hxxps://descordok[.]vercel[.]app

Analysis

user interaction
yes
max time kernel
899s
max time network
877s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
03/05/2026, 02:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://descordok.vercel.app
Sample260503-cs4yqaes6n

Score

6^/10

discovery persistence

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
1	camo.githubusercontent.com
8	raw.githubusercontent.com
111	raw.githubusercontent.com

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5392	chrome.exe

Checks processor information in registry 2 TTPs 28 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134222484907636115"	chrome.exe

Modifies registry class 9 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-650218026-1419908266-2856590055-1000\{01509A91-FF38-43C9-B353-B6807A6AD9D1}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

NTFS ADS 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\A-Worm 0.1.7z:Zone.Identifier	chrome.exe
File created	C:\Users\Admin\Downloads\A-Worm 0.1(1).7z:Zone.Identifier	firefox.exe
File created	C:\Users\Admin\Downloads\A-Worm 0.1(1)(1).7z:Zone.Identifier	firefox.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
5200	chrome.exe
5200	chrome.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4372	OpenWith.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs

pid	Process
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe
Token: SeShutdownPrivilege	1660	chrome.exe
Token: SeCreatePagefilePrivilege	1660	chrome.exe

Suspicious use of FindShellTrayWindow 51 IoCs

pid	Process
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
3260	firefox.exe
3260	firefox.exe
3260	firefox.exe
3260	firefox.exe
3260	firefox.exe
3260	firefox.exe
3260	firefox.exe
3260	firefox.exe
3260	firefox.exe
3260	firefox.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe
1660	chrome.exe

Suspicious use of SetWindowsHookEx 18 IoCs

pid	Process
5076	OpenWith.exe
4372	OpenWith.exe
4372	OpenWith.exe
4372	OpenWith.exe
4372	OpenWith.exe
4372	OpenWith.exe
4372	OpenWith.exe
4372	OpenWith.exe
4372	OpenWith.exe
4372	OpenWith.exe
4372	OpenWith.exe
4372	OpenWith.exe
4372	OpenWith.exe
4372	OpenWith.exe
3260	firefox.exe
3260	firefox.exe
3260	firefox.exe
3260	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1660 wrote to memory of 4344	1660	chrome.exe	79
PID 1660 wrote to memory of 5392	1660	chrome.exe	80
PID 1660 wrote to memory of 804	1660	chrome.exe	81
PID 1660 wrote to memory of 804	1660	chrome.exe	81
PID 1660 wrote to memory of 2764	1660	chrome.exe	82
PID 1660 wrote to memory of 2764	1660	chrome.exe	82
PID 1660 wrote to memory of 2312	1660	chrome.exe	84
PID 1660 wrote to memory of 3416	1660	chrome.exe	85
PID 1660 wrote to memory of 2312	1660	chrome.exe	84
PID 1660 wrote to memory of 3416	1660	chrome.exe	85
PID 1660 wrote to memory of 2224	1660	chrome.exe	87
PID 1660 wrote to memory of 2224	1660	chrome.exe	87
PID 1660 wrote to memory of 1392	1660	chrome.exe	88
PID 1660 wrote to memory of 3640	1660	chrome.exe	90
PID 1660 wrote to memory of 3640	1660	chrome.exe	90
PID 1660 wrote to memory of 1536	1660	chrome.exe	91
PID 1660 wrote to memory of 1536	1660	chrome.exe	91
PID 1660 wrote to memory of 2204	1660	chrome.exe	92
PID 1660 wrote to memory of 6004	1660	chrome.exe	93
PID 1660 wrote to memory of 1872	1660	chrome.exe	94
PID 1660 wrote to memory of 892	1660	chrome.exe	95
PID 1660 wrote to memory of 892	1660	chrome.exe	95
PID 1660 wrote to memory of 3544	1660	chrome.exe	96
PID 1660 wrote to memory of 3544	1660	chrome.exe	96
PID 1660 wrote to memory of 5200	1660	chrome.exe	97
PID 1660 wrote to memory of 4336	1660	chrome.exe	98
PID 1660 wrote to memory of 4336	1660	chrome.exe	98
PID 1660 wrote to memory of 5552	1660	chrome.exe	99
PID 1660 wrote to memory of 5552	1660	chrome.exe	99
PID 1660 wrote to memory of 2852	1660	chrome.exe	100
PID 1660 wrote to memory of 2852	1660	chrome.exe	100
PID 1660 wrote to memory of 3916	1660	chrome.exe	101
PID 4372 wrote to memory of 6056	4372	OpenWith.exe	106
PID 6056 wrote to memory of 3260	6056	firefox.exe	107
PID 6056 wrote to memory of 3260	6056	firefox.exe	107
PID 3260 wrote to memory of 4392	3260	firefox.exe	109
PID 3260 wrote to memory of 4392	3260	firefox.exe	109
PID 3260 wrote to memory of 4392	3260	firefox.exe	109
PID 3260 wrote to memory of 5304	3260	firefox.exe	110
PID 3260 wrote to memory of 5304	3260	firefox.exe	110
PID 3260 wrote to memory of 5304	3260	firefox.exe	110
PID 3260 wrote to memory of 5304	3260	firefox.exe	110
PID 3260 wrote to memory of 3596	3260	firefox.exe	111
PID 3260 wrote to memory of 3596	3260	firefox.exe	111
PID 3260 wrote to memory of 3596	3260	firefox.exe	111
PID 3260 wrote to memory of 3596	3260	firefox.exe	111
PID 3260 wrote to memory of 2872	3260	firefox.exe	112
PID 3260 wrote to memory of 2872	3260	firefox.exe	112
PID 3260 wrote to memory of 2872	3260	firefox.exe	112
PID 3260 wrote to memory of 4268	3260	firefox.exe	113
PID 3260 wrote to memory of 4268	3260	firefox.exe	113
PID 3260 wrote to memory of 4268	3260	firefox.exe	113
PID 3260 wrote to memory of 4268	3260	firefox.exe	113
PID 3260 wrote to memory of 2740	3260	firefox.exe	114
PID 3260 wrote to memory of 2740	3260	firefox.exe	114
PID 3260 wrote to memory of 2740	3260	firefox.exe	114
PID 3260 wrote to memory of 2740	3260	firefox.exe	114
PID 3260 wrote to memory of 5800	3260	firefox.exe	115
PID 3260 wrote to memory of 5800	3260	firefox.exe	115
PID 3260 wrote to memory of 5800	3260	firefox.exe	115
PID 3260 wrote to memory of 5800	3260	firefox.exe	115
PID 3260 wrote to memory of 236	3260	firefox.exe	116
PID 3260 wrote to memory of 236	3260	firefox.exe	116
PID 3260 wrote to memory of 236	3260	firefox.exe	116

