Analysis

  • max time kernel
    299s
  • max time network
    310s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    01/05/2026, 09:03

General

  • Target
    AceSetup.exe
  • Size 11.6MB
  • Sample260501-k1chfadx21
  • SHA256 0905405de360cb21b21745b132d6c154bdf61f381e600c2c686ab451ac39874d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 7 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

  • Checks computer location settings 2 TTPs 9 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 46 IoCs
  • Loads dropped DLL 47 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Checks whether UAC is enabled 1 TTPs 8 IoCs
  • Drops file in System32 directory 1 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 6 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 47 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of WriteProcessMemory 50 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Users\Admin\AppData\Local\Temp\AceSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\AceSetup.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4604
    • C:\Program Files\Ace4604_90148250\bin\updater.exe
      "C:\Program Files\Ace4604_90148250\bin\updater.exe" --install="appguid={908AAF3D-6DAA-4F36-A9B0-538D90BEC8C1}&appname=Chromium&needsadmin=prefers&iid=48976b2e-4534-11f1-be68-be53dfedede2@5aa48afa-4534-11f1-b604-3ef8143cbafb@adx_3d70a99c@pickup " --enable-logging --vmodule=*/components/winhttp/*=1,*/components/update_client/*=2,*/chrome/enterprise_companion/*=2,*/chrome/updater/*=2
      2⤵
      • Executes dropped EXE
      • Checks whether UAC is enabled
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:3348
      • C:\Program Files\Ace4604_90148250\bin\updater.exe
        "C:\Program Files\Ace4604_90148250\bin\updater.exe" --crash-handler --system "--database=C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\Crashpad" --url=https://clients2.google.com/cr/staging_report --annotation=prod=AceUpdater --annotation=ver=143.0.7514.0 "--attachment=C:\Program Files (x86)\Ace\AceUpdater\updater.log" --initial-client-data=0x210,0x234,0x238,0x1f0,0x23c,0x7ff6390082ac,0x7ff6390082b8,0x7ff6390082c8
        3⤵
        • Executes dropped EXE
        PID:1820
      • C:\Program Files\Ace\Ace\Application\ace.exe
        "C:\Program Files\Ace\Ace\Application\ace.exe" --from-installer --iid=48976b2e-4534-11f1-be68-be53dfedede2@5aa48afa-4534-11f1-b604-3ef8143cbafb@adx_3d70a99c@pickup
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • Adds Run key to start application
        • Checks processor information in registry
        • Enumerates system info in registry
        • Modifies data under HKEY_USERS
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:1568
        • C:\Program Files\Ace\Ace\Application\ace.exe
          "C:\Program Files\Ace\Ace\Application\ace.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Ace\Ace\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Ace\Ace\User Data\Crashpad" --annotation=plat=Win64 --annotation=prod=Ace --annotation=ver=143.0.7516.1 --initial-client-data=0xf4,0xf8,0xfc,0xd0,0x100,0x7ffab9ebd758,0x7ffab9ebd764,0x7ffab9ebd770
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5268
        • C:\Program Files\Ace\Ace\Application\ace.exe
          "C:\Program Files\Ace\Ace\Application\ace.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1788,i,1679631863081857104,12409466324659217782,262144 --field-trial-handle=2012,i,13843514401602677744,15508213551153776206,262144 --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2008 /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1768
        • C:\Program Files\Ace\Ace\Application\ace.exe
          "C:\Program Files\Ace\Ace\Application\ace.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --start-stack-profiler --metrics-shmem-handle=2236,i,7961720214743958126,661313117487913659,524288 --field-trial-handle=2012,i,13843514401602677744,15508213551153776206,262144 --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2304 /prefetch:3
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Time Discovery
          PID:1052
        • C:\Program Files\Ace\Ace\Application\ace.exe
          "C:\Program Files\Ace\Ace\Application\ace.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2444,i,1785284330962556325,5580452947526761076,524288 --field-trial-handle=2012,i,13843514401602677744,15508213551153776206,262144 --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2532 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1784
        • C:\Program Files\Ace\Ace\Application\ace.exe
          "C:\Program Files\Ace\Ace\Application\ace.exe" --type=renderer --force-high-res-timeticks=disabled --start-stack-profiler --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3248,i,14730395393469577625,13838342527954216082,2097152 --field-trial-handle=2012,i,13843514401602677744,15508213551153776206,262144 --variations-seed-version --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3320 /prefetch:1
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3952
        • C:\Program Files\Ace\Ace\Application\ace.exe
          "C:\Program Files\Ace\Ace\Application\ace.exe" --type=renderer --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3260,i,3305243797664902465,15227188873780529769,2097152 --field-trial-handle=2012,i,13843514401602677744,15508213551153776206,262144 --variations-seed-version --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3356 /prefetch:1
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4532
        • C:\Program Files\Ace\Ace\Application\ace.exe
          "C:\Program Files\Ace\Ace\Application\ace.exe" --type=renderer --extension-process --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3228,i,12605460591584085004,1698499832475123837,2097152 --field-trial-handle=2012,i,13843514401602677744,15508213551153776206,262144 --variations-seed-version --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4508 /prefetch:2
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5748
        • C:\Program Files\Ace\Ace\Application\ace.exe
          "C:\Program Files\Ace\Ace\Application\ace.exe" --type=renderer --extension-process --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4660,i,1340041737217261421,12015623364551127506,2097152 --field-trial-handle=2012,i,13843514401602677744,15508213551153776206,262144 --variations-seed-version --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4688 /prefetch:2
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          PID:6276
        • C:\Program Files\Ace\Ace\Application\ace.exe
          "C:\Program Files\Ace\Ace\Application\ace.exe" --type=renderer --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4908,i,11587267663182907485,3156314791481002220,2097152 --field-trial-handle=2012,i,13843514401602677744,15508213551153776206,262144 --variations-seed-version --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4932 /prefetch:1
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          PID:6740
        • C:\Program Files\Ace\Ace\Application\ace.exe
          "C:\Program Files\Ace\Ace\Application\ace.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5576,i,2200553847434891512,17943889288341036061,524288 --field-trial-handle=2012,i,13843514401602677744,15508213551153776206,262144 --variations-seed-version --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=5636 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5224
        • C:\Program Files\Ace\Ace\Application\ace.exe
          "C:\Program Files\Ace\Ace\Application\ace.exe" --type=renderer --instant-process --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5804,i,9511669696705344614,13960761809463348522,2097152 --field-trial-handle=2012,i,13843514401602677744,15508213551153776206,262144 --variations-seed-version --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5880 /prefetch:1
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3876
        • C:\Program Files\Ace\Ace\Application\ace.exe
          "C:\Program Files\Ace\Ace\Application\ace.exe" --type=renderer --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6104,i,15787820332302032489,2285328715553029990,2097152 --field-trial-handle=2012,i,13843514401602677744,15508213551153776206,262144 --variations-seed-version --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=6128 /prefetch:1
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4484
        • C:\Program Files\Ace\Ace\Application\ace.exe
          "C:\Program Files\Ace\Ace\Application\ace.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4952,i,4159527624077003129,1820432384384730690,524288 --field-trial-handle=2012,i,13843514401602677744,15508213551153776206,262144 --variations-seed-version --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=6388 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:7028
        • C:\Program Files\Ace\Ace\Application\143.0.7516.1\Installer\chrmstp.exe
          "C:\Program Files\Ace\Ace\Application\143.0.7516.1\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --force-configure-user-settings
          4⤵
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:3908
          • C:\Program Files\Ace\Ace\Application\143.0.7516.1\Installer\chrmstp.exe
            "C:\Program Files\Ace\Ace\Application\143.0.7516.1\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --annotation=plat=Win64 --annotation=prod=Ace --annotation=ver=143.0.7516.1 "--attachment=C:\Program Files\chromium_installer.log" --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff754aec5c4,0x7ff754aec5d0,0x7ff754aec5e0
            5⤵
            • Executes dropped EXE
            PID:5620
          • C:\Program Files\Ace\Ace\Application\143.0.7516.1\Installer\chrmstp.exe
            "C:\Program Files\Ace\Ace\Application\143.0.7516.1\Installer\chrmstp.exe" --system-level --verbose-logging --installerdata="C:\Program Files\Ace\Ace\Application\master_preferences" --create-shortcuts=1 --install-level=0
            5⤵
            • Executes dropped EXE
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of WriteProcessMemory
            PID:4744
            • C:\Program Files\Ace\Ace\Application\143.0.7516.1\Installer\chrmstp.exe
              "C:\Program Files\Ace\Ace\Application\143.0.7516.1\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --annotation=plat=Win64 --annotation=prod=Ace --annotation=ver=143.0.7516.1 "--attachment=C:\Program Files\chromium_installer.log" --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff754aec5c4,0x7ff754aec5d0,0x7ff754aec5e0
              6⤵
              • Executes dropped EXE
              PID:4052
        • C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe
          "C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe" --wake-all --system
          4⤵
          • Executes dropped EXE
          • Checks whether UAC is enabled
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of WriteProcessMemory
          PID:4856
          • C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe
