cc50f2aafb778c21b702c246ed480a14615208799113a29793962c3a8401beb7

Analysis

user interaction
yes
max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/05/2026, 04:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
comet_installer_latest.exe
Size 14.0MB
Sample260503-exmlcabv9t
SHA256 cc50f2aafb778c21b702c246ed480a14615208799113a29793962c3a8401beb7
MD5 968e0209a85a57c62a6b40be993036e6
SHA1 9afe2605ffc4623961dd8edd696f9e76afd16b30
SHA512 7d7775b398ec454f39758b9c432e3a49289e32613865847e27800e1c85ad6409e07cbfdbda82872fa7a59fe27a6883d7644e939843e2e97896621cfa753a833c
SSDEEP 393216:C6nU+lGLDdJuhXCf6PQJ2NFv8c3us6fgKf1jIwmqxfG8:CSU+o7mXCf6643us6f+0fG
TLSH
T16BE63315E540CBCFE5349AB112DA7B978F187C7BF1942C0BF08BA82149B5DB1DE19A23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
4252	comet_installer.exe
3524	crashpad_handler.exe

Loads dropped DLL 16 IoCs

pid	Process
4252	comet_installer.exe
4252	comet_installer.exe
4252	comet_installer.exe
4252	comet_installer.exe
4252	comet_installer.exe
4252	comet_installer.exe
4252	comet_installer.exe
4252	comet_installer.exe
4252	comet_installer.exe
4252	comet_installer.exe
4252	comet_installer.exe
4252	comet_installer.exe
4252	comet_installer.exe
3524	crashpad_handler.exe
3524	crashpad_handler.exe
3524	crashpad_handler.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	comet_installer_latest.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5444	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134222556877118163"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe
Token: SeShutdownPrivilege	1876	chrome.exe
Token: SeCreatePagefilePrivilege	1876	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe
1876	chrome.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4252	comet_installer.exe
4252	comet_installer.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 4364 wrote to memory of 4252	4364	comet_installer_latest.exe	85
PID 4252 wrote to memory of 3524	4252	comet_installer.exe	86
PID 1876 wrote to memory of 1496	1876	chrome.exe	102
PID 1876 wrote to memory of 5868	1876	chrome.exe	103
PID 1876 wrote to memory of 5868	1876	chrome.exe	103
PID 1876 wrote to memory of 5444	1876	chrome.exe	104
PID 1876 wrote to memory of 4792	1876	chrome.exe	106
PID 1876 wrote to memory of 4792	1876	chrome.exe	106
PID 1876 wrote to memory of 2000	1876	chrome.exe	107
PID 1876 wrote to memory of 2000	1876	chrome.exe	107
PID 1876 wrote to memory of 6080	1876	chrome.exe	108
PID 1876 wrote to memory of 6080	1876	chrome.exe	108
PID 1876 wrote to memory of 5876	1876	chrome.exe	109
PID 1876 wrote to memory of 5876	1876	chrome.exe	109
PID 1876 wrote to memory of 2184	1876	chrome.exe	110
PID 1876 wrote to memory of 2184	1876	chrome.exe	110
PID 1876 wrote to memory of 5852	1876	chrome.exe	111
PID 1876 wrote to memory of 3024	1876	chrome.exe	113
PID 1876 wrote to memory of 3024	1876	chrome.exe	113
PID 1876 wrote to memory of 4584	1876	chrome.exe	114
PID 1876 wrote to memory of 4584	1876	chrome.exe	114
PID 1876 wrote to memory of 4764	1876	chrome.exe	115
PID 1876 wrote to memory of 2076	1876	chrome.exe	116
PID 1876 wrote to memory of 2924	1876	chrome.exe	117

C:\Users\Admin\AppData\Local\Temp\comet_installer_latest.exe
"C:\Users\Admin\AppData\Local\Temp\comet_installer_latest.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4364
- C:\Users\Admin\AppData\Local\Temp\CometInstaller\comet_installer.exe
  C:\Users\Admin\AppData\Local\Temp\CometInstaller\comet_installer.exe
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4252
- - C:\Users\Admin\AppData\Local\Temp\CometInstaller\crashpad_handler.exe
    C:\Users\Admin\AppData\Local\Temp\CometInstaller\crashpad_handler.exe --no-rate-limit --database=C:\Users\Admin\AppData\Local\Temp\CometInstaller\.sentry-native --metrics-dir=C:\Users\Admin\AppData\Local\Temp\CometInstaller\.sentry-native --url=https://o4504136533147648.ingest.us.sentry.io:443/api/4509691398324225/minidump/?sentry_client=sentry.native.flutter/0.9.0&sentry_key=861faca2cfd783cbbc742acc00e1601e --attachment=C:\Users\Admin\AppData\Local\Temp\CometInstaller\.sentry-native\c243fda8-fc39-473f-f2d5-ccec3c1f9d74.run\__sentry-event --attachment=C:\Users\Admin\AppData\Local\Temp\CometInstaller\.sentry-native\c243fda8-fc39-473f-f2d5-ccec3c1f9d74.run\__sentry-breadcrumb1 --attachment=C:\Users\Admin\AppData\Local\Temp\CometInstaller\.sentry-native\c243fda8-fc39-473f-f2d5-ccec3c1f9d74.run\__sentry-breadcrumb2 --initial-client-data=0x540,0x544,0x548,0x530,0x54c,0x7ffa8ccd90c0,0x7ffa8ccd90d8,0x7ffa8ccd90f0
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:3524