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://descordok.vercel.app
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffab18ac728,0x7ffab18ac734,0x7ffab18ac740
  2⤵
  PID:4344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1952,i,6237571644337819252,7803829428448274448,524288 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2072 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1640,i,1614235935796164406,4950526838986910875,262144 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2000 /prefetch:2
  2⤵
  PID:804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2340,i,5698390270540548365,2974395339660423966,524288 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2352 /prefetch:13
  2⤵
  PID:2764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3212,i,13558468699732572840,8310484480665482318,2097152 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:2312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3220,i,3297554919938333329,13182229669887947340,2097152 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:3416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4384,i,16451657876438012862,4418907436394081957,2097152 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4396 /prefetch:9
  2⤵
  PID:2224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5256,i,10098037288930114453,15360542940062672280,524288 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5156 /prefetch:14
  2⤵
  PID:1392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5272,i,10310717269374577760,6194186188565598847,2097152 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5556 /prefetch:1
  2⤵
  PID:3640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5620,i,9028576296071816515,3153922989285637488,2097152 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5672 /prefetch:1
  2⤵
  PID:1536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5548,i,2459241205902725345,17139674044310196937,524288 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5540 /prefetch:14
  2⤵
  PID:2204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5568,i,9269982661119355969,13358486508452814922,524288 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5468 /prefetch:14
  2⤵
  PID:6004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5588,i,1801577565494109766,7339845175037446957,524288 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5288 /prefetch:14
  2⤵
  PID:1872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5492,i,8109360314862176990,8209085050999994408,2097152 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5468 /prefetch:1
  2⤵
  PID:892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5784,i,4155655241080855585,5606092123820572923,2097152 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1092 /prefetch:1
  2⤵
  PID:3544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5492,i,14447746616771714528,16450964567291161202,262144 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5604 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3084,i,6298375510064252395,14495291780729420168,2097152 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1020 /prefetch:1
  2⤵
  PID:4336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5940,i,15831745402985829155,10980813905304531098,2097152 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6000 /prefetch:1
  2⤵
  PID:5552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5972,i,1628349234953324184,13773762844469447902,524288 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6044 /prefetch:14
  2⤵
  PID:2852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4448,i,7907745439203052946,10679931442235483415,524288 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3196 /prefetch:14
  2⤵
  - NTFS ADS
  PID:3916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6192,i,11896521689105655905,6033537121981591159,2097152 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3332 /prefetch:1
  2⤵
  PID:4276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6400,i,3299891452347932140,2995692671158722458,2097152 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6412 /prefetch:1
  2⤵
  PID:4420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6580,i,10365015846130028814,17220371580102056198,2097152 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5708,i,9850171866974680831,13790544153349954411,2097152 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5772 /prefetch:1
  2⤵
  PID:5808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=3040,i,5381675899510305004,13385526053093234569,2097152 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2168 /prefetch:1
  2⤵
  PID:4636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6548,i,5577648376252296123,10307881138815651392,524288 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6588 /prefetch:14
  2⤵
  - Modifies registry class
  PID:3444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4408,i,12804655451880741921,11700664719087749486,524288 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6432 /prefetch:12
  2⤵
  PID:5792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6896,i,16419701862573868182,11754620146064541523,2097152 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6776 /prefetch:1
  2⤵
  PID:5604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=6780,i,11877398606027780202,912857108756063125,2097152 --field-trial-handle=2004,i,12441711459032124558,7823907368791243659,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6840 /prefetch:1
  2⤵
  PID:1804

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2220

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1412

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:5076

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3488

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4372
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\Downloads\A-Worm 0.1.7z"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:6056
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\Downloads\A-Worm 0.1.7z"
    3⤵
    - Checks processor information in registry
    - NTFS ADS
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:3260
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1976 -prefsLen 27097 -prefMapHandle 1980 -prefMapSize 270279 -ipcHandle 1940 -initialChannelId {0f76b895-6c6e-498d-b3cb-1550781d1916} -parentPid 3260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3260" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
      4⤵
      PID:4392
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2428 -prefsLen 27133 -prefMapHandle 2432 -prefMapSize 270279 -ipcHandle 2440 -initialChannelId {dd5e73d6-f6ca-41b9-97f9-f34799f290d4} -parentPid 3260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3260" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
      4⤵
      Checks processor information in registry
      PID:5304
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3716 -prefsLen 27274 -prefMapHandle 3720 -prefMapSize 270279 -jsInitHandle 3724 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3732 -initialChannelId {d26364d8-86dd-4916-a92e-7195ea0a0d72} -parentPid 3260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3260" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
      4⤵
      Checks processor information in registry
      PID:3596
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3880 -prefsLen 27274 -prefMapHandle 3884 -prefMapSize 270279 -ipcHandle 3952 -initialChannelId {bf09ba9c-b168-4b33-8f72-dcc43d9b70f4} -parentPid 3260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3260" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
      4⤵
      PID:2872
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4480 -prefsLen 34773 -prefMapHandle 4484 -prefMapSize 270279 -jsInitHandle 4488 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4496 -initialChannelId {7eafe56e-0eaa-42be-96d1-e772e1ceae6a} -parentPid 3260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3260" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
      4⤵
      Checks processor information in registry
      PID:4268
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5032 -prefsLen 34876 -prefMapHandle 5036 -prefMapSize 270279 -ipcHandle 3332 -initialChannelId {bda556bb-fef2-44e0-b822-9d0efd7c8c64} -parentPid 3260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3260" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
      4⤵
      Checks processor information in registry
      PID:2740
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2600 -prefsLen 32952 -prefMapHandle 2740 -prefMapSize 270279 -jsInitHandle 2748 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5524 -initialChannelId {fd10af12-99fb-4baf-9081-f683b424fc00} -parentPid 3260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3260" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
      4⤵
      Checks processor information in registry
      PID:5800
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5700 -prefsLen 32952 -prefMapHandle 5704 -prefMapSize 270279 -jsInitHandle 5708 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5716 -initialChannelId {ed82b402-cc06-479f-9eaf-913207b95108} -parentPid 3260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3260" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
      4⤵
      Checks processor information in registry
      PID:236
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5892 -prefsLen 32952 -prefMapHandle 5896 -prefMapSize 270279 -jsInitHandle 5900 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5908 -initialChannelId {56f5349a-f9a7-4d6b-a55f-82c0d11c2e5f} -parentPid 3260 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3260" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
      4⤵
      Checks processor information in registry
      PID:5400

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\Downloads\A-Worm 0.1(1).7z"
1⤵
PID:4812
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\Downloads\A-Worm 0.1(1).7z"
  2⤵
  - Checks processor information in registry
  PID:1696

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 2b0004c6fb4df8eb110845a219936edb80faf35567e9d38371cc5e6dc1891716
MD5 932d5cc59ef1bdc5770cdb9d02148ed6
SHA1 6308d101f6dfd761db32e9dbb6a52eae066ab33c
SHA512 00488ca6cab482e4e6953cb2d72e3e463b5096f6882d2292e488f3cd5bf897ebec8a5cb34a36bcde0f210993d52f560ebc830252d45293ab7ac08096a4f09a8f
TLSH
T105E02BA6CE29DC3708FD4B3820404301EA5503161754891F773D470E8FB163E464982D
MD5 SHA1 SHA512 TLSH

Submit Download

f_000020

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020
Size 21KB
SHA256 6463918226136e7b06e27647269e9b28d108fdb9418e40dce43a371db924b4b0
MD5 af72d17220d8441f5836593372376faa
SHA1 3a6dcb10a08718a44b9782cac5786ee549bc254c
SHA512 f91e1c86d0c6b23e7fedc5709dda5dc264fba9588de5cd4f6007044b416dd7a55094c2b4add47d50769597803f4a574389dc39155299b9327b7a118effb4178d
SSDEEP 384:Xb684eHwuKniWkk7PF0d0asgUxNu5asqiWs+bUNbYcg4XW6MBJp3L1xdCr:XO84eHw9nnkk7PF0Cf7ZsqzXbYhg4XW2
TLSH
T1EDA2D0E1097B98140783131FF161BC4A88B2D4C40559B0DE9DB3713782E6AF60F3636E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000023

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000023
Size 73KB
SHA256 68543fc7e7d9a3ac918b48dfce9faa0e85a98b81c1003907e4b798e32006d132
MD5 8eb8c569c01fd47ed65957a9333a1531
SHA1 15e3c90d1dc9dc45df4e9ab9d9f8d5e9687afe6a
SHA512 89badfc2da116828d616d6ed89c0633f32e99ac7f2f1d298f6e9ec42942e511000b62c2bdec1807f4930fba63644c1edbebbbd525be210cbd8c80a44ee537d6f
SSDEEP 1536:FaVtIv8HrqBXVxPIr9P5eFCzneRBaTJMwRU6zzAHT+mBYmN92LRKb:2XHeyr9PkFCzcaTqiUezAHqqYmE4
TLSH
T142730229E9F546D10C81BC22FBFF29627D254F1A6CD13A6C8591016553F38D8AB432EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000025

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000025
Size 64KB
SHA256 1b051d603256bbbc0e8b6b7aeaf88c648702d89f648d09da9b883240709a09b8
MD5 1f5b61f3756cadc0461dde7b34ac60f5
SHA1 c87522babc69df82da38ac6c8b1b486c9c4df93c
SHA512 fe5691f1b0aa70c52f4847633223f88190492cfa1d587c6270072c4102b1aafd7e8ea5ff738f879759399754198bab29cd1fc54080dc7a9744e61f32572fb0c9
SSDEEP 1536:1coUPxOi4bHGHu4N0hOzzaOi5mNP+IUC/yvGxHvFf5MP5:14HiGO4N0hO3aOgmNP+IUC2oHTMP5
TLSH
T1745302428D22E2155BFB3443FC384F74C8BD1439ADD47811B35DA9E01DEAEA5FA31868
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000071