            "C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe" --crash-handler --system "--database=C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\Crashpad" --url=https://clients2.google.com/cr/staging_report --annotation=prod=AceUpdater --annotation=ver=143.0.7514.0 "--attachment=C:\Program Files (x86)\Ace\AceUpdater\updater.log" --initial-client-data=0x238,0x23c,0x240,0x214,0x244,0x7ff6a3c782ac,0x7ff6a3c782b8,0x7ff6a3c782c8
            5⤵
            • Executes dropped EXE
            PID:4916
          • C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe
            "C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe" --wake --system
            5⤵
            • Executes dropped EXE
            • Checks whether UAC is enabled
            • Drops file in Program Files directory
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of WriteProcessMemory
            PID:2916
            • C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe
              "C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe" --crash-handler --system "--database=C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\Crashpad" --url=https://clients2.google.com/cr/staging_report --annotation=prod=AceUpdater --annotation=ver=143.0.7514.0 "--attachment=C:\Program Files (x86)\Ace\AceUpdater\updater.log" --initial-client-data=0x230,0x234,0x238,0x20c,0x23c,0x7ff6a3c782ac,0x7ff6a3c782b8,0x7ff6a3c782c8
              6⤵
              • Executes dropped EXE
              PID:6000
        • C:\Program Files\Ace\Ace\Application\ace.exe
          "C:\Program Files\Ace\Ace\Application\ace.exe" --type=renderer --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6296,i,16375047930762514287,13168129935805164376,2097152 --field-trial-handle=2012,i,13843514401602677744,15508213551153776206,262144 --variations-seed-version --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=6760 /prefetch:1
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          PID:6664
        • C:\Program Files\Ace\Ace\Application\ace.exe
          "C:\Program Files\Ace\Ace\Application\ace.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6184,i,13685956250299065847,268128592363630125,262144 --field-trial-handle=2012,i,13843514401602677744,15508213551153776206,262144 --variations-seed-version --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=6220 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: EnumeratesProcesses
          PID:7028
        • C:\Program Files\Ace\Ace\Application\ace.exe
          "C:\Program Files\Ace\Ace\Application\ace.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6108,i,3992416247897904848,6279454115858790515,524288 --field-trial-handle=2012,i,13843514401602677744,15508213551153776206,262144 --variations-seed-version --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=6152 /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1832
  • C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe
    "C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe" --system --windows-service --service=update-internal
    1⤵
    • Executes dropped EXE
    • Checks whether UAC is enabled
    • Drops file in Program Files directory
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:5592
    • C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe
      "C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe" --crash-handler --system "--database=C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\Crashpad" --url=https://clients2.google.com/cr/staging_report --annotation=prod=AceUpdater --annotation=ver=143.0.7514.0 "--attachment=C:\Program Files (x86)\Ace\AceUpdater\updater.log" --initial-client-data=0x230,0x234,0x238,0x20c,0x23c,0x7ff6a3c782ac,0x7ff6a3c782b8,0x7ff6a3c782c8
      2⤵
      • Executes dropped EXE
      PID:4836
  • C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe
    "C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe" --system --windows-service --service=update
    1⤵
    • Executes dropped EXE
    • Checks whether UAC is enabled
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:5276
    • C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe
      "C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe" --crash-handler --system "--database=C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\Crashpad" --url=https://clients2.google.com/cr/staging_report --annotation=prod=AceUpdater --annotation=ver=143.0.7514.0 "--attachment=C:\Program Files (x86)\Ace\AceUpdater\updater.log" --initial-client-data=0x230,0x234,0x238,0x20c,0x23c,0x7ff6a3c782ac,0x7ff6a3c782b8,0x7ff6a3c782c8
      2⤵
      • Executes dropped EXE
      PID:4140
    • C:\Program Files\updater_chrome_Unpacker_BeginUnzipping5276_1626310694\mini_installer.exe
      "C:\Program Files\updater_chrome_Unpacker_BeginUnzipping5276_1626310694\mini_installer.exe" --do-not-launch-chrome
      2⤵
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:5208
      • C:\Program Files\updater_chrome_Unpacker_BeginUnzipping5276_1626310694\CR_E5C95.tmp\setup.exe
        "C:\Program Files\updater_chrome_Unpacker_BeginUnzipping5276_1626310694\CR_E5C95.tmp\setup.exe" --install-archive="C:\Program Files\updater_chrome_Unpacker_BeginUnzipping5276_1626310694\CR_E5C95.tmp\CHROME.PACKED.7Z" --do-not-launch-chrome
        3⤵
        • Boot or Logon Autostart Execution: Active Setup
        • Executes dropped EXE
        • Drops file in Program Files directory
        • System Network Configuration Discovery: Internet Connection Discovery
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:5512
        • C:\Program Files\updater_chrome_Unpacker_BeginUnzipping5276_1626310694\CR_E5C95.tmp\setup.exe
          "C:\Program Files\updater_chrome_Unpacker_BeginUnzipping5276_1626310694\CR_E5C95.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --annotation=plat=Win64 --annotation=prod=Ace --annotation=ver=143.0.7516.1 "--attachment=C:\Program Files\chromium_installer.log" --initial-client-data=0x254,0x258,0x25c,0x230,0x260,0x7ff7c938c5c4,0x7ff7c938c5d0,0x7ff7c938c5e0
          4⤵
          • Executes dropped EXE
          PID:3724
        • C:\Program Files\updater_chrome_Unpacker_BeginUnzipping5276_1626310694\CR_E5C95.tmp\setup.exe
          "C:\Program Files\updater_chrome_Unpacker_BeginUnzipping5276_1626310694\CR_E5C95.tmp\setup.exe" --system-level --verbose-logging --create-shortcuts=0 --install-level=1
          4⤵
          • Executes dropped EXE
          • Drops file in System32 directory
          • Modifies data under HKEY_USERS
          • Suspicious use of WriteProcessMemory
          PID:6924
          • C:\Program Files\updater_chrome_Unpacker_BeginUnzipping5276_1626310694\CR_E5C95.tmp\setup.exe
            "C:\Program Files\updater_chrome_Unpacker_BeginUnzipping5276_1626310694\CR_E5C95.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\Crashpad" --annotation=plat=Win64 --annotation=prod=Ace --annotation=ver=143.0.7516.1 "--attachment=C:\Program Files\chromium_installer.log" --initial-client-data=0x254,0x258,0x25c,0x230,0x260,0x7ff7c938c5c4,0x7ff7c938c5d0,0x7ff7c938c5e0
            5⤵
            • Executes dropped EXE
            PID:6944
  • C:\Program Files\Ace\Ace\Application\143.0.7516.1\elevation_service.exe
    "C:\Program Files\Ace\Ace\Application\143.0.7516.1\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:5644
  • C:\Program Files\Ace\Ace\Application\143.0.7516.1\elevation_service.exe
    "C:\Program Files\Ace\Ace\Application\143.0.7516.1\elevation_service.exe"
    1⤵
    • Executes dropped EXE
    PID:5416
  • C:\Program Files\Ace\Ace\Application\ace.exe
    "C:\Program Files\Ace\Ace\Application\ace.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:6188
    • C:\Program Files\Ace\Ace\Application\ace.exe
      "C:\Program Files\Ace\Ace\Application\ace.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Ace\Ace\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Ace\Ace\User Data\Crashpad" --annotation=plat=Win64 --annotation=prod=Ace --annotation=ver=143.0.7516.1 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffab9ebd758,0x7ffab9ebd764,0x7ffab9ebd770
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:1944
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
    1⤵
      PID:5076
    • C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe
      "C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe" --system --windows-service --service=update
      1⤵
      • Executes dropped EXE
      • Checks whether UAC is enabled
      • Drops file in Program Files directory
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:2776
      • C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe
        "C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe" --crash-handler --system "--database=C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\Crashpad" --url=https://clients2.google.com/cr/staging_report --annotation=prod=AceUpdater --annotation=ver=143.0.7514.0 "--attachment=C:\Program Files (x86)\Ace\AceUpdater\updater.log" --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x7ff6a3c782ac,0x7ff6a3c782b8,0x7ff6a3c782c8
        2⤵
        • Executes dropped EXE
        • Drops file in Program Files directory
        PID:6004
    • C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe
      "C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe" --system --windows-service --service=update-internal
      1⤵
      • Executes dropped EXE
      • Checks whether UAC is enabled
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:4380
      • C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe
        "C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe" --crash-handler --system "--database=C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\Crashpad" --url=https://clients2.google.com/cr/staging_report --annotation=prod=AceUpdater --annotation=ver=143.0.7514.0 "--attachment=C:\Program Files (x86)\Ace\AceUpdater\updater.log" --initial-client-data=0x230,0x234,0x238,0x20c,0x23c,0x7ff6a3c782ac,0x7ff6a3c782b8,0x7ff6a3c782c8
        2⤵
        • Executes dropped EXE
        PID:6120
    • C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe
      "C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe" --system --windows-service --service=update
      1⤵
      • Executes dropped EXE
      • Checks whether UAC is enabled
      • Drops file in Program Files directory
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:6184
      • C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe
        "C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\updater.exe" --crash-handler --system "--database=C:\Program Files (x86)\Ace\AceUpdater\143.0.7514.0\Crashpad" --url=https://clients2.google.com/cr/staging_report --annotation=prod=AceUpdater --annotation=ver=143.0.7514.0 "--attachment=C:\Program Files (x86)\Ace\AceUpdater\updater.log" --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x7ff6a3c782ac,0x7ff6a3c782b8,0x7ff6a3c782c8
        2⤵
        • Executes dropped EXE
        PID:6308