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffa8d0bc728,0x7ffa8d0bc734,0x7ffa8d0bc740
  2⤵
  PID:1496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,1061668761505508662,2845404955158235864,262144 --field-trial-handle=1976,i,4719538534619619072,2808316503576283394,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1972 /prefetch:2
  2⤵
  PID:5868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,13991257584862879738,9073941573010443482,524288 --field-trial-handle=1976,i,4719538534619619072,2808316503576283394,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1808 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2444,i,14109934294992260844,841397482738670732,524288 --field-trial-handle=1976,i,4719538534619619072,2808316503576283394,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2348 /prefetch:8
  2⤵
  PID:4792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3260,i,7528249534438562874,7174737184900019213,2097152 --field-trial-handle=1976,i,4719538534619619072,2808316503576283394,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:2000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3344,i,7006293512204324079,5950849673688530069,2097152 --field-trial-handle=1976,i,4719538534619619072,2808316503576283394,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3380 /prefetch:1
  2⤵
  PID:6080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4500,i,14592775039680929651,16332465364992526013,2097152 --field-trial-handle=1976,i,4719538534619619072,2808316503576283394,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4468 /prefetch:2
  2⤵
  PID:5876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4696,i,10525412987561973701,3108732096678222921,2097152 --field-trial-handle=1976,i,4719538534619619072,2808316503576283394,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4760 /prefetch:1
  2⤵
  PID:2184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5528,i,8685660478401055653,4155696868733964900,524288 --field-trial-handle=1976,i,4719538534619619072,2808316503576283394,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5532 /prefetch:8
  2⤵
  PID:5852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5592,i,14927348935865314723,6483421101898223392,2097152 --field-trial-handle=1976,i,4719538534619619072,2808316503576283394,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5680 /prefetch:1
  2⤵
  PID:3024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4876,i,4461412807583671910,9724357134121733939,2097152 --field-trial-handle=1976,i,4719538534619619072,2808316503576283394,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3976 /prefetch:1
  2⤵
  PID:4584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3448,i,7057471977774207504,17586488118094058156,524288 --field-trial-handle=1976,i,4719538534619619072,2808316503576283394,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4748 /prefetch:8
  2⤵
  PID:4764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3540,i,8587613577630763607,15782853175655672149,524288 --field-trial-handle=1976,i,4719538534619619072,2808316503576283394,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3472 /prefetch:8
  2⤵
  PID:2076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5948,i,2933214225769133748,8888107710717032846,524288 --field-trial-handle=1976,i,4719538534619619072,2808316503576283394,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3544 /prefetch:8
  2⤵
  PID:2924