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000071
Size 147KB
SHA256 f7282c580d5b0d004e1c2755b23c59dd000e6c40876d1c4f6469f0fa751cdd56
MD5 13c91639eb6807fe5ddb2932e3c6b871
SHA1 63678c8f166d06fc1e0a3ca742c6483259ac8c6e
SHA512 82adec201eceb796100765851489035469c12cfdf6528d97ae90e13df7f7a544dcd38f9d28579a832d9d98649e4d2b17dc5962fbec7498bf8f30bf43ff216295
SSDEEP 3072:MEC/uVqHrek04uBZmMFD+fH6ChZ8z1+wpQQkNZMOdXaoY+DC8:uuVKz2cw6lhCzppQQGaIqD+DC8
TLSH
T112E312DD51AF11A5754305F8A2BBCE50F7272676FE8332AB020A91CDE3C43764243A75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2bce5f8ef9aee4e7_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2bce5f8ef9aee4e7_0
Size 305B
SHA256 bca33932758beaf963d7106b80c6bc85fd939796cc9d41b9b113b9c1e8da2d57
MD5 e6b54a8a17a8c62132e251c76af08d51
SHA1 a7a40c6ee21b6fba1e91525e105724ff4da42960
SHA512 af00d25adf78abf5fa5897c58c6669a744eddb8dcd9d1f9acd9fd83404d9534e6e95ef7cdf08f1c58eeac0893baf5c5e01cbddbfef0532482ee1109e357dec7e
TLSH
T14BE0EBDF00D05852CD3A02B28DAA474E623304888AD8828D4041AAE2231B6D4D5CB967
MD5 SHA1 SHA512 TLSH

