Overview

overview

8

Static

static

1

Presentation.pdf

windows10-2004-x64

8

Presentation.pdf

windows11-21h2-x64

3

Analysis

  • user interaction
    yes
  • max time kernel
    1799s
  • max time network
    1131s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    20/04/2026, 18:13

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Presentation.pdf
  • Size 92KB
  • Sample260420-wt4twsdv4y
  • SHA256 4400fd47b3b306fc9a2ed428bf491d367f4924e67ec91bdca2820a282cfb2fa6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoveryspywaretrojan

Malware Config

Signatures

  • Downloads MZ/PE file 3 IoCs
  • Executes dropped EXE 13 IoCs
  • Loads dropped DLL 5 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks whether UAC is enabled 1 TTPs 2 IoCs
    defense_evasiontrojan
  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Suspicious use of NtSetInformationThreadHideFromDebugger 15 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 12 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 6 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 15 IoCs
  • Modifies Internet Explorer settings 1 TTPs 13 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 21 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 23 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Presentation.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Checks processor information in registry
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4340
    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
      "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:2960
      • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
        "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=E2D3209D075E466709FBAE17B824B71B --mojo-platform-channel-handle=1740 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
        3⤵
        • System Location Discovery: System Language Discovery
        PID:4896
      • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
        "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=5D0FE0CC8F4AA7670E6FEC787A37DF4E --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=5D0FE0CC8F4AA7670E6FEC787A37DF4E --renderer-client-id=2 --mojo-platform-channel-handle=1752 --allow-no-sandbox-job /prefetch:1
        3⤵
        • System Location Discovery: System Language Discovery
        PID:576
      • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
        "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=69793AE4B4BB0C1FFAF6766EA1ED7C2C --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=69793AE4B4BB0C1FFAF6766EA1ED7C2C --renderer-client-id=4 --mojo-platform-channel-handle=2300 --allow-no-sandbox-job /prefetch:1
        3⤵
        • System Location Discovery: System Language Discovery
        PID:4520
      • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
        "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=B90D1205C718DF94EC6F639ABA103F2C --mojo-platform-channel-handle=2432 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
        3⤵
        • System Location Discovery: System Language Discovery
        PID:2968
      • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
        "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=3CA63BB5999247CB09440DB6D0AC5D34 --mojo-platform-channel-handle=2688 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
        3⤵
        • System Location Discovery: System Language Discovery
        PID:740
  • C:\Windows\System32\CompPkgSrv.exe
    C:\Windows\System32\CompPkgSrv.exe -Embedding
    1⤵
      PID:3084
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Checks processor information in registry
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:4664
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7fffe971c728,0x7fffe971c734,0x7fffe971c740
        2⤵
          PID:116
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1756,i,632490657880594924,15712068901259332382,262144 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1900 /prefetch:2
          2⤵
            PID:3788
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1844,i,11869114809654797885,5755994839416503721,524288 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2312 /prefetch:3
            2⤵
            • Downloads MZ/PE file
            • System Time Discovery
            PID:860
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2416,i,311887257014696968,14600316984919980139,524288 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2588 /prefetch:8
            2⤵
              PID:2884
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3220,i,4599430609924625746,3995705551131603249,2097152 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3228 /prefetch:1
              2⤵
                PID:5092
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3108,i,373230301524129044,3540761200820753862,2097152 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3212 /prefetch:1
                2⤵
                  PID:3300
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4440,i,2499945861767477285,12589678939073121514,2097152 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4452 /prefetch:2
                  2⤵
                    PID:4336
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4724,i,6835923628389394175,15522063349419099001,2097152 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4728 /prefetch:1
                    2⤵
                      PID:2580
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5524,i,6574447074101561653,3689870287651880882,524288 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5540 /prefetch:8
                      2⤵
                        PID:4396
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5864,i,3799503634467413351,759404331814859233,2097152 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5908 /prefetch:1
                        2⤵
                          PID:4656
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4860,i,6920703443451477459,10865433747780536861,2097152 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5852 /prefetch:1
                          2⤵
                            PID:544
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3348,i,2484221198487490828,7918022211658636738,524288 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4408 /prefetch:8
                            2⤵
                              PID:4500
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3372,i,4510375534961394058,12258159387887355565,524288 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=240 /prefetch:8
                              2⤵
                                PID:2264
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4728,i,4189022281688830283,1364301505056741420,524288 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4848 /prefetch:8
                                2⤵
                                  PID:2004
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5944,i,17050102624689976684,5074567326847165847,524288 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3220 /prefetch:8
                                  2⤵
                                    PID:4036
                                  • C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe
                                    "C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe"
                                    2⤵
                                    • Executes dropped EXE
                                    • Checks whether UAC is enabled
                                    • Drops file in Program Files directory
                                    • System Location Discovery: System Language Discovery
                                    • Enumerates system info in registry
                                    • Modifies Internet Explorer settings
                                    • Modifies registry class
                                    • Suspicious behavior: EnumeratesProcesses
                                    • Suspicious use of WriteProcessMemory
                                    PID:4640
                                    • C:\Program Files (x86)\Roblox\Versions\version-9d412f44a6fe4081\RobloxPlayerBeta.exe
                                      "C:\Program Files (x86)\Roblox\Versions\version-9d412f44a6fe4081\RobloxPlayerBeta.exe" -app -installerLaunchTimeEpochMs 0 -clientLaunchTimeEpochMs 0 -isInstallerLaunch 4640
                                      3⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • Suspicious use of NtSetInformationThreadHideFromDebugger
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:740
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=3236,i,7357821368631828060,5445155059465541918,2097152 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3108 /prefetch:1
                                    2⤵
                                      PID:3372
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5416,i,12763978331605040274,7501280922287208545,2097152 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6056 /prefetch:1
                                      2⤵
                                        PID:4336
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6116,i,7077251339117747782,1059290431135319926,2097152 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5772 /prefetch:1
                                        2⤵
                                          PID:4572
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5908,i,15359140683059750235,3798592911822437904,2097152 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4728 /prefetch:1
                                          2⤵
                                            PID:3584
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=3400,i,4536800594613072653,17752769947552388896,2097152 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5520 /prefetch:1
                                            2⤵
                                              PID:2360
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6432,i,10653151176369546210,1132377681416102383,2097152 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6480 /prefetch:1
                                              2⤵
                                                PID:4996
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6396,i,6856287388206504927,950970997241588862,524288 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6108 /prefetch:8
                                                2⤵
                                                  PID:4648
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6336,i,4903369351088682176,3304989455821328160,524288 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6620 /prefetch:8
                                                  2⤵
                                                  • Modifies registry class
                                                  PID:2028
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6760,i,14552043444947970039,4432791119063153025,524288 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6700 /prefetch:8
                                                  2⤵
                                                    PID:4616
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6804,i,799779885300141778,9380824909757199332,262144 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3440 /prefetch:8
                                                    2⤵
                                                    • Suspicious behavior: EnumeratesProcesses
                                                    PID:4196
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=3236,i,10928055144348305472,2095696939918069151,2097152 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3220 /prefetch:1
