hxxps://www[.]mediafire[.]com/file/k4c8ne55ia9y7ub/OP_Forcer-3[.]215E[.]jar/file

Analysis

geolocation tags

eueuropelondonukunited-kingdom
user interaction
yes
max time kernel
899s
max time network
900s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
26/04/2026, 04:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.mediafire.com/file/k4c8ne55ia9y7ub/OP_Forcer-3.215E.jar/file
Sample260426-e2977sfv5r

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1016	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134216512846063931"	chrome.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3119821332-640943685-2562343641-1000\{A4A9AA47-D07E-46DE-8803-4AFA94F88117}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\OP_Forcer-3.215E.jar:Zone.Identifier	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4672	chrome.exe
4672	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 34 IoCs

pid	Process
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe
Token: SeShutdownPrivilege	4156	chrome.exe
Token: SeCreatePagefilePrivilege	4156	chrome.exe

Suspicious use of FindShellTrayWindow 59 IoCs

pid	Process
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe

Suspicious use of SendNotifyMessage 26 IoCs

pid	Process
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe
4156	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4156 wrote to memory of 2072	4156	chrome.exe	79
PID 4156 wrote to memory of 1016	4156	chrome.exe	80
PID 4156 wrote to memory of 2996	4156	chrome.exe	81
PID 4156 wrote to memory of 2996	4156	chrome.exe	81
PID 4156 wrote to memory of 4452	4156	chrome.exe	82
PID 4156 wrote to memory of 4452	4156	chrome.exe	82
PID 4156 wrote to memory of 2136	4156	chrome.exe	85
PID 4156 wrote to memory of 2136	4156	chrome.exe	85
PID 4156 wrote to memory of 4540	4156	chrome.exe	86
PID 4156 wrote to memory of 4540	4156	chrome.exe	86
PID 4156 wrote to memory of 1584	4156	chrome.exe	87
PID 4156 wrote to memory of 1584	4156	chrome.exe	87
PID 4156 wrote to memory of 1636	4156	chrome.exe	88
PID 4156 wrote to memory of 1636	4156	chrome.exe	88
PID 4156 wrote to memory of 3104	4156	chrome.exe	89
PID 4156 wrote to memory of 3104	4156	chrome.exe	89
PID 4156 wrote to memory of 1928	4156	chrome.exe	90
PID 4156 wrote to memory of 1928	4156	chrome.exe	90
PID 4156 wrote to memory of 1532	4156	chrome.exe	91
PID 4156 wrote to memory of 1532	4156	chrome.exe	91
PID 4156 wrote to memory of 3964	4156	chrome.exe	92
PID 4156 wrote to memory of 3964	4156	chrome.exe	92
PID 4156 wrote to memory of 2104	4156	chrome.exe	93
PID 4156 wrote to memory of 4964	4156	chrome.exe	95
PID 4156 wrote to memory of 412	4156	chrome.exe	96
PID 4156 wrote to memory of 412	4156	chrome.exe	96
PID 4156 wrote to memory of 4132	4156	chrome.exe	97
PID 4156 wrote to memory of 4132	4156	chrome.exe	97
PID 4156 wrote to memory of 4744	4156	chrome.exe	98
PID 4156 wrote to memory of 4744	4156	chrome.exe	98
PID 4156 wrote to memory of 4324	4156	chrome.exe	99
PID 4156 wrote to memory of 4324	4156	chrome.exe	99
PID 4156 wrote to memory of 2272	4156	chrome.exe	100
PID 4156 wrote to memory of 2272	4156	chrome.exe	100
PID 4156 wrote to memory of 2660	4156	chrome.exe	101
PID 4156 wrote to memory of 2660	4156	chrome.exe	101
PID 4156 wrote to memory of 4992	4156	chrome.exe	102
PID 4156 wrote to memory of 4992	4156	chrome.exe	102
PID 4156 wrote to memory of 5052	4156	chrome.exe	103
PID 4156 wrote to memory of 1780	4156	chrome.exe	104
PID 4156 wrote to memory of 4688	4156	chrome.exe	105
PID 4156 wrote to memory of 4492	4156	chrome.exe	106
PID 4156 wrote to memory of 4492	4156	chrome.exe	106
PID 4156 wrote to memory of 1440	4156	chrome.exe	107
PID 4156 wrote to memory of 1440	4156	chrome.exe	107
PID 4156 wrote to memory of 964	4156	chrome.exe	108
PID 4156 wrote to memory of 964	4156	chrome.exe	108
PID 4156 wrote to memory of 1192	4156	chrome.exe	109
PID 4156 wrote to memory of 1192	4156	chrome.exe	109
PID 4156 wrote to memory of 4672	4156	chrome.exe	110
PID 4156 wrote to memory of 4672	4156	chrome.exe	110
PID 4156 wrote to memory of 1236	4156	chrome.exe	111
PID 4156 wrote to memory of 1236	4156	chrome.exe	111
PID 4156 wrote to memory of 3884	4156	chrome.exe	112
PID 4156 wrote to memory of 3884	4156	chrome.exe	112
PID 4156 wrote to memory of 240	4156	chrome.exe	113
PID 4156 wrote to memory of 240	4156	chrome.exe	113
PID 4156 wrote to memory of 996	4156	chrome.exe	114
PID 4156 wrote to memory of 996	4156	chrome.exe	114
PID 4156 wrote to memory of 3980	4156	chrome.exe	115
PID 4156 wrote to memory of 3980	4156	chrome.exe	115
PID 4156 wrote to memory of 3124	4156	chrome.exe	117
PID 4156 wrote to memory of 1480	4156	chrome.exe	116
PID 4156 wrote to memory of 1480	4156	chrome.exe	116