Submit Download

9eb5bb3225aa47d0_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\9eb5bb3225aa47d0_0
Size 58KB
SHA256 6b980af69f564ee621a62d1bc25d46478cbd0de51b8ced13b6600d16ed432851
MD5 19d0469b407e45ae1c55abe08370abfa
SHA1 36587e0c521e870444a594a4608a38cf2fc3affd
SHA512 539706bc558e49903f84a6ccdc184a1b05c0b7be310e285c17939cf4678166086c01bc3029f6658d8f7810bb1758e5ce8400c5bd78d15dd6be18240515eba6b6
SSDEEP 1536:rR9iBKXdbsMfYn3aVMWeV+m75Gb+FRKGbQymjZ2ek:rKBKtblsa7U7YCKqmjkt
TLSH
T1504319CFF2E2B77289E225E1049F5509A37E64686C84045E7915E7F0AF7098B503EF3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 54ae655bc9132901e257976dfd986154e3389df95d86a704b4fd436dbf18f298
MD5 95bef528f9d07122a711d862d9de2340
SHA1 f84b353be1e38dd50f9ed4ee33ddfeed42d5e17c
SHA512 fa9fc54c6747e18580578772f9a25cd29f637d8310bdd71c11f419b72dc1a1ddffc8513d68bd2e6aebac6844b67ff24ca03b9e81e76dfcbdf78f70f683435b35
TLSH
T1A321CC459F4B8375DFE90570BCF1CE632ED40964CA7C09EE86CDA85251232A45C41EE1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 864B
SHA256 76141c62f21f79f8463a7575ff4c8d6defde4b6686fdc1499506a4c0c43d99b4
MD5 3b24d6d7d7771fed2a3f6ff70830637c
SHA1 d84ef69766518a9d4119db318b36d133903884b5
SHA512 c83b6338a30ab9beb7492b81b865139f31bd25b532ba50a72314ca9bf6a677035c74d1a7979c174495c8477eac96876bee04db2c26de07dfcdb005957e9ec793
TLSH
T1A61149458F4E83B6CFB9497062F2CD573E104A794B7C09EE46CEA853112369424420F1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 bf0b52ac2c2067db3289936819c07e3d594c4666f23f9263cd6409abe096b1fd
MD5 5890bb149c4617ccf1cf8587191b146d
SHA1 b1d11ede94e1b91a6f75d36a4792d90b42449fa1
SHA512 273e439ede741a772a9aa5dd1f1e6b271761b8b7e539c78c20a17d091de0060aa48d0e0568c9d882476749620655a770a07e11210279e8a6e88c285131580b75
TLSH
T13231EE556F4F8370DFDE3570ACF28E53ADE40964DA2819ED478D9D121123EA45841EE0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 7691a559ed6d43eb54162877760f77a0ab702bd52288c3472175c68862ff718e
MD5 a15c27f10867f6d848c999dc11593128
SHA1 d62f0069b06fba34a004441ec1ea8099b33e3da0
SHA512 4beb32a6cf1ff02d810c45e2c0e607baa2a15130eef4451a0c18cafb735bd9939b1984be9f646415e28a22bb23cfb89b869f523891dcc3c25ac4ccb1eba93037
SSDEEP 192:tVdswsJjC5y1KeUtig9eCkzTZnnSWZMIIfz:tVdswwjC5y1Otig9eCkzTZnSWPIfz
TLSH
T19EE172B543A7C6E7EF947A74ACE2AD5734F24CD4781B1ACA46EBAC7724133F41044890
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 edd974b73f30bafc86758a4c9b9ecc2d37a266ee56b00ff305ecacffbd176823
MD5 0d4aa93807ceae4ba3e3c8de47af098a
SHA1 f138a242179b600fdcdf9e809703ad93b6f2c8f9
SHA512 f01280d7ea5acc6c5bc944d87039c52b5bb97554b0980ee3aeed9431bad1544f2f545da35274b0e9ef6e35f81b53ba3ffa5978d066b2deb0a5bb4169688be211
SSDEEP 96:VVzeNLTL79fGbU62zUXl47LxWCQU+d8V0wa5ZiMkoRVo:VVkLX7JmCgk7Q58VZ+ZIV
TLSH
T123B11AA55BAB46E7EF597A30ACF1EE5339F24C54B51B1ADE4AABAD3310033F415408A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 8bbccdd1774b4510ba9f0e52ed717d3c752d5b78869933cf6418bcb9d8f6718f
MD5 6605ebd00048e7aabed8e014e0b7a55c
SHA1 e24d1787f0489e730c17a97bec2ae98c8f228b01
SHA512 011e3144c7f898b3693ce271343042a8825cbf75318e40810f39d0d4d88efcff0aa12895de78083684d456176e68e7cb68d3b1a7c6abfd8b7a6c3e7eca936cfa
SSDEEP 96:YVzeNrsTIJuf9bIORGzYe5GUthZ8UaxqCr+l3tk8T0wnnMS5ZgMk/55fzh/:YVkrskJQNyGUthgXr0k8TZnnMWZe/XfN
TLSH
T1A1C14EB547A786E7EF987A706CE1BE5339F24DD4B91B1ACA4AEBAC7310133F41144890
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 5d762424ab2151fc8459b588e5a015f08595edd00f0752496268f9bea57a99ee
MD5 530ad67ff20a1062687eab093ba3bb18
SHA1 c3fa2e5270e02ec39ea83cb28e4746a993a8607a
SHA512 1ac1d452e76f8fdbb8c7e1e8ae2acf575448e3b5b878869d2144571e135d84b001b5d955fb8d24cb5e9100aa970f5c90e8a7534e3ebf7da9658592d7b47ad576
SSDEEP 96:VVzeNLTL79fGbU62zUXlctIZ87LxWCQU+d28V0wdn/B5ZiMk1uGfmV1:VVkLX7JmCgctIO7QR28VZdn/HZI1TfU
TLSH
T196B12BA54BAB4AE7DF487B306CE1EE9339F24D58B41B1ECA4BAB9D3310133F41548890
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 1e6187016120564f0c728d45a1f025bc078beabc9ad7f1b05f771e3da9b58fed
MD5 58b5bb42c416ac8f195a0129b6c9758d
SHA1 493b937a62f0160b5c41453b5948cbf2f46c3fa8
SHA512 afa37d448ad09cab416a692e2b0af5f27b124ca43406b20b2a2ee75c6a3527e9f694d19a90bf5afbff6ff6ac923b92199b4b2673729fa835da3f2209498a484a
SSDEEP 384:DuinhpgmpKMpJXJegDMum2m/1aIaEg7Tsp3px5R3S3OIruahIXIy1IpwTdxOGf0G:LRknT5qR6YyWgkMViqWivXn
TLSH
T15F42AEF7C3E9C52DC91156F4AB15AE2ECE1D0924431C3D6AC8D8AF4B93E2471E21179E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 8fcaaaa257d64359a22676c4690782bd8302bd1bd1a0e73f0324765821bfc1c7
MD5 8e794e987753f54f0bc0f52de99c8b5b
SHA1 829ff440d08d2a2b43bd7a13b89ac2f246b6bfa4
SHA512 7bc9419f0574fdfa21947be254e018c1ff7327840f00e5b9c423d146395b449c8064415624c4ef5a7dfa286c1ef53a027f551dfa9652662f7ae30aacbf5e0b70
SSDEEP 192:DuinhpgmpKMpJjrJegXaIaEg7Tsp3px5R3SqmOIruaPDohEIpmeI8IWIyvwfPmNj:DuinhpgmpKMpJXJegXaIaEg7Tsp3px5p
TLSH
T19022BFF7C3E8C52D891156F4AB15AF2ECE1D1924431C3D6AC8D8AF4B93E2471E21578E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 16KB
SHA256 7ecc92f1c0a06eafab0ba8c511f0045c13209d701bb8ba7c3c5b3fe0c6b7129b
MD5 7527f5bd58a0216839a1a894f0795415
SHA1 417df2696bce01a950747abdaae8a5f5b2757fed
SHA512 6dc217d920001bbfc17296887f9cc96a34f99285fdc7dc2dce25ec4f48ed9fbc5e5f4ba9092753a038e0e67bb15ca54a8a9a809eb2ce67b738aef918f677ba8a
SSDEEP 384:DkIcGwNMum2m/t7UxlUN0ezYjJ4pN8J7+aIaesp3px5R363UmH4mDmrmXmDm+mOz:hnCv95GBiqWiv7bRH0sWao7
TLSH
T1BE729DF7C3E8C62D891156F4AB15AF2ECE1D0928432C3C66C9D8AF4BD3E2471E25165E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 e47c3d7346ab455849b5c1fface07198b7604096eca991f518d5dcb14dce352f
MD5 6d34ce068c2985c3b0025100e96655dd
SHA1 3e5f3e12baed228352b36b10ccf38cb989b9ff65
SHA512 55fd58147114079ef7df1780678da84430b55bebf6dfaae8d4566ced8622d2c9de21740ce44ebc31e4f08089088fba93fba8d906f0d3640459e5ba382b9210e6
SSDEEP 384:DkYtqVI3cGJJ5JwNxMum2m/t7UxlUN0eHaIaesp3px5R363ykmH4mDmrmXmDm+mi:vDfnQ5HBiqWiv3f/fRu/
TLSH
T1B452ABF7C3E8862D891156F4AB15AF2ECE2D0924431C3C6AC9D8AF4BD3E2471E25175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 15KB
SHA256 0f791e7d4e393c002e6f79181ef67982722ac6dfa17f2afdbece53cda21c85c7
MD5 06bc28f48080563ee4da486cf5792101
SHA1 bddc497c19564683a0c64cbcd493cef2b4cfe3be
SHA512 9a0e3a7185e008c59553b2cf335cbeee519498985f775507b469e3d8a0acc71e401adf5677cb92a54f0de258b98a276c8ab4de676436875b601444fc6be75cc9
SSDEEP 384:DkIcwNE+mpmjj7UxlUN0ezYjJ4pN8J72xaIaesp3px5R363UmO4mDmrmtmDmzmOd:04QvX5GIiq8iS7bRhgsWaoL
TLSH
T1B4727BF7C3E8862D891156F4AB15AF2ECE1D0928432C3C66C9D8AF4BD3E2471E25175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 15KB
SHA256 16824217164cf6a00119d90fa9068fe3f70891d0897142cd905538385f7669b1
MD5 e71b128559a03cabd28ce5f71273173a
SHA1 f2d33fe8c3f00406c0749a395786de0a901b238c
SHA512 b4d44bf3962016c986fe202e67ca9278c9a8f24f30f4a7bd139f56907e27528bea44fc48f3318886de2d8d5e55360c0d9b63becf5a067f86762ff9c0fbefc9f8
SSDEEP 384:DkIcNE+mpmjj0UZkd7exYjJ4pN8J72pbVaIaesp3px5R363UmO4mDmrmtmDmzmOt:D42vv5GIiq8iS7RR2ysWaoS
TLSH
T198627BF7C3E8862D891156F4AB15AF2ECE1D0928432C3C66C9D8AF4BD3E2471E25175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 2KB
SHA256 c93f40808ee6c9db4603ebf5194dddd6f549e00d470fc5a0eb269befd454e28e
MD5 acb07aa94644ab66ae08be75bc1f52d6
SHA1 f6a75203ddda2d6459b3bb077dcc8c06ab662238
SHA512 be56acfb3ce76965b22fb0da20bd4f25c99d8957ad7afe575d8c021ebb0b9b411d528b999a8dc063168d0cb80f42a7f01a98983f0c58fc672b49cec908c8e6de
TLSH
T1B151CB97E6FEB85B90AC48B72C057C0939B6A4310292B5F5EA66C16CB0E15F70B124F7
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 90ee91a740c580a6ab9bc290ef684fa64cdf48db0b7a840e8a1db721fab7da12
MD5 1e3e918151c19d500c96ede333ef8e0b
SHA1 5b8af394ea382b20b990da202d3e9af2d679e0a9
SHA512 77959579b72cacaa14f63f8a4d0bd1ceedbe79d1ebb9938d0ae6cb2b393eb726132a31463d93cacd0b1f842bd1762479310a05bbc303e37f418cb6eeeab37510
