Resubmissions

22/05/2026, 14:18

260522-rmkefsdx2n7

22/05/2026, 14:00

260522-ra5vmac15p6

Analysis

  • user interaction
    yes
  • max time kernel
    1050s
  • max time network
    1051s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    22/05/2026, 14:00

General

  • Target
    titellos_1.png
  • Size 2.5MB
  • Sample260522-ra5vmac15p
  • SHA256 36497a58b39dca8f8ad09a62e4eab6a56e07cf5af1bfb8f40fe356da49880071
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Enumerates connected drives 3 TTPs 46 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 2 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 24 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 12 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 40 IoCs
  • Suspicious use of SetWindowsHookEx 20 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Windows\system32\mspaint.exe
    "C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\titellos_1.png"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:5000
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
    1⤵
      PID:676
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Checks processor information in registry
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:4716
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffc0df6c728,0x7ffc0df6c734,0x7ffc0df6c740
        2⤵
          PID:1288
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2016,i,12645744480682427958,11300072665924503785,524288 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2056 /prefetch:3
          2⤵
          • System Time Discovery
          PID:2712
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1756,i,12784676543619064769,16838807882453687772,262144 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2000 /prefetch:2
          2⤵
            PID:3784
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2432,i,15282748908997694769,11504023330836628632,524288 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2068 /prefetch:8
            2⤵
              PID:4500
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3248,i,5261506761622939224,3050912394199085026,2097152 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
              2⤵
                PID:4212
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3272,i,13900504667745043720,16617843852935547806,2097152 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3312 /prefetch:1
                2⤵
                  PID:1736
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4500,i,5415711278283887545,13453938577618588575,2097152 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4516 /prefetch:2
                  2⤵
                    PID:4092
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4748,i,4907128917060665029,6458187076090046579,2097152 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4708 /prefetch:1
                    2⤵
                      PID:3792
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5548,i,9844056504914370669,2683745075861906648,524288 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5496 /prefetch:8
                      2⤵
                        PID:2076
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5780,i,2071307542763054157,5350037465255602378,2097152 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5788 /prefetch:1
                        2⤵
                          PID:5600
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3512,i,12885421008057297218,3228796291440607995,2097152 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3316 /prefetch:1
                          2⤵
                            PID:5860
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5892,i,9884776720793176541,5672795202310473705,524288 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6008 /prefetch:8
                            2⤵
                              PID:1832
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6364,i,14964166118535377000,7760785662823020500,524288 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6076 /prefetch:8
                              2⤵
                                PID:4020
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5908,i,14941003866811300236,13309796484081401852,524288 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6084 /prefetch:8
                                2⤵
                                  PID:1056
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5712,i,17493570586875575827,7243546456196840876,262144 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4556 /prefetch:8
                                  2⤵
                                  • Suspicious behavior: EnumeratesProcesses
                                  PID:4576
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6112,i,1250308009976869975,16459375028174048301,2097152 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3116 /prefetch:1
                                  2⤵
                                    PID:3504
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5680,i,5929816533306885869,6580278689432159049,2097152 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5764 /prefetch:1
                                    2⤵
                                      PID:4664
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=3444,i,10110910444197556815,17199603872606863562,524288 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3276 /prefetch:8
                                      2⤵
                                        PID:1568
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3496,i,15491840550227310371,17189275120722603471,524288 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3432 /prefetch:8
                                        2⤵
                                          PID:1744
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6504,i,17156088310895482465,15353638611815645914,524288 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6500 /prefetch:8
                                          2⤵
                                            PID:5448
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6552,i,12094387883865193797,17734089808446838596,2097152 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6580 /prefetch:1
                                            2⤵
                                              PID:4448
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6632,i,11906433071610177440,12300917567604024860,2097152 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6608 /prefetch:1
                                              2⤵
                                                PID:5136
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6796,i,17166082975519922696,18254962327721894386,2097152 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6768 /prefetch:1
                                                2⤵
                                                  PID:3208
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6948,i,6230947688411499027,8313918462358192951,2097152 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6976 /prefetch:1
                                                  2⤵
                                                    PID:3276
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=864,i,9402353437746401521,6899566369154466856,524288 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7132 /prefetch:8
                                                    2⤵
                                                    • Modifies registry class
                                                    PID:1380
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5680,i,4152200051446004841,7601194825129458616,524288 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7144 /prefetch:8
                                                    2⤵
                                                      PID:5776
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=7148,i,248031826117419641,2926355131313917619,524288 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6960 /prefetch:8
                                                      2⤵
                                                        PID:408
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3280,i,14867038590945265599,14992622885288288957,524288 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7148 /prefetch:8
                                                        2⤵
                                                          PID:1984
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=6772,i,16674246289783205773,3842422175378706548,2097152 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4912 /prefetch:1
                                                          2⤵
                                                            PID:3648