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.mediafire.com/file/k4c8ne55ia9y7ub/OP_Forcer-3.215E.jar/file
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb3d9dc728,0x7ffb3d9dc734,0x7ffb3d9dc740
  2⤵
  PID:2072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1956,i,11136280231578754218,7559392876319798664,524288 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2116 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1608,i,6546427808534317147,16834759632440548013,262144 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2084 /prefetch:2
  2⤵
  PID:2996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2392,i,9662594792893411729,5346405631570624412,524288 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2532 /prefetch:13
  2⤵
  PID:4452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3200,i,7818284360936516730,13561136383782928702,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:2136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3204,i,1752300578519351816,12674120056050169984,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4328,i,3288259776366796871,14990504097366861232,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4336 /prefetch:9
  2⤵
  PID:1584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4668,i,215870645040472664,11921754656306684817,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4696 /prefetch:1
  2⤵
  PID:1636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4800,i,9361804263711603255,9295251092837741714,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4824 /prefetch:1
  2⤵
  PID:3104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5104,i,2955067153781558469,7575885599907590333,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5016 /prefetch:1
  2⤵
  PID:1928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5304,i,1204681786377764465,13805030488851784307,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5324 /prefetch:1
  2⤵
  PID:1532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5960,i,3937469720779990429,6072316226326423787,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5912 /prefetch:1
  2⤵
  PID:3964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6396,i,584552325302917093,3368907793711912275,524288 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6400 /prefetch:14
  2⤵
  PID:2104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6400,i,18139332370005153835,12450774941907440658,524288 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6412 /prefetch:14
  2⤵
  - NTFS ADS
  PID:4964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4640,i,12956499412823708111,8917853237173647506,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4776 /prefetch:1
  2⤵
  PID:412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5424,i,3740895265247110712,7415598993640599871,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5264 /prefetch:1
  2⤵
  PID:4132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5604,i,16581112496712782155,5584725663511202718,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6424 /prefetch:1
  2⤵
  PID:4744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4788,i,7423538986538588656,17919870838414304271,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4900 /prefetch:1
  2⤵
  PID:4324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6580,i,5802058240948437772,12752491031708104435,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6596 /prefetch:1
  2⤵
  PID:2272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6724,i,7584739845703218027,2899051502558288398,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6748 /prefetch:1
  2⤵
  PID:2660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6892,i,11597546445527619565,11504995774364185154,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6948 /prefetch:1
  2⤵
  PID:4992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4656,i,10505188754409317778,12332152533053729946,524288 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=212 /prefetch:14
  2⤵
  PID:5052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4828,i,1585523137266462666,17354991365566020572,524288 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7104 /prefetch:14
  2⤵
  PID:1780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4864,i,570407023010678102,3817593614318244865,524288 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4724 /prefetch:14
  2⤵
  PID:4688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=4748,i,3754926593151423706,6391988530341749131,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4704 /prefetch:1
  2⤵
  PID:4492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=4328,i,2608503563811724933,12262098333782804262,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4352 /prefetch:1
  2⤵
  PID:1440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=3292,i,3252872247621542686,7069243392878500646,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5920 /prefetch:1
  2⤵
  PID:964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4696,i,716817864574303442,18168388510812601542,524288 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5328 /prefetch:14
  2⤵
  PID:1192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=3484,i,905899071923708755,8823388234036431681,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:4672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=4920,i,14672253402865279675,595603446357885231,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6556 /prefetch:1
  2⤵
  PID:1236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=5448,i,16258313606890396124,16860171081392351348,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:3884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=6560,i,1352473169085256151,3222599974762531508,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6608 /prefetch:1
  2⤵
  PID:240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=4944,i,10249353813074280927,6198175299395387845,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3416 /prefetch:1
  2⤵
  PID:996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=4804,i,9170670298093620780,83007902826165252,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5948 /prefetch:1
  2⤵
  PID:3980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3392,i,3163248102938694338,10435257883742961406,524288 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3380 /prefetch:12
  2⤵
  PID:1480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3396,i,8271614494801820238,12135466244041839049,524288 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3360 /prefetch:14
  2⤵
  - Modifies registry class
  PID:3124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=3328,i,7759204991856786770,9735764807569083425,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4628 /prefetch:1
  2⤵
  PID:4936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=5440,i,3583971519922042290,2075067117654929545,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6560 /prefetch:1
  2⤵
  PID:3964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3176,i,12891525327360496033,11034000257376673670,262144 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4860 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=4756,i,8801045337226342393,3369001173996720675,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5968 /prefetch:1
  2⤵
  PID:2980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=5948,i,15825054010591635130,3882017269284479312,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:1392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=5424,i,16595376428648935205,10590222105920332937,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7384 /prefetch:1
  2⤵
  PID:4576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=6744,i,264908571310757746,16476366031507254713,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4788 /prefetch:1
  2⤵
  PID:500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6836,i,2325647213925502584,4099647808168387285,524288 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3328 /prefetch:14
  2⤵
  PID:2616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=6640,i,11348661658628021034,4887852740476826567,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6568 /prefetch:1
  2⤵
  PID:1484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=5872,i,14151193510956583539,3864038684054941298,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6588 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=7672,i,698118342726122175,10797181462249663481,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7712 /prefetch:1
  2⤵
  PID:3536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=7648,i,2849997215786578902,6620040500029226604,2097152 --field-trial-handle=2088,i,16756028777817180079,14831366257236554748,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7868 /prefetch:1
  2⤵
  PID:3904

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1952

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2212

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 4ab90ee72321a1f65d12083802908cee44fd663c4de721d6a550a31b067a0f84
MD5 7a0d2e89df843297b6e4dff991e54a8d
SHA1 90c6e246b01e331a2a44f53bfd0bd631cecfbf41
SHA512 04f12d956d1319731fab914a4b22b6b8ef606d918dd131834b6c45f614832000491ab61798c9917c0dde78eb1dbf51e4e115c76da8d1b557cfdb569962f3c711
MD5 SHA1 SHA512