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4768

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4408

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 1d44b4a81474aa4e7d2fa7b0f8161c482ad728461dd2da11735a4a9bb54b55c0
MD5 54fedded23186d07947a0bbeb5fdcc8c
SHA1 43d3724a1ff80fc02639afa937e34f16f123cd17
SHA512 cdb7acecf9a1d4e47395ad179822ffc7bd96dddb448907ddddcf454360e979b1affaacc650e6db05259e226a08d25b2c4a5513fe46a90fb0cafb650d724fc565
TLSH
T120E02BA6CA71EC2714FD176871940645EA9403963F404D5F3E3D820C8FB463E0683C1C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 5a37437719d841d5da8a669feccb78720ab610aeb14f43dcc8ad4701da63e07c
MD5 4cc67ec59eba77819516e9616959a5e0
SHA1 ed309e2a400291c84e2465755ce8e2f256508966
SHA512 8720fe15fa300986cc79eb139f68555489756b2c968d4c44749d39797c3723a66c49fd53f22957afc61ff18cc6c1b84186c0a09cc2317ede45e164c0a052127d
TLSH
T1D141622AD0E3B060FFB64DB018613C71BE38EADE97C697DB3220A15468636F0554B998
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 274a58705274dd82b25de93aaafe047e8d99a9a84e52daa26017abb06b750a29
MD5 258d10ac6066a68c67c0ee9774e95fb2
SHA1 80617380c04996bc79a26185f9a7528b21241cfe
SHA512 925c4255253a9eccdb6f92a04146137fd98825169b3e3d112a2d227c10110d42278c7a890cd20c0f8b2a0277e7fddb0dfb892d2cf8fc25b1153b15206a1abc3d
TLSH
T12351ADF7D3E8977D890196E996253F2FCD6D0A14621C7C57C8D9AE0B53F18B2D20024E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 940417cef7fa697d86ab19b43e0caf590fb5700e29bce78b07f219ad18cdb70c
MD5 66a647c3e81d3e721f6e5539f4b50b7e
SHA1 a7e1c67b9c37f003f60cec64531908a60384688c
SHA512 475db5b93de00b34ef8e5ac2a91abd4787842231de4b6086fa9d0dbd41bf21a4c0bc6be1cb1dbc6cb6e8525e24a72f2461599ea90f4b5c2fb7c4e9078932c6a1
TLSH
T174819BF783E4C96D861192F4EA156E1FCE6D0920031C7CA289E4BE1B53F2972E20079F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 c158955e9f8923eb47fcb367b8352be361504b5679f00020883cca7def8d2792
MD5 d514970e8c4ac569d947e2d0c1041ef6
SHA1 ddcfbda77ee6e1fc19003b1b0db8bcf1432b405a
SHA512 4cfc7639c70cf6b71ef50520c745d520c1aba35a30078ca439d4a5efd9076bdbec95eb05d82b9c21dd5a35030109af0cba0a83d4b549aa4390afbc1b33fbe456
SSDEEP 192:dRdNqHFdGoEv7tYpAPRp2hVd9CHsb+WNnr4tR+28ekvkwoAaKCVyIsnAUgraJ:dRdN4ghYUXeL4w8m28DvI6Ce
TLSH
T1C652B52EB9146A3B9CDAD229FD617B57EBF1102171C41E84E6FC8A2C24EB9CD2317417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 6c88f930fbdcb57d45cc7c8c85151723a5562fed538526311303207074bbd239
MD5 86bb2ef0ebf3c8aa37552a3d01a125d7
SHA1 3b21ffdb2b45fa0227de6e07f7e6011acd7c3363
SHA512 16648cfc53b2038bc282c57981eac2ace532ad5e1e8bbe632cb64316f3a2ef2d897951c8fb8c8b17743b3379aeefbe81d3fc8531cabbb933fdef4308b5459dd9
SSDEEP 192:dRdNqHFdGorv7tYpAPRp2hVd9CHsb+WNnr4tR+2oekvkwoAaFCVyIsnAUgtaJ:dRdN4ThYUXeL4w8m2oDvI1C8
TLSH
T1D442C52EA914AA3B9CCBD229FD617B57DBF1002171D82E84E6FC892C14DB5DD2327417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 e3e85507733b74e650902d1645f4c8e2a47131f5f4d003efbf580d80d51d1e18
MD5 d25832a19ff9c1c57c95ef5ecf3d457d
SHA1 30d5ae73ddd9dfab1127bd841aef79ad540016fb
SHA512 680876039281bd13201af5a0d12b9eed3257e3547eb60a743076a4ef44ddf64d39464fedf9d363ec15f80fae0d8dd3610e3a09d4d4a9512ce92d01878e2ab95f
SSDEEP 384:S0jWV7KxkXqKf/pUZNCgVLH2Hfgslvy7pLuLcifcdXODW1+ErU3IQHGtHkr0:SYWV7KxkXqKf/pUZNCgVLH2Hfgshy7pd
TLSH
T15372D8676C4C99370F94C6CCDC167E4FADB6024B65DD886893FA582A03D5ACF120A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 0888fa651b66106a8290f589081d53d231e9a365ca31c7c6ff2bf40d1ae54a0c
MD5 9f3a1920bbbd7382f27ef744d32d03ea
SHA1 105da66df1d7a6489d419c130a2ac5a637a04d25
SHA512 efacd8f451f7d8653ce5e28b94590dfee4fb3ffae55db9b5fec2690b5fffd9c603b6fe398ceecefab6e24377318263fc0c393e63e915e8707d91411ca228b5b0
TLSH
T10BB0121080429501C04302B21583049C31389F30CB59130257E06975D8373B14024190
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59861e.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59861e.TMP
Size 96B
SHA256 7ae62b97cfe16452f91a5c9312879dc644b90c97d07e5f15db7bb22dc778d289
MD5 a057e646234bc018292228f1f1244d62
SHA1 686883cde77a34c3afe0e4a5bdb5025330f8935f
SHA512 14e1781fbada8e5c8a7e53e7e1b20bc0c7bf0fae8a08680ed16ee7c985dcb5bb25828884e95054a08a1b8a5f5407193388bbea084252c340040bf52f1d22ba07
TLSH
T13DB002A5C1136616D06343F0299999E87670DF26C743522297E12B66EC256718525770
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 198KB
SHA256 8a36fa3d3f0b8fedc71a9c191ca280913914793f8be5c6b85650f96549295170
MD5 0f45c98ea8ae74ce22913b233354bba3
SHA1 a2732fea66eab7c59d24e7fd17db104de105bc8d
SHA512 4da31d7d9c901be3168d2d26a4c1981f0cdab50fda1c6b982f3d689215db19fee45945af528fd8f66876af5849456ea31a80ee0f2e75fd92de58669727f6b593
SSDEEP 6144:zRxx+5VwBbR6GoUGU6Y9rOk0HOGm/SFyEE9:1S5VyzoUGULrOjuGdF29
TLSH
T111141373AF175ED6C57E8AB6398D5C00CE174385718BEA88836C6BC946E01DB0B73A71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 198KB
SHA256 1d3ec1f63e6d24b43fcd2da44285101988994242ef6a3b7694f71512821ef463
MD5 82de54618792fa61b9cd92b83897ee44
SHA1 4c9729b6c0133f2346d091093870cc16761595fe
SHA512 f20982b495ae0edac4064ae8c9758e622c518da6a2c73916378774b544f8d8d29027e18fb8120349eaadb08f239ce4661a79bf555e715bcbe7ef500d7891ce70
SSDEEP 6144:VRxx+5VwBbR6GoUGU6Y9rOk0HOGm/SFyEE9:LS5VyzoUGULrOjuGdF29
TLSH
T113141332BF175EE6853E8BA2358D5C00CD6743C3718AEA88866C2BC546E40CB4F33A71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 49b7d23aff8470019c792e330fc18ef6d2d74e832ea00f11d5c452c445b8ff57
MD5 81b7bf9b3160e84bc8772370eff503e0
SHA1 6260404f5739d5732e17789a27a926c24a0944e1
SHA512 47d7b8e08af8baf5a234ba62b0687dbc3605e3e740e6eff5dad2e6c16ab216a5487680bf1debd58f82b427ec5d2b3ea08221bcd36c50ee310c30c2f0e5ee4a54
SSDEEP 1536:0NPcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEB:IP3Qw/xLANk0mUW5GmRntSFCjEEN3
TLSH
T18F9302BA4E1A4AE7957E46C176AD7808CE12130D70AFA9CC316C639D61941C92B73F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 197KB
SHA256 f71ed7196e0f8dfa5fb78b7436af1e84c45917389c4297d680fb5907bbfa720a
MD5 4502c5e76ce70853ccdc8bad33c71d44
SHA1 4d7ab71af73603d611aa181cd17d088e7b620f97
SHA512 506f4a872b1bb5a4ee4806856f8fbc7e48439ea853a58543e7785adfd8555d37ccae0f30961f2db2bd505b75ea96ce7e1652f60383bb88ad9cc0f9d5f88ebd17
SSDEEP 6144:6Rxx+5VwBbR6GoUGU6Y9rOk0HOGm/SFyEE9:MS5VyzoUGULrOjuGdF29
TLSH
T15D141373AF175EE6C57E8AB6398D5C00CE174385718BE688836C6BC546E01DB0B73A71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__sentry-event