                                                    2⤵
                                                      PID:576
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=5956,i,14838006947591496037,12843606771470237784,2097152 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4672 /prefetch:1
                                                      2⤵
                                                        PID:460
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6856,i,1698751638778855860,11383916045396432212,524288 --field-trial-handle=1904,i,1165886431910469807,14841541793618195829,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6820 /prefetch:8
                                                        2⤵
                                                          PID:4660
                                                        • C:\Users\Admin\Downloads\bad_apple.exe
                                                          "C:\Users\Admin\Downloads\bad_apple.exe"
                                                          2⤵
                                                          • Executes dropped EXE
                                                          PID:4432
                                                      • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                        "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                        1⤵
                                                          PID:1152
                                                        • C:\Windows\system32\svchost.exe
                                                          C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                          1⤵
                                                            PID:3264
                                                          • C:\Program Files (x86)\Roblox\Versions\version-9d412f44a6fe4081\RobloxPlayerBeta.exe
                                                            "C:\Program Files (x86)\Roblox\Versions\version-9d412f44a6fe4081\RobloxPlayerBeta.exe"
                                                            1⤵
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                            • Suspicious behavior: EnumeratesProcesses
                                                            PID:3920
                                                          • C:\Windows\System32\rundll32.exe
                                                            C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                            1⤵
                                                              PID:2704
                                                            • C:\Users\Admin\Downloads\bad_apple.exe
                                                              "C:\Users\Admin\Downloads\bad_apple.exe"
                                                              1⤵
                                                              • Executes dropped EXE
                                                              PID:4432
                                                            • C:\Users\Admin\Downloads\bad_apple.exe
                                                              "C:\Users\Admin\Downloads\bad_apple.exe"
                                                              1⤵
                                                              • Executes dropped EXE
                                                              PID:2236
                                                            • C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe
                                                              "C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe"
                                                              1⤵
                                                              • Executes dropped EXE
                                                              • Checks whether UAC is enabled
                                                              • System Location Discovery: System Language Discovery
                                                              • Enumerates system info in registry
                                                              • Modifies Internet Explorer settings
                                                              • Modifies registry class
                                                              • Suspicious behavior: EnumeratesProcesses
                                                              • Suspicious use of WriteProcessMemory
                                                              PID:1376
                                                              • C:\Program Files (x86)\Roblox\Versions\version-9d412f44a6fe4081\RobloxPlayerBeta.exe
                                                                "C:\Program Files (x86)\Roblox\Versions\version-9d412f44a6fe4081\RobloxPlayerBeta.exe" -app -installerLaunchTimeEpochMs 0 -clientLaunchTimeEpochMs 0 -isInstallerLaunch 1376
                                                                2⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                • Suspicious behavior: EnumeratesProcesses
                                                                PID:3724
                                                            • C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe
                                                              "C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe"
                                                              1⤵
                                                              • Executes dropped EXE
                                                              • System Location Discovery: System Language Discovery
                                                              • Enumerates system info in registry
                                                              PID:2824
                                                            • C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe
                                                              "C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe"
                                                              1⤵
                                                              • Executes dropped EXE
                                                              • System Location Discovery: System Language Discovery
                                                              PID:4536
                                                            • C:\Program Files (x86)\Roblox\Versions\version-9d412f44a6fe4081\RobloxPlayerBeta.exe
                                                              "C:\Program Files (x86)\Roblox\Versions\version-9d412f44a6fe4081\RobloxPlayerBeta.exe"
                                                              1⤵
                                                              • Executes dropped EXE
                                                              • Loads dropped DLL
                                                              • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                              • Suspicious behavior: EnumeratesProcesses
                                                              PID:4308
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                              1⤵
                                                              • Checks processor information in registry
                                                              • Enumerates system info in registry
                                                              • Modifies data under HKEY_USERS
                                                              • Modifies registry class
                                                              • Suspicious behavior: EnumeratesProcesses
                                                              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                              • Suspicious use of SendNotifyMessage
                                                              • Suspicious use of WriteProcessMemory
                                                              PID:220
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7fffe971c728,0x7fffe971c734,0x7fffe971c740
                                                                2⤵
                                                                  PID:4504
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1948,i,5883822176729905470,571735278586484667,524288 --field-trial-handle=2152,i,2599052467342988675,5037083847476326054,262144 --variations-seed-version=20260420-090104.753000-production --mojo-platform-channel-handle=2180 /prefetch:3
                                                                  2⤵
                                                                  • Downloads MZ/PE file
                                                                  • System Time Discovery
                                                                  PID:3052
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1648,i,2188954047133353787,18193786417180211876,262144 --field-trial-handle=2152,i,2599052467342988675,5037083847476326054,262144 --variations-seed-version=20260420-090104.753000-production --mojo-platform-channel-handle=2148 /prefetch:2
                                                                  2⤵
                                                                    PID:4716
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2356,i,11906053652673123411,15716810179639362806,524288 --field-trial-handle=2152,i,2599052467342988675,5037083847476326054,262144 --variations-seed-version=20260420-090104.753000-production --mojo-platform-channel-handle=2544 /prefetch:8
                                                                    2⤵
                                                                      PID:4344
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3212,i,16105274790478394074,4775884100144690340,2097152 --field-trial-handle=2152,i,2599052467342988675,5037083847476326054,262144 --variations-seed-version=20260420-090104.753000-production --mojo-platform-channel-handle=3232 /prefetch:1
                                                                      2⤵
                                                                        PID:1644
                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3216,i,2981027688031698433,17249612700880021665,2097152 --field-trial-handle=2152,i,2599052467342988675,5037083847476326054,262144 --variations-seed-version=20260420-090104.753000-production --mojo-platform-channel-handle=3276 /prefetch:1
                                                                        2⤵
                                                                          PID:3008
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4560,i,2957826981747157145,1720573584670141014,2097152 --field-trial-handle=2152,i,2599052467342988675,5037083847476326054,262144 --variations-seed-version=20260420-090104.753000-production --mojo-platform-channel-handle=4540 /prefetch:1
                                                                          2⤵
                                                                            PID:2424
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=5136,i,16083617672327173884,5585774532531610245,2097152 --field-trial-handle=2152,i,2599052467342988675,5037083847476326054,262144 --variations-seed-version=20260420-090104.753000-production --mojo-platform-channel-handle=5144 /prefetch:1
                                                                            2⤵
                                                                              PID:4484