Submit Download

2152e984-d3b6-436e-8f18-c47285ca4ae4.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\2152e984-d3b6-436e-8f18-c47285ca4ae4.tmp
Size 14KB
SHA256 fba4c5b6df7fd4a9316ecfe2f70cd88964c781c9e98e60b162c28c7f866373ef
MD5 680066b1abd52bd75a5a0a07f8a8f30f
SHA1 184f94339ec437176a3b905892eb2b4a88ecde0a
SHA512 eea18564e49659f995f38425a7f955c56a45acd9dcb728da8324be9cc730dbd44e2874815da7eae1f5f9ed29919f759c606097465c3910161902961a1d2843ee
SSDEEP 192:2RhXyDFcp3Od9v7ApAPRp2AFfXyyt99qHsb+WNGdwlYL8o1T0wS249SaimVyIsnv:2RhXnpQ9sUXFd4wR6u24FE
TLSH
T1B762C56FA914297B5CDBC229F921F757E3F51022A5802EC8FAFC8A1C11E7ADD2207417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 e2200555f7e6eeab93cfc4c1489bbf28c78c6c3d35926d1cc129dae709c74ebd
MD5 2eb30a57c34ece8810c98436699a9b65
SHA1 efa7b4d2ca742c8d100969b48869127df4ff0353
SHA512 6ecb5de4f5dd86a53ab6b90e0f601e5901b2aa852787a6947eaded31d7517ab54516ac56d9bed74149efae1a4fcf347d27399b613127adc53f0e5b7f6f29ca6f
TLSH
T1CAE0E5DAE961986708FD0769A0644B4AF72013572740484F3A7C81084FB092B498586C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00004a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004a
Size 361KB
SHA256 02ff49f4431a46d64078b37db37186bd2f8c65655c9a81086ff174ead4486a18
MD5 10f1c35cb246fe221073a913340b48a8
SHA1 8101001026872a40a3653a4ece0da291b90458a5
SHA512 00031ac8af944b437463ef2027fa381873b6e08f68945248e58007a4ef7a5cec37adff6d14f67fcf7de2f5c85ffd1e723c1f1652d6a014eee66f84bdcaad2a6b
SSDEEP 6144:0OJ1vV2jDLDukAPWOlTbj19gCY/tqglNixzN4LtBDRPqyQK6+fWAyU+8tWncBl5y:0OJv2PLKkAPWATbj1ah/cgnAN4LtBDR8
TLSH
T14974236687ED80BD68F6890D1BCC7FA768CF928FF46EC8D9428E5185C408F7921B7611
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00005a
Size 17KB
SHA256 a67402a5f7ccc8c218b5606b05829d6ec9946c7e9e85d7d4b2c0f1dcbb802462
MD5 29b8c721ee2242ee9b86205f1cc314ab
SHA1 137a51f26376a1bf834017422821cfa5abdf4bf7
SHA512 9632855f3711ec32a113ccfcc5cdd160b7113772e8f76cb0750394218c3bac256941f83ef606bc3a3673fc8f6c552a998094285f6da2d99fb80d79f73b7eb078
SSDEEP 384:9UqfllLieonv/QhWD5W7rclyfVsuH4IgyLTfD6k8Xsytz:9fdlLx88WD5dy9t4NIT2LXsy1
TLSH
T1B282D08EF005E68D2D32F50B257BDB2ED66CA49051359E882DEF5582249DC3A014FBB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00005b
Size 19KB
SHA256 a9e812d8e664e4db18cbb3cb9f461633fdfbd984d4c121a8b2a1b5e305504834
MD5 f45c0674e197e139478f522af2465397
SHA1 bd4d852f35a1c542dfb98aabfa3a089a516ed069
SHA512 46ea8108ddc08be1d5b3ae89a87887a0ffdc5e9662bb043b7564e3f395994ddc50f577d0b5198e83119a80db71c275009901496234a54f7d373f0c2264651d28
SSDEEP 384:vzCdnKadG2gxLSluFZcMsZ3cqdQf43pQv0OE0y3fb+KO4MEj2eIZJeo:vedk20LguPsFFdTO0Zvb+V4meu4o
TLSH
T16892D02ABA9535B49021C6A31D317AEE4812F8B0E7056AAFB306A24055F2101FFD67E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00005c
Size 17KB
SHA256 bd79eba3f7f2f88aafe881a2b4c75a86a06653002259767ee4717388827a6371
MD5 cf699a3473c2132452c8096fd46028bd
SHA1 75afc4f148ae4872afc15c75bf0ceef08ac50c66
SHA512 bfda14c2e28e3bc5692bb35b79b7b6eb275c6531447ef374f9855a31ea42725a11e27827af37ca9de6cfc27fa0a8833ebf1bc5fe32c12d9c17af05f18c6e9d44
SSDEEP 384:5i0ou4t+r0RMXROJV6lTAUwvWq5TOI/hdb3nCphsji74rQjasc:5ilu2+r0yRQV6BdKHfSphN74yaF
TLSH
T1F182D069962D93358469F02EF3BC180FEE776A56A443215F9A130C7568EFC14388A9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00005d
Size 16KB
SHA256 376c01c8335e2b88b71fb27e63c5e11ac595e8932ae3d7423c4c5e2d57e65c11
MD5 d6aebed852d589c8ff2695ba6c425199
SHA1 cf40e06fc7759de953ce58428603aa39aaff5c81
SHA512 f6925b95b4764534f48cf43294c1d1f241266f93d38e160c01119deb4bf354eeb3a2dbc3139f3032f9cad58524971973fce73cd6d15856a6c673f21115099956
SSDEEP 384:Go7i9b8UMC3i/XRFI7I4QefEa5QjPnpnxD2Ve4c8nVvJ:q9bC/XRCI4QeK/mcq
TLSH
T18372D0A04945F114AE30C839A8411B937B4C93AE90BDA116ED2DC53F55C267FFE0FB29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00005e
Size 17KB
SHA256 60ad0b7ae50f20ddbeb40f897ec40555041f93bf41c7a759967dc9dff4cc87a6
MD5 1fb0c230afc70508d2a9d03e5917acd3
SHA1 52c36e5bf03aad574da62945d8ef40fa2cd4ba3d
SHA512 f2e877dc3232c9387de9fffe425bfba3309c0444225595e8a0e2332c6c5774f32596167e17ceeefe7cb3b65e8abd4ca56417756694045710c51bdc60959a6e17
SSDEEP 384:XZViXrtpYCFa4+N2AlCImTsEmpBvJ9h6mhkGi3UKL6Zrs9f8Cxu:JyJ+N24CVLmXvJ7qGsHuZrs91xu
TLSH
T1F382E0111571524AE4F1A4827164DD5603A83C7F2D3FEE78C122B28B8F4ED7731176A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00005f
Size 17KB
SHA256 38365aa4d49c1d2fe78bdce8e9252e4bcff80ee7465aa7a57cfe292337f9b3b1
MD5 87737478bd71de50615d94b3e29e3c50
SHA1 0f4882084f0302621c0139893a38b2f8f731b84f
SHA512 48e29c74621a7a8be0c1e437064a1c065ed5454808e534f4d0ef744624b89ccce293234ea7f51d50420d98655641b08947dba291582676842dd9d78cf06e05da
SSDEEP 384:REDlD/VXdeM29+ev7kZDL9FrL01EynhtbKt1szrJC89WK/2U:qpdXdl29r7kZL95L0+2MO/5