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6552,i,13186046733639535962,3925910184763359070,2097152 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7104 /prefetch:1
                                                            2⤵
                                                              PID:632
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=7192,i,10351313686247232077,12135827155206064160,2097152 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6756 /prefetch:1
                                                              2⤵
                                                                PID:3044
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=6528,i,10538768116606771277,11590252184254036028,2097152 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6660 /prefetch:1
                                                                2⤵
                                                                  PID:5232
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4756,i,4585011212008420910,14029638385221597064,524288 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7792 /prefetch:8
                                                                  2⤵
                                                                    PID:3816
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=7576,i,16569934079517153068,14310377018891289743,2097152 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4756 /prefetch:1
                                                                    2⤵
                                                                      PID:3908
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=7292,i,8384067661013437750,14655981188568282869,2097152 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4696 /prefetch:1
                                                                      2⤵
                                                                        PID:1720
                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=7664,i,16464661388664484657,4598200874510687995,2097152 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4820 /prefetch:1
                                                                        2⤵
                                                                          PID:5372
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6764,i,4438279235685202493,15191288534170049224,524288 --field-trial-handle=2008,i,10443437106550980741,16429642144646571027,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8036 /prefetch:8
                                                                          2⤵
                                                                            PID:5764
                                                                        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                          1⤵
                                                                            PID:4284
                                                                          • C:\Windows\system32\svchost.exe
                                                                            C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                            1⤵
                                                                              PID:5140
                                                                            • C:\Program Files (x86)\Windows Media Player\wmplayer.exe
                                                                              "C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /Play -Embedding
                                                                              1⤵
                                                                              • Enumerates connected drives
                                                                              • System Location Discovery: System Language Discovery
                                                                              • Suspicious use of FindShellTrayWindow
                                                                              • Suspicious use of WriteProcessMemory
                                                                              PID:2672
                                                                              • C:\Windows\SysWOW64\unregmp2.exe
                                                                                "C:\Windows\System32\unregmp2.exe" /AsyncFirstLogon
                                                                                2⤵
                                                                                • System Location Discovery: System Language Discovery
                                                                                • Suspicious use of WriteProcessMemory
                                                                                PID:5720
                                                                                • C:\Windows\system32\unregmp2.exe
                                                                                  "C:\Windows\SysNative\unregmp2.exe" /AsyncFirstLogon /REENTRANT
                                                                                  3⤵
                                                                                  • Enumerates connected drives
                                                                                  PID:5844
                                                                            • C:\Windows\system32\svchost.exe
                                                                              C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s upnphost
                                                                              1⤵
                                                                              • Drops file in Windows directory
                                                                              PID:1820
                                                                            • C:\Windows\System32\rundll32.exe
                                                                              C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                              1⤵
                                                                                PID:1788
                                                                              • C:\Program Files\VideoLAN\VLC\vlc.exe
                                                                                "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Downloads\WatchProtect.mp4"
                                                                                1⤵
                                                                                • Suspicious behavior: AddClipboardFormatListener
                                                                                • Suspicious behavior: GetForegroundWindowSpam
                                                                                • Suspicious use of FindShellTrayWindow
                                                                                • Suspicious use of SendNotifyMessage
                                                                                • Suspicious use of SetWindowsHookEx
                                                                                PID:2068
                                                                              • C:\Windows\system32\OpenWith.exe
                                                                                C:\Windows\system32\OpenWith.exe -Embedding
                                                                                1⤵
                                                                                • Modifies registry class
                                                                                • Suspicious use of SetWindowsHookEx
                                                                                PID:4760
                                                                              • C:\Windows\system32\OpenWith.exe
                                                                                C:\Windows\system32\OpenWith.exe -Embedding
                                                                                1⤵
                                                                                • Modifies registry class
                                                                                • Suspicious use of SetWindowsHookEx
                                                                                • Suspicious use of WriteProcessMemory
                                                                                PID:5940
                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\Downloads\stealer.py"