                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3484,i,11102287242543762849,1969332124540095558,2097152 --field-trial-handle=2152,i,2599052467342988675,5037083847476326054,262144 --variations-seed-version=20260420-090104.753000-production --mojo-platform-channel-handle=3248 /prefetch:1
                                                                              2⤵
                                                                                PID:2708
                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3376,i,6560865003104596394,11684872457254233815,524288 --field-trial-handle=2152,i,2599052467342988675,5037083847476326054,262144 --variations-seed-version=20260420-090104.753000-production --mojo-platform-channel-handle=3396 /prefetch:8
                                                                                2⤵
                                                                                • Modifies registry class
                                                                                PID:3016
                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3368,i,13554827139093872937,8347950409081346523,524288 --field-trial-handle=2152,i,2599052467342988675,5037083847476326054,262144 --variations-seed-version=20260420-090104.753000-production --mojo-platform-channel-handle=3252 /prefetch:8
                                                                                2⤵
                                                                                  PID:3792
                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5984,i,745614963130376333,15776230544930530023,524288 --field-trial-handle=2152,i,2599052467342988675,5037083847476326054,262144 --variations-seed-version=20260420-090104.753000-production --mojo-platform-channel-handle=5988 /prefetch:8
                                                                                  2⤵
                                                                                    PID:3496
                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5988,i,14233307940247443180,13422890074471723581,2097152 --field-trial-handle=2152,i,2599052467342988675,5037083847476326054,262144 --variations-seed-version=20260420-090104.753000-production --mojo-platform-channel-handle=5984 /prefetch:1
                                                                                    2⤵
                                                                                      PID:5036
                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6104,i,15793111155063654498,5032307921123950460,524288 --field-trial-handle=2152,i,2599052467342988675,5037083847476326054,262144 --variations-seed-version=20260420-090104.753000-production --mojo-platform-channel-handle=4820 /prefetch:8
                                                                                      2⤵
                                                                                        PID:3508
                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5048,i,1669190246916600097,17235477450519075775,524288 --field-trial-handle=2152,i,2599052467342988675,5037083847476326054,262144 --variations-seed-version=20260420-090104.753000-production --mojo-platform-channel-handle=6128 /prefetch:8
                                                                                        2⤵
                                                                                          PID:3756
                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6068,i,4785106445774553425,860157192128169604,524288 --field-trial-handle=2152,i,2599052467342988675,5037083847476326054,262144 --variations-seed-version=20260420-090104.753000-production --mojo-platform-channel-handle=208 /prefetch:8
                                                                                          2⤵
                                                                                            PID:4040
                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4916,i,12309142072470764157,10560598266781155688,524288 --field-trial-handle=2152,i,2599052467342988675,5037083847476326054,262144 --variations-seed-version=20260420-090104.753000-production --mojo-platform-channel-handle=4800 /prefetch:8
                                                                                            2⤵
                                                                                              PID:3228
                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6388,i,7298071827209144854,12090659165720404070,524288 --field-trial-handle=2152,i,2599052467342988675,5037083847476326054,262144 --variations-seed-version=20260420-090104.753000-production --mojo-platform-channel-handle=6384 /prefetch:8
                                                                                              2⤵
                                                                                                PID:908
                                                                                            • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                              "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                              1⤵
                                                                                                PID:1260
                                                                                              • C:\Windows\system32\svchost.exe
                                                                                                C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                1⤵
                                                                                                  PID:1640
                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                                                                  1⤵
                                                                                                  • Enumerates system info in registry
                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                  PID:3536
                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7fffe971c728,0x7fffe971c734,0x7fffe971c740
                                                                                                    2⤵
                                                                                                      PID:260
                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1932,i,16998848614812709272,10274096112365952934,524288 --field-trial-handle=2000,i,14112329132649831847,7218552669355883251,262144 --variations-seed-version=20260420-090104.753000-production --mojo-platform-channel-handle=2028 /prefetch:3
                                                                                                      2⤵
                                                                                                      • System Time Discovery
                                                                                                      PID:760
                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1644,i,16238658732714120933,7516729902057232696,262144 --field-trial-handle=2000,i,14112329132649831847,7218552669355883251,262144 --variations-seed-version=20260420-090104.753000-production --mojo-platform-channel-handle=1996 /prefetch:2
                                                                                                      2⤵
                                                                                                        PID:4044
                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2340,i,5985797404416779993,1433767619220498339,524288 --field-trial-handle=2000,i,14112329132649831847,7218552669355883251,262144 --variations-seed-version=20260420-090104.753000-production --mojo-platform-channel-handle=2528 /prefetch:8
                                                                                                        2⤵
                                                                                                          PID:2608
                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3188,i,7833726798380875979,1195717624898673793,2097152 --field-trial-handle=2000,i,14112329132649831847,7218552669355883251,262144 --variations-seed-version=20260420-090104.753000-production --mojo-platform-channel-handle=3192 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:4600
                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3212,i,6801127705795865657,3389476013082840223,2097152 --field-trial-handle=2000,i,14112329132649831847,7218552669355883251,262144 --variations-seed-version=20260420-090104.753000-production --mojo-platform-channel-handle=3232 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:724
                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4520,i,16739641548706577083,18003844308842681361,2097152 --field-trial-handle=2000,i,14112329132649831847,7218552669355883251,262144 --variations-seed-version=20260420-090104.753000-production --mojo-platform-channel-handle=4516 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:4072
                                                                                                            • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                                              "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                                              1⤵
                                                                                                                PID:4104
                                                                                                              • C:\Users\Admin\Downloads\solaris.exe
                                                                                                                "C:\Users\Admin\Downloads\solaris.exe"
                                                                                                                1⤵
                                                                                                                • Executes dropped EXE
                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                PID:1684
                                                                                                              • C:\Windows\system32\AUDIODG.EXE
                                                                                                                C:\Windows\system32\AUDIODG.EXE 0x414 0x300
                                                                                                                1⤵
                                                                                                                  PID:3032
                                                                                                                • C:\Program Files (x86)\Roblox\Versions\version-9d412f44a6fe4081\RobloxPlayerBeta.exe
                                                                                                                  "C:\Program Files (x86)\Roblox\Versions\version-9d412f44a6fe4081\RobloxPlayerBeta.exe"
                                                                                                                  1⤵
                                                                                                                  • Executes dropped EXE
                                                                                                                  • Loads dropped DLL
                                                                                                                  • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                  PID:4840