TLSH
T13E72D0851310AD39D88096BC1647C2332BDDE7DC3A59A4D21ACEF48785CCE9385DF91C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 91ffdf360583760dffa65a1740d0190ef0dfce6aaa741cd7edd7ef258843fc99
MD5 8d62d6c2b7d1933a7d865da8eea4e76d
SHA1 db09174285fbe31affa42b2768afbfe406ea869c
SHA512 174ee2b10e19f62d54e4ccc5c58a8f32cec0ac4e7a6bc1933de41d1794ffdf9173cb777cbec6117744658302d66bd432de0eaf3dfb1ad10d5976cb8858965098
TLSH
T1D58198436CC0DA54FB2A3E3952FBA928757410698A378E9747C930BCC0B37AC5DB1456
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 217c4b8c75a96eef06a2fb39a135430185c9d9937d9e743dbe97dc2cf4fa3096
MD5 28ee9c339e75ced943f247783643f132
SHA1 d8f46c519e417184ef03e8cde82f8963eda82ee9
SHA512 11f86075748a6bd63b900a0f492cd948ede3fc21454e3a6a36c1d428d0301f7be264af974de15f40a2fbe181941a09bb001773cf3bd0470ef564d790092f298d
SSDEEP 48:4F/7h0L7SuBgzKLHhg4QCxC7ovPflHd8WJy2/jBKfjXEd+/VlIAbDCwCLZKOHttJ:49V0HS+1rhg4dvf5m4bBjkIiewCdKOLJ
TLSH
T11C81E9836DC0D604FB2A3E3A92F7A824753450698A379F9747C931BCC0B37AC6DB0456
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 6fd07ec22a3987a2ac7f0704b7ebcae29a28285e121df253d970203ee1a3d037
MD5 9d1bf50c4c8d7b472cbee3ca417abfd5
SHA1 06c4de272e6b8c03a4d1a5df88a6ccc55b4af794
SHA512 5048ed0ab63b7c1f575b4dcc6deeb4e8c4aae25ba7908a2f2f6528a3d2925df9e6aae16c2613bb2ead884a2a37502cb7e9c9197dce437df6ddc4f1535e4c49f5
SSDEEP 96:U9g0HF+xjhgjdvf5mjHbBekIiGwCdKOLo:U9geFYhOmbBlIiG3o
TLSH
T18391B7836DC0D654FB2A3E3A92F7A8283534206946339E9746CD31BCC0B779C6EB0466
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 033b99f1181039c45789c9d9fa1736650b869075c589eb0265ba0a1ae56c874f
MD5 7b9694fdbbe920ed082a8d1a404544c3
SHA1 12a0236bed98f34f65df209f0e4b1403439de298
SHA512 05e7adf800ffdffb54b825dff2f78ccab683ec34801940bbf25af8ab6ff4728795063d5d69e793873c62296e32913148c554242c3705d457d05e15bc06832316
SSDEEP 48:WF/7e0L7SuBgzKLHhg4QCxC7ovPflHd8WJy2/jBKfjX1d+/VlIAb2PwCLZKOHttJ:W9y0HS+1rhg4dvf5m4bBekIiawCdKOLJ
TLSH
T16D81C8836DC0D604FB2A3E3692F7A8243574206946339F9747C931BCC0B77AC6DB0456
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 ab22198b6408c6610af67ff8e23164bff6de16f215282121d44165f6c107c5cf
MD5 6fb692b9a393f4696fce4ce554b37ada
SHA1 808c75c20563dbf34ce4fc9431c25f00c138b221
SHA512 a24223f124226c2222ee66c317d1251ae32c94754cbf7b5522520aa98e3367e0f1fa560c26dd15ecf2afe771a6923cd153248da2a8c38d17d36a5fd93db926da
SSDEEP 96:vk9V0HS+1rhg4dvf5mgbBjkIirwCdKOLc:vk9VeSEhRdbBoIir3c
TLSH
T19481D7836DC0D614FB2A3E3A92F7A824753460698A379F9747C931BCC0B37AC6DB0456
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 657e88c207036a2044fe37f2a4c52b1bf5909930b6971ffc4104085f70e223b8
MD5 acd6c465cd60ba4c3dabf5b050310916
SHA1 7ef0a95991bab2db32e8816dcc31bfc28376065d
SHA512 5004870ce390d1fb192d5a44b8ce037c14bdb6934255b5da8deb4507b83567081ae9fe59d6defe7c889c0bc57faeeedfaf4219ade1af8d5c3f1b9d395e3383ec
TLSH
T13E6151936CC0E214FB2A3E3A62F3A968747410694A378E9796C971BDC0B33AC5DB0446
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 33KB
SHA256 66c472aca9f3a84d7e60fe09f12040cdd029ed36e02c2fb47d7815298ec352c1
MD5 ab7f19b6cb0a170ec750610a7afd6606
SHA1 e6bab71977475abb6b353537de1b2c73a5d46c0c
SHA512 19ad4aacb1fd76c25b501edfea4fe6888496a6ad4a3865921551ba7d7a72656200c8bb18c21a7f5248c2f594a128ebd4f91066d530cf57f0729ce356232edf1e
SSDEEP 384:DWPUl0+t4e/OJw5mRlQGeL9SvRJLBenMePFhJrEtYA/WPxqGwus3bzoHYvwA8aaD:6VaTj6UYM3i3jR7BWEE3zXl
TLSH
T1ADF2AAF793E5C62E890157F4AA14AE1BCF1C0625432C3C2689D4EE87E3E2473E15A65F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 38KB
SHA256 9acade8fefbb75ea344d973df9092fefbbd4987184df29845ca11c8e308e35a8
MD5 84127882d5f3b253caebb5d175118bc5
SHA1 a86bd32701b2d16c92846520d5a7a4a4eb2dc95f
SHA512 a03aff6591527d3d66db6a7f6b70ed0e9fce7216187fdbc73868edf3bf10637247a7d6f920a2f8be325630d22aad63bf7a1f819c14bfb67497562ea7ffba98fb
SSDEEP 384:DzpeJOveiArWeRG3WoRHfWAe41YfBJvBef8e+CyJlBchuVQm2b2ICU8us3bzoHYv:fUXx1jrjYsUixq1VjR7RLvWFzG9m
TLSH
T1F903AAF393E5C62E891157F46B146E1BCF1D0A1583283C26C8D5EE8BE3E2432E15A65F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 34KB
SHA256 1e64ad11f0fe98e4b964d329ef7a54c6053c590a6f1702972fe7c300421e877d
MD5 72be5653e15aec693e57661b0dc641db
SHA1 e96ac781b4e21c1f98a57711ddfbe5c2792d2d4c
SHA512 a972c2f70f97a61e5b12fad949b467d2c76e307dfceafb7a0b4155218acb07d023a3e0d8b812a495de8d4040618a1aec349fb3079b5ba1375251a730bb92bb39
SSDEEP 384:D0zpeJOveiArWeRG3WoRHfWAe41YfBJvBef8e+CyJlBchuVQm2b2ICU4IaaEgdOC:uUXx1jMjYsUdxq1VjR7RLvWFzG9N
TLSH
T174F299F393E5C52E891157F86B146E1BCF1D0A15832C3C2688D5EE8BE3E2432E15A65F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 4KB
SHA256 fd9f6bc7721cbb3aed66e26bf722fe15e964ffdccbfe55d71d60741c2860174f
MD5 a52f23c00fabeff3b9dc9329a3bde50d
SHA1 dd68d4f38a02e7c414018a1cc91e8ba0cf7944c0