                                                                                  2⤵
                                                                                  • Suspicious use of WriteProcessMemory
                                                                                  PID:4408
                                                                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url C:\Users\Admin\Downloads\stealer.py
                                                                                    3⤵
                                                                                    • Checks processor information in registry
                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                    • Suspicious use of WriteProcessMemory
                                                                                    PID:1060
                                                                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2020 -prefsLen 27099 -prefMapHandle 2024 -prefMapSize 270279 -ipcHandle 2100 -initialChannelId {d1b25b83-a33c-48e7-8b72-7554d666236a} -parentPid 1060 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1060" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
                                                                                      4⤵
                                                                                        PID:5160
                                                                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2480 -prefsLen 27135 -prefMapHandle 2484 -prefMapSize 270279 -ipcHandle 2508 -initialChannelId {e1cd3b4f-4c6c-4454-8596-9ec95c8ff018} -parentPid 1060 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1060" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
                                                                                        4⤵
                                                                                        • Checks processor information in registry
                                                                                        PID:5552
                                                                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3868 -prefsLen 27276 -prefMapHandle 3872 -prefMapSize 270279 -jsInitHandle 3876 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3884 -initialChannelId {8d4ece88-01dd-4288-8d5a-cc1bfc24b686} -parentPid 1060 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1060" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
                                                                                        4⤵
                                                                                        • Checks processor information in registry
                                                                                        PID:5188
                                                                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4032 -prefsLen 27276 -prefMapHandle 4036 -prefMapSize 270279 -ipcHandle 4108 -initialChannelId {c081b770-c6b6-4cb8-b853-9259ae107d0d} -parentPid 1060 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1060" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
                                                                                        4⤵
                                                                                          PID:1104
                                                                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2748 -prefsLen 34775 -prefMapHandle 2964 -prefMapSize 270279 -jsInitHandle 2968 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3040 -initialChannelId {b59cb9bb-ec17-4ba1-a05e-e2fd0d6c88cd} -parentPid 1060 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1060" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
                                                                                          4⤵
                                                                                          • Checks processor information in registry
                                                                                          PID:3144
                                                                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4936 -prefsLen 35054 -prefMapHandle 4940 -prefMapSize 270279 -ipcHandle 4548 -initialChannelId {179629cc-240b-4cd7-9e43-dd5058c643f2} -parentPid 1060 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1060" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
                                                                                          4⤵
                                                                                          • Checks processor information in registry
                                                                                          PID:4916
                                                                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5172 -prefsLen 32994 -prefMapHandle 5176 -prefMapSize 270279 -jsInitHandle 5180 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5156 -initialChannelId {b1a51c3c-23f7-477a-9a72-80ec43859b9a} -parentPid 1060 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1060" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
                                                                                          4⤵
                                                                                          • Checks processor information in registry
                                                                                          PID:2784
                                                                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5216 -prefsLen 32994 -prefMapHandle 5204 -prefMapSize 270279 -jsInitHandle 5304 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5384 -initialChannelId {097a014c-552f-4b5d-b7f4-d9e68e88e8c0} -parentPid 1060 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1060" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
                                                                                          4⤵
                                                                                          • Checks processor information in registry
                                                                                          PID:768
                                                                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5384 -prefsLen 32994 -prefMapHandle 5368 -prefMapSize 270279 -jsInitHandle 5364 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5580 -initialChannelId {0d0fc3ad-6ceb-4277-99dd-f3b76dea2953} -parentPid 1060 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1060" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
                                                                                          4⤵
                                                                                          • Checks processor information in registry
                                                                                          PID:5260
                                                                                  • C:\Windows\system32\OpenWith.exe
                                                                                    C:\Windows\system32\OpenWith.exe -Embedding
                                                                                    1⤵
                                                                                    • Modifies registry class
                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                    PID:5584
                                                                                  • C:\Windows\system32\OpenWith.exe
                                                                                    C:\Windows\system32\OpenWith.exe -Embedding
                                                                                    1⤵
                                                                                    • Modifies registry class
                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                    PID:4536
                                                                                  • C:\Windows\system32\OpenWith.exe
                                                                                    C:\Windows\system32\OpenWith.exe -Embedding
                                                                                    1⤵
                                                                                    • Modifies registry class
                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                    PID:5536