                                                                                                                Network

                                                                                                                      MITRE ATT&CK Enterprise v16

                                                                                                                      Replay Monitor

                                                                                                                      Loading Replay Monitor...

                                                                                                                      Downloads

                                                                                                                      RobloxStudioInstaller.exe
                                                                                                                      • Path C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe
                                                                                                                      • Size 9.5MB
                                                                                                                      • SHA256 bbf413a40c8aa3bfdf44167f12f40b12f7bf5428925ee5e628416601a4064ae4
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      RobloxPlayerBeta.dll
                                                                                                                      • Path C:\Program Files (x86)\Roblox\Versions\version-9d412f44a6fe4081\RobloxPlayerBeta.dll
                                                                                                                      • Size 15.5MB
                                                                                                                      • SHA256 80e1c990de61dc21b61a9c3f978236bfe1266cd0cc09af4673f9d73d91b3d8c3
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      352a00f2-997e-44e9-a0fe-048bf10e13d3.tmp
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\352a00f2-997e-44e9-a0fe-048bf10e13d3.tmp
                                                                                                                      • Size 193KB
                                                                                                                      • SHA256 3fd75a6e2ab579c9ad84200e166d787cf3de05be16bcb36ced63c11fbc4b512f
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      settings.dat
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                                                                                                      • Size 40B
                                                                                                                      • SHA256 4fd5d530ed140946270170fdf7d661512728c262868b84d775fc44f4fbe643cc
                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                      Submit Download

                                                                                                                      BookmarkMergedSurfaceOrdering
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                      • Size 6B
                                                                                                                      • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                      Submit Download