SHA512 a70cb5d22a810ea1a45100d1ae68360ecde671d89c47f3e5c99469b18ad0b10afa2502147ea32517af9abaa185ca22363a908cdc0451eb75deebb99b8a91495d
SSDEEP 96:UUxAU8YUyUkeieU6UMUFVUUeU6UEUfUdUeT3U/UGUYKUmOU1jUb7U7UvULUAXAUa:UUxAU8YUyUkKU6UMUPUUeU6UEUfUdUgu
TLSH
T13E915997827FB81B247E087B2E087C4958BABC3406C164F8DF6681ED74C69F34B165A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 15215d4e833a2fe2cff499e46bd7f9083b9a683d42d0300c42feee511d98ea2b
MD5 eb60760aff8e101c306529b2f144b34d
SHA1 5f5de862452f66a8733d9efa6141734e00a3ae97
SHA512 0edb8502411ec960774bee549dffc33f444e387eb3cadae86305ec612b1483e94f90338db0281eb33a302670e822025551782e6ca7dbe92eddbb108093a55d1f
SSDEEP 192:QRhXyDFcp3OV9v7QT3PRp3GrjFfOOyyJF99qHsb+WNDK5gwlYNrMh2n1T0tCEs9O:QRhXnp09UjXex4w1t11E0BE
TLSH
T1DD72B66BA524297B5CDAC225F821F79BE3F1202295D01D88FBFCCA1C21D7ADD6207417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 89bf2f1cd89699e9865f3eee0c937499972c178540428e70b97c07b2c390bcdd
MD5 06881f829d6f938a694ab4ec6ff79bbe
SHA1 06bb0dfb13ab79006634b380aa65faccbccddc01
SHA512 d990558663a773aa0f085611587f1d2e71ecc069063fe4ec235cc8151da458d0ea6d72eeb9a8bdad46c60f5fd44867e0e559d50ba6f9525aa834058f249d4694
SSDEEP 192:2RhXyDFcp3Ov9v7ApAPRp2AFfXyyv9qHsb+WNGwlYL8o1T2+9SaiYVyIsnAUge:2RhXnp09sUXFB4wp62W/e
TLSH
T15B52D72FA914297B5CCBC229F921B757E3F51022A1942EC8FBFC8A1C11E79CD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 ca4b94bd115329e02658c53abf0bb7664ec05ceb4c08e806e7f580a3bb0af1cf
MD5 744da039806e9b3b6744cf0aeb2eb4f5
SHA1 cd9baaa77cd2a4f9da504e03a99032adde80959a
SHA512 51cd5baaacf7b2ea1d297ec60371c26d72d091ec9955ef11bceba9ebab1d8ca8a0081f6b9ac51bb27b44e9898e36d35345645f083b3c6324c0e20f19d5419261
SSDEEP 192:lRhX1DFcp3OA9v7QT3PRp3GrjFfOOyyJB99qHsb+WNDK9HwlYJW/C4z1T0tCE49O:lRhXkpt9UjXe94wnVB1E4BE
TLSH
T19F72B66BA524297B5CD7C229F821F75BE3F1202696D01DC8FAFC8A1C25D7ADD2207417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 e987402231096c30dc570ad6908bd086c1fc8c3e2d0f02e739e48916fd2578d9
MD5 6e96ffaece80686e9a4bd7c97bc0c472
SHA1 59560f278e04c92a0cdc7af589bfd33e8a82dce0
SHA512 b0a122f8b11d2b6ecffd0c09eb9d4f7526a067491919d40f36950fecc2c7a93fd70dfe0a0c069b7e38d2dce37e1752aef427f05f4ce2b9566bb0356a94c3ff5f
SSDEEP 192:2RsXyDFcp3Ov0v7ApAPRp2AFfXyyv9qHsb+WNGeL8o1T2+9SaiYVyIsnAUge:2RsXnp0wsUXFB4wC62W/e
TLSH
T19352D72FA918293B5CCBC229F961B757E3F51026A1942EC8FBFC8A1C11E79CD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 70e0a2ba6abeb2da44b58ed556edf3e425ab6091e13909150948a9aaa58dacac
MD5 732a99f76cc5046511163aaedbfa5e2b
SHA1 76b6d7d9bbf59463c961c76b904b96b250c18b81
SHA512 4947d93fd90630711c03b77c4edb0cc29ad147fd8703e41dbdc634e74bf82749b4d005e7bf0a730e266133c4da6f93204adbd7d763741a7e00ce66bcecc7d031
SSDEEP 192:1RhXyDFcp3OQ9v7Qw3PRp3GrjFfOOyyJE99qHsb+WNDKs6wlYB2/1yd1T0+TYw9O:1RhXnp59UQXei4wXkPRYQBE
TLSH
T13B72B56BA524297B5CDBC225F861F75BE3F12026A6C01D88FAFCCA1C11E7ADD6207417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 f28f1cddeb8b1036374636bcd1e7f2d6b683e78bed851414dcb1ba1db1afe231
MD5 b71dd82fabb75680c3e549819b63665b
SHA1 97009f3b0d502798b2bb6e1f37fc1a5e1da57625
SHA512 ff4c83eb0e0c9d2ac5b576fffaa84ddf62ad1a49258883407239438e86055753b2a86e2ae218b1bf7bb52d3ba2125a93d1697c2955c27e1d92f381c753b6fd8e
SSDEEP 192:lRhX1DFcp3ODYv7QT3PRp38rjFfOOyyJz299qHsb+WNDK4VwlYJW/4fr1T0CZgr5:lRhXkpiEUjXg1C4w685XgJBV
TLSH
T18B72C66FA424197B5CD6C229F861F79BE3F1202296C45DC8FAFC8A1C21E7ADD2207417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 158536b42a006f212a74782b34db1faf9757739d410e3661c3ca27be44484d48
MD5 a20093f7cecedd622aaa9c35b0ee4561
SHA1 3778e0ce143ae46f0399c07c2eed61d0d062e273
SHA512 55248a346a3475ad654c2ee8a0c236161ad6368c57c397ea6610447ff0bc6d6814e368b4f597ad21271629700aa1274dba9b36614af37d321ff3c2f0a5b7d8f5
SSDEEP 192:lRhX1DFcp3ODcv7QT3PRp38rjFfOOyyJz299qHsb+WNDK4VwlYJW/4fr1T0CZgro:lRhXkpiIUjXg1C4w685XgJBE
TLSH
T14F72B66FA424197B5CDAC229F821F75BE3F1202296D45DC8FAFC8A1C25E7ADD2207417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 57036e45636b003ec4e04f3f321d9dcfdb602efbfb4a358a42f2142597be2cb8
MD5 6f2865ea65c72e1168ce369df4633132
SHA1 61aabf864332d04cf8ac8e386ceaac0738bf4237
SHA512 f113c010e9d095709ce481e033264cf1292efd229c47cb3a13f07e8362e3db982c93e13919261025cbc43e2db3bdc9e238695685946ac4a8d3083e227d294f48
SSDEEP 192:lRhX1DFcp3ODUv7QT3PRp38rjFfOOyyJz299qHsb+WNDK9HwlYJW/za3lr1T0tCF:lRhXkpiQUjXg1C4wnrKl51EquBE
TLSH
T10272A56BA424197B5CDAC229F821F79BE3F1202696D05DC8FAFC8A1C25D7ADD2207417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 eda1c87178d621eaf793996b60ace21cd24c2e348689bbf372c69851fb0074b9
MD5 84ae5160ec42c88881cd200b45c785c4
SHA1 df2ddd650a510c74babfe709d49d38cf4f86750c
