc87a2100867
SHA1 427a6dfc12d30ebfe74a67d4c1224e411605ebdd
SHA512 89f385e8383fee926b543a8ae964d64d2478477187460ca0a8fcc5f64d6e90695d5ac358a8cd593ee6d88c528bf977982909736f58520652acab49813df9f0b4
SSDEEP 3072:9ASclh8kogWsVPlSH6pAF3SMwooRHXBOoWQ:9ASs9pWsVtyF3nw2Q
TLSH
T1C7B302336CBD28835CA9B1853493460F8DD1A8F7CE5B9B7589EEFF0A134A6857647830
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 c92b043136c910e0e28f6d9d51cdb5034a5600dda736fe160fd52317eb954142
MD5 de7c20fcbfd2360644c9605153867bb2
SHA1 d6d73512e7a642b0e07d80116542f03fc67eb9ff
SHA512 eab793af1c2894651827496e83ad14339944f09e3f012506f4ef0122ea097138773c204d5ec2af67e4b92da6f10781aaa504e428d9621e4822e0a1a65e778702
SSDEEP 1536:eGz3SP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNM:fY++J3qUQm08KMWF0bFTcVHr6zD
TLSH
T14F9312B9991E7D75636AC6D690079DAC8CE3DCCE1514117C30C7AB1E14BE393A30B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 109KB
SHA256 c6a1cf57abe3fd5f95a7d6b059b7dde44b3dbcf721b6269426f3f08b7fa36304
MD5 ebbbcb897c7b84f74f956bfac3cda264
SHA1 1f97a7b969ac5fb423acb5063ffb11171c64baa8
SHA512 2247f5cd1155d91d2edc8d19c8444bd0cb3dc5070490e9b52c4a2ea58bddb3ec62af06a4fcf86882e8bb1de22668a4a0baeef4c7146d647d7c619db88306787e
SSDEEP 3072:zQclh8kogWsVPlSH6pAF3SMwooRHXBOoWQ:zQs9pWsVtyF3nw2Q
TLSH
T1B1B312336DBD2C435CADB14534A3460F8EA1A8F7D99B8BB186DEEF0D134A6857647430
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 110KB
SHA256 7038df4fc629738b20b0256b7b50f02de89d4186d5fece0a41caecfb57a945a0
MD5 3bbd6d08985fd31a39501390512a5352
SHA1 8b192762246c2a5645079e1a508a0baaf31fe04d
SHA512 57572d0d39e32a2ee768ebddcde230607d0c06536af1fc312b7c5e9198778194e9fd270ea1dc4cb61364300667a2f3fa8c0337deb4a69526324f50b52af4b16a
SSDEEP 3072:OASclh8kogWsVPlSH6pAF3SMwooRHXBOoWQ:OASs9pWsVtyF3nw2Q
TLSH
T16AB302336CBD28835CADB1853493460F8DD1A8F7CE5B9B7589DEFF0A134A6857646830
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 110KB
SHA256 faa7a609eadd3c25e6984d5a1734dbf1b52339799331250234a85533588c03ee
MD5 eeb14ff1b3c1ec5201494065e1e5a5b2
SHA1 f99c7584e8c3752537a73fa7d00d087644f40d5e
SHA512 3e46861d506b2195c5900f7ade2864a442666c8fcc8d8b017d267d020e2452c1638ebf906a9ecaa7cb3328fbb95b883eb202976581efc15fec6923df7322c8ad
SSDEEP 3072:FASclh8kogWsVPlSH6pAF3SMwooRHXBOoWQ:FASs9pWsVtyF3nw2Q
TLSH
T17DB302336CBD28835CADB1853493460F8DD1A8F7CE5B9B7589DEFF0A134A6857646830
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 194KB
SHA256 ba7f6054847e63747ded6ff0b45380f4c93c84ce03cad81dff0a97fe868e9f81
MD5 792aefd9ea595eaa557046ab304741dd
SHA1 dd9fc81d78c9830e79ca6456b1fa91fd62e544a3
SHA512 f71b305818670df507f4dd50b1b31f66cfa3b4b12b6690ac372e2c6d11ab0778eb675b2974d38bf989f3ff4f8b45811980518f9a924d54911946b02a6e4c8666
SSDEEP 3072:Y8clh8kogWsVPlSH6pAF3SMwooRHXBOoWd++J3qUQm08KMWF0bFTcVHr6z3:Y8s9pWsVtyF3nw2d++JjcMW2VcVLw
TLSH
T1E21412776D3E7C66669EF29560138D1D8DD39CEFC51A467821CBEF0E225A342B24B830
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\first_party_sets.db
Size 48KB
SHA256 0c2a7d9a05ecc2cc77765a0a5d71529f2237755fe60ac3d742d6c07805f80d14
MD5 e045e65cd8ef3d083617318874fb79ea
SHA1 c2fa643f68ddf8df9e99d41cecc7525e5a2c08c3
SHA512 23c380211a66716c26bb85d47c8d82531cd1ed92636bb91e281a4abb9e2e2123967e8b4761d830c99c8fabdd7d6e7526165d78111e0ffae97194ce7a1195dcb6
SSDEEP 24:TL74/arHRH34kQrq+i7ZYZY5J+Qnj3k0rJXAeL3mkAD6W6Ivrr6UwgfL:TY/IHRH34kWqB1kQnjhHmr6ITmU9L
TLSH
T1C223886EDA2CB9A1FEE40B3DD7D1D0127735AA0EC2E4D9F1099B406746C540405EB63E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d696d521de238c3.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Size 12KB
SHA256 08a766528b599b47aaf33afabaa1de913656da6a793f6ac387414f800f31ca99
MD5 9af966e1b1dabb849f60f284e68d8ccf
SHA1 c8ca722414b738f98b346f145c93195037947d00
SHA512 ad9d0cbe20dc42057a456b78d61effa386e112befe147d53d91c45d879ce7e0b5fbfab09dfd4b0c93bdd3918b22b94ee15a6befdb623c3413c958b8962f617f2
SSDEEP 192:ByJptBDPgtIDQsRBStxDQsXtxDOtEDCtKDZtn:ByJpt9ot69BSttDttOtOCt8Ztn
TLSH
T1D452B95467FA2625F2F39A36AAF673115F7EF8428709DD5D42D1430C08B2A04A9ACF37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d696d521de238c3.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Size 13KB
SHA256 d1c847e810b1bb45ef341cd3ee70f37518f1839de10961951ce29cdb94d857b9
MD5 d17a6130ee196b4eb9660f298d855041
SHA1 9ac28779fb3893d19b1b1bb73a6e3a11f1b35f6c
SHA512 5118fb68b8840b532b68b6a64a2d37f002ba27ce2a00a648b69ea5561b40a8d8da07ceec1d38b60cd66d23e992cbe46cd82c977cfc24ff361735c988573cc22b
SSDEEP 192:pDyJptODPgtzDQsXteDQsXteDQsXt/DCtpDZtn:FyJptYotHDtoDtoDtbCtFZtn
TLSH
T11C52B954B7FA2525F2F39A76AAF673115F7DF8428708DD1E429143090872A04ADACF3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2448-0-0x0000000003370000-0x000000000344A000-memory.dmp

Download

memory/5108-143-0x00000000032F0000-0x00000000033CA000-memory.dmp

Download

memory/5108-145-0x00000000032F0000-0x00000000033CA000-memory.dmp

Download

memory/5108-1-0x00000000032F0000-0x00000000033CA000-memory.dmp

Download