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\.sentry-native\c243fda8-fc39-473f-f2d5-ccec3c1f9d74.run\__sentry-event
Size 582B
SHA256 0779f1bb924250923c2e33e8680c00ebd332999ff71563ed28dc4b477aa10845
MD5 03169c0985b316a8f577c4ec07d96759
SHA1 0ee884fcf3a7d70f623e0bc9b8612053095ec2f4
SHA512 dbff2628bc1353570b863e550f316f47c83f7d9da13fcd0ff690cbfb69932098cd4ad7f9c620f288fd4606561e1235fca89ec59b330a27355de7f2d5789b71e0
TLSH
T148F0E1B166F0A1772DC31F2E287E16A1D7395B57C68296D536A401824F49D0A0E009A1
MD5 SHA1 SHA512 TLSH

Submit Download

VCRUNTIME140.dll

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\VCRUNTIME140.dll
Size 94KB
SHA256 69ae8da07c71d09728260897375c7f0ddd317499969f32a4a2971967aa1dc9de
MD5 703a2b415437cbb4b03a4c1d1740ab51
SHA1 87315c86a29012b5af3e3549215c3810514082d4
SHA512 c2aa0c9c015e1596fa972de460dc5de9174e96c376d108a6b7651762ca824f032cfc9c69846e837b7f0b6ff6cf0a25708a547fc589f951a96ccd41020016da37
SSDEEP 1536:tT11/9nhu8HQRC/lYLFy1E0CWtVn3GlD2/becbfQqu2x:t5NF/eLUCnWtVn2lDSbecbftuC
TLSH
T1FA936C4A76A442B7D06AD178C2E35E16F770B844877063CF03B686AA4F67BE05E3D346
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VCRUNTIME140_1.dll

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\VCRUNTIME140_1.dll
Size 36KB
SHA256 67a4a07ee9fa855c7a505d78569f403430d9dc4a06f04ad8dcf55afba4224009
MD5 0a5a6000d04c290978e0a3b00fb89df0
SHA1 8bb57cda5cd501b9831ccdeb206d46f1bf29b982
SHA512 2e77ac55575fe98dd68c339f5310b4acb497c23ae127e08b364c0fe10228d2730adc7379a08f644df26417e9c8b2fed8dac8de7cd505db0462932159943e0e0d
SSDEEP 384:I7sFi8rEW2UUtAAd928q4qXnU5fBLn8umItRWqoVJtYf45z/U3ZNvVWr9KWj14g0:e8gW2UUt/yXgBLn85aRZoZS4kZiZmo6
TLSH
T1B6F23A9463784096D46B95B0C4E39F27FB38F9A25750978F0AA4825D2F237D0F63E316
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

comet_installer.exe

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\comet_installer.exe
Size 258KB
SHA256 b1834ea2004df31973962943d3e0ea6eb7e07ae522a032386cc9e9c40b5324e3
MD5 970ffca07c63e2ceda3730da39c53fb4
SHA1 ae57aef513282cb7a3de76d51206df443d93654c
SHA512 da974c9942083eec950365f736e562902b317311ab01bb27823094ab2c61fdcf92e4d3d4b27c5c82551e43aab017c8522d5c23aa8340eab66ff2cc0a0969c434
SSDEEP 6144:F5xCGz1xn6dkrSYsz0T5uJ968A225L9TCrX5RGLzNVNBsDDaC469:F51xn6dkrNdTIJBL2KXGfLs/t
TLSH
T1A444BF02BA0540E6D5298B74D44329019F327CEBFBD199CF67C26E9A0A739F05A7F607
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crashpad_handler.exe

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\crashpad_handler.exe
Size 648KB
SHA256 c8c2c44b085ddba797ea79de92095d478611dc09607e527ea136ca547ccfc127
MD5 86f199f44a92a01a3d876fc1a29368e8
SHA1 284dfd5a1883dbcdfe91840553af11de371ca01a
SHA512 a5e0c074645860d743eb376c401cb259912142c22fe0cca4d9fb9fa5892d17a7c8423bbe1552e160e4343f5b8fb4b88a572a8a6b1b693a0b61b90345806a3d8c
SSDEEP 12288:Drtz5kgdEnGA1RHDNhQHhiiK+ybXLOoIxgbfNujd5z/aFSVVt2:DhzK9XrHDTQHhtK+ybXLOoIxgbfNujd0
TLSH
T1E2E44A26776800A8D277C1BAC7838A13F7B2740B43B15EDB279187655F276D88F39B12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crashpad_wer.dll

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\crashpad_wer.dll
Size 24KB
SHA256 7e262eb9f84034547ea2a184c189bac7ffe8fde7a0f7599a9930d1b0f747af1e
MD5 5c9890a02a1b2f03e97f8df24c1831ca
SHA1 95a116489760a7d42715de79800a2d61328e4559
SHA512 320e31133cc70d8d5c3a0d0bedbe68f2a0c1ad77dd3bb3c2011fd9eb534437bf410a0440f56807f8eab15d1979e624b15db641489509276d476c2d970444c215
SSDEEP 384:MWuejiJrDrMtbIYgBc712X6y/uo6ki2woizZPxy8RbmL4nNyuRo:MtemPQtbIBBS1k2r2wTzZZ5ALEo
TLSH
T139B28E87A9704847ED968DB4E0E78913DDB5B7012BE491CF231582092F513C17BBF6AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.so