SHA512 ec0dfe319be01471e63db6933c61c1c212ec4af58cb855160ac2d9a1a73f64e12fbcdbeafb22bd891771fc35510fc793dc14d7913fb06ef9f4ab401ea9089856
SSDEEP 192:lRhX1DFcp3ODqv7QT3PRp38rjFfOOyyJz299qHsb+WNDK4VwlYJW/4fr1T0yxe35:lRhXkpimUjXg1C4w685beNBV
TLSH
T13672B66FA414297B5CD6C229F861F79BE3F1202296C45DC8FAFC9A1C21D7ADD2207417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 7557e10a09608cc4be1bc17dd520d4588f2d5d11fe2c3391b91ec8693917e6e5
MD5 bade562d3502877cd84aab00b99dca3f
SHA1 4d7b18382801eddb6bf27fefc0004e461cc59659
SHA512 060cb59ca7082d3c9dc9a927320bfc0b9ecd6bed3f2e867d54b4cbfb95de9b1a594aefcacc60b56d3989653e8ac71fef0a0e396635b1d1c14f20d4bb1af4cb3c
SSDEEP 192:lRhX1DFcp3ODPv7QT3PRp38rjFfOOyyJz299qHsb+WNDK4VwlYJW/4fr1T0yxe35:lRhXkpiHUjXg1C4w685beNBV
TLSH
T12772B66FA414297B5CD6C229F861F79BE3F1202296C45DC8FAFC8A1C21E7ADD2207417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 2c9395a5a004c70838657d7362ce43eddf98bfa950e9ec468d67e611b69e388c
MD5 12d054133e340d919596efd5f2b7287e
SHA1 d1b3998a1e3a3e597b50ea1c6fb9990532e34690
SHA512 820b0ec12a647c05290ba075af67d570b51f3cd86d4bd4d601d2801f8f833f62f6ba1b88fb765b317b666da8a3df60bd9406dc7232629beb51c1c482b7c496f1
SSDEEP 192:QRhXyDFcp3Os9v7QT3PRp3GrjFfOOyyJy99qHsb+WNDK5gwlYNrMC4z1T0tCEL9O:QRhXnpd9UjXeo4w1OB1EpBE
TLSH
T1F772B66BA524297B5CD6C229F861F75BE3F1202696D01E88FBFCCA1C11D7ADD2207417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 0d5ff8052c5cb9d0bbca58e041accd4b5f6154845e6f7daa5030e5734fcb83e9
MD5 4499aec71f01f0a2cec9b258ec99d4ad
SHA1 b6732b00ce41bddd425f127cc4592f87a611902a
SHA512 ac09bc7ad82653e05ca52fdec4e821c6e416b28a8720c35eb710a54f1689f6a2ff92136e71fc4d1f776b9230716fdb2501147f313df2205ed7b501f3397d55dd
SSDEEP 192:QRhX1DFcp3Os9v7QT3PRp3GrjFfOOyyJj99qHsb+WNDK5gwlYNrMC4z1T0tCEL9O:QRhXkpd9UjXer4w1OB1EpBE
TLSH
T1EF72B66BA524297B5CDAC229F861F75BE3F1202696D01E88FBFCCA1C11D7ADD2207417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 0f7209a262d5cb0e1efd4985353963eb528a17a04b3b36ced5fdbe5d62035151
MD5 aa63ff32dfeca51a7bba79c6be2212ef
SHA1 0671c1d85c3792764ef97a619159aa6472cf69bb
SHA512 c1b2617cf613f22973c0a5e5f72fb054f02451ea12162f69d58051ca78f81ae9643696eb5a3c5fcb252925372297a09a2d2a54e91f16901b2dec626c484be219
SSDEEP 192:lRhX1DFcp3ODfv7QT3PRp38rjFfOOyyJz299qHsb+WNDK4VwlYJW/4fr1T0+Fyn5:lRhXkpi3UjXg1C4w685/y9BV
TLSH
T1FE72B66BA414297B5CD6C229F861F75BE3F12026A6C45DC8FAFC8A1C21D7ADD2207417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 f8d470ff67f1fae440f7eb250cde84995f0feb0f42f2493371dc2278f45b25e1
MD5 4424b726899e978f875cd74c3b1d8f5b
SHA1 367233b22c6d84f3ae3a37350e0547dd9abe9a87
SHA512 20b43a620619a7a22dee4fc5aaf9aaf51c93a568f6acc8ed7f463fc70d831d8cb02dee3c5937673a925a6367bf7d3e5795e7ff278bd15386989a53976bdd97c6
SSDEEP 192:1RhXyDFcp3O39v7Aw3PRp3GbFfXyyJZ99qHsb+WNGdwlYB2/8N91T0+TYh9SaiQO:1RhXnpS9sQXgn4wbYvRY/BE
TLSH
T16762C66BA914297B5CD7C225F821F757E3F12026A1902EC8FBFC8A1C11E7ADD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 02fa3748cc960b0ed806669146286ae61d8f8c37c72e1c20fff625c9b568d7c5
MD5 e1d791f76039330e35fa0e1827d639ea
SHA1 a37e7b6749565fdef84e626eb8e8ab5cfd1eaf09
SHA512 4cd2d4ec371de591ed8fc49a3c9c69bf2d80c0d8879044f55af268ee4a35e216538e529304db502c0dc2822c3e20cfadd9949c623d30489800bbc0cdffa3ddcc
SSDEEP 384:2Mjqt7KxkXqKf/pUZNCgVLH2Hfgslo67pLuLcifklXODqt+ErU3sjHG9TDWxSal2:2Aqt7KxkXqKf/pUZNCgVLH2Hfgsq67pU
TLSH
T1B672E8676C0C9D7B0F94C58CD8267E4FADB9024B65ED886483FA582A03D5BDF110A1F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 81572c07d76fc062c30f4e91d8354a71d4962176eb339ba6ce1600c44b3fcda6
MD5 f210cbe8f68d21e0f014bbf5c0c87451
SHA1 2593e5577f96788de005351431df8c59826e48fe
SHA512 7d09886528b462285c9e5f826b3ba9f4a0b003fce2aa0026ce583d33ffd2012d6f2eb4afc06f44a0b5cf26ae11c4885d53d3156cf74cdb3f671812994d1f1972
TLSH
T11AC01292C541E231C00647F415B3CCDF72BC9F2DEF25174873E4A93AAC39110826D2B6
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 f2f7576ddbcf9e2cca913cc2c7328223262c6699c8a9a13e3e40f9da0ebeb4a6
MD5 3390c080fea5c1427d14b5cec9bc63a6
SHA1 aec3feece4a00987854bc8516da3af8bc95ca285
SHA512 f7c16e1b33e6633c576418d57f47d6557fa6d4323b1900c638432027b6e7ca18bf9d6fd226d2aefa031b99ea2534120fffceb2013766c089f07d6afb66f30820
TLSH
T1B8B0129080419501C01303F81182048832149F208B09174163E8A971DC269904424260
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe583bfa.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe583bfa.TMP
Size 96B
SHA256 f67c09e694123639c43cb11277593a07932232134d0eea7b8d1f62738c90af76
MD5 acf0261333433672cfc7f4da869451fb
SHA1 b2dbbedb38216e2e10a9ef077cdf9e5d4bdaccd0
SHA512 f0c72530477e4a07ff85c03550fca05d4dfd79ae10def9f2e8054e36e6b468daec26f3435749506d1618676bde0fa74ea027f0dbbd411e38e0b9bf1b9e9dbc0f
TLSH
T1EBB022E0C003A202C00303F038A0A2C8B0B0CF20CF03022EA2E02A33CC2A2A00030C22
MD5 SHA1 SHA512 TLSH