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          metadata.json

          • Path C:\Program Files (x86)\Ace\AceUpdater\crx_cache\metadata.json
          • Size 130B
          • SHA256 a23017557e0661309a28a75f64ef860840294d8f9a55e4b54073e2d95aa6d84f
          • MD5 SHA1 SHA512 TLSH

          metadata.json~RFe5835ff.TMP

          • Path C:\Program Files (x86)\Ace\AceUpdater\crx_cache\metadata.json~RFe5835ff.TMP
          • Size 13B
          • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
          • MD5 SHA1 SHA512

          prefs.json

          • Path C:\Program Files (x86)\Ace\AceUpdater\prefs.json
          • Size 1KB
          • SHA256 06eea0c08d5cfe4776afc4eca126960acafdbf4493e2fff1979b86d811ef4c33
          • MD5 SHA1 SHA512 TLSH

          prefs.json

          • Path C:\Program Files (x86)\Ace\AceUpdater\prefs.json
          • Size 660B
          • SHA256 acf8338ed764b6d0de1ca5062aa7d253e559ed67d6034721920ae3e6fe73b27e
          • MD5 SHA1 SHA512 TLSH

          prefs.json

          • Path C:\Program Files (x86)\Ace\AceUpdater\prefs.json
          • Size 625B
          • SHA256 851efa0dd8a5699bbe1f7916abd67404a8634256082adb8efc80c487fdaba527
          • MD5 SHA1 SHA512 TLSH

          prefs.json

          • Path C:\Program Files (x86)\Ace\AceUpdater\prefs.json
          • Size 593B
          • SHA256 3ba90cd4cc56ae1bf2abf2ccc57eeae1780f1f057af5b5fe773e90e1630227ba
          • MD5 SHA1 SHA512 TLSH

          prefs.json

          • Path C:\Program Files (x86)\Ace\AceUpdater\prefs.json
          • Size 49B
          • SHA256 c60a6b88bca5da2484854e7265bb82642fd1b929156bafe8c11e5e721b7a8d28
          • MD5 SHA1 SHA512

          prefs.json

          • Path C:\Program Files (x86)\Ace\AceUpdater\prefs.json
          • Size 625B
          • SHA256 c50a25467fe1b7635d4de8d4a4046cf58604d75f7111315e32a58dcc166e9e4a
          • MD5 SHA1 SHA512 TLSH

          prefs.json

          • Path C:\Program Files (x86)\Ace\AceUpdater\prefs.json
          • Size 83B
          • SHA256 c49632af4674fe9d9ce718228d2b74aa8519ce1e0c2f74d9ed8798b26bdf0b50
          • MD5 SHA1 SHA512 TLSH

          updater.log

          • Path C:\Program Files (x86)\Ace\AceUpdater\updater.log
          • Size 1KB
          • SHA256 61c69d8a3caae9013aa9a91fdcd0aefa98dc04a88f69d08704be3c8b8e128bde
          • MD5 SHA1 SHA512 TLSH

          updater.log

          • Path C:\Program Files (x86)\Ace\AceUpdater\updater.log
          • Size 1KB
          • SHA256 7c1cdc0229f4e84626bf2cda603686a6503a4dd8323ddafbaa3b0544b77db044
          • MD5 SHA1 SHA512 TLSH

          updater.log

          • Path C:\Program Files (x86)\Ace\AceUpdater\updater.log
          • Size 5KB
          • SHA256 5480792529515f6a86fccdfc926c49245d8e5045781f784a26ba6afe13653023
          • MD5 SHA1 SHA512 SSDEEP TLSH

          updater.log

          • Path C:\Program Files (x86)\Ace\AceUpdater\updater.log
          • Size 5KB
          • SHA256 d8d4daadc7a312afb67ac7aa241c8d4c190d42debd84c4206e160194a11938c1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          updater.log