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\app.so
Size 6.9MB
SHA256 4b1de1175e34f580c22dbac51185dcef4df8ee28cc1719ad3b9284617d05e3ca
MD5 2f9c2efeef6b6765cd95296190c7e5cc
SHA1 7b9a266e92ced7e66e81e532a5e41148432d1eea
SHA512 7e9ca2619295d23df623fc635fc7bc0eb81d3c78e484b20df4b37f23771cc31e3596630e81c95e272f79e0135322609c55346f4250a3cf5f62b8da085840101a
SSDEEP 49152:DJ4ufAtTVeQFOVLJGlLF3cVZvOCiiEBAcL+/LnMfbHJOTG+GghXgP9mQtOyacu3k:DJ4lislyQPOTGXghXgP91OyaXOfqZy
TLSH
T179762B4FD0E493A1C822F2B6F74E76B66A18B89C4B70D24716D84F653D87DA04BCD272
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AssetManifest.bin

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\AssetManifest.bin
Size 1KB
SHA256 f5f212282b564bcb48dfad27444bb4ba1ff441a8f11b110de5d1846652273958
MD5 ff160984c7870bacfacc60d5f04d32d6
SHA1 3b28494639c27774ea57c0d675ef99c8ad6f8c5d
SHA512 a6a83c627db4130f216d7a11345e89de695827946f5501ae5e11c516b63f1c71a1a2659982d287415c870a3e794712645b4c23210a96f742bd9df627721d0594
TLSH
T1DF31F705836032DF3C95B50235AB62A59D160F18AD54F7DF333DA849B1C285708FFA76
MD5 SHA1 SHA512 TLSH

Submit Download

FontManifest.json

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\FontManifest.json
Size 500B
SHA256 6cc627bfae80ea744ed3f0f5c264a38964f3566525726228fb16031312335410
MD5 ec51b10df48d46f1500da548734a5a2e
SHA1 d09eb307ffc962dc1a9a873b365a06a57db14a98
SHA512 ecb5f4a3a4b30cd9d95030b1abc1af0b308701703f46a2d0feed8cb0d1c6bffd00310b1901173f9529507550f596a430100b4b67c49fa734cbbfae6ff5b1ca15
TLSH
T16CF0E90E484A455190DC9297F12EA0D2188C7B5A72C5E89BDE791E7063F223412717BB
MD5 SHA1 SHA512 TLSH

Submit Download

NativeAssetsManifest.json

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\NativeAssetsManifest.json
Size 45B
SHA256 9548a31e4a048135c1d94f919328bfb62ae2c7bb3cab96557c7941daa97776cb
MD5 f3a664e105b4f792c6c7fe4e4d22c398
SHA1 adee29ec4f2b3cb2ec37ec3368f37ff805695d36
SHA512 b7df555970e20c6a50f650cd0df6ab782fba7004782b3f7921ccfd314db53bfb61523986628d2e05d085f4c2263dfcf54000ffdfc946b0158c5766fc6f1d0a86
MD5 SHA1 SHA512

Submit Download

cacert.pem

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\assets\certs\cacert.pem
Size 222KB
SHA256 64dfd5b1026700e0a0a324964749da9adc69ae5e51e899bf16ff47d6fd0e9a5e
MD5 f586a2260272a64e67aef3526353dcd4
SHA1 b4d7062cd418a22d31b8fd7a5ee1dc984750c51a
SHA512 f9d72ca604f238f86d3b0233b4bd20cd728529f74eb190ad7a37f942b00b014a717fa771c848233365938ca090e7e855ac2c3abdd4a25e18ce16b99b65ef56c3
SSDEEP 3072:yHetHRqCCZjlkKSNY5h61W2BzEY2S1S4dmGf3IcCJjEWh3c+dogltO/ZyOTi1Pjx:OqU9NgI6FdZL52dTOgwQh1hV1AP2u2Ft
TLSH
T1C124AEEACF953C4A28E3E094C9AB037ED919C3629DDAB0B31D593805D78972D61FD08D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FKGrotesk-Regular.ttf

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\assets\fonts\FKGrotesk-Regular.ttf
Size 177KB
SHA256 febff90f328edfee81b410afeb30a4647c4dcee262d5fc6f9bc5a4b16d07b287
MD5 c557ce743016cb63495363acaa6ece59
SHA1 4d95df058364fefdf96dae8ac248bd87f1f14f29
SHA512 68941e1708e03c3e49985c8a7a939efd91b1b19935354ae143c7b2a331e37235a0b417a2f5ff9b1e99fa2b8a67a8300a11d0799a99520808cdab927562a852a7
SSDEEP 1536:9AZUVNNm+vWUFqpxBF3d+NCXF9/iDXIN5N4aNpPbG9wpfaMDxRG72A5TgMlqoaeb:9yV+vWUnCV9dyP2A5r4HLw+5jy
TLSH
T10A046C07F203AB0EDD290D380974D3EA77E5F8515B17C20B74593A8DD8C72A90EBA2D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FKGroteskNeue-Medium.ttf

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\assets\fonts\FKGroteskNeue-Medium.ttf
Size 193KB
SHA256 ec9ca3ce004894970235306c5c715a0a8ba4d5e49d3ebd1bc60d5dbf74aa2972
MD5 b636888eb3a838f424fac3acf326a261
SHA1 50b7d731d5edfef3ede49ec198103f7f74ea2886
SHA512 89a14f2b9d43ef2c8da967bdc999f8e4a8bb5149d116c58d81ddfb94ba9c3eb502ae73a3e5bc018cfdaf69f178bc8743e9466232c62ea1b747e6bd94032411cb
SSDEEP 3072:pcA5j1rQi8KYkns3ghHBT8NhPcyA8QFehRuvK:L5BL89mr8n7A8oex
TLSH
T1DB146D07F682DB0EED2A2E354576D76B51F4F02A1F93028A7418669BECC73D04FAA5C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FKGroteskNeue-Regular.ttf