Submit Download

d223d26f12e5b989_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\d223d26f12e5b989_0
Size 63KB
SHA256 b8e4253fc972730871ee0ea83c0b13afd523a2daf0bb6ff80073777b83ec6d7e
MD5 fe2d6d33346048c30d0e87c6b9c48638
SHA1 bfa4784d13ad13505a0a9e91cfbb8591d7627839
SHA512 0f3da8d2bc9a3c90fbe1ff2c7dcd6293fcbf79b3c5cb3a86242ca25c2c7abad7d93c2052d7dd8b76384f2b130ae88590596b286bc1799d4c7f6a98cbe2d382c3
SSDEEP 1536:kMVCzwbaO8ezOEjyfbgr04DzYVEQ38ee6Px:kMVCzwt8eCoDr04HW
TLSH
T14E536CA6332174778277A5F190AF230B313AE157B400C9E8B198EEE54F85B9B1177B6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 70b4f6e3cffb02701b378e988d7c7ba51fe41ac81c7632ab2b6026e4d2572ed9
MD5 641c0e1a0ab3f19d00f1c68cf5434811
SHA1 2012be43bddd3ebcadb38e738d556ac63bdce71d
SHA512 19dfa4a85246306cefc9ee6b0d447f569e827bb1004027edc6ce3a928f4dd28aed4eabcf335ca3d4e9f16a0a439d78c422d2b98b3ed3969b39e5877713204833
TLSH
T1AFA002912980400AE605927050A1C3C07221AD942591431570D41C8ACD651C157150C4
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 595f57fd41425b3014fcf4e3f0ada9a2fe020a99cc4ec7f5daef3dc6abb05140
MD5 a1ab017a75c9d2da20dcd0d4ccb9184b
SHA1 cc63ae263616db77ba6c133858bb148c769d6416
SHA512 483fde3629e6c998d0a040fc5677dacb0aa3d6661c641d617d271777678cea4ad8054314dfdf79681586c0f85c9cf3d68be800500a3cf73e3c227d9f5bb12d6c
SSDEEP 1536:XaOJP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:Rx++J3qUQm08KMWF0bFTcVHr6zT
TLSH
T18B9302B9991E7D7913ABD696E0079CAC4CD38CCE1518657C30C7AF0E14BA393A30BCA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 7cddee3fd535604ed9fba00e8ad3899e42e4fa713a554805c70f7bcfd3e5dcbe
MD5 57f4e1a853a4a3bcf242fb6baf73b74e
SHA1 f9e15119b1a9781ef6faaf8f331c47208e9d1b89
SHA512 14bfc9aca9815bd30df315024ebc3bb5d560ffc9cc533f9e66af43ee4f5177e8b99c115d2767ca371d38eae61dddd1b870b7aee7f1c4f29511145ceaccd00bcd
SSDEEP 1536:3apJP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:Wx++J3qUQm08KMWF0bFTcVHr6zT
TLSH
T14B9302B9991E7D7913ABD696E0079CAC4CD38CCE1518647C30C76F0E14BA397A34BCA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 03b70d9e730a6c2df2597555de615d486dcd8c9a3a1b430eb68f0af2a30af394
MD5 664a59cf9848e4bf706c5c8cad987372
SHA1 5fe6747a90cf522e04732368b7e69c059fa42e3f
SHA512 ea29bd69e33fa84032022e13e4d1ef810467950a56f9a7b6ecb5fe0d2c180b460a20d12ea487af6fd3b6cf69c2c1f642dd546f2a49dc37809fe451ded9880c6a
SSDEEP 1536:3avJP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:Ax++J3qUQm08KMWF0bFTcVHr6zT
TLSH
T1369302B9991E7D7913ABD696E0079CAC4CD38CCE1518647C30C76F0E14BA396A34BCA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 f0eab22422361eb3fbbe269b0b95c4d70211d989ff2a3568ae9503f192c92e76
MD5 99d7e7b7b4ba3203eec332e33093f692
SHA1 8d24bd289c01cca70a0ada3e138ec510217d54f6
SHA512 cfc65862892a4854bb981e332a6ecb5d44eab015b88313a1d0ad2b59dbc92ddb184bcaf7c3f88bbe373b75570f58da2044a90d962a8306ba542440bddc037aa6
SSDEEP 1536:3aiJP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:Nx++J3qUQm08KMWF0bFTcVHr6zT
TLSH
T1FF9302B9991E7D7913ABD696E0079CAC4CD38CCE1518647C30C76F0E14BA396A34BCA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 302f64887884e1e8a3715d5802448ef6fe6cbb4d3ad19acc06cbd85b8f504043
MD5 7e7af4c3cda0fd6d4019f009355723eb
SHA1 c4ea1f6ad34d3161ff7bec6cb339b34bce2f4fa6
SHA512 56fb84f0aa8645eeb3e9682880741268e153116ed229a5312aa9fd842e00eba861aa1225442839c7c5871bf7cbe9a0775e663a36fa456a1f7f4772e5097d9326
SSDEEP 1536:XapJP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:2x++J3qUQm08KMWF0bFTcVHr6zT
TLSH
T1589302B9991E7D7913ABD696E0079CAC4CD38CCE1518657C30C7AF0E14BA393A30BCA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 8ec3e55e398e17f0e8f1a7cde56b5aaca13f802aa95c76984b7dfd090e70fd04
MD5 7820729e4cb6e00b6ba20f08dd8ac512
SHA1 0600e828f35b4417beb08652d2056a1934f94b10
SHA512 5d50d0e9ac78b202194d479caab9b5cfc65def0cbaf029362b6f97988153bb67375d8c08ed397267a9307da6832a7b69c27d399acf323b352e4ff3d3bfad99e5
SSDEEP 1536:hZxP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:h++J3qUQm08KMWF0bFTcVHr6zT
TLSH
T16E9302BA591E7D39636AC396D0079CAC8CE3DCCE1514557C30C7AB1E18BA393A31B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 9633f6efb29f74b28c3d246f8f0b493fe65a625d7e71f2686a547b458fabc955
MD5 a7e229d5c4790dee0c7732949fc38755
SHA1 2308ca21430d2a3ed327cd0929492e45cf051748
SHA512 dd2ecb77d99aa987ec7c1e211c33756f8e7c3df182e883c68ee983b5816c92a76216b8c6a9ce76686ed3c4875da2e06e98923485ae71f9302395605bddac0427
SSDEEP 1536:GaNUP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:s++J3qUQm08KMWF0bFTcVHr6zT
TLSH
T1C79302BA9C1E7D3513ABD3A6E0079CAC4CE398DE1114557C31C76F1E14BA393A34B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 86354950a9b71472e904faf5c71f05a2725b05f9c0d5c2d2c74ed933ff0e0c32
MD5 a21c2cb61f8236ea193023995b75f038
SHA1 835e6550be1bca7e909a2c97a0a4b2f7ca81d567
SHA512 a523012cf76f43a8dcfb9c396198897b98bca6a561989581ab50348ada6c3fa03b9d1f0484a2a5c0136863a163d4409cad7d82cbaae521d98713c0c4839d7bb4
SSDEEP 1536:XaNUP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:v++J3qUQm08KMWF0bFTcVHr6zT
TLSH
T1259302BA9C1E7D3513ABD3A6E0079CAC4CE398DE1114557C31C76F1E14BA393A34B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 d48fd95cf28aace39f34b1a02161f1234fd9346bf3b8636e6c4f5005af3c5279
MD5 8f4ec946be7a4f7a96def37e32e3a1eb
SHA1 4bfa0598f4ab0b9d046f2ba57287e1da84181c1a
SHA512 dfeec5f47270540e220a27f80bd86cefd90b2cece77a6f1e6c65314bef046a18101f43f9821276e6285027f9f6fb7ad4cbaba62c53482643cfb41299fa58651a
SSDEEP 1536:Xa2JP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:px++J3qUQm08KMWF0bFTcVHr6zT
TLSH
T1FA9302B9991E7D7913ABD696E0079CAC4CD38CCE1518657C30C7AF0E14BA393A30BCA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 ec3df71b896286dd92601429fe20ce92e511c6588e7295e3285cfff00e28fec6
MD5 bf2414424e324e840f7a6c3d3dd64017
SHA1 5a3b77f8960254fc16c55ac3595bd69134629dbc
SHA512 5a619759c1bb354684c8c949080af064aef780871d71972ed8a659ca088e85546680a13f78c79ae2dd41e67ca9ed87afc330e3bced09041e24b920a315ec8a4d
SSDEEP 1536:XaXJP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:Ix++J3qUQm08KMWF0bFTcVHr6zT
TLSH
T1529302B9991E7D7913ABD696E0079CAC4CD38CCE1518657C30C7AF0E14BA393A34BCA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d696d521de238c3.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Size 13KB
SHA256 4dd04cd7bf6104f159595b3f5f83a0dd19cc11ddb0a7654c4d9f158c20f1b5e0
MD5 af31e078c5628273699702bc2ff8f03b
SHA1 1a28bbbbd16ecd501b39c097fbbd431868d2c6b5
SHA512 cbcb27459d54587a19ece31c0434b840be7c411e2c7679f1a26d2ddfbeb06c98b08e9f8efe6914ce1965449f1b4bf4a686f1b0df265f5ec206385c4dc517e3db
SSDEEP 96:1B3q7tFZoXpYffB3q7a0FESwB3q7PVmB3q76HFnp+q4B3q7TToFNQTGRB3q7LnB4:GDkaVQPFZoxo3
TLSH
T12D52DE5577FA6506F2F38A72EAB237106F76FA025A5CDE1E42C082090A71B146D58F3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d696d521de238c3.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Size 15KB
SHA256 799d657a07ad6f1065759e20574152a2315d2b9d6b7250bad5e97506b8076489
MD5 5b7ba881b664149f5b21dad567e3445e
SHA1 76fa4d272e04e5eda269e32f49472bb84a35bf25
SHA512 7f287a644ae63c9bb002e79b409cc44745c35ad4bc249a73de16eb08b8daca6863c195e04712a9aed308990d12f9c3ac2560bbb465e0b400578ec3b4660b8dd5
SSDEEP 96:FVB3q7tFZoXpYfjVB3q7a0FESmVB3q7PVxVB3q78jiFnuMWdfOVB3q76HFnp+qO/:FmDLmaVnmPLmGdWmZ/mWm0R3
TLSH
T14B72FF5577F92506F2F38972EAB133106F36FD125A6CDE1E428082090E71B14AD59F3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d696d521de238c3.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Size 11KB
SHA256 5707d7d6be462d31966126b1cf07d4b9eedffee293cc558af504589c955cf6bd
MD5 f426fb69357e64f9e47785e513f65ea1
SHA1 dd1f1c2d25417ed037a443df4e62da461facf88e
SHA512 2e36a3ae70d8e7f2c9b39f1f3654b744af5614b89fc40e59240a1237fd991f9393d5345f79f46db51eed66f3d2ebc98efc1334c3698e26fc23dbe83868e7af35
SSDEEP 96:LBXq7tFZoXpYfBB3q7a0FESSB3q7PVZB3q7TToFNQTG/B3q7LZB3q7gJE:gDiaVWPEne3
TLSH
T19A32CF5677FA6506F3F38E32EAB237102F76FE025A6CDA1E428082090A71714595DF7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OP_Forcer-3.215E.jar