                                                                                  Network

                                                                                        MITRE ATT&CK Enterprise v16

                                                                                        Replay Monitor

                                                                                        Loading Replay Monitor...

                                                                                        Downloads

                                                                                        4b4b5425-0a5b-4a27-95f7-feaa7af79cef.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\4b4b5425-0a5b-4a27-95f7-feaa7af79cef.tmp
                                                                                        • Size 232KB
                                                                                        • SHA256 5eb8634a421af6971a401f90d85bb195a84b1aad5c1c72cc4321eba10d6851b0
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        BookmarkMergedSurfaceOrdering

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                        • Size 6B
                                                                                        • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                        • MD5 SHA1 SHA512

                                                                                        BrowsingTopicsState

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                        • Size 649B
                                                                                        • SHA256 c058900736642f9674e8537acf2e34284443a44fd81cc49a3345b139306018df
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        f_000004

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000004
                                                                                        • Size 67KB
                                                                                        • SHA256 8f9a1d2362f66337acbc53b184b0d2357181e528b07deda233bb523975d7a150
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_000007

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
                                                                                        • Size 38KB
                                                                                        • SHA256 7165713d3e1a610399471a5e93d5677508f62ef072c1151e72273bf4bd54f916
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_000008

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008
                                                                                        • Size 81KB
                                                                                        • SHA256 74bb87079ed46b17750701b528befa2b52175b25c1d42714f62c98799207c3d0
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_000009

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009
                                                                                        • Size 507KB
                                                                                        • SHA256 8ecdcddef2dd0e1e351a1ae7234da9ef347b0a9da450585e285bcd00150e5d9c
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_000014

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014
                                                                                        • Size 112KB
                                                                                        • SHA256 3cf2fdc02c0f788af4059d832479e6878758fef5a8ce030e4aa5d3f37ab50083
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_00002b

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002b
                                                                                        • Size 69KB
                                                                                        • SHA256 abc32bd995efbcaa9af8bb1dad9fd2f37caf32ee751f9e7d921391d0f1327118
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_000049

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000049
                                                                                        • Size 57KB
                                                                                        • SHA256 2747644ba821da5e2e77993408a94682b8ce42b30660f816e0ff07366c0ff66e
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_000059

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000059
                                                                                        • Size 271KB
                                                                                        • SHA256 805d63c53db1638155e5fae66df52e779a684438431f00e4b8e6e219cca9d2aa
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                        • Size 1KB
                                                                                        • SHA256 5296037ba0ed4671809a4d14e74587b99de1eb56aab3c7833e3f6820a71f26cc
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                        • Size 3KB
                                                                                        • SHA256 4fe28347c4fceaba5219467f1ae422b759daad949127a9f901d43a4e5194c178
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                        • Size 840B
                                                                                        • SHA256 4df6ab95719bfecc3efe5b110c4b98d3b5eb1eadf2c7af2a3e700d3b3a0844a6
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                        • Size 3KB
                                                                                        • SHA256 a65bc1dea6058cd3e574e1db6712d0470a2f3c06418b4ba1ea2eb19c352aabd2
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                        • Size 1KB
                                                                                        • SHA256 5115aaf0d99338bfc5f381b96032eadd29dfbb4dbc82fbdafc43319e8f21acad
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\wasm\index-dir\the-real-index
                                                                                        • Size 120B
                                                                                        • SHA256 794147f27b216ded7a09bb51a096d798c8b3ff7a37e9bf4a8320aa5c6c588f62
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\wasm\index-dir\the-real-index
                                                                                        • Size 96B
                                                                                        • SHA256 dffbad1ae98fcc77c27a6f6260a2734a2f8bfdfd7537885f5dfc39e59515492d
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\wasm\index-dir\the-real-index
                                                                                        • Size 168B
                                                                                        • SHA256 fe3258ce0d62fcf43b95644ef139efcfcc7ea941fda89da59bc35b5f885c255d
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        000003.log