          • Path C:\Program Files (x86)\Ace\AceUpdater\updater.log
          • Size 10KB
          • SHA256 c776b30d222f28767b17398148551b68af2f08c0106ec3058536ceb589d297be
          • MD5 SHA1 SHA512 SSDEEP TLSH

          updater.log

          • Path C:\Program Files (x86)\Ace\AceUpdater\updater.log
          • Size 11KB
          • SHA256 8c86947ce4445d7fb68993fefc92b7cbe40a8eb02d697c51d0e14ff97cb9a476
          • MD5 SHA1 SHA512 SSDEEP TLSH

          uninstall.cmd

          • Path C:\Program Files\Ace4604_90148250\bin\uninstall.cmd
          • Size 618B
          • SHA256 4c7fb6edc3bdc0f12b11b3669f27dc7274ee0642ee0e00fe5b1a04d96a009dbd
          • MD5 SHA1 SHA512 TLSH

          updater.exe

          • Path C:\Program Files\Ace4604_90148250\bin\updater.exe
          • Size 6.6MB
          • SHA256 aced4ef02fa4e8b6040f6fd3be126cb68c8686778a7e2fdc6274e3f06c7742f4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Logo.png

          • Path C:\Program Files\Ace\Ace\Application\143.0.7516.1\VisualElements\Logo.png
          • Size 42KB
          • SHA256 8b8ac441ba761f2f7e40110f4a1804ee72995366a41eae7a8acb4f9d16342244
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ace.exe

          • Path C:\Program Files\Ace\Ace\Application\ace.exe
          • Size 2.8MB
          • SHA256 0d2b33d655518f6b06765685a1bb684516634a671f72fb46b9c625cbd19f6b59
          • MD5 SHA1 SHA512 SSDEEP TLSH

          143.0.7516.1.manifest

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\143.0.7516.1.manifest
          • Size 216B
          • SHA256 9bb8f478da4367fb2c60d09abe781152cb265a704584fdb9248fba9741e84683
          • MD5 SHA1 SHA512 TLSH

          external_extensions.json

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Extensions\external_extensions.json
          • Size 99B
          • SHA256 a68cafd7d78d5c671c2560656653f2a4d83ab66d87a8728356a88fb1f477b3e6
          • MD5 SHA1 SHA512 TLSH

          iwa-key-distribution.pb

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\IwaKeyDistribution\iwa-key-distribution.pb
          • Size 2KB
          • SHA256 30d0f685cd9208a4b448c227bfd93dd8cabbb587f316f69b918dac9e6498dfe1
          • MD5 SHA1 SHA512 TLSH

          manifest.json

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\IwaKeyDistribution\manifest.json
          • Size 115B
          • SHA256 7b461d2e0395c8eb52683b5cd86abfbdcc4a88513890fecf11121c71a9860108
          • MD5 SHA1 SHA512 TLSH

          af.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\af.pak
          • Size 519KB
          • SHA256 58717ad5ea012bed0941173ddba26708197965c871ce55c90b618954f9680474
          • MD5 SHA1 SHA512 SSDEEP TLSH

          am.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\am.pak
          • Size 842KB
          • SHA256 ec626e4b628b731e08e9f950c81a202a38b3fcc03d43732d0d4fdb302c4c0ca6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          am_MASCULINE.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\am_MASCULINE.pak
          • Size 18B
          • SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
          • MD5 SHA1 SHA512

          ar.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\ar.pak
          • Size 933KB
          • SHA256 f0d42017a5b6b46eda29276f3d9ecdda3334217c3d7dd598f473d9662fda7f51
          • MD5 SHA1 SHA512 SSDEEP TLSH

          bg.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\bg.pak
          • Size 963KB
          • SHA256 6457dc1a86d8f3e84cf538d2c3dc91a6960451dd7d545128b72ab9f6bfa27e95
          • MD5 SHA1 SHA512 SSDEEP TLSH

          bn.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\bn.pak
          • Size 1.2MB
          • SHA256 007816390e51518ecfbd6df0e196a8427cfe6e9918163faa64982148c7ce5b79
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ca.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\ca.pak
          • Size 591KB
          • SHA256 2720405a00c6fd766e956e90a4baf652780be4c860d256d0a3e5aea19cea6dce
          • MD5 SHA1 SHA512 SSDEEP TLSH

          cs.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\cs.pak
          • Size 602KB
          • SHA256 c4f4d693cec14245bf6bc6480cea64dc7e6bb5f03d3e65e32b2ed1fcee07661f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          da.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\da.pak
          • Size 549KB
          • SHA256 23db06edcaf47039d30a23c744cb952ec335e74ab0d2440ad292dcec09ca8d9b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          de.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\de.pak
          • Size 593KB
          • SHA256 702e746a4b883104d896fa868cc30077609e638fe2d335b9a18a35653a162824
          • MD5 SHA1 SHA512 SSDEEP TLSH

          el.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\el.pak
          • Size 1.0MB
          • SHA256 ebf84984122b59bdec01a5ff609586deacefdec1129e8cc2ba557f64bfbd3ec2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          en-GB.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\en-GB.pak
          • Size 472KB
          • SHA256 f599de40a8f1e4fcbb2d914c3a168f8419115c76aa87a32ef8ec975711626b7e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          en-US.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\en-US.pak
          • Size 477KB
          • SHA256 601e1af6865949ef52d4103a89e94f4ce25bdd56c36bc5c67d6d2494155243dc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          es-419.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\es-419.pak
          • Size 578KB
          • SHA256 3ae26ac2c88477cf560849ae33e3a86a9340692827f80e3325bd81ee402446d6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          es.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\es.pak
          • Size 574KB
          • SHA256 7eb06fc5f4a1bc69128ac1860ac60e9290b6ab5fd3bcef03123d4c7b68a1b387
          • MD5 SHA1 SHA512 SSDEEP TLSH

          et.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\et.pak
          • Size 527KB
          • SHA256 934320fdc6aa5927bc9a513d91a4f564761b4cdedf21262a5010818c0d88fb52
          • MD5 SHA1 SHA512 SSDEEP TLSH

          fa.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\fa.pak
          • Size 864KB
          • SHA256 66d1ec3294388b0e491eab3a473a3941472040d2f3829246a26f25ac670e7375
          • MD5 SHA1 SHA512 SSDEEP TLSH

          fi.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\fi.pak
          • Size 533KB
          • SHA256 2e1222d930bfaefe695938e9def2d1dd9216d6405386199cd9536c9ace3cf75a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          fil.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\fil.pak
          • Size 606KB
          • SHA256 1397fcaffefe6a2396f2b6eb9eb24d2d86d01e709b22537d44f091e323363e76
          • MD5 SHA1 SHA512 SSDEEP TLSH

          fr.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\fr.pak
          • Size 624KB
          • SHA256 6341c9d2f3dd41079362d7c3395e2689221575e9b2f3e3aa321b171822d083dc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          gu.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\gu.pak
          • Size 1.2MB
          • SHA256 45039fae9305c87fff4fb678b66a6a673f2a0abe71b44f3c9eef4dfc45a0e8bd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          he.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\he.pak
          • Size 759KB
          • SHA256 17f9f74e11f4074b2a2e8cd29e83bc3f9f0f1aa9150591d32ab326a7eae79ed3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          hi.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\hi.pak
          • Size 1.3MB
          • SHA256 8fd2ebeaaeea96d7eef0dd9eaf89ef737a875146f0dec0a9dc7ac8aa40f6c286
          • MD5 SHA1 SHA512 SSDEEP TLSH

          hr.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\hr.pak
          • Size 582KB
          • SHA256 f4e33e827c28052f7b57477c6f89bdb85942812a03da9dd7ecdf92654d323f70
          • MD5 SHA1 SHA512 SSDEEP TLSH

          hu.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\hu.pak
          • Size 626KB
          • SHA256 a7e46a26d70f2e44963e6ff7d78ced0ee4190762f681f9dc00da67fb37aab556
          • MD5 SHA1 SHA512 SSDEEP TLSH

          id.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\id.pak
          • Size 517KB
          • SHA256 2b41e1812654d4cdfeed250ad489490af53a4e0726d8f5a3ab2ef45262e22859
          • MD5 SHA1 SHA512 SSDEEP TLSH

