1f7c200c77caeeb00e8552ca355b72ade1a7b9f909979df1d52e33931c957c24

Analysis

user interaction
yes
max time kernel
28s
max time network
21s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
07/05/2026, 15:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
PvZ_Tools_v2.7.5.exe
Size 875KB
Sample260507-smckaaa14p
SHA256 1f7c200c77caeeb00e8552ca355b72ade1a7b9f909979df1d52e33931c957c24
MD5 47f4ce0fcedde6c3298269d64005d14e
SHA1 687b229afecca5c12cb5dfc72412e03a4ba78271
SHA512 35c3b13519796d90d0dae432ea5b65c01e12e2622581b559615a925a05c63fc4336c0e44c20c581019aa22c5a1a4905234ab07a792fc8de8108a884666537cdc
SSDEEP 24576:QHN7IY7ODPrMDW9xEA6kvF6gZyZ0+2nCtUbfq:dDTMDW9xEA/ZyZqbfq
TLSH
T181157D172EB4C033D47A61BBD617E7A17331ECA97A355D13B385BE3800BD281982F666
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	PvZ_Tools_v2.7.5.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3668	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134226405208666854"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3260	chrome.exe
3260	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe

Suspicious use of AdjustPrivilegeToken 14 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3260	chrome.exe
Token: SeCreatePagefilePrivilege	3260	chrome.exe
Token: SeShutdownPrivilege	3260	chrome.exe
Token: SeCreatePagefilePrivilege	3260	chrome.exe
Token: SeShutdownPrivilege	3260	chrome.exe
Token: SeCreatePagefilePrivilege	3260	chrome.exe
Token: SeShutdownPrivilege	3260	chrome.exe
Token: SeCreatePagefilePrivilege	3260	chrome.exe
Token: SeShutdownPrivilege	3260	chrome.exe
Token: SeCreatePagefilePrivilege	3260	chrome.exe
Token: SeShutdownPrivilege	3260	chrome.exe
Token: SeCreatePagefilePrivilege	3260	chrome.exe
Token: SeShutdownPrivilege	3260	chrome.exe
Token: SeCreatePagefilePrivilege	3260	chrome.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe
3260	chrome.exe

Suspicious use of WriteProcessMemory 17 IoCs

description	pid	Process	procid_target
PID 3260 wrote to memory of 1080	3260	chrome.exe	80
PID 3260 wrote to memory of 2344	3260	chrome.exe	81
PID 3260 wrote to memory of 2344	3260	chrome.exe	81
PID 3260 wrote to memory of 3668	3260	chrome.exe	82
PID 3260 wrote to memory of 2524	3260	chrome.exe	83
PID 3260 wrote to memory of 2524	3260	chrome.exe	83
PID 3260 wrote to memory of 3288	3260	chrome.exe	84
PID 3260 wrote to memory of 4828	3260	chrome.exe	85
PID 3260 wrote to memory of 3288	3260	chrome.exe	84
PID 3260 wrote to memory of 4828	3260	chrome.exe	85
PID 3260 wrote to memory of 4248	3260	chrome.exe	86
PID 3260 wrote to memory of 4248	3260	chrome.exe	86
PID 3260 wrote to memory of 4620	3260	chrome.exe	89
PID 3260 wrote to memory of 4620	3260	chrome.exe	89
PID 3260 wrote to memory of 1360	3260	chrome.exe	90
PID 3260 wrote to memory of 940	3260	chrome.exe	92
PID 3260 wrote to memory of 940	3260	chrome.exe	92

C:\Users\Admin\AppData\Local\Temp\PvZ_Tools_v2.7.5.exe
"C:\Users\Admin\AppData\Local\Temp\PvZ_Tools_v2.7.5.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3924