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_web.telegram.org_0.indexeddb.leveldb\000003.log
                                                                                        • Size 87KB
                                                                                        • SHA256 df5253914fae896b84d248337e06f80b54a278c54cd2e774e99f4b8cc8702a97
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        CURRENT

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_web.telegram.org_0.indexeddb.leveldb\CURRENT
                                                                                        • Size 16B
                                                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                        • MD5 SHA1 SHA512

                                                                                        LOG

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_web.telegram.org_0.indexeddb.leveldb\LOG
                                                                                        • Size 514B
                                                                                        • SHA256 e078125c844d832412e33c52fbe4bc90cb8f987451d32852037777eade76a9e0
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        MANIFEST-000001

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_web.telegram.org_0.indexeddb.leveldb\MANIFEST-000001
                                                                                        • Size 23B
                                                                                        • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                        • MD5 SHA1 SHA512

                                                                                        000017.ldb

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000017.ldb
                                                                                        • Size 17KB
                                                                                        • SHA256 e5764522e3def48a41271190cb6b196447fc36ec906c3084c9a901789024879e
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        000018.log

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000018.log
                                                                                        • Size 89KB
                                                                                        • SHA256 854a4e43a5075e6c66118f795c0fee76c35e74424256c757e74d07378ea327f6
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        000020.ldb

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000020.ldb
                                                                                        • Size 13KB
                                                                                        • SHA256 b2dc90185672cdfb22169172d623b0798e482659347fc7e2f5a588cf5ea25f14
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        LOG

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
                                                                                        • Size 6KB
                                                                                        • SHA256 9422c8d5074e8ad541d3779dbbff0ac775988d3b5bca31fd12b5b4ab5205d194
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        MANIFEST-000001

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                        • Size 1KB
                                                                                        • SHA256 5ecc7d16efb5486806d91ea3bafd8e4d6a1d133eae28e0c6cdc35d83f8c53427
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        Network Persistent State

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                        • Size 20KB
                                                                                        • SHA256 f55aca3f9bc21bc2d3782a528cf446d69a0a6b806fd89d1c891e24702d79b6a3
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Network Persistent State

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                        • Size 6KB
                                                                                        • SHA256 d25169adb9c5c428eba15951601259ff92cbd21cdfd703c4af25dc9a232c508e
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Network Persistent State

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                        • Size 18KB
                                                                                        • SHA256 608a9aacbb2d250c999ba9da8822d5ca71de9339084b330e9cde1f69909f0959
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Network Persistent State

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                        • Size 6KB
                                                                                        • SHA256 cdb85d9d86857fe2043b5b702527a537b8c2fbf00756dd46a2f64766de1a50fa
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Network Persistent State

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                        • Size 6KB
                                                                                        • SHA256 77ff76514ffc0409652b231cfa6dee6884665f5b140850aa778c1f61aa03f2bc
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Network Persistent State

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                        • Size 20KB
                                                                                        • SHA256 da3aaa5369d42debb70c0cf570c32473eccf563b13c13692419865b490223461
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Network Persistent State

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                        • Size 21KB
                                                                                        • SHA256 bb60e201f610bbf7e94017b2b35ff35b82fa7c2c1003e19ac8c7cd233c8d6673
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        SCT Auditing Pending Reports

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                        • Size 2B
                                                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                        • MD5 SHA1 SHA512