          it.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\it.pak
          • Size 574KB
          • SHA256 1bc80ca45fc4df94266c6c7faf2369af7452d0d8f517e7e3d333dd1fca28268e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ja.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\ja.pak
          • Size 695KB
          • SHA256 9582c8b0f8363de5d147b3ad89484ac930d030e71d80dab2a8ebd81d3665d63a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          kn.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\kn.pak
          • Size 1.4MB
          • SHA256 57f0eb1da60431cc099a8d436959a57df06aa3c1c49f91132333f04a287d9817
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ko.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\ko.pak
          • Size 587KB
          • SHA256 0c2f97f4da0cfbd0777b54b6f73309a5988fb01a7ac0734f176e3e1fc1e3aa74
          • MD5 SHA1 SHA512 SSDEEP TLSH

          lt.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\lt.pak
          • Size 630KB
          • SHA256 27a726d710d08ed353d29e8b85513223dad674e3efb5cdefdf962a5292f3aa81
          • MD5 SHA1 SHA512 SSDEEP TLSH

          lv.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\lv.pak
          • Size 629KB
          • SHA256 0b80e2b010571207a1054e6eb5a5fec8ad07f99885b080e7230f88a7d9dd32da
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ml.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\ml.pak
          • Size 1.4MB
          • SHA256 0f5c3ceeffb6c6ce280c9e56755ad01e4ab52754300d94ecc26e665495156289
          • MD5 SHA1 SHA512 SSDEEP TLSH

          mr.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\mr.pak
          • Size 1.2MB
          • SHA256 138c7b6f55eed61d13f36ae4e3f14f6b17525201f877e2137fea669af79d4370
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ms.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\ms.pak
          • Size 543KB
          • SHA256 29ed081c8ed915bb206be96831a313f1d8d295e39dc58b6a1eafa038a3c9fbd7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          nb.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\nb.pak
          • Size 523KB
          • SHA256 112dc371006e3046c3a8108b431cc592fe0fdf0cda3594ff2da60c2b65226522
          • MD5 SHA1 SHA512 SSDEEP TLSH

          nl.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\nl.pak
          • Size 544KB
          • SHA256 8b1632bd6117abceae67d7bae7bc0d7d0ae152eeae59e3ec363bb19c9b55fe7d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          pl.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\pl.pak
          • Size 605KB
          • SHA256 fde3e0cfccd6430acce72219453d8a322ce615daa67aef315325b1069b43ed01
          • MD5 SHA1 SHA512 SSDEEP TLSH

          pt-BR.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\pt-BR.pak
          • Size 566KB
          • SHA256 03ff14315c7e6b2d0df74f074ecbe5383c8d00fe05782c5f905a811d7e6f7f7b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          pt-PT.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\pt-PT.pak
          • Size 571KB
          • SHA256 8debbc652641417abd7817067e0c2052df5f0ff5471590adf89370125087d134
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ro.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\ro.pak
          • Size 592KB
          • SHA256 1f9121129b88aad47e9065e2275df285ff65ed7695c86b1ca73d7af4d27ccf61
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ru.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\ru.pak
          • Size 975KB
          • SHA256 0ad70aef3da29d55bdf77619ac1ac17d6357df629a74efc10212cfca1ff7175f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sk.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\sk.pak
          • Size 612KB
          • SHA256 24340f864e15c2f4708c5604bc3c9663261a96205f54fc3176096d816c50501e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sl.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\sl.pak
          • Size 587KB
          • SHA256 cc392ca0736fb08ebcc36508865cd6c8e81b798c105487deb142566c973e9e4b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sr.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\sr.pak
          • Size 903KB
          • SHA256 56ffe1df55318de6f6a0d66a81785483286c84aa1fb4ab900fc30fa2c46c68fc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sv.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\sv.pak
          • Size 527KB
          • SHA256 abdfd7a0011fbd68be4d08d61a37b89f514cbdb3570a59abfede5acebea7bdc6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sw.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\sw.pak
          • Size 558KB
          • SHA256 1ecab7f11e0ada2de5ef680b04d7768fa21a05796206885906fc46a86d73ccf4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ta.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\ta.pak
          • Size 1.4MB
          • SHA256 830f10e72970cdfd444df8ba9c75dbe196c0a1acc08a6d7ebfb0d75ad49ec262
          • MD5 SHA1 SHA512 SSDEEP TLSH

          te.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\te.pak
          • Size 1.3MB
          • SHA256 d95a75a00a0088291a65c2ebc3b5c3abcd87a82acf5bbbf75f6bcd00953d4145
          • MD5 SHA1 SHA512 SSDEEP TLSH

          th.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\th.pak
          • Size 1.1MB
          • SHA256 dbcdb9cf3a83564d7e2cbd1d14883538a89f2bd59e9d5b056d7a3f0407972d71
          • MD5 SHA1 SHA512 SSDEEP TLSH

          tr.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\tr.pak
          • Size 567KB
          • SHA256 e268fb94ce864fbec88914429466b6f5d8c4480879c3e9d504cedf9a081b302c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          uk.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\uk.pak
          • Size 980KB
          • SHA256 a22cf201d255dc8932d064dd64140199fefb7d3793ebc942a9c1590acab77643
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ur.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\ur.pak
          • Size 852KB
          • SHA256 100c2b8c19b4521510e3a40d3bc97702d9540880628466d4dfbb0eb3ce76b11d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vi.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\vi.pak
          • Size 676KB
          • SHA256 2ee9934fbceeb5d97e82288309cbd9fb5597757b5cca209871094b109b0f75d7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          zh-CN.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\zh-CN.pak
          • Size 483KB
          • SHA256 eeeb340c954d4876a5e6fb5956ce6510b7dd6414acf060d476b56a843713ecbe
          • MD5 SHA1 SHA512 SSDEEP TLSH

          zh-TW.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\Locales\zh-TW.pak
          • Size 478KB
          • SHA256 d8d347bacf5000612903a9fa7e79f4e8d2709bab3057cdc5cb4ad96b85b16ec3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          manifest.json

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\MEIPreload\manifest.json
          • Size 238B
          • SHA256 44844cf3dde6e80087ae0e6bf0d9326d7ef7d23326d24ac83af0850be26923d2
          • MD5 SHA1 SHA512 TLSH

          preloaded_data.pb

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\MEIPreload\preloaded_data.pb
          • Size 8KB
          • SHA256 c6070a157b4e28d16fbccbd233e93846ddb070c85e1a1bc64469b7a5f1424fad
          • MD5 SHA1 SHA512 SSDEEP TLSH

          manifest.json

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\PrivacySandboxAttestationsPreloaded\manifest.json
          • Size 122B
          • SHA256 51c311a4ba03140bcd1c827f8d93dba50cadda736925903b26e95609275dbffd
          • MD5 SHA1 SHA512 TLSH

          privacy-sandbox-attestations.dat

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\PrivacySandboxAttestationsPreloaded\privacy-sandbox-attestations.dat
          • Size 7KB
          • SHA256 59e345dc13aedee9ea46b92e58300ecaca944aaea9384c7af885400ac2ae8806
          • MD5 SHA1 SHA512 SSDEEP TLSH

          SmallLogo.png

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\VisualElements\SmallLogo.png
          • Size 7KB
          • SHA256 2e00adc5c672d9bc044139ff0b8fce588bdc679b73416dddf79c8f56f7b9acab
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ace.exe.sig