Path C:\Users\Admin\Downloads\OP_Forcer-3.215E.jar
Size 1.5MB
SHA256 9dce9dfc26f7e11b52de4530900f0899e14f640470e0a0dceb574ce5a39693ed
MD5 04f42d5b610261fdf966fc267199ef4f
SHA1 7c2a00fe54a2602b2567ef3c8e820216bad8d008
SHA512 c3f0c68647add980cdfc0e5b64fc034ca4a898c3e37a5aeac4bf95f5354d1390fde121a38756b867b56995f4f943db2334ba24b28f5c4ef6a0bd9593e38b2f59
SSDEEP 49152:F5jZ1zhES1o77pQL8jUF+65qBaqkoEnGC5+:V3ESG71QL8jUF+6aaDne
TLSH
T1667533E4E193CD66ADBD5AF2500F8E91089D249064C9769905BCFFDC821ECFDA3E18B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OP_Forcer-3.215E.jar:Zone.Identifier

Path C:\Users\Admin\Downloads\OP_Forcer-3.215E.jar:Zone.Identifier
Size 323B
SHA256 5933b45f294c6436113d5f1dd53e284c17d8a2525e149d5d24be36d0a5fe376f
MD5 106f3c698e1060bf9959aff6eafaa8ce
SHA1 7d7b000ca709515a748f3f2adea83883bdcd45f9
SHA512 374ca79d2d785e0915a55f56f44443b235a73bfd46a77c3191cbb1180f0719f8a85acbb40c3a236d1c3c583e85ceea163837ba50ef7c99a104c72727863c4412
TLSH
T15FE0205B4CD08601553D1560F47FD4B5F1CBDD4E443181589D3848C3971047D4894817
MD5 SHA1 SHA512 TLSH

Submit Download