                                                                                        TransportSecurity

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                        • Size 1KB
                                                                                        • SHA256 265787eaab8f08eac836e005776dade2e782e93e09f4d7985155016870e1f18d
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                        • Size 16KB
                                                                                        • SHA256 e95369ac65e84dee8291c060f7953da64141441e76d0c8e3aaf7a302014bf12b
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                        • Size 12KB
                                                                                        • SHA256 a64aaf65f92e2175b0acb9029914a2b12e65bc169039cd8ddf34c422f3b9244d
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                        • Size 14KB
                                                                                        • SHA256 6fa406c872e162f55027153c78eaf8e84fbfa63e99800e4e8baf56de183ad690
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                        • Size 14KB
                                                                                        • SHA256 2a3e1751c6e74418405d1e64d3aeb2c3016a5182f80261dddcf587316ba79672
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                        • Size 14KB
                                                                                        • SHA256 ffeee185119301c1dc9aae4ad6ef74dd0355e5c634f8034cb599e82215bda3e9
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                        • Size 14KB
                                                                                        • SHA256 9149706aa3887bce2376019e1b0da654dbc54eba699aae57824e4691e461f98c
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                        • Size 15KB
                                                                                        • SHA256 ce94606896f65a94fbb6f7d9db029b4df7fa488b9db334ac4a66e58d35a5ce3e
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                        • Size 15KB
                                                                                        • SHA256 f81c428a8d0e5986f865a6f5289268696b285e2d20c423a3c3c83b19990fa4c7
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                        • Size 16KB
                                                                                        • SHA256 b0ddcfa058fdcbe6d609bb30ca1131e7ab3b2a49727c1af55ef5c81bf7cb2dbc
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                        • Size 16KB
                                                                                        • SHA256 02ec2bc0a4678f6d20d86e4cffb65f007a289f96d7321d3797d5c30a626724ea
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                        • Size 16KB
                                                                                        • SHA256 113b37671cc073a0f8fa64c0e70a12fa2fe7407f30a7d01f2dd9ba7b6d99dc2f
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                        • Size 16KB
                                                                                        • SHA256 972a183ddd93d7278c5072b92afb003cae4f27d49f29d1d7af79ab810c524dc8
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                        • Size 13KB
                                                                                        • SHA256 2ae3e9869628b311bf2c3f635dfe7f012a528363b5f377f8f6fbb37679a94573
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                        • Size 14KB
                                                                                        • SHA256 333b6646accd20e86cb42bed32d5207977472fe103f20c626f989fbe7eec2e48
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                        • Size 14KB
                                                                                        • SHA256 40f6d047ba0fb40b1c8dd763295e42b7f5f4d9fbcb890013bc8d235fda6e265f
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                        • Size 14KB
                                                                                        • SHA256 2a782cfad5e9c4f48bf1b913eeb9a36c1f6404fc545262f8e70069456d2073ac
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                        • Size 16KB
                                                                                        • SHA256 9ef9f5724bb550483c8bfa8fbe408f030ffe21f242299988780a042deb474fee
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                        • Size 15KB
                                                                                        • SHA256 755cbcc1377c7ef6a548d4d120031515b8dbdcb07779c1fd5d6f658f70044b1a
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                        • Size 14KB
                                                                                        • SHA256 ca02c76731abe77ee3077f54343d95d9880fc0fb7b878b8913d8551de1db320a
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                        • Size 15KB
                                                                                        • SHA256 6733dbd1a8dbc283579ef3ec4b8853cc0b2f962e1ed3f2d869c5e695a2dbae1e
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                        • Size 16KB
                                                                                        • SHA256 20670c3bfd46e8cdda6f89a4409200044a107b802a1c44707714af520e599322
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                        • Size 13KB
                                                                                        • SHA256 a323952c7e4e8766992f8222341be80e48e35a516e2d6c77ef5b8539189ae920
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                        • Size 16KB
                                                                                        • SHA256 4baa5e1f4d5f620caf6ad14a58036102ac66255de8fb47da7d566200a52b9b93
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                        • Size 16KB
                                                                                        • SHA256 78664870e7b31b1aee3df4c33dedf62fd8b5cc61a6ee3e150b6e370ed6e44f5b
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                        • Size 16KB
                                                                                        • SHA256 4f146357ff63fcf60363e5f19d4fd2d19c193934b6706d0b644d3847787bbc3a
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Secure Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                        • Size 17KB
                                                                                        • SHA256 13805701603dbbca9403b94e006c712edafb4f98a8e0ae4ce0ad1b025b835f93
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\7124773a-a094-4438-b87f-3a80f85278d5\index-dir\the-real-index
                                                                                        • Size 576B
                                                                                        • SHA256 094ac951756f073b0ace3cb85574a03b1e1d288278c74c1adc20fc356a6e6347
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index~RFe5fe5f4.TMP

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\7124773a-a094-4438-b87f-3a80f85278d5\index-dir\the-real-index~RFe5fe5f4.TMP
                                                                                        • Size 48B
                                                                                        • SHA256 10558b4453b4f5b4d866695ee5b1c4fa76879d04d33728675a9deda65fdd6e96
                                                                                        • MD5 SHA1 SHA512