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\ace.exe.sig
          • Size 1KB
          • SHA256 f7b3eb7dfaa3807fd5ab382c2037786d6dff66d723bced3101915c7f8ad5ad30
          • MD5 SHA1 SHA512 TLSH

          ace_ai_assistant_uninstaller.exe

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\ace_ai_assistant_uninstaller.exe
          • Size 28.8MB
          • SHA256 e9f7696aa05364cb4f5ed77ab984c3afd199f6e430a25a07e1a1ef32c89bde04
          • MD5 SHA1 SHA512 SSDEEP TLSH

          chrome.dll.sig

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\chrome.dll.sig
          • Size 1KB
          • SHA256 356d3e8b92ec18762c0254bcd93c5bce39e7ac908d94e37bb1757ca253b60731
          • MD5 SHA1 SHA512 TLSH

          chrome_100_percent.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\chrome_100_percent.pak
          • Size 689KB
          • SHA256 25a03f547fd40409f77b558599d56af454b0a1f19aefb41fea8efde668d31d93
          • MD5 SHA1 SHA512 SSDEEP TLSH

          chrome_200_percent.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\chrome_200_percent.pak
          • Size 1.1MB
          • SHA256 ae2f3b974ea5609652fa47b0d89224eab66c3721698e250367320057b08faefb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          chrome_elf.dll

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\chrome_elf.dll
          • Size 1.3MB
          • SHA256 320bb862fda344dc29430e11590b3fa4edd008339cd999b874120951e7f84c86
          • MD5 SHA1 SHA512 SSDEEP TLSH

          chrome_pwa_launcher.exe

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\chrome_pwa_launcher.exe
          • Size 1.4MB
          • SHA256 aafc362bf329f1b441864ac3b825ddb9cf414ae90169057d01437de16beb9063
          • MD5 SHA1 SHA512 SSDEEP TLSH

          chrome_wer.dll

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\chrome_wer.dll
          • Size 115KB
          • SHA256 2503653dc00a36a9614b27768ac3fe5edd5424170376ee6a3c6607933aa5d783
          • MD5 SHA1 SHA512 SSDEEP TLSH

          d3dcompiler_47.dll

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\d3dcompiler_47.dll
          • Size 4.5MB
          • SHA256 202112d5b031b6728055b8bbcf495adfbac3899d35bb79f24910a994f549ee2f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          dxcompiler.dll

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\dxcompiler.dll
          • Size 23.2MB
          • SHA256 19431316ab939b5f182735fdd850d596d90a56e90886ae557b79b3261ac02c6e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          dxil.dll

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\dxil.dll
          • Size 1.4MB
          • SHA256 fe24b6429f9d7ecfadc906f6a7aa363bf30a0a826f78f807f522bbb7ec16f7e7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          elevated_tracing_service.exe

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\elevated_tracing_service.exe
          • Size 3.4MB
          • SHA256 da25ca94a58b2599a5f5209a126f8b53fa759d5c835a763784d1d574be7ddd8d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          elevation_service.exe

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\elevation_service.exe
          • Size 1.9MB
          • SHA256 c6aaffc87a9efbc34d42bf49e93443ab820a164907784fb2b31b6b6a96ae2d98
          • MD5 SHA1 SHA512 SSDEEP TLSH

          eventlog_provider.dll

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\eventlog_provider.dll
          • Size 13KB
          • SHA256 a82b967e7291296bc8ef0f187c20b98d474ed04d648b7c2b2ca982a6f88e962a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          icudtl.dat

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\icudtl.dat
          • Size 10.3MB
          • SHA256 1cf67874b5a87a8363a86fb3f81e3cbbed54d389062dab8fb52308d5cf8c8612
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libEGL.dll

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\libEGL.dll
          • Size 519KB
          • SHA256 27c882dec83caf0d025691a4f1d7e5e234fee41e64ffa1d96e3cd12569485a4e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libGLESv2.dll

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\libGLESv2.dll
          • Size 8.1MB
          • SHA256 2f08c2db228a81a6d5e57afc0bc2c470d7f97fd6a582ce257cacd003310de2ff
          • MD5 SHA1 SHA512 SSDEEP TLSH

          notification_helper.exe

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\notification_helper.exe
          • Size 1.3MB
          • SHA256 d635ed37dd947e0fc01c15c7ad784a7aaf6d2825396353893ba1daf2ee80d0b2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          nova_server.exe

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\nova_server.exe
          • Size 28.9MB
          • SHA256 8a5b385baa0401d9ec1adb6f096647f2be5153ea4522a7473b45b189ad6007f2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          resources.pak

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources.pak
          • Size 12.0MB
          • SHA256 1107e0c12418bbd984f9e9f13d97dceccc378b15654330ba9b0edc9f85006c1b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          acePagesBridge.ts-loader.js

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\acePagesBridge.ts-loader.js
          • Size 334B
          • SHA256 7eb841e6192ec49939cd160b1152db8fb36436f59436f8a1e2e0e0f80c7533b6
          • MD5 SHA1 SHA512 TLSH

          acePagesBridge.ts.js

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\acePagesBridge.ts.js
          • Size 1KB
          • SHA256 148ef071109b12dcbc4127a8c53b2fdd22ae146a999db7bb11fdd0590244f409
          • MD5 SHA1 SHA512 TLSH

          active_dark.png

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\assets\active_dark.png
          • Size 604B
          • SHA256 fa28dac567e830223d125951fd55ff1ac065563e3abf4ac161a1f3daf53273c7
          • MD5 SHA1 SHA512 TLSH

          active_light.png

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\assets\active_light.png
          • Size 586B
          • SHA256 5127cc94d0391c3daed4ffaebe0dc53f8bf04d907c2c180003eeada95a9868ab
          • MD5 SHA1 SHA512 TLSH

          block_light.png

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\assets\block_light.png
          • Size 668B
          • SHA256 fcbb505991e6746ef50485a9097d6e4680f62f020292c055e2c391dfe9713564
          • MD5 SHA1 SHA512 TLSH

          blocked_dark.png

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\assets\blocked_dark.png
          • Size 665B
          • SHA256 7579d0b262b9eb2888480d0b0b68aa9d224543f8b378dd8593805200972c9c70
          • MD5 SHA1 SHA512 TLSH

          popup-darkmode-active.svg

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\assets\popup-darkmode-active.svg
          • Size 1KB
          • SHA256 25be74e463eacb032f0beb016733b615cac9c630ccbf28ea0a27b02244fdacd9
          • MD5 SHA1 SHA512 TLSH

          popup-darkmode-disable.svg

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\assets\popup-darkmode-disable.svg
          • Size 1KB
          • SHA256 08930a76dbd1c3e5b6a14002ae56d655aaada64db6ee762da33be2110a3aa9df
          • MD5 SHA1 SHA512 TLSH

          popup-darkmode-protected.svg

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\assets\popup-darkmode-protected.svg
          • Size 2KB
          • SHA256 22544c8849fdad1a6d75b1fdb8112c599b10db64fcd609f8a24dc781a0dd352d
          • MD5 SHA1 SHA512 TLSH

          popup-lightmode-active.svg

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\assets\popup-lightmode-active.svg
          • Size 1KB
          • SHA256 7362cfb54053cb1cda15459c24a29184950f14b0a4f9b0cc10d163148f47d9af
          • MD5 SHA1 SHA512 TLSH

          popup-lightmode-disable.svg

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\assets\popup-lightmode-disable.svg
          • Size 1KB
          • SHA256 d9679842c8100ea11ffa9fdd5334d4f0b882bbc12550e76e37ddd5aeb947ae08
          • MD5 SHA1 SHA512 TLSH

          popup-lightmode-protected.svg

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\assets\popup-lightmode-protected.svg
          • Size 2KB
          • SHA256 5ccc39e54c3e2f0857b7f2b9472cee0f47245a54c83ca5d905dfbc37384490b9
          • MD5 SHA1 SHA512 TLSH

          proteced_dark.png

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\assets\proteced_dark.png
          • Size 577B
          • SHA256 b1411eb846981b289d092f8ce4cf33b0ea6b64d3d3a6d4632d082be2f0799dfa
          • MD5 SHA1 SHA512 TLSH