SSDEEP 192:aRdcBz6qGsJ3vJ4v7gpAPRp2i5wL099Hsb+WNO4fZ/51sX0+dC2Y22CokwwvqaDp:aRdmz6ovJksUXz/wrxbPZ2/2bQyaDlYE
TLSH
T10252E72EA918793B9CDBC219FD21B717E7F5102261D82E88E6FC8A1C14D75CD721B42B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 61e717891a28f70ca2e5fce5e8eb82a1bbb740c9207236c460c8d9f920baed19
MD5 475d3a2d47903209a2e2470b6d68a1a2
SHA1 91ed17fb747bb265e56455e5be654cab387dbe70
SHA512 f45a40ff594c35a8e70d3f0636ac4e0235c68ee60954f5a4ff86cff12676640b54a6b71cf1ea4f28cbf5d15dadb141a0ff825d678281a767e7080ca67d24e6ab
SSDEEP 192:aRh6qGsJ3hdv7gpAPRp2Zr99Hsb+WNnfZ/51sX02522Cokwwvqawl8VyIsnAUge:aRh6ohdsUXQ/wfxbP2c2bQyawlYe
TLSH
T15942C72EAD18793B9CCBD219FD25B717E7F5002125D92E88E6FC861C14D75CD622702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 0997b4736ac580a5852e74967201d5205dbe1e00d2cfdcfad2ca6bc107ed5447
MD5 7214366ade61142dc19633e1214def6e
SHA1 c49665e5521d2802047bdb54a34e2dd332ee8821
SHA512 42884de726a6a8deff0c7e2d2cf2253ac47bce566f0a7fd2f6c17bd7e38f1ccf6d6bcd0a60f0861bdf678d0a96288307ef4abe4179dd76d07797a17a32edd403
SSDEEP 192:aRdcBz6qGsJ3hdv7gpAPRp2i5wL099Hsb+WNO4fZ/51sX0+dC2P22Cokwwvqawlx:aRdmz6ohdsUXz/wrxbPZ2u2bQyawlYe
TLSH
T1CB52D62EAA18793B9CDBC21AFD21B717E7F5002161D82E88E6FC8A1C14D75DD721742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 0f3d4d5db53048c332244d84e02c2dd209ab93b052f5f3444a7101c98f0d0533
MD5 c78411a9b546b1e4a22a218afd34edeb
SHA1 cb54fd0491aefb5c6c9b7c7f44758f847175bb32
SHA512 724cc276b7e2c37cbd4f12db09792f97dcfbcb6a72b09d0bad16b441268a1398867b80fbf3ce1f42420c52af426bd80235b9cd4326b170f40a43ae8888f2f09b
SSDEEP 192:aRdcBh6qGsJ3vGv7gpHPRp3icL899Hsb+WNO4fZ/51sX0+NSWB22Cokwwvqa/l8O:aRdmh6ovyslXY/wrxbPVW02bQya/lYE
TLSH
T11052D62EA918793B9CCBD219FD21B717E7F5102161D82E88E7FC8A1C14D75DD621B027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 30969a1df8e050bc0f03a8012c421bf4e8be06e8e8b7ad48e8cd83fc9d3b19cb
MD5 148ec015cf0d7a4083c6955a3b0edd84
SHA1 615335993e5c3995ea5858e88b8ead8194731b8b
SHA512 b639eaa64df2b8aaddfdcabab80a50f42cc31d13218e603bfaed46e7ae3a70a7d62f1ca20aeecc3b0def8b02626ec3a515a9c1148b975e5754de79380227dfcf
SSDEEP 384:aRdmhKjJGslXuG/wQ/xbPrc2C2bQya/lYE:6mhKjJf7/wQ/xrC2O/lP
TLSH
T15862E72BA918693B9CD7C21AFD25F71AE3F5102162D82E88E7FC8A1C14D75DD721B027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 052b352e8cd2ca89ae198b2b0ae99486fff439d114cd008ab761b5e6faec39f4
MD5 5fe7b65889fb48d3929b6dea84b4e5f6
SHA1 321eb298bdca8121531985a684a71b935fa27c44
SHA512 25cd7380c532af7b28c612944235c5228099b2e7b38bdb3d357abbb6785e385e73b0d05289b038b93bb5cf65c45f01e96980d0fa5f5c20169be382117e2270fc
SSDEEP 384:aRdmhKoJGslXuG/wQ/xbPrc2C2bQya/lYE:6mhKoJf7/wQ/xrC2O/lP
TLSH
T13562E72BA918693B9CD7C21AFD25F71AE3F5102162D82E88E7FC8A1C14D75DD721B027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 3ac47755df4d5f0654916ff3a05dbb32aa6130ce7fc29292f4e523b421fae676
MD5 6ec7898dacf8f85675aa1eea9690820c
SHA1 9e5883c295816fba27b2607942859757ca922bda
SHA512 1cc5ba2aeb73dba45eeabbbc593cfd4797796a77ddc410e134c37332227477010b931d91aa08290de755a22e8ca4ac536b41c11d1c8a051b20a0d1c2259fd2c9
SSDEEP 192:aRdcBz6qGsJ33Gv7gpAPRp2i5wL099Hsb+WNO4fZ/51sX0+dC2Y22CokwwvqaDlP:aRdmz6o3ysUXz/wrxbPZ2/2bQyaDlYE
TLSH
T14E52E62EA918793B9CDBC21AFD21B717E7F5102161D82E88E6FC8A1C14D75CD721B42B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 60e38e6c0c6e93b70b77eb2c3253e203c52840a659d0ef567a8db8611b781c54
MD5 c0602e84a95c7e974392fe7495e2c829
SHA1 955547906196ed42166b0ecbafdc64637eefa420
SHA512 17a2ccc81d4641091180345c09fcbce8230bb3a49f55f51f5ad4934a8c7214a62bdc6b7a6391494563b2ee1d9550ae5cb255968e46cacb8451b74e2b140ee3e3
SSDEEP 192:dRdcBZKDGsJ3/Ov7HpHPRp3WKLTSV899Hsb+WNO9pHPklX0dP1+Q4ks22Cokwwv6:dRdmZKj/q7lXJ/wQ8KrCkT2bQya/lnu
TLSH
T12762F82BA9186E3B9CCBD219FD65B716E3F5102162C82E88E6FC8A1C14D75DD721B027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 47e3f43244f662a10ce2e5c52c7ae2f12f3f43765279d6c7428ac9e987deba2b
MD5 1de40c560617dd0cad69522e556c17d8
SHA1 891728997dc14c8559fc80bb1455b1cf0e0923fa
SHA512 c775a6f230119051045b07a3e1a20c5c80dd05b38d193b0dadf65ea82071dac02e53980caa91463b7104b4d26bb19b0f6409a6359f68ee77a12d301eb17bf227
SSDEEP 192:aRdcBh6qGsJ3/vVv7gpHPRp3iWL/99Hsb+WNO4fZ/51sX0+7gkP22Cokwwvqa/lP:aRdmh6onlslXZ/wrxbPZku2bQya/lYE
TLSH
T11F52E62EA918793B9CDBC21AFD21B717E7F5102121D82E88E6FC8A1C14E75DD621B027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 a332e7784e8838b6b3700b8e255c6d62f7c8898fe65552191a5abda81fe97abf
MD5 9a990249d82fa988f381c2a944078d8d
SHA1 b57953ee31e691e621904be85721709d81e36e49
SHA512 847461e209dfbb9c04400c24201cd90ef844eaddd24d10441482a97d0b17e599ec729db42ea1ac63a94b43d3c55fbeb7bacf7a702b548d0d4aad626b7d055bef
SSDEEP 384:aRdmh6oJlslXuUE/wQ/xbPc2x2bQya/lYE:6mh6oJupE/wQ/xnx2O/lP
TLSH
T14662E62FA918793B9CDBC21AFD15B716E3F5102162D82E88E7FC8A1C14D75DD621B027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 18093eee003bff555d9774f6162a53239fd87c4290743e2bf3124b52455f54bc
MD5 da92829078ee3997524e990e54c82cf8
SHA1 6bd0d475713689c2b429391863559eb8093be288
SHA512 3676477e5f102124932ad29503531c56d75401e1d44c5dc9160ef639f3ab759d7557afeb8bb26bd388165311455e20a0939bdc54881cebfaa491baa9c32e957c
SSDEEP 192:dRdcBhKDGsJ3hKv7gpHPRp3WKEUTSVs99Hsb+WNO9pHPklX0dP1+aI2r22CokwwJ:dRdmhKjhGslXuG/wQ8Krc2q2bQya/lYu
TLSH
T1A462F72BA918693B9CC7C21AFD61F716E3F5102166D82E88E7FC8A1C14D75DD721B027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 2118c2e54bf3a40771cabd6b3461124196e977d70dac2aacd6fc4fd40ae9a5d4
MD5 ec6bc71aeeff7103a5b64c6e7829514b
SHA1 0e5353ae84650fcf610f7d0e4cd3fda36631f62f
SHA512 2994079fdb6cf68c8cca87c0f2bed65b01d3c1421edd82d2f18171dde8647ef0cc8e55f4b6100da5cdeb5173fd2c1f893fffbb49c3ad3f2467cb8e08f4b96f05
SSDEEP 192:dRdcBhKDGsJ3/Dv7HpHPRp3WK7TSVd99Hsb+WNO9pHPklX0dP1+y+8C22Cokwwvh:dRdmhKj/77lXM/wQ8KrK8l2bQya/lYu
TLSH
T12362F72FA9186E3B9CC7C219FD61B716E7F5102266C82E88E6FC8A1C14D75DD721B027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 857921bc30c0d9c428806f71b0cf09ede2665b1b618cf201221ad832ee4e9737
MD5 3c927b97233c1bd0f2956cc7ee52d8bd
SHA1 47d1d8cbb25157f1d9cd8bdb4f9942efcfa5319a
SHA512 e293d96c2920dd97d7265dae64ed6f3c951674fd352e021cf85ff0dd3c59278ef2dda0d41b4821062e364501ac973d0cf79d07060874e5503531e4a9fb4f65d9
SSDEEP 192:dRdcBhKDGsJ3aDv7HpHPRp3WK7TSVd99Hsb+WNO9pHPklX0dP1+Rmkh22Cokwwvh:dRdmhKja77lXM/wQ8KrfkU2bQya/lYu
TLSH
T1B162F72FA9186A3B9CC7D219FD21B716E3F5102166C82E88E7FC8A1C14D75DD721B027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 eb9bd8eca57297feffab6319e70cc44458171c44e6617fba63d82c746304d365
MD5 4f9588df1821b0654f1e7918a5cc629a
SHA1 0e4cbb5c181cd52104cf336fe08d694a31ff7b1d
SHA512 e291f767462fd1753ccd3be8b24b4c67c45b1852e6b745ec49b55299b91c3fec449e7f45aa3a980ae60d272dda11f1ae639343ef7caaaa3c92947a3cce028ca9
SSDEEP 192:dRdcBZKDGsJ3/ov7HpHPRp3WKLTSV899Hsb+WNO9pHPklX0dP1+Z3k122Cokwwv6:dRdmZKj/07lXJ/wQ8Krok42bQya/lnu
TLSH
T1BE62F82FA9186E3B9CDBC219FD65B716E3F5102162C82E88E6FC8A1C14D75DD721B027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 22c7706b2d042848cad4611e0874b5a9b04393a3ddd6db173a3b4736de257778
MD5 869a627f40bca77d187095f232e6e1c6
SHA1 e273774b144fc812a02aceaf0f56e9e1f4e5d0b9
SHA512 dbf96690a34f08f19d6646dab237ea3f325ba1f0f151764f49381b559bc7df641b051548f579095eac1e7e86724ef21329315a42f283d275b08d6557df1688e0
SSDEEP 192:aRdcBh6qGsJ3bvVv7gpHPRp3icL899Hsb+WNO4fZ/51sX0+HcE322Cokwwvqa/lP:aRdmh6oLlslXY/wrxbPhEm2bQya/lYE
TLSH
T12852E62EA9187A3B9CCBC219FD21B717E7F5102161D82E88E6FC8A1C14D75DD721B02B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 82085f58435b7b7a260780dca3ee69a48427de11b3ece82d53af0d56f36fd555
MD5 92547e8f34c99d1b69c0e1d957604d80
SHA1 4ca5a2d93853b96b7fc565a0e16045bbcee47e58
SHA512 aee9857bb3f81b98b9310e49ebca2773ad80f91201f0efac2260b404123571baef569acba1d144b7aa20664020dd07820f3547f4604d3bc6c7d155025f48eb07