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\assets\fonts\FKGroteskNeue-Regular.ttf
Size 195KB
SHA256 8ecdf9159eecdd0b185efcdcfa1642be7e631207b9c7181aa435c0e00967b077
MD5 dab283b093dc521f4c46031787d45524
SHA1 384b6ba7c4cdef8cd69be445bb6d6bca2d87bc8e
SHA512 fc3ac2469072c769057b1a50c26692bbba8a7e4fbd40c849195eecb6e9b759121bd3563b002a5b010c7be8e71d69096005b706c643f9b36fb4e208c8feade7be
SSDEEP 3072:sA5jb8qs7HnNTUsHOOKyG3VS2pXEFKplcvEa:N5/8dweKplE
TLSH
T197147C07F781D70EED2A2D74457AC72B61F4F02B2BA703867419666BDCCA2E04E791C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PPEditorialNew-Ultralight.ttf

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\assets\fonts\PPEditorialNew-Ultralight.ttf
Size 89KB
SHA256 b564eba9ea02a1b2ca76727803de45c56c0bee373d30d5058623eff432245c0d
MD5 cf990ced775f80147a8a08b5caabebd4
SHA1 bf294e8ab736ba6b7978bc8f869e3d7cd7bc1a46
SHA512 515dbaad380f595fe51429cd96a1c79852bb243f05366816e1ee57144ce757c9eb26915e0699d4e17b464f84ef28446120f6887fef5d62443ee53acd0368957f
SSDEEP 1536:BAA1sD0OSBzuVLaNVZqDLPTV2j/sdDnXJg1xX4HGDC57rZGY8Y+IbiE9vR8YPNfb:BT1sD0eL+P+5MY8iHy0Nj3
TLSH
T118936C0AF3A6D64EFE2E1F7C56F6876655ACF4065F7E914F60893A79C8C92804C022CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Comet_Logo.svg

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\assets\images\Comet_Logo.svg
Size 5KB
SHA256 7a4d63bc65fd753d5b83cb7f10d5b5b50b5ca69821be4014129a26bc85195430
MD5 4f866ea65ea753e4932f160399359a6f
SHA1 dcc882c4454c200e48563b5c63235f5eae20e6ab
SHA512 6c6248a7b4747be3e2faeb06b33f9fda98d67bfa494a7f1a66babf273592cce2abafc0c0641dd80d49358f020de487445939d46c558ef1fe4877145e5e7ce489
SSDEEP 96:Pd3j6Ed8ghqAmkgA+HjVcvXaIApqaBONlzZNyXZmEz6jjismISJr3U+:F/QAmkgAIjVcvXZugZNefgW/IS5U+
TLSH
T1AEB186F7539423E09443ABDCEF13A8A2B95634F87E50C7D58674EBD0BA120AA499CC90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Install_Background.png

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\assets\images\Install_Background.png
Size 136KB
SHA256 47b50a09269d33908f048a89d2e843ec1f9f4b320c0c5a47b9e7ee6b48119eee
MD5 339522f87471f5cd6b43632ade92f3c1
SHA1 8e9ad25ae3a87c35d77ba0edfaf0d93228a66fa9
SHA512 a87bbb6eb11b8f9a07d84cf4f61f6745231d5c5fad26f9445b74d41dd897747938ad84507ae1af6c1ae3bca5c5fd8522953cf680f2ce8f511e641e5cdeac4143
SSDEEP 3072:bdAdlhuJrCDuIonAC2Sj6Nb4CNWjyXUlZGnwTPHNrOx:mfhsPAd1Nb4pjMnnwtOx
TLSH
T160D312F930CCBF8881462BE614DDB113709C6B00213BCF9B9D67491AD26D59F9B9CAC6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Install_First.png

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\assets\images\Install_First.png
Size 36KB
SHA256 ac0f9b78b74816280cb41c9528c12d8a337ab3f96d9c326d11c1c75e948b1d3c
MD5 37bf16b195e917f1b1961cba1cf14208
SHA1 72b27c08b2ae7fdf7b8903568f322bc54e14b6a2
SHA512 500c4123076ac85da4deced2e9963cdc6e5a37894f0d098a82c29186ef7434483339dab697176027a538f56d7c5d9839b0c82adeb9660543ece339dd9a582a9d
SSDEEP 768:Pn6GCkjveNDun3ZULCl5HCgkeyCJ+CPerXeup72n/nYFGgsFXHcdc:Pn6GCqnaul5HCgket+FXeyanY07FXUc
TLSH
T113F2F1F47D9D9E9326CE301393A8D5DBE2887C9B5285BDC41734321056DB2B822CBF61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Install_Second.png

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\assets\images\Install_Second.png
Size 9KB
SHA256 862c9d35f69edc3aefa1278fd3729ab92d946d2d9e0be822cde0d35a25abc94b
MD5 fee9b192f60708c40707b83151e4c57a
SHA1 67b20de3db9ae0722d8e3f5b5768e008eedf9f09
SHA512 d8ad55cf4a852e04e117ffcdbb87f3c6f4f75037646e7ac672de066b48cf798cd0cb146d63188c6be36eb12aaafc2b78712190ab828861de76e0110dc6a8c2c1
SSDEEP 192:A5N/DApP1PtFTat5AZ4chCx1E3aa/UWh3tgKBPPnjEkEjch6YXqUf:2kvy+Cxa3aa/jptgy0gcGLf
TLSH
T15312AFB772BDF5BA349789BD2C77EF238A73150358C3DE49D99080685A80F1CB844807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Install_Third.png