          proteced_light.png

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\assets\proteced_light.png
          • Size 579B
          • SHA256 c6022f0187b62eeeec22ab51c0d18d61ab43d718b73d41e4261f7c94748f8e14
          • MD5 SHA1 SHA512 TLSH

          shield128.png

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\assets\shield128.png
          • Size 2KB
          • SHA256 dbd9cc7deef84f90d75b3afc9f1e957b840dbb5a0f779a1ebd6402b0bf4830cc
          • MD5 SHA1 SHA512 TLSH

          shield16.png

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\assets\shield16.png
          • Size 441B
          • SHA256 701375419506363c6d9b077bed35c84b21397bb5ae4a13812ffc6a7a4709317f
          • MD5 SHA1 SHA512 TLSH

          shield32.png

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\assets\shield32.png
          • Size 721B
          • SHA256 19cef1bffd3dc0ba38364edc2f99bdad4781de6081e339f923a007a98f257fb1
          • MD5 SHA1 SHA512 TLSH

          shield48.png

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\assets\shield48.png
          • Size 1KB
          • SHA256 0724c24f1159e3e771c311c82f39bf39068b35aac28ee8c5116217a9e9c3d417
          • MD5 SHA1 SHA512 TLSH

          consts.js

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\consts.js
          • Size 655B
          • SHA256 112a6c664160832afe4aa7d3ac2ede9b5ea1291139aeedd70925b96df126abaf
          • MD5 SHA1 SHA512 TLSH

          index.css

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\index.css
          • Size 10KB
          • SHA256 6c170996e09981c08cb2260dbdf17810fddf225465cdd5a4a22163c87916922a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          index.html.js

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\index.html.js
          • Size 205KB
          • SHA256 3dda1d54ed89a71a0c7a17c63adae9d3737d7c99150b20fa4ba8e36f98c76476
          • MD5 SHA1 SHA512 SSDEEP TLSH

          manifest.json

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\manifest.json
          • Size 2KB
          • SHA256 991b0b8118a638935433edc40be608a497413bb69e2d832b5267d6995861e1ed
          • MD5 SHA1 SHA512 TLSH

          ace_protected.json

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\rules\ace_protected.json
          • Size 414B
          • SHA256 f6d607d822f796c862292a38a2baa6281996261299114c2d7497abdfe6c2e339
          • MD5 SHA1 SHA512 TLSH

          easylist.json

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\rules\easylist.json
          • Size 11.0MB
          • SHA256 62ea1096ebe12c870751a9fdf9c676bfcde13427269b083fa920ce65cc12bdba
          • MD5 SHA1 SHA512 SSDEEP TLSH

          easyprivacy.json

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\rules\easyprivacy.json
          • Size 10.3MB
          • SHA256 254d3abac150fec0ce0db74f5d0128698a588f9f12a83d359f839d7634b65f66
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ublock_badware.json

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\rules\ublock_badware.json
          • Size 37KB
          • SHA256 b6abb7db52ef9a89bf3315a0e9f4763566a725e8770e5e6344e8f34cb355fdd8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ublock_filters.json

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\rules\ublock_filters.json
          • Size 112KB
          • SHA256 1262436f6059bf23a31b5f8228d7c890e36c3b3aba29130a12fb54fa87a1886f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ublock_privacy.json

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\rules\ublock_privacy.json
          • Size 163KB
          • SHA256 1eb934bb590f648b8827f48866aba13792721ddbb39c320765cdaa2a80d6c00b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          service-worker-loader.js

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\service-worker-loader.js
          • Size 33B
          • SHA256 d12cd47945df68012fdb96981bfb9b24b750aa0520c311314c85e020f7b211e7
          • MD5 SHA1 SHA512

          service_worker.js.js

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\service_worker.js.js
          • Size 13KB
          • SHA256 836028970389d45ab8c6be37c4188659bb0dea82f86fb4ec03c33a2022fedb12
          • MD5 SHA1 SHA512 SSDEEP TLSH

          index.html

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\src\popup\index.html
          • Size 428B
          • SHA256 218d1d0e156d8e0297e3a7fdb1f5318f3798c1031bd59bfea906e6041a054942
          • MD5 SHA1 SHA512 TLSH

          types.js

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\resources\ace_adblock\types.js
          • Size 212B
          • SHA256 688cae9fe935539ef8f15f871935d2a038d8eff084c7a708fbff1d3a086bd1d6
          • MD5 SHA1 SHA512 TLSH

          snapshot_blob.bin

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\snapshot_blob.bin
          • Size 330KB
          • SHA256 b8f0a67cb83764b98d239dc2b8dbd2bca77c99fe85860413d541ececd80e7748
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vk_swiftshader.dll

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\vk_swiftshader.dll
          • Size 5.3MB
          • SHA256 236dbce8cbf2a7dc257a63731e2b297cc476116bfc293e5a54126ed0b302f6a5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vk_swiftshader_icd.json

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\vk_swiftshader_icd.json
          • Size 106B
          • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
          • MD5 SHA1 SHA512 TLSH

          vulkan-1.dll

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\143.0.7516.1\vulkan-1.dll
          • Size 935KB
          • SHA256 c6e5ebc2da4ec5de5d02c4ec96fdcc1bfea781cd929dafca0f9838fc82310bef
          • MD5 SHA1 SHA512 SSDEEP TLSH

          chrome_proxy.exe

          • Path C:\Program Files\Ace\Ace\Temp\source5512_2138319101\Chrome-bin\chrome_proxy.exe
          • Size 1.1MB
          • SHA256 7352edf7b86b355be5c2de799fa517b6fecc2cbb67a9120ce12f6869ef87cecc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          settings.dat

          • Path C:\Program Files\Crashpad\settings.dat
          • Size 40B
          • SHA256 06b242504dd98ee926448088cdeece4b72847e29e3fc89bcc8e74aa906e33e28
          • MD5 SHA1 SHA512

          setup.exe

          • Path C:\Program Files\updater_chrome_Unpacker_BeginUnzipping5276_1626310694\CR_E5C95.tmp\setup.exe
          • Size 4.4MB
          • SHA256 1a5adfb4abf0fdf381362a9977db551deed2905d02aec37d38ec1bd20063fcee
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Ace.lnk

          • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ace.lnk
          • Size 2KB
          • SHA256 a896396185b1b763bcd3678d21ec7f80c9b3e9a8909086b606d597ab8777cb1d
          • MD5 SHA1 SHA512 TLSH

          0bbdf192-337d-4bdc-9379-007c2a53bcc9.tmp

          • Path C:\Users\Admin\AppData\Local\Ace\Ace\User Data\Default\0bbdf192-337d-4bdc-9379-007c2a53bcc9.tmp
          • Size 182KB
          • SHA256 de849030d2b606c22e3e2b43de9cba5b484071999531566e99faf5a17fdadab8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          21547f58-1c1c-4b4e-b935-e2d76dc86a3b.tmp

          • Path C:\Users\Admin\AppData\Local\Ace\Ace\User Data\Default\21547f58-1c1c-4b4e-b935-e2d76dc86a3b.tmp
          • Size 10KB
          • SHA256 dfd4767aacf0a1384d7470634b7838b24f36a43b7b52ea589509c8ff765392be
          • MD5 SHA1 SHA512 SSDEEP TLSH

          f_000002

          • Path C:\Users\Admin\AppData\Local\Ace\Ace\User Data\Default\Cache\Cache_Data\f_000002
          • Size 1024KB
          • SHA256 6058ebcfba86a17fcaf6330b3ad2af64a0c9b3af0aa032253d832584be5a3a6e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          the-real-index