                                                                                                                      BrowsingTopicsState
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                                                      • Size 414B
                                                                                                                      • SHA256 2342361316a0650b2b180fef601caa34d870051649935fa3434ce36d725c421c
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      f_00002e
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002e
                                                                                                                      • Size 361KB
                                                                                                                      • SHA256 02ff49f4431a46d64078b37db37186bd2f8c65655c9a81086ff174ead4486a18
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      f_000048
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000048
                                                                                                                      • Size 56KB
                                                                                                                      • SHA256 f4e4e2448284cfd2e90dbf3ad7eea682202e327c7f994c290e1a657ad8222377
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      f_000049
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000049
                                                                                                                      • Size 659KB
                                                                                                                      • SHA256 84d6300fb078bbce9f24906248f993455fcb039f326d9c1860c43a40701aff31
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      f_00004a
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004a
                                                                                                                      • Size 23KB
                                                                                                                      • SHA256 20f87157462aca1026d22d284eab7ac66a568fd4370361265235e6eca1360f40
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      f_00004b
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004b
                                                                                                                      • Size 34KB
                                                                                                                      • SHA256 030e6384bd1edde4adf0f228e59f131dcbaab17577fcdcd3616b0d1c027c8ef7
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      temp-index
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 7122b08c30bbb2f0cf551d95f1260b580d3141b3cfc5a9002d6b37f9888aa8e3
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      the-real-index
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 c713ea99a28ffe8218882441d47ff5e3566dc52fde21ccc8a51c610a3082af0a
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      the-real-index
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 3911e1483e459ee4671faefdc669340761a8a0b928212d0ce765cf88fa4823c1
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      the-real-index
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                      • Size 7KB
                                                                                                                      • SHA256 c67fa53fa4aa7abbedeac6f889bc1758654778a4aaf79af862809f88f68e4078
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      000014.ldb
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000014.ldb
                                                                                                                      • Size 17KB
                                                                                                                      • SHA256 b3f4075e9369adcb49c194122bbc2a0d80f3a33966670b2ffb0b6bd38f6d41e0
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      000015.log
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000015.log
                                                                                                                      • Size 44KB
                                                                                                                      • SHA256 08ef4d79e7a1c2b48c2707994a43c0109322dda568cd3b07a83e25dc6ad85de1
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      000016.ldb
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000016.ldb
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 936f41a86a8728f506836062dc23b04253fcdadbc6669fecb3ba387b2d2dfc5f
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      000017.ldb
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000017.ldb
                                                                                                                      • Size 12KB
                                                                                                                      • SHA256 99f878be0dd7874bffdd61e16d5c7d79976b715894808ff39d978634883b20a9
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      CURRENT
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT
                                                                                                                      • Size 16B
                                                                                                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                      Submit Download

                                                                                                                      LOG
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
                                                                                                                      • Size 5KB
                                                                                                                      • SHA256 f152bc62f6968f9a0cd23bc94357978e79c2a2ada78d9151f43521fee14b2389
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      MANIFEST-000001
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 51c2b8f9633ec650ad43fb4e47c8422f767794df853912de3d33bee616d2da9a
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      MANIFEST-000001
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                      • Size 23B
                                                                                                                      • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                      Submit Download

                                                                                                                      Network Persistent State
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                      • Size 18KB
                                                                                                                      • SHA256 94f62ccd703b089e84bcb205bc12f1aa6f1ae5363b1fafbd870f2e5b4c4780d4
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      Network Persistent State
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                      • Size 4KB
                                                                                                                      • SHA256 6add497a535c17de31078ee52caac7453de5542079c9bf4c439c79f0b188751f
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      SCT Auditing Pending Reports
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                      • Size 2B
                                                                                                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                      Submit Download

                                                                                                                      TransportSecurity
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 c565e1ec854c0e28dacd09c69102214b5f5e43643b168c7ba3a0597643a88a06
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      TransportSecurity
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 36d87b8e2d11cbaf2c3bbb2159655667414e39408288f68f2941ecab2ea6e1e9
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      TransportSecurity
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 291c961e8f0b148ee92703eaea866aac087bda38eabac5c26d39fbca5ec00fc2
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      Preferences
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                      • Size 12KB
                                                                                                                      • SHA256 6905a1882b5ba87d41a7409a23a0765b17054cd34fbf0724c29afb0bef821a49
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      Preferences
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                      • Size 14KB
                                                                                                                      • SHA256 d698f0333fdfa39a263e63143aaf06b82faeaa416f52e4da5942bba9410c5b76
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      Preferences
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                      • Size 12KB
                                                                                                                      • SHA256 d92015b36836a16cc7e5c98b1ccf14dd8fe6e0b7c4f3ecd0806ce04c45f28882
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      Preferences
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                      • Size 13KB
                                                                                                                      • SHA256 dd4f0a829953de3fe6c95029e3b6fe5388d3372af771c7b776b224c8c21f0e96
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      Preferences
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                      • Size 13KB
                                                                                                                      • SHA256 21c2471f9e6dcb4a7ca187ab311afcf8d947221bd96617865d9666236d5173bc
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      Preferences
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                      • Size 15KB
                                                                                                                      • SHA256 5a613e20e8584c54c5efabd273fed789bc061694cbe8f850f3463223fca8a013
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      Preferences
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                      • Size 16KB
                                                                                                                      • SHA256 312f869fb78c9198e4b2979b9297e6555e6c549fc3179572ad89ecb1a3a6609f
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      Preferences
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                      • Size 16KB
                                                                                                                      • SHA256 90e117d6504d939374bec56140bf2499f5612717c9a2c4058ae8d9648dca7ebb
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      Preferences
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                      • Size 16KB
                                                                                                                      • SHA256 cc6f3008068855697c00e77013ba00dcd161c9c156eecb2d03ccb81905fb28ef
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      Preferences
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                      • Size 15KB
                                                                                                                      • SHA256 8ccee243c161a28a588b46b076a937a0bafa3f912ee6a2701538e3cb892f2e24
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      Preferences
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                      • Size 15KB
                                                                                                                      • SHA256 9fd6a9aa84e6a9331de622a190f853c0d9e87cd698b5d1aa58cc7b04e24eb4e8
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      Preferences
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                      • Size 16KB
                                                                                                                      • SHA256 70a173b628b1ac5ba546497e04a5da3750759dcf8ce63b444564b23bae0372c8
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      Preferences
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                      • Size 16KB
                                                                                                                      • SHA256 cb7816c543027f7eadd23c633c9d8204aa167870db8f0fc8e82b518f626b179e
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      Preferences
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                      • Size 15KB
                                                                                                                      • SHA256 3ac06da66a19bb93ac88cab34b2cd107d7c61b42cf1a7f6f9417b5377f08adf0
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      Preferences
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                      • Size 17KB
                                                                                                                      • SHA256 d51e0e654a1fa77833d86830af5cc57263b51ec094d593a40d946990c06168da
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      Secure Preferences
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                      • Size 17KB
                                                                                                                      • SHA256 9c430f8c17feb865c008f25efcb04058f5ca91ec3e589c4f1ad8c3f157cbd990
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      the-real-index
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\282fe5c7-b577-4aa6-b81c-cda02190fb93\index-dir\the-real-index
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 ba4c29fcb522ae187b89d093e05a56bb87801db7e1dbfd994ef41adff07cb2b3
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      the-real-index
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\282fe5c7-b577-4aa6-b81c-cda02190fb93\index-dir\the-real-index
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 4527409c8ffe35b6d00465645c6a26595bd419a59e206c996b498458970fb431
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      the-real-index~RFe5a0e2a.TMP
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\282fe5c7-b577-4aa6-b81c-cda02190fb93\index-dir\the-real-index~RFe5a0e2a.TMP
                                                                                                                      • Size 48B
                                                                                                                      • SHA256 997ae2214aab7435d25d898f773db83bc56859dfa18c7ad0bae41ceb7e73fbaa
                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                      Submit Download