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\cc17cb3a-5d34-4d00-8ad1-305f5f44e2d5\index-dir\the-real-index
                                                                                        • Size 2KB
                                                                                        • SHA256 3823f5a32f877feb1d7935c8345549bb186650b2ab2642b4156e35595ff2f455
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\cc17cb3a-5d34-4d00-8ad1-305f5f44e2d5\index-dir\the-real-index
                                                                                        • Size 2KB
                                                                                        • SHA256 b83964ec6ca79deb885cb657e1ac0031616e53d7923940047eeee68a9bf45238
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index~RFe5f841d.TMP

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\cc17cb3a-5d34-4d00-8ad1-305f5f44e2d5\index-dir\the-real-index~RFe5f841d.TMP
                                                                                        • Size 48B
                                                                                        • SHA256 9a869044cee139268e793052c1f932b6c8061d41c6f7760f5f656192fa22f712
                                                                                        • MD5 SHA1 SHA512

                                                                                        index.txt

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                        • Size 214B
                                                                                        • SHA256 5bd7e97898721c0530afcabcf8d48d2f7abc098b0cf9b19a582a9c770d1531da
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                        • Size 130B
                                                                                        • SHA256 c83541fd74cfe675ffdba5d53102e61cbcac0b20cf2eaa298ddb18a42b84e804
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                        • Size 216B
                                                                                        • SHA256 f8ab5b9ec6bc4489cf764a58bf220c8ff4441875588e905a0d84195085f027a4
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                        • Size 132B
                                                                                        • SHA256 f4b0837ef68ee0c6b35571f00097ee0ffe5070911586b37b072a0869dd4c4a91
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                        • Size 243B
                                                                                        • SHA256 a5d165202c3753774c3120d6d72d5955b1ba3d2475bd0f18f1c94d2d1e3d43c9
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                        • Size 239B
                                                                                        • SHA256 98dd3380d9deea23efc63a68d225ba4e18aaa0e47fc836252e206c8b454e85fe
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt~RFe5f68f4.TMP

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5f68f4.TMP
                                                                                        • Size 137B
                                                                                        • SHA256 c046bb108f604998929c78746045044850f653c4a63ca328fbc59590df3ed41b
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\45ff5e18-34c2-4845-9ab4-7b5dd3a63f04\index-dir\the-real-index
                                                                                        • Size 2KB
                                                                                        • SHA256 3a556bae5f487b87c87e4ae5b17d471764c7dfa870d791f7ac4c1038774c8a4b
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\45ff5e18-34c2-4845-9ab4-7b5dd3a63f04\index-dir\the-real-index
                                                                                        • Size 3KB
                                                                                        • SHA256 a1991efbe0d3f0a1e918f4a535d5dbe054639f376b3612c8c040a246fbc47323
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\45ff5e18-34c2-4845-9ab4-7b5dd3a63f04\index-dir\the-real-index
                                                                                        • Size 2KB
                                                                                        • SHA256 732cf2e134b39104a1b367a30b35c31f33870d32a6e58ac18020a150effbaf9f
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\45ff5e18-34c2-4845-9ab4-7b5dd3a63f04\index-dir\the-real-index
                                                                                        • Size 3KB
                                                                                        • SHA256 3c72390196f06e66c44b39a638c6111b6147f70e20014d476980ef700da0a98a
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\45ff5e18-34c2-4845-9ab4-7b5dd3a63f04\index-dir\the-real-index
                                                                                        • Size 1KB
                                                                                        • SHA256 a5ca5cdd771b0f115027acff1ed30370c727ecbd259f1341c8a72b476dffd256
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index~RFe5a1b1b.TMP

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\45ff5e18-34c2-4845-9ab4-7b5dd3a63f04\index-dir\the-real-index~RFe5a1b1b.TMP
                                                                                        • Size 48B
                                                                                        • SHA256 8e769173d33cbfec07951501852ae8287956792fba7889e00215afbf7346fa83
                                                                                        • MD5 SHA1 SHA512