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\assets\images\Install_Third.png
Size 31KB
SHA256 ea6387b41dbd8d4b94a50eb625990fecdab0118c34d69195647bd08174199516
MD5 aed747236a5de181ee7434e32cf0fb28
SHA1 9751b7344148c175468040ec907bd950c80e4170
SHA512 588fd4421ff4e2d1774e40a163c887dbeb5c43337d00409dcc70f14b90e7c92e120d95eb2b03c33cb876b39d89397274cb2f270ed47362e23a5321378d7492f1
SSDEEP 768:4a+R8yoPk+gEwePzBYK1m492+CHxJgsrrrfEUZHlUjW5hTZFUHMi:sR8yF+gEXPzKM92l+LoH15hTnUsi
TLSH
T180E2E149B07BD112182F6E2890E12EF3FA1BF47BB1CD041C9AA31D9C1740FA66DA41F5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

home_background.png

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\assets\images\home_background.png
Size 432KB
SHA256 f852ce8a4360d77df10f28e491ebfd846e1968cabf6ce07a56a2ddbdb87545c0
MD5 a0cd539bc059044cb9bc73fe49b332d2
SHA1 e2103bcb128ee5600eddc4a03a498d4090afccdb
SHA512 f4e906bf6c8f6f1f45522497ca6de35ed7c610b145cf5de253245d864602e59197c98dcb0c9e08d6a60a7fe7e3cfc29f00f85f0db55ca38057c0dee95b2d30ee
SSDEEP 12288:uN+J5pM9OFGrLbGCLyudt40C8ceNCe0VJWdszB:hDFGHbFLTt40C9eNTszB
TLSH
T19794237C0A40D54BD2A8D1CA41E3DA29940BB423F7F042B85899EF20CB65ADB73A575E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

play_icon.svg

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\assets\images\play_icon.svg
Size 233B
SHA256 df55ea54d2759a4cbfee58877723f38975f9e6e622e0bfd525363a6491cd563a
MD5 a58281500af39edf858d01265d225cb7
SHA1 f4b32bee429e4e7eaade22d4ec283d1538baec22
SHA512 2759d45a08c5c30c36b1fc6255b9553bde0c271f51b07d6529f66c4b25b788eeab5702529c990389b023da9b8fc2dd195be7abb39463a2c6dc0a8e6501d08a15
TLSH
T173D0A729534C4C1DB7214524E76A327D502631A3535C6058D9732934650866F697F5EC
MD5 SHA1 SHA512 TLSH

Submit Download

MaterialIcons-Regular.otf

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\fonts\MaterialIcons-Regular.otf
Size 1.6MB
SHA256 d9865b671a09d683d13a863089d8825e0f61a37696ce5d7d448bc8023aa62453
MD5 e7069dfd19b331be16bed984668fe080
SHA1 fc25284ee3d0aaa75ec5fc8e4fd96926157ed8c4
SHA512 27d9662a22c3e9fe66c261c45bf309e81be7a738ae5dc5b07ad90d207d9901785f3f11dc227c75ca683186b4553b0aa5a621f541c039475b0f032b7688aaa484
SSDEEP 24576:PsSIRolMKvGXtkXKLkMp2fXrNsAxI6zD2/qxDoq4eeeDrG2eOeGr2lkzhlTMrRoV:P9njdzbwc9
TLSH
T1787529100276EF4CC1EF507D43B74A48F4C59AFEA53ABB1AF9B64795220BDBDA1C8181
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\icudtl.dat
Size 760KB
SHA256 c12537022ef818991a7bfed41a76d8d6ae962ffbc0e6511ac762a5d0845e7f7c
MD5 692337664e861ad322138061132dddc6
SHA1 8a99bc860eda0772f3b1f4a125fa4d474410e21c
SHA512 3e2e6adb651e37e530734f999634d7c101fa1c45ae380be8ad169bbfb0a047f2878ff6c8d1428d6b9e7301b447ab2f8839484322ddb3831984be71d442829a55
SSDEEP 12288:HMlhw771h0jM7ykPG07+r4c8w0P4N48RkjtYdPHz982VT50q:ahw3zVtjsbGu4RjgPHzfCq
TLSH
T18CF47C03B1D79C9FE0D48636C9A1E37A9A33978C5B7311D67E6D45887F4A0D70282BCA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

flutter_windows.dll

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\flutter_windows.dll
Size 18.2MB
SHA256 e7ea249ccfcacf2e480b77f07edc5a054f3cee191eb3ae814c31866f89d14c77
MD5 a9854e922373d8c3ee32ae6eec34d3c5
SHA1 4dc21b012d28c1396f5e9cae9b0688f469f5286f
SHA512 98a1488a1a4e3904dc8c9c721ee5bb1a0619d18f85f5f0c6acc205575b7760f84414d96be4e0424f3083e22fb2eed28832fef9ca76ad994b1912cdc88b1bcd77
SSDEEP 196608:3xXv2LPvQsgzjTpIjKqqtPikHJ2Ax7EJJ/m:3FgPv8NIKqiikHJx9EW
TLSH
T1A8178D03F19640F9C48DE2788B5BA927F671B84A0635B5DF279807213FA7BA01B3E754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hotkey_manager_windows_plugin.dll