          • Path C:\Users\Admin\AppData\Local\Ace\Ace\User Data\Default\Code Cache\js\index-dir\the-real-index
          • Size 504B
          • SHA256 bf0e3e463239cd1bc2a43882ae2624b51982c260d18e834aa2d054299b2210c4
          • MD5 SHA1 SHA512 TLSH

          the-real-index

          • Path C:\Users\Admin\AppData\Local\Ace\Ace\User Data\Default\Code Cache\js\index-dir\the-real-index
          • Size 48B
          • SHA256 d8967d474adf46c6b9af6c68b469429a07ad8a0d3832a19bc8c1443dec5a866b
          • MD5 SHA1 SHA512

          Network Persistent State

          • Path C:\Users\Admin\AppData\Local\Ace\Ace\User Data\Default\Network\Network Persistent State
          • Size 5KB
          • SHA256 5ab177fc1d7d1b9d3ead08720a4a598f9f53d7ef990528170db6e6f079573458
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Network Persistent State~RFe5a0dfb.TMP

          • Path C:\Users\Admin\AppData\Local\Ace\Ace\User Data\Default\Network\Network Persistent State~RFe5a0dfb.TMP
          • Size 59B
          • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
          • MD5 SHA1 SHA512 TLSH

          SCT Auditing Pending Reports

          • Path C:\Users\Admin\AppData\Local\Ace\Ace\User Data\Default\Network\SCT Auditing Pending Reports
          • Size 2B
          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
          • MD5 SHA1 SHA512

          the-real-index

          • Path C:\Users\Admin\AppData\Local\Ace\Ace\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
          • Size 336B
          • SHA256 d45cc375acc8b11e5f94b0da50694383c8f6a166f678f4dad26623488d9db883
          • MD5 SHA1 SHA512 TLSH

          the-real-index~RFe594b38.TMP

          • Path C:\Users\Admin\AppData\Local\Ace\Ace\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe594b38.TMP
          • Size 72B
          • SHA256 26f920e0ffd54db3189213762e88b41887530e9e4fe77848aae2c1094e9a5725
          • MD5 SHA1 SHA512 TLSH

          CURRENT

          • Path C:\Users\Admin\AppData\Local\Ace\Ace\User Data\Default\Site Characteristics Database\CURRENT
          • Size 16B
          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
          • MD5 SHA1 SHA512

          MANIFEST-000001

          • Path C:\Users\Admin\AppData\Local\Ace\Ace\User Data\Default\Site Characteristics Database\MANIFEST-000001
          • Size 41B
          • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
          • MD5 SHA1 SHA512

          data_0

          • Path C:\Users\Admin\AppData\Local\Ace\Ace\User Data\GrShaderCache\data_0
          • Size 8KB
          • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
          • MD5 SHA1 SHA512 SSDEEP

          data_1

          • Path C:\Users\Admin\AppData\Local\Ace\Ace\User Data\GrShaderCache\data_1
          • Size 264KB
          • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
          • MD5 SHA1 SHA512 SSDEEP

          data_2

          • Path C:\Users\Admin\AppData\Local\Ace\Ace\User Data\GrShaderCache\data_2
          • Size 8KB
          • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
          • MD5 SHA1 SHA512 SSDEEP

          data_3

          • Path C:\Users\Admin\AppData\Local\Ace\Ace\User Data\GrShaderCache\data_3
          • Size 8KB
          • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
          • MD5 SHA1 SHA512 SSDEEP

          Local State

          • Path C:\Users\Admin\AppData\Local\Ace\Ace\User Data\Local State
          • Size 7KB
          • SHA256 7d4fcde22de15310a7dd8a9bb7156cc50a7c91ef7aab03ffcead5b200b5630b7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Local State

          • Path C:\Users\Admin\AppData\Local\Ace\Ace\User Data\Local State
          • Size 7KB
          • SHA256 2281f8a3f093000e8b5a1f812dda7888abfaca8bb627e525a667890436b381dc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Local State

          • Path C:\Users\Admin\AppData\Local\Ace\Ace\User Data\Local State
          • Size 3KB
          • SHA256 41890bffd81772dd7b9bb391ec798ce4b09ac62845723ecd475648eb07ee7650
          • MD5 SHA1 SHA512 TLSH

          Local State~RFe591c29.TMP

          • Path C:\Users\Admin\AppData\Local\Ace\Ace\User Data\Local State~RFe591c29.TMP
          • Size 1KB
          • SHA256 371a079cd3b861abcd18d1f6a88e6ce444286eeab9068063d374b3b8a2ed6056
          • MD5 SHA1 SHA512 TLSH

          memory/1568-1943-0x00000237CBA10000-0x00000237CBA37000-memory.dmp

          memory/1568-1942-0x00000237CB9D0000-0x00000237CBA0B000-memory.dmp

          memory/1768-1958-0x000001888DFA0000-0x000001888DFAC000-memory.dmp

          memory/1784-1648-0x00007FFAD5760000-0x00007FFAD5761000-memory.dmp

          memory/1784-1647-0x00007FFAD70D0000-0x00007FFAD70D1000-memory.dmp

          memory/1832-2223-0x00000282DD870000-0x00000282DD872000-memory.dmp

          memory/1832-2222-0x00000282DD870000-0x00000282DD872000-memory.dmp

          memory/1832-2224-0x00000282DD870000-0x00000282DD872000-memory.dmp

          memory/3348-47-0x000001FDB8BD0000-0x000001FDB8BDC000-memory.dmp

          memory/3876-1967-0x000001730DC90000-0x000001730DC9C000-memory.dmp

          memory/3952-1959-0x00000285BD660000-0x00000285BD66C000-memory.dmp

          memory/4484-1968-0x000001EEE84C0000-0x000001EEE84CC000-memory.dmp

          memory/4532-1960-0x0000020C01B60000-0x0000020C01B6C000-memory.dmp

          memory/5076-1969-0x0000025CEA530000-0x0000025CEA5DC000-memory.dmp

          memory/5276-48-0x0000021574A20000-0x0000021574A5B000-memory.dmp

          memory/5748-1961-0x000001BA9E260000-0x000001BA9E26C000-memory.dmp

          memory/6184-2011-0x0000022CDECE0000-0x0000022CDED1B000-memory.dmp

          memory/6276-1962-0x0000019E81CB0000-0x0000019E81CBC000-memory.dmp

          memory/6664-2046-0x0000016381CB0000-0x0000016381CBC000-memory.dmp

          memory/6740-1897-0x00000251B37A0000-0x00000251B37AC000-memory.dmp

          memory/7028-2159-0x0000010E2AAA0000-0x0000010E2AAA1000-memory.dmp

          memory/7028-2158-0x0000010E2AAA0000-0x0000010E2AAA1000-memory.dmp

          memory/7028-2157-0x0000010E2AAA0000-0x0000010E2AAA1000-memory.dmp

          memory/7028-2156-0x0000010E2AAA0000-0x0000010E2AAA1000-memory.dmp

          memory/7028-2154-0x0000010E2AAA0000-0x0000010E2AAA1000-memory.dmp

          memory/7028-2155-0x0000010E2AAA0000-0x0000010E2AAA1000-memory.dmp

          memory/7028-2161-0x0000010E2A200000-0x0000010E2A20C000-memory.dmp

          memory/7028-2160-0x0000010E2AAA0000-0x0000010E2AAA1000-memory.dmp

          memory/7028-2148-0x0000010E2AAA0000-0x0000010E2AAA1000-memory.dmp

          memory/7028-2150-0x0000010E2AAA0000-0x0000010E2AAA1000-memory.dmp

          memory/7028-2149-0x0000010E2AAA0000-0x0000010E2AAA1000-memory.dmp