SSDEEP 384:V3jBM7KxkXqKf/pUZNCgVLH2HfgslQwl7pLuLcifTuXODBU+ErU3bwxHGak5Je0o:VTBM7KxkXqKf/pUZNCgVLH2Hfgsi87pL
TLSH
T1DE72FA67AC4CAA370F94D6CCD827BE4FADB5020B65DD886883FA581903D5ADF110A1F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 6b538b7737c9ccbd3a7ec28c7577188020c4d1f9aac300360a976e5e63b4f525
MD5 f2f9ac66cd06c165c3e4a9b0e1cd1f05
SHA1 d571cdee226f40328efc19ed9797bebf2a09d6bf
SHA512 a0ab71b3228624ebbae1e40a57d258469fb14c23a2d4e8bde05bb269892beaf9182e23f0d7b2dabea80c1ed93d2e20d3c0e27939a8e695b10d8771c0d682cd2f
TLSH
T1B5B0125080417501C00703F4218208883114DF10D709130593F0BD75D82A3914114151
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587625.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe587625.TMP
Size 96B
SHA256 5b87285e8946309c5f52ff776c68af671f24df61b78d03faf2ba5ba213e83a14
MD5 43b02560761f3d44249bc24a75aa7622
SHA1 70755c0612a068f0b50abd5e9026866afdabc2e3
SHA512 b21ee5989482ec25b8b7b5cbe19ab12d98c790cc8f7d94e37fb5b1cb9af8594b217da8ff1364a5aca2690ebe717385057da6cf382466c7412c1dffbd84a8f064
TLSH
T1D0B00265C1026213C04603B039A5A5DA7661DF76C6071B9692E06E67EC39BB495296E0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 ebc8aaaf2b12e6d3b114ef64fbfd10e999334e3822a8dc75ec6e476dcc6bfa2f
MD5 c8f496f4465eaa7894f05bbfe9fefd0e
SHA1 9ce6ca653039ab599ee230c0fe36839009392d9f
SHA512 b123bdf3d12a17031be73a166f13ba1b05d16a419751289006e66d0c5845fba5c9c25f2cae89451e9346314647eff133d9daada621a3abdc72d21153887bd72e
TLSH
T1FCA0026192594063C10C86B8209B518D721468212191074540921654AC902C0D146505
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 155ba5f71d0d8ab5ddb350e71a0619a43d477e6354ca003d95c1a75e96bcecc7
MD5 409817a0dd8f3e08ee44761a105c68a4
SHA1 354f52e6a434c8f415c0a98e654b3d7a45c48518
SHA512 fab4333bc46851fba6981d96ea21ef986dc7b845f501c7d9088c6f9419cb5e854373a7c5b7346ce3d2eaf339ae17ec866772f7af9c78cf3daedebfefcb19b611
TLSH
T1C5B002A840275933EA18C7B139D274597164FD21338349BA53964564E45A2816A53509
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 150B
SHA256 93967fbcfb0054b3aecd18f50fb8de8c126a1af86c6812cf27bfefd18f92ce65
MD5 19a4bea0ff299a1b1db6b7e1bf529d96
SHA1 5694601c330565ab841bb4a944aa4fa203e6e38d
SHA512 c9cf37265a5faf566d456363328632873281829071469f9f7b7d1bec8df662c2529192bcd15c812cf7e094276885e4366285c8ac0677330a6cefd59ef4fcb4d0
TLSH
T13DC02BEB1401414B0A30EDFD1018371CC107B30C4CC8CEF8840450032034F330002838
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5d421c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt~RFe5d421c.TMP
Size 157B
SHA256 10b6aef0dc9b81cb09f08c622bfc355265728afda8099f4c9885b886c25834b6
MD5 0f70f0cc43c5d3afe3f778c2c338de7f
SHA1 4f13aea932bfeebbe35f376440e0ee7bfeb56251
SHA512 054af428054b4a09474e7ab8438fcfe7cc1f04673e2b60a08d69088a0a131960a3a769f5eb529e0b440adc221cadf9219bc53e8e87dcd479adc565e621926239
TLSH
T1BDC08CEB151200470B30E8E91028370CC157AE094CC8CDF8C40570032038A334101828
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 3398d2cbf33d98b15fb49396e58d94fecae3bc9ec44583ffd394d451b48410b0
MD5 ba4d96c13e71dedfeccae23ad98b3617
SHA1 378fddd7c2d1b7ea8d4c4291cb454d02c78323cf
SHA512 f8f1493af93486522f392fcf4749a2ccdab298a3098da3a9548d027d2ac02446f44c9a6415ce8babf5f354e987ed015a06130d0573205d07063109ca81df6eae
SSDEEP 1536:yb70P++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNJm:IK++J3qUQm08KMWF0bFTcVHr6zqm
TLSH
T1809312B99D1EBC3563ABD2D6A0079CAC4CD398CE1214557C31C76F0E14FB392A35B8A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 57e5fb467bc3343be87e312c6818a42908e568067b4ec8f95204a55e378466e6
MD5 483de007ca59533219450cf8982c6c6d
SHA1 7fd9b566d991678bc12600a17eb05c47a6ef83a8
SHA512 a7fd4c7dd09f95f552022541b00020fbd15961775003ebc47bebcb76c5615560c8468301aa5acaa2f60190fd174b3657a593a402c73d68ab5a6968475d6b6bdf
SSDEEP 1536:vb70P++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNJm:HK++J3qUQm08KMWF0bFTcVHr6zqm
TLSH
T16D9312B99D1EBC3563ABD2D6A0079CAC4CD398CE1214557C31C75F0E14FB392A35B8A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 940a1f57ce08b5c172f88efe13cfd6b8cf5e2864b7f728f5250fe0e41ba767f3
MD5 5509981476625da53d36dd7ed6cfe669
SHA1 73a42b7feae0b51948d8a6fcc137e842f582ee47
SHA512 10948e5603df4075c60d1474a6b4b79d96f89c7a8ee00d27654e5b3ba9feaf45b55b6cd683ef9bedeb049496d7c8c3e3de2e68bee61502162b59b2592f34bc45
SSDEEP 1536:vbIyP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNJm:04++J3qUQm08KMWF0bFTcVHr6zqm
TLSH
T1879312B9991EBD7953ABD296A0075CAC4CD38CCE1518657C30C76F0E04BB392E35B8B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 0725141438a75185c245ba8909b739c529fcebb0476706065b9817848c0ec359
MD5 48fa4f2545b6929dc3fbd944e567aaf0
SHA1 7976fe4b52f1ede9e64385058bab04d94f20b47a
SHA512 bb7723ed761865f2bc4252f7aef22904f3f371c57d163c300e6cfcf3ab774f4534f953006dcfdf846d0261305d06a4b4b19815aba58596ca0df11fd4c98ae7a0
SSDEEP 1536:ubyP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNJm:x++J3qUQm08KMWF0bFTcVHr6zqm
TLSH
T1B79312B9591EBD79636BC296A0179CAC4CD3DCCE111455BC30C76F0E18BA392E31B8E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 fa016a87aec2fdba19893b75812bb0097d15a868358a38bb729284f079a1c6e0
MD5 62ad669241cfe4f2cead742d92fbfff6
SHA1 0f5ed57cf50e92596b12c83f01991f0acfc5ae3e
SHA512 96cd8c2f74712ceb978de94ed9cd117a72847389b5da54b1dea3b7ff138f88e92ad89c98a6e5ec7059097902d5c775e22a016060ebaa0538209249bdb9d4a077
SSDEEP 1536:jbIyP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNJm:Q4++J3qUQm08KMWF0bFTcVHr6zqm
TLSH
T1559312B9991EBD7953ABD296A0075CAC4CD38CCE1518657C30C76F0E04BB392E35B8B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 cc2a2fa0f991f5b8edbc680541d8d4e3020fc226c202c7260c2324b3d033dbfe
MD5 590f6f100386eb783b5f4debcef02836
SHA1 a3fb2bbbf1b7b959d8c82443d8c2373d075a4f05
SHA512 492113d48cb92921c0423564255ae701d8e9d2a5804ea7ade8a191704d5e5867c2786e325e8573ef363a6b20e9a3d55852c518ea87bcc17f55c8d03ba0da93d1
SSDEEP 1536:jbfyP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNJm:H4++J3qUQm08KMWF0bFTcVHr6zqm
TLSH
T11B9312B9991EBD7953ABD296A0075CAC4CD38CCE1518657C30C76F0E04BB392E35B8B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pu854q2a.default-release\datareporting\glean\db\data.safe.tmp
Size 30KB
SHA256 b5e00892673c977d8403632d8cc94c177c21a5fbeb3b32af792d4088fbbcd74e
MD5 b0130de5f22c244d6d1e585fa6addacc
SHA1 90c4deb3985c0b8c9168f8c6f1b63a6d6d37fb86
SHA512 8c0c19751963219a668c06188cfb68c53076f61007153ed63a1b7346f4264ef47ee0c4d5d99e0b1c95bd5585976b6b1bbb2b063b6002eec5a2f83e2068567eef
SSDEEP 384:xd66JozQzgC1j9booZ4myjJHCkjAS45ZNmJiiuxJqkJVQtGcmhuO54yRZ38v5obq:emnNCHEn2Gcmhuy7RZ38v5obZb+bjb/
TLSH
T14ED21244EB2E913FD41512BBDCA50B042F78B889591A2FA73A4C646C6C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pu854q2a.default-release\datareporting\glean\db\data.safe.tmp
Size 29KB
SHA256 3d6a0603d43c46e8b675ab2cfdf60441e3e193e235bdecb824af81d22aab0289
MD5 1a8c726985f559d2a33e6fdfe195a7f0
SHA1 1ab586f2099cd64752d3f25fcc0987083b5dbca9
SHA512 cd733ecd1b42dcb322c60bb72ff7fcd3f1e1b412b9085e306f413f9d7eb054b65113a7d866d308ecd52b67a32d9862a382a6edc36412ac38ed2e9ce5b07c0d13
SSDEEP 384:mHCkjAS45ZNmJiiuxJqkJVQtGcmhuO54yRZ38v5obZb+bjbHf1boVZ4myjld66JB:mHEn2Gcmhuy7RZ38v5obZb+bjb/F6zm/
TLSH
T162D20144EB2E913FD41512BBDCA50B042F79B889591A2FA73A4C646C6C872DC3D5E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pu854q2a.default-release\datareporting\glean\events\events
Size 1KB
SHA256 96074cb8f1d196584c328f93b2e0b5df1bc50d37c678fc26a39d88aa8239150c
MD5 f08505cb737e1a213d281ebef3b25b22
SHA1 85e6edb3c3bf190266d9c0d7545d0cd0b7e733c9
SHA512 f9cb25a8ab042a10e8df52b1731618f116f65ce220278d5cb8604f3ac55771fd37841ad11156d716b509deb1c36476151a504b2effa711a42104c4e1073e7221
TLSH
T13F214B5C39F84D6A6897E3AC7454028E53598E07068B1C830D12DFCDCDE56DA326E8BD
MD5 SHA1 SHA512 TLSH