                                                                                                                      index
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\b97b1100-7632-49fa-ac9b-58683cab8112\index
                                                                                                                      • Size 24B
                                                                                                                      • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                      Submit Download

                                                                                                                      the-real-index
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\b97b1100-7632-49fa-ac9b-58683cab8112\index-dir\the-real-index
                                                                                                                      • Size 576B
                                                                                                                      • SHA256 82dddac617d58ce76947a189195b89f835ba5a1cc3309d22b826edeb4c68f887
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      the-real-index
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\b97b1100-7632-49fa-ac9b-58683cab8112\index-dir\the-real-index
                                                                                                                      • Size 576B
                                                                                                                      • SHA256 d48fe82c469546fd215858d4fb105dc193a7dcc60f2bc12ded89ad81b2987d32
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      the-real-index~RFe5a6bfa.TMP
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\b97b1100-7632-49fa-ac9b-58683cab8112\index-dir\the-real-index~RFe5a6bfa.TMP
                                                                                                                      • Size 48B
                                                                                                                      • SHA256 3a8febe7ca419d0fd72c94e011c59a43c17d4e06c7b35e422bf372a041b63746
                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                      Submit Download

                                                                                                                      index.txt
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                      • Size 214B
                                                                                                                      • SHA256 c3159c395e12342cf7b0da03f3c757bb1c0ff3fb79c7a698d7c22d27cbe50556
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      index.txt
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                      • Size 130B
                                                                                                                      • SHA256 5e5afed01d13c82f84d07f471cf46587f2c3a359794e95c1c815a6872797e464
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      index.txt
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                      • Size 132B
                                                                                                                      • SHA256 8f6115ba2aee0da279f460e15ea48dafcad9132daef5d60ea19a0a54355999aa
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      index.txt
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                      • Size 243B
                                                                                                                      • SHA256 b0242b7260ba1b7a66851420ae803c8306bdcabd013e5a2d9fc1ed5ae8d389b8
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      index.txt
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                      • Size 390B
                                                                                                                      • SHA256 435e4eaa5d0fa487ac37ff03a2c66626e8238024f7e97971a0629b23fb95820c
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      index.txt
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                      • Size 383B
                                                                                                                      • SHA256 0010395cd9e26db39dae30f3b166d191de4187f6f90e3c5a6206461a353cab7f
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      index.txt
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                      • Size 216B
                                                                                                                      • SHA256 ba86b678a735ff5e08830a7817940ab570bed6510db4b0484475a40ceae1539d
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      index.txt~RFe59fe1d.TMP
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe59fe1d.TMP
                                                                                                                      • Size 137B
                                                                                                                      • SHA256 244cf0c7a87c599c2240b0d09174b7236110613e02bfa6407e18ea953fc14547
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      the-real-index
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                      • Size 120B
                                                                                                                      • SHA256 be29fc741ba8c61075adbe176fc384739b3d1f300608ce78f9a98eb3aa869cab
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      the-real-index
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                      • Size 168B
                                                                                                                      • SHA256 15d5b8df40300c2294146d75c67f2e069089dc213d9e14129655b739967cc792
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      the-real-index
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                      • Size 168B
                                                                                                                      • SHA256 b2f81089778a3cebe408cb5a656e63aaa2832ee978883c39be8f4c99b516719b
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      the-real-index~RFe58a1f8.TMP
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58a1f8.TMP
                                                                                                                      • Size 96B
                                                                                                                      • SHA256 9e37f9ec97febb2683532b32469f89dd884729575a20d75c8eaf8217217897f2
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      512.png
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Shortcuts Menu Icons\0\512.png
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 e7537de88977426000cf535f51c50337339a74dcafbc57f4a8e3da6e72d6bb7f
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      512.png
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir4664_1143140170\Shortcuts Menu Icons\Monochrome\1\512.png
                                                                                                                      • Size 10KB
                                                                                                                      • SHA256 8eb2475af37471d0c8668d19cac0260cf31320b189217b01da9e937acd8f6b18
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      16.png
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir4664_1347503187\Icons Monochrome\16.png
                                                                                                                      • Size 257B
                                                                                                                      • SHA256 d52376c8b210b8003f5aed9f4555a7916b4640d4c42a36cc81d9864991c87a8b
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      index.txt
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\CacheStorage\index.txt
                                                                                                                      • Size 150B
                                                                                                                      • SHA256 3dd90276483d1ddf97b3705462300acf14736e9b36ea4b1b5d84767001c80792
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      index.txt~RFe5c17e5.TMP
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\CacheStorage\index.txt~RFe5c17e5.TMP
                                                                                                                      • Size 157B
                                                                                                                      • SHA256 d11788a7aa7a0e3eb99cba8049b60e02f84d25bff5e89f0f0a541c6f86eb9076
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      data_1
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_1
                                                                                                                      • Size 264KB