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\hotkey_manager_windows_plugin.dll
Size 115KB
SHA256 c24a728b92313c0a3ef91431f856164313debc326a31f36300846ebc964b8f65
MD5 48c67109084be90c5597999d4b42e771
SHA1 21ef6bed52621a33caa57cdbc418344e1709a104
SHA512 16e733496aa2b89c2ed6f77fc93080930a469531e93cd80ef18faf9371c0b0ceb4f275453ded8f144c131fe7aeed9c68248b2b248a9b2d8f872302e51e970f60
SSDEEP 1536:5UZvpqQQDqvtBH6wXx/q64zoYEPe+5CVEMuOuYriTx6xTBTzn:5QLQot16WCRq5rMuOuYriToTBn
TLSH
T155C33B3BEA6D40A7E25AD5BDC9874D05DB71B8850BA0A7CF67500B9B0F17BE40E3E601
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\msvcp140.dll
Size 554KB
SHA256 92b315040c9cdb42492c8bf19339f95b758dabba6e492263cc00231a4c161f29
MD5 f3ff13f1e83afec41bca6140030032c8
SHA1 ac62d2e6b9d454ce43cf6a4b218112f5ad773ad3
SHA512 140c6ada9ab0b12df00c3ad8420463a4e159d10b0b0a7f4705986de38d21640e39c4bf7e331221ee67459fd0f5872d2d4c5a2dd8236a994927a4d6836bf46e33
SSDEEP 12288:1k81h3wi9M2OgltEM70X5KvRg6lCEP9pSa29pttcuzQEKZm+jWodEEV8Gmf:1k849pHQEKZm+jWodEEuLf
TLSH
T1B9C40927774902A0E195A3B8A1C34305D7F17C4A8323A3C792FAD6AD2F5B7D5673B290
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

screen_retriever_plugin.dll

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\screen_retriever_plugin.dll
Size 111KB
SHA256 3391657f60730dd684669558fa18977d1e26658f856235a3778aa09892abffb9
MD5 5d113153dd30bf7dbf04990562626833
SHA1 3ff6e085b4d102c6b0d379c8ad0a824d7408ebdd
SHA512 cc7eca75de99e077cbcc078f774c4f583dc4d50a5ec77e1a157ca513ca7558a2ee06a2d50d978f06dfd67e6cfd8686abd4eec14aa903e0ae6fe8517fdc1f57e3
SSDEEP 1536:JhuF9Xj6pMrx9LbpbIhE7vBLy1FPbCHMILCe52yGRzBTz:LYj6g5bFIhqBe1FzCHMILCe52yEzBn
TLSH
T1BAB34C2BEB1D406BD25AC8BDC9878906DB71B8954B91A7CF17510B9A0F27BE41F3E301
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sentry.dll

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\sentry.dll
Size 315KB
SHA256 9d80e8214fb19054f621f906049ca9b38cdc68880bf279c45fe32084182d8290
MD5 159929bf65ca3c88f49579ec259a2f8c
SHA1 11c9eb0efe629e4c3c901351da654ead4cf17073
SHA512 2f12553bec2fdd25227d1cb77dc8764d5dc97ae30431afc13e04752f632f6c53ccb0dd9aadc4a6b18c8231f7dfd047c6285a6a76297001e8b335477a9c321eae
SSDEEP 6144:mKyWWaBIpVt2T1BoZv6WPU21RLMbDL03CNda9Sipmc9kP:mVWWaBeWuJrPpL403CNda9PmP
TLSH
T196645C6A73640CB9E167C27DD5C38907D7B278061771D7CF17A04B962F23AD4AA3AB02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

url_launcher_windows_plugin.dll

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\url_launcher_windows_plugin.dll
Size 107KB
SHA256 0812efeb0546f298e0dcc3ece7977e817b244955ad780aecd3fe14fb4bce61f5
MD5 3091f73fa3f37df50a16e17b167bdc1e
SHA1 c057f4b05409cd225db648fb91f6dc86aa59f093
SHA512 cef0866ca7f7dc9909c17c0e58b43250ffaaf1fad5aec5fee46d2434fc4739e770940fa6d88a5d2c7abb352c5554f13fe002c7fb6c465913276df5d0c7ce56d7
SSDEEP 1536:qGpJkMhcotF4/x6p1n6qSjz3QBuWp9legdXBRM8+VxiyHrUrBTzlWo:q0BhcotFW6b6zOLDM8+VxiyHQrBnf
TLSH
T12DB34A3BAB1910ABE259C5B8CA874941DB71BC8547D1A7CF17904ADB0F67BE41F3E202
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

window_manager_plugin.dll

Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\window_manager_plugin.dll
Size 139KB
SHA256 e146d77954a0050608cdf1413aa2928613e9385d93f3b7782a45bfd5f380b9bd
MD5 d07d10076d58a399b65b75310edc1f34
SHA1 f100bb05f1092b60ade0b691b50646358e2075c4
SHA512 b524883ec788e5868405b3adf492f1be55bf16823a04f8fe2db3796da58c0b882ff069d728fc42fcb8afb848daab15e016c9b5e7cc39a02b2c27c86add995a77
SSDEEP 3072:UGpeq7xFdAO6vxoGzLq3kUwayo2KvpZJRTbK2EqrBn+v:dpTxFh6vxoJkSyo2KvpZJRTbK2EY9G
TLSH
T1EED36D2BF65900A7D26AD4B8C9C39906DB71F8C54B91E7CF07900A9B4F23BE45E3E611
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4252-111-0x000001CAB23B0000-0x000001CAB23B8000-memory.dmp

Download

memory/4252-65-0x000001CAB5EC0000-0x000001CAB5EC1000-memory.dmp

Download

memory/4252-69-0x000001CAB5ED0000-0x000001CAB5ED1000-memory.dmp

Download

memory/4252-67-0x000001CAB5F60000-0x000001CAB6649000-memory.dmp

Download

memory/4252-66-0x000001CAB5F60000-0x000001CAB6649000-memory.dmp

Download

memory/4252-68-0x000001CAB5F60000-0x000001CAB6649000-memory.dmp

Download

memory/4364-52-0x0000000000900000-0x000000000095F000-memory.dmp

Download