Submit Download

36661770-de61-4a79-b645-9125a0de726f

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pu854q2a.default-release\datareporting\glean\pending_pings\36661770-de61-4a79-b645-9125a0de726f
Size 871B
SHA256 8d096707831acb3cc4292db4783d40594d9b9c0b76f24fff8cc9accdc9c7cf75
MD5 8cc2f3b91dac001c7984a1f6ae077d31
SHA1 244cbbed6c0cda6ed212218c0effe00ef42ee00e
SHA512 10eedd5fd188e9a904885970bde12d553d4f998aeb88333d64ef7d422b7fdffb2ea1f831b9a231d25ea91a5c53a4c93b1d3d0e8dbb20b90ace98cec9b9de6b55
TLSH
T15811DC509738B9F2CD28D25BC5957B4587E93523C0CA05183EA18A084E6E52AE76920B
MD5 SHA1 SHA512 TLSH

Submit Download

6ad8a239-3bea-448e-a124-f9eb25bed88b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pu854q2a.default-release\datareporting\glean\pending_pings\6ad8a239-3bea-448e-a124-f9eb25bed88b
Size 235B
SHA256 f9164663d6b727570375658fc156dc17b3c826372f1be75a0c04faa15680d0cb
MD5 f76f5f73d199064fc9ad0a6daf297455
SHA1 028e0089555003890bc0d420b1be7d534e4b375d
SHA512 95d9cb6de6df3b00572d892891c8cbae54fbdea55c492a12db0ca1d69fd34a94a81db5e955786d36fbdbadcecdcf898318bdb73ae70c5d78db7d583e204e1daf
TLSH
T196D02380349C376C08100F17F0E03EC730484C3314F49810C5A101B599FFDCD0121857
MD5 SHA1 SHA512 TLSH

Submit Download

a8e383fd-c8c1-4887-9944-ceb35f894b6e

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pu854q2a.default-release\datareporting\glean\pending_pings\a8e383fd-c8c1-4887-9944-ceb35f894b6e
Size 2KB
SHA256 83210ba7bdf8d3009de19ad59361034b24d7e4eca79d96d069104b0969ac0864
MD5 353e8b8875dfdcd0d4a3daa1db07b17f
SHA1 8388d26e6805240882c6744a7d38ce6e53ea2502
SHA512 0e01c1838fff155aeb53c4c6893725247115a5c057db720b8411f87531895533d9936d531da3985966518db012d18db2f16a4851319f11f9f25e25b6dc7f1ce9
TLSH
T15841216C75789CBA8CDEF29D9492338E57244B0340861D832E51CF0C8DDA69E737E52B
MD5 SHA1 SHA512 TLSH