                                                                                                                      • SHA256 6b1243844b8f92fa3e3f035332f4ffc9d5d03dfe5d81b03ba0ca0984ca73698d
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      Local State
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                      • Size 194KB
                                                                                                                      • SHA256 9b8381c04bbbd13987b0a51646fd142953ed21d66fcabb23b8963a57012f416e
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      Local State
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                      • Size 194KB
                                                                                                                      • SHA256 99f15e7f457b2548eb8dcd789aab799a50ea58d3daa5e9f3ea20acc44396e81b
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      Local State
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                      • Size 89KB
                                                                                                                      • SHA256 2642d51b26a897296aa80b6fc9b056c97e4ad17a82f0d8174a28331891052e2e
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      Local State
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                      • Size 193KB
                                                                                                                      • SHA256 08aee09629f902ab7ae2401092a01b97f83d35d07a3c1b2b74a0e211acc7155f
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      Local State
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                      • Size 194KB
                                                                                                                      • SHA256 8f440557c362490c8fae9be9e26970e67fa2d6aed4c1a8c9200011840dabb19b
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      Local State
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                      • Size 219KB
                                                                                                                      • SHA256 5821d0a930937b80a5634ed4512b9740a3e0d3c3f6309b48737d8f0ff82b1217
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      Local State
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                      • Size 162KB
                                                                                                                      • SHA256 e2089c853d79fd957559086d3334152af2c361668b62e669c5bde66fac7b3cca
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      Local State
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                      • Size 224KB
                                                                                                                      • SHA256 ae939f01b0394926876b7c658df84b777bc515ed3327c096a31baad0298413e7
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      Local State
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                      • Size 194KB
                                                                                                                      • SHA256 df391bd75adeb7652946eb3ab4fc6f1681919c542fb2c7b2d0d3c2f056a5ffb7
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      02f51286ad7d2c206e063cd5dc4cd388
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\02f51286ad7d2c206e063cd5dc4cd388
                                                                                                                      • Size 19.8MB
                                                                                                                      • SHA256 6f6c60d1d93c9a6ca6ffad7effceca3963135c15c9d9b6a3da392d54855a6b0c
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      10461fdfb35f35cca13dbe35dcf21343
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\10461fdfb35f35cca13dbe35dcf21343
                                                                                                                      • Size 3.5MB
                                                                                                                      • SHA256 73c9d9a9333623a070ccc1e5f6cf325d83f1ef9ce35c4d255b66a1733f6e6a91
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      1d0390337d1a4a58e5514be1a9481ad6
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\1d0390337d1a4a58e5514be1a9481ad6
                                                                                                                      • Size 2.3MB
                                                                                                                      • SHA256 c79f0eeb2bca4905c585c50333db3c6f727a554f5db82e64948f93668fbc18aa
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      480479a41ac64f725d6c3415ae3b8116
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\480479a41ac64f725d6c3415ae3b8116
                                                                                                                      • Size 775KB
                                                                                                                      • SHA256 f42821a9b6647d7a185b12a9256931599a7986d1a54ba16437cff21235be2384
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      558cc86017b96984705bf0afd6aae502
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\558cc86017b96984705bf0afd6aae502
                                                                                                                      • Size 12.0MB
                                                                                                                      • SHA256 afb42ea9b524fbb87fe9bf175d34652d0b9f099b64ff83010d2c4f1644538593
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      568db50f7c97e2759a6501ae7dfc9fc9
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\568db50f7c97e2759a6501ae7dfc9fc9
                                                                                                                      • Size 127KB
                                                                                                                      • SHA256 c8b1b642274da2790a8c6c2d09361d17edb9701d30a54f429e275b8bb36f36f6
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      82bc6b24b20dc8539914bd2b6e4fc241
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\82bc6b24b20dc8539914bd2b6e4fc241
                                                                                                                      • Size 273KB
                                                                                                                      • SHA256 8e7e41ab1300471116fca3acd613297b9f5536498489166cb23082f94617f454
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      890d44a898aceee375934726854337dc
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\890d44a898aceee375934726854337dc
                                                                                                                      • Size 81KB
                                                                                                                      • SHA256 ccbcd8c9d72282c9f447035310af151b4a4bf42dd93b6bb5f50b4f274a0e37cc
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      8cd0147e8c95ea0d033ee8753934b7e7
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\8cd0147e8c95ea0d033ee8753934b7e7
                                                                                                                      • Size 352KB
                                                                                                                      • SHA256 c95abab93d686533612248c9e1722d3e7a4973beb288656e64a4937bfe7aea44
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      8f379ec2b22ff106b837d79f7fdbf0d8
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\8f379ec2b22ff106b837d79f7fdbf0d8
                                                                                                                      • Size 13.1MB
                                                                                                                      • SHA256 6620658a6288e6b58b8d86aaef4e7734e10778974e9a01d364fc7aac4d35f10b
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      97327884177381d0f42d428110b4c516
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\97327884177381d0f42d428110b4c516
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 b8d4802f5c25d188268bf6a3a1c72a00d56a7b3f7fe64bb7f5fc4d6e8f6b8a28
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      9fd48e078caade1dd3f491bfa6bf22cc
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\9fd48e078caade1dd3f491bfa6bf22cc
                                                                                                                      • Size 3.0MB
                                                                                                                      • SHA256 cd5b05c44a54d53e3af1bce00172a95dbf26102e2851caf16e5d6ba50dcdb19a
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      b64ef36b8ebc216e50a51a32b669f9cf