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffed001c728,0x7ffed001c734,0x7ffed001c740
  2⤵
  PID:1080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1696,i,18314095319386531922,5094473284187728771,262144 --field-trial-handle=1944,i,5022454151051226687,370477764662805135,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1940 /prefetch:2
  2⤵
  PID:2344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2284,i,10175285093354266424,6310604665926229954,524288 --field-trial-handle=1944,i,5022454151051226687,370477764662805135,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2268 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2368,i,7895181965087314017,3540189022582101550,524288 --field-trial-handle=1944,i,5022454151051226687,370477764662805135,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2400 /prefetch:13
  2⤵
  PID:2524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3272,i,4726720255977031248,11312484050849068125,2097152 --field-trial-handle=1944,i,5022454151051226687,370477764662805135,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:3288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3296,i,1521544701500365792,2604862840088040839,2097152 --field-trial-handle=1944,i,5022454151051226687,370477764662805135,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3340 /prefetch:1
  2⤵
  PID:4828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4256,i,11076141600325390016,3839213753969608313,2097152 --field-trial-handle=1944,i,5022454151051226687,370477764662805135,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4260 /prefetch:9
  2⤵
  PID:4248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4676,i,9762996816550840295,4354137483342712602,2097152 --field-trial-handle=1944,i,5022454151051226687,370477764662805135,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4544 /prefetch:1
  2⤵
  PID:4620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5416,i,5788868071191455717,8667575741264539402,524288 --field-trial-handle=1944,i,5022454151051226687,370477764662805135,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5316 /prefetch:14
  2⤵
  PID:1360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5792,i,1905810689744224940,6089388543484763939,2097152 --field-trial-handle=1944,i,5022454151051226687,370477764662805135,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5788 /prefetch:1
  2⤵
  PID:940