Submit Download

f858e19c-b88a-46f6-b70d-e439589790ce

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pu854q2a.default-release\datareporting\glean\pending_pings\f858e19c-b88a-46f6-b70d-e439589790ce
Size 886B
SHA256 2ab6dc6e91a246bb48782b22719b7723a611d9a75a2720c8f33195d6c3f10545
MD5 312ee2d8e454c9b6f66f23c435a387d6
SHA1 2e699ec5ac05a59a52d2f2aa002fe601bffa676f
SHA512 63fa1248a7ca8149788254aea4bfc8caef35cb95287bfdce7bb37266def6ee529ebeedff1337ff9a9e60c793f12bd1970a532ddf33d77e97dd5be1b0b1bc6fb0
TLSH
T13F1104509A35F5F2CC38E29FD5E177414BE47633C0CB0A587EA05A080EAE06FA77620B
MD5 SHA1 SHA512 TLSH

Submit Download

fc6eeeb5-bb09-4b23-bd33-7f754a488039

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pu854q2a.default-release\datareporting\glean\pending_pings\fc6eeeb5-bb09-4b23-bd33-7f754a488039
Size 235B
SHA256 f0bc8e28a815c37aad696050fbdecde60c8cbbb0c601b813863c813026933b76
MD5 4b0439aa58425bc1fef36b10d6d10c6e
SHA1 8c101d17b90cdcfb60698bbcdd00f3e36e65aeed
SHA512 177a190ebb61fbb3fc68d6ad6058806ef12cd7d695d4ffd4e38bc8a10233aa6e8c3be71dd418302fb7f1c873e9d1b88e55718ac81cc83d083c55adc1044c4d83
TLSH
T12ED097851488AB5C08100F0AB0E0ACC331884C3360A6A810DA5005748EBDEC84276956
MD5 SHA1 SHA512 TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pu854q2a.default-release\prefs-1.js
Size 6KB
SHA256 0610ca9fc067605643d49e06b5c4bc28d03e6bdd4b1666b549b0183b64ad57a7
MD5 def2b04f741fe7b69cfdc7f2faf46ee4
SHA1 18573360c2c77db6b5856d8235840eae9db801dc
SHA512 48b2b55ec9a88657133be28ac4b45ed1b3f19c5719249dff90c7b0fdbc7b8e39d092cf5cd7e0a45c7ad4040c76c06b8a83412e8773ebd129b64ce14529142a81
SSDEEP 96:xHtjUTUuePqGqV9fd6uObzSgSSlldv9jknncHJRL9I17Bw8OH8L4cnfVXO:Pj+eCRV9fd6uGSSFn5uBw8OqM
TLSH
T1C4E10E7895488B7F74B677BCAC6888316AB2013B77BF68D750B94484015CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pu854q2a.default-release\prefs-1.js
Size 6KB
SHA256 7cec2d07e588f9d41e85f109ce281ccd8e32dc8183bbe43f9ff6f3558e5a1855
MD5 8c0bc14419241a38f7579e937f4d3797
SHA1 b6aecdad99c357618334e6f597a9927a29a40b8f
SHA512 4de389faff3a4ad3a4dcacd84d499c9d4156d2d548f17da8b925af8ddd7f41949cf19b69066a24d34ef78ea1292223544a8d35927c745a2a5ac99bf2a4b74206
SSDEEP 96:xHtjUTUuePqGqV9fd6u1zSgSSlldv9jknncHJRL9I17Bw88H8L4cnfVXO:Pj+eCRV9fd6uFSSFn5uBw88qM
TLSH
T174E11E789148CB7F74B677BC6C6888316AB2013BB7BF68D650B94484014CF3482F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pu854q2a.default-release\prefs-1.js
Size 6KB
SHA256 6bab1a0313ec174bee0781be9f99b672df37ae1264dc3cef602b8495cfe2f644
MD5 d132e7134decc87e2b22688df5c4ac66
SHA1 51995ce4bdb12b537369539bef08d1a95b9fb461
SHA512 9687eba5c9f1aaa2136b7c075b729cd59320899f8ff65bd2023fd52d0d439b7ba9fcae58649f1a5b1423233a4a178c4bb2f62bc773455f9155ebc7a6d0ea1dd7
SSDEEP 96:xHtjUTUubqGqV9fd6u1zSgSSlldv9jknncHJRL9I17Bw88H8L4cnfV+O:Pj+2RV9fd6uFSSFn5uBw88qT
TLSH
T158E11F789548CB7F74B677AC6C6888316AB2013BB7BF68D750B94484054CF3482F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pu854q2a.default-release\prefs.js
Size 6KB
SHA256 d2871b2310508e62bb66a959f0649f375af1004aba7d6623dcc57485671424a2
MD5 e1dbffc1a973d4ecc98e92acd180fe1e
SHA1 e8eb879ec3b3201577ff38f7eca123f03f511dc7
SHA512 ae746115a4e3793b74fe29b5023525740ccb8e8a8f6df23b2a7ceaf82ca5508e813f81cf62f09c751ddac692b6bc90fe95aee5549e33652aa472773fd044a7b2
SSDEEP 96:xHtjUTUubqGqV9fdKjYnj+1zSZSSlldv9jQncHJRL9I17Bw88H8L4cnfV+O:Pj+2RV9fd7yISSRn5uBw88qT
TLSH
T13AE110789548CB7F74B677AC6C6888315AB2013BB7BF68D750B95484050CF3482F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pu854q2a.default-release\sessionCheckpoints.json.tmp
Size 288B
SHA256 2fca1f29b73dd5b4159fa1eb16e69276482f5224ba7d2219a547039129a51f0e
MD5 948a7403e323297c6bb8a5c791b42866
SHA1 88a555717e8a4a33eccfb7d47a2a4aa31038f9c0
SHA512 17e2f65c33f47c8bb4beca31db2aff3d4bbb6c2d36924057f9f847e207bdcb85ffcbb32c80dd06862ffc9b7f0bd3f5e2e65b48bb1bc3363732751101d5596b1a
TLSH
T1A5D08C83C10950BACE826A58B398BB509E3E00F271140142B6AC888C183F023418B803
MD5 SHA1 SHA512 TLSH

Submit Download

A-Worm 0.1.7z

Path C:\Users\Admin\Downloads\A-Worm 0.1.7z
Size 1.5MB
SHA256 6704c1c59fb6f3ebc077b1882940c0733b447b009fc08184c4c7b3bea7c1e914
MD5 f25331ab1a881f845ffb4e3454fc2327
SHA1 5cbf12e7a532da5f543c83b7a36c4b176a0048dd
SHA512 8cda9543e9e029a62dc6f2b92ed766c70aa3652a3ba349e66e7a20e31158f583922db29fda649361e2b26b84950a5890a4027ad61becd5d51823791718a147d3
SSDEEP 24576:nu+z4SGn7G/QtgwCcw76tEHrxrOTVKin/CMq9QPEablGcDMyfmFmWscqxAF85ZK9:uRPn7G4cc2rxihKin/qQPEablMHmWsvG
TLSH
T1647533F8AEA4DD09EC207E41F5A67D7BC90FE94D2C60E03587D79D816EED6B02648431
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

A-Worm 0.1.7z:Zone.Identifier

Path C:\Users\Admin\Downloads\A-Worm 0.1.7z:Zone.Identifier
Size 55B
SHA256 2dfb5f4b33e4cf8237b732c02b1f2b1192ffe4b83114bcf821f489bbf48c6aa1
MD5 0f98a5550abe0fb880568b1480c96a1c
SHA1 d2ce9f7057b201d31f79f3aee2225d89f36be07d
SHA512 dbc1150d831950684ab37407defac0177b7583da0fe13ee8f8eeb65e8b05d23b357722246888189b4681b97507a4262ece96a1c458c4427a9a41d8ea8d11a2f6
TLSH
T1CA900297040444480F5535C459DC9418B11E7554CD454688EC5140D6D98409D42E9416
MD5 SHA1 SHA512 TLSH

Submit Download