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\b64ef36b8ebc216e50a51a32b669f9cf
                                                                                                                      • Size 6.2MB
                                                                                                                      • SHA256 a1176fe3fda96dd3aaa86ab5087fb6b950758f06cb0793e8fc5d9071ccea0b3d
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      c8276fda63ae903c0ce46407e88feaf7
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\c8276fda63ae903c0ce46407e88feaf7
                                                                                                                      • Size 287KB
                                                                                                                      • SHA256 65d5fcd279cfe17f1deb4c0a5a3354cfdf9eade28e37307617b751c945bfb955
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      c9337cd8b2ac38fc3c0d4df61a357ce0
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\c9337cd8b2ac38fc3c0d4df61a357ce0
                                                                                                                      • Size 5.7MB
                                                                                                                      • SHA256 1fdcfb4be1954900413226e59344bd316c509c8e81cb71af2c32bf019520a051
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      d3176abd001161c78b80319a08ab2d64
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\d3176abd001161c78b80319a08ab2d64
                                                                                                                      • Size 4.9MB
                                                                                                                      • SHA256 4219391c7be1ff8731f901b808a606fbdf6fdf1be8d97595d793de231e1d2369
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      eb9dd4d0637fd6ae21747e6b6a281d21
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\eb9dd4d0637fd6ae21747e6b6a281d21
                                                                                                                      • Size 459KB
                                                                                                                      • SHA256 5a3aae5657899b6452004f3f43f122cb6c166c99b7261efbeb965da906626ed8
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      f14a117a6724a150578518e88062eda7
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\f14a117a6724a150578518e88062eda7
                                                                                                                      • Size 596KB
                                                                                                                      • SHA256 bbe3617d0cad50797dc4524b4d8331a81bb27fe7ed781f3d10ebf2122dfdfda5
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      fbb0ce7a795cad22ef0c116ae89f13d4
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\fbb0ce7a795cad22ef0c116ae89f13d4
                                                                                                                      • Size 433KB
                                                                                                                      • SHA256 7041752f10d5275ef1021afa12523aa9f5e534c0a2ff87d6921c1f70cc68b534
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      cacert.pem
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\logs\cacert.pem
                                                                                                                      • Size 223KB
                                                                                                                      • SHA256 2eba303a7b3c87f0c52fa8f977b703ec6dea7de703f97644546d2d34e53e4cd9
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      8913724486d5e3c463c493b25346ca31
                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\Roblox\http\8913724486d5e3c463c493b25346ca31
                                                                                                                      • Size 64B
                                                                                                                      • SHA256 9347926e73c8e6c53cf76f5ec31f2c00e6ad2f046e725c39f42b8bf35e485b4c
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      Unconfirmed 333265.crdownload
                                                                                                                      • Path C:\Users\Admin\Downloads\Unconfirmed 333265.crdownload
                                                                                                                      • Size 4.8MB
                                                                                                                      • SHA256 6927cb7245652a3b66f1a4517189c7cd08056875e09e267a29fe13f1d3bd4d1d
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      Unconfirmed 92901.crdownload
                                                                                                                      • Path C:\Users\Admin\Downloads\Unconfirmed 92901.crdownload
                                                                                                                      • Size 9.5MB
                                                                                                                      • SHA256 2979db026346f0652c943e169ab0b944829a3cf2311b97456f3a15a2d6b7e402
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      solaris.exe
                                                                                                                      • Path C:\Users\Admin\Downloads\solaris.exe
                                                                                                                      • Size 1.5MB
                                                                                                                      • SHA256 52846c2d5aaf4d98900ec8cbbe3a75fd1db7e53ce4caaddb1f35c5adbecd1264
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      memory/576-23-0x0000000001A10000-0x0000000001A73000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/740-22-0x0000000001FB0000-0x0000000002013000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/740-489-0x000002542A8D0000-0x000002542A8DC000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/1376-1644-0x0000000003E40000-0x0000000003EC7000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/1376-1658-0x0000000003E40000-0x0000000003EC7000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/1684-2718-0x0000000000570000-0x0000000000779000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/1684-2660-0x0000000000570000-0x0000000000779000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/1684-2659-0x0000000000570000-0x0000000000779000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/2236-1594-0x0000024057C50000-0x0000024057D1D000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/2704-1590-0x000002DEEA9F0000-0x000002DEEAABD000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/2824-1646-0x0000000003C30000-0x0000000003CB7000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/2824-1685-0x0000000003C30000-0x0000000003CB7000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/2960-28-0x0000000002350000-0x00000000023B3000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/2968-13-0x0000000001550000-0x00000000015B3000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/3032-2661-0x0000020A7E6C0000-0x0000020A7E78D000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/3724-1645-0x000001F963AE0000-0x000001F963AEC000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/3920-511-0x000001FC428C0000-0x000001FC428CC000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/4308-1653-0x00000224B4F60000-0x00000224B4F6C000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/4340-29-0x0000000006D30000-0x0000000006D93000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/4432-1426-0x000001905EC80000-0x000001905ED4D000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/4432-1592-0x0000020FD65C0000-0x0000020FD668D000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/4520-24-0x0000000001A00000-0x0000000001A63000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/4536-1649-0x00000000041C0000-0x0000000004247000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/4536-1652-0x00000000041C0000-0x0000000004247000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/4640-524-0x0000000003560000-0x00000000035E7000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/4640-426-0x0000000003560000-0x00000000035E7000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/4840-2664-0x0000015C567E0000-0x0000015C567EC000-memory.dmp
                                                                                                                      Download

                                                                                                                      memory/4896-6-0x0000000000A60000-0x0000000000AC3000-memory.dmp
                                                                                                                      Download