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2128

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3116

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 f79e4ce1c854954d1bdb9347034e1650d2036ada630c8123e94c0167bad7ed21
MD5 45149afa0a0d5f61210e23b34a6d2fc8
SHA1 183d299744e1a7e5c087de5222c23aab6f3a3c83
SHA512 75c82a0590f4dd72cc83922cfa9b2a04ac1b109917540af3ea4d48d0d9eb2a872211884d52b5dc82d2976c1289f51211b3a240b1f7bbb4e6fcf86b50811429f2
TLSH
T167E0E59ED921982718FD076C60940A46E76013562640894F3B3C81084FB057B498986C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 264B
SHA256 69565158da939bb076dd947cb0613a4eb8132272f34e2e02a5b7b8001752c90b
MD5 b22eae7c1b961e4322d3ff661d66fc8a
SHA1 04c130bc7dbc8597bdbd75adfaf92fbab106752d
SHA512 6b9e1047a004c3f0503d89e21dad393e55eb89dedc3cf7580f7ba8ae4c702f0f1d85396c84bcadd8171707418825c5d7281ed03fc8f9a899c4b210421c17ff56
TLSH
T197D0122011702440F749A6F5D40DDBDDA62C8A3140F4CDEBC6CBD6C8C4951553001D8C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 3a5048547fef66824f1fa5951f44c96b9a9bd9a998adf08eb8a95c8d89605b9a
MD5 5676e8872a0100e6ca8493f97ffca370
SHA1 b5c00642f0e2b01e120d4ebcd30763512e035ccc
SHA512 834c83b4b988eaa0f98fc9dffbc0da281e06cb7612eeff4aef450ebb010d1df5b385ebe6cbececc1fdc1067fad4a3dfeee525ed6abe57c6b5664164246c1c8d1
TLSH
T1F7618EB3D3E4DABD851196E4AA216E2FCD790925135C3C56C9D4AE4B43F2873E20078F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 689B
SHA256 ef1173646a3cf110587a46adbf7224079c9654c185415c0a6c5cb916fb381b8f
MD5 e7410b66b035d61840c1f2236a8aadb3
SHA1 ec0a7c9158f863412e0a88d1e29b9b50931525da
SHA512 719019e23f58cd614f0d71a9cfb04c4783853395f49fec83f75a80c03a8f19a38ea73d3194285cdafdd65bab667cf05c307ccafe63b45a44257d96266b580cf7
TLSH
T16F014EDBA7BDB8AB10BD45676E04B48516B6783102C168F8CEEB826D70C95F31B13403
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 3c44df73c6454d13ec06eaeeb247d87191983f4e2dd0d9be71626db607208579
MD5 20ef411d01d4f0c29d15ed73db2e6b26
SHA1 e27b9c05ece75722bbab12ec0c5ae6f8bcf5b95c
SHA512 4b86e19cf7f8890b49908190e5bb9169237ee84a0fbe5f7c8fd5c2b320154a7e94d6a890e069fdfe0b9c8bb724eea0d46398fc532dd7b9160a9d8d8903e85bfc
SSDEEP 192:gRhHUMPSx9ErKNv7ApAPRp2w9qHsb+WNnu90acvmvfCPyIsnAUgtaJ:gRhHGx9FtsUXz4wI0nAc8
TLSH
T17B42D62FA908793B5CDBC619FD61B757E7F5202121942E88E6FC8A1C14E7ACD321B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 02fa3748cc960b0ed806669146286ae61d8f8c37c72e1c20fff625c9b568d7c5
MD5 e1d791f76039330e35fa0e1827d639ea
SHA1 a37e7b6749565fdef84e626eb8e8ab5cfd1eaf09
SHA512 4cd2d4ec371de591ed8fc49a3c9c69bf2d80c0d8879044f55af268ee4a35e216538e529304db502c0dc2822c3e20cfadd9949c623d30489800bbc0cdffa3ddcc
SSDEEP 384:2Mjqt7KxkXqKf/pUZNCgVLH2Hfgslo67pLuLcifklXODqt+ErU3sjHG9TDWxSal2:2Aqt7KxkXqKf/pUZNCgVLH2Hfgsq67pU
TLSH
T1B672E8676C0C9D7B0F94C58CD8267E4FADB9024B65ED886483FA582A03D5BDF110A1F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 c5a031ef1c17199a92349fa995564b7ba22d0ad6d23b1eb0dc8c9073b072b45b
MD5 72d93d1fb97dd85ef06279a476395aed
SHA1 8901e07ad0037ad285ec41614a05ab469c841910
SHA512 6c90af436f3cb76dcc6b53793ef8918b97b53e2e5f42407c2fa1acca4c5224d181482742bcde18143277fb45ea3bf9b1b9d64b837601ac1fcb0b9ec6ff01ff57
TLSH
T198B01210CC026540C00301B81146158821849F20C709130153E86971D8763B14014190
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe584273.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe584273.TMP
Size 120B
SHA256 56fb9c4e186d5433aa57c905a3f7df31094d3586ec2b59cbaa2b234c66a7d4d1
MD5 1b5559216559481d04b6af2b0de22920
SHA1 230b59c24adc1e32c653f62d4cf9b348e7be81d9
SHA512 1297b6b7242fb39979d917ba1a8cb38d6fc8ed24ee2c2f6c83a5dff17ce5a2475c231ede86ed690171b05923ae811391c98be58e6ee6de9c07c317d7a42ebc85
TLSH
T128B01223D581A121C0050370194498CC7014FF12C602020371F41712A83A6600118140
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 01e928e394326e61fd8834e620d83aa729ac6c3713d9420e5a19a00185a68ae5
MD5 2ee6b4892df4ec28cabcb3fa2db95a9d
SHA1 ed06d852edfed6307b5923b066bdca415a5f6c08
SHA512 5ffa933b5f51e49f1c87f4fa04b43f25a018d4ab9316a1bf446c2af8990f9da45fd3a71cef74dc05802e69df2fb91b955d70cde7bac0f06c936207f57c1bbff0
SSDEEP 1536:hZ9P++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:d++J3qUQm08KMWF0bFTcVHr6zT
TLSH
T1E79312BA991E7D39536AC396D0079CAC8CE3DCCE1514557C30C7AB1E14BA393A31B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 199KB
SHA256 05f4bd34f98da22a71fd13c6892535374ea486bb4eaccae0490c8ad36c5c004a
MD5 137e1dffed87521c88cca08273379d6a
SHA1 fc57043425fbddff6c368d6bfe7c8154b5d55c37
SHA512 04c6de387aabaac3700200799a2fa5673f8d8c04f5f52a6763c967f35035072990f312fd975f9ee85276cf77cf2443b59456cb383f25ac76658d133960e42508
SSDEEP 3072:834b7LwZ8RUhDUZziUuqRmvsL8G/cam++J3qUQm08KMWF0bFTcVHr6zd:iE9RUhDlUujIBcJ++JjcMW2VcVLu
TLSH
T1001423BB9A1F0EB453A3A1E9600BCD5C8DD7F8CD089452787187234D156D3939B8BD39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download