                                                                                        6f09cb0bcbddcb86_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\85350475-ed64-4d36-a059-8f435ba5552c\6f09cb0bcbddcb86_0
                                                                                        • Size 81KB
                                                                                        • SHA256 64dcb05dd8876096290b15dac168009038d12bb3aa3e1d0f168f0fdfed64a5f1
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        9c6d83a70a3663b3_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\85350475-ed64-4d36-a059-8f435ba5552c\9c6d83a70a3663b3_0
                                                                                        • Size 310KB
                                                                                        • SHA256 36798229c631b88ac75089804c3f011d325d2d59362c4c5a1148724993928576
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\85350475-ed64-4d36-a059-8f435ba5552c\index
                                                                                        • Size 24B
                                                                                        • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                        • MD5 SHA1 SHA512

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\85350475-ed64-4d36-a059-8f435ba5552c\index-dir\the-real-index
                                                                                        • Size 5KB
                                                                                        • SHA256 2ddb92a32b4b09d653a4e38b348cc96f93c7b59fc4de916787b00223badc220e
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\85350475-ed64-4d36-a059-8f435ba5552c\index-dir\the-real-index
                                                                                        • Size 6KB
                                                                                        • SHA256 d8182a76ddd53acf54be1dd148428732451e23e41d22656fbe5cde191eaa5d37
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\85350475-ed64-4d36-a059-8f435ba5552c\index-dir\the-real-index
                                                                                        • Size 6KB
                                                                                        • SHA256 9713bff8b5e8da0311b44ebef98cf5dc2615615b36a5a7a7d7856bebcc9308eb
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\85350475-ed64-4d36-a059-8f435ba5552c\index-dir\the-real-index
                                                                                        • Size 8KB
                                                                                        • SHA256 34c66986fe1c617604df2df7c5cce5064c653c554d655b348fcb173c927883a8
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\85350475-ed64-4d36-a059-8f435ba5552c\index-dir\the-real-index
                                                                                        • Size 8KB
                                                                                        • SHA256 075272dad470da365ca71c75dea83ca1d462b6d7511d42a841a6c1f5744bad5a
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\85350475-ed64-4d36-a059-8f435ba5552c\index-dir\the-real-index
                                                                                        • Size 8KB
                                                                                        • SHA256 1c7df6bf5fa0f7c65a30fa21919f871bef2e856f6efcd41e29da187c2aa8d9c8
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\85350475-ed64-4d36-a059-8f435ba5552c\index-dir\the-real-index
                                                                                        • Size 6KB
                                                                                        • SHA256 80d9cd919c408942537402cb30a4d1bfd1153bbf87f81cc448eb919cc72d2a31
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\85350475-ed64-4d36-a059-8f435ba5552c\index-dir\the-real-index
                                                                                        • Size 6KB
                                                                                        • SHA256 b5110386bf6cc5df0dd14856982f204277b7b1cb8e4bed126f9414b8006052ef
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        the-real-index~RFe590e10.TMP

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\85350475-ed64-4d36-a059-8f435ba5552c\index-dir\the-real-index~RFe590e10.TMP
                                                                                        • Size 48B
                                                                                        • SHA256 c401a1972496787a0b3c188a5b20244e97dbd4490925daa8278cbb5c33905c08
                                                                                        • MD5 SHA1 SHA512

                                                                                        index.txt

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt
                                                                                        • Size 282B
                                                                                        • SHA256 bae4ab19ddf2034f9ea320d5db56bd3c90edb42be90868cfe9e47aca7c571002
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt
                                                                                        • Size 395B
                                                                                        • SHA256 35599461b420510abd32d7b35a801e770965feeb8a990899fcefc5f3e8b9deed
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt
                                                                                        • Size 496B
                                                                                        • SHA256 f5e9e34d3aad4f7ea0361e16b00a868b3d35ca302f9d35963d4c5b131999bb4c
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt
                                                                                        • Size 665B
                                                                                        • SHA256 0f05ebe1e2c82bce60d66b9a47be3f6b35b2a323b8fb1734555f8c7e202b1d33
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt
                                                                                        • Size 582B
                                                                                        • SHA256 9594deef8306f4e48605f1166583f0af0d2c7494de0ac5dd88c574dcf8db54e8
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt
                                                                                        • Size 660B
                                                                                        • SHA256 d7e953e3b44ef093f976f9a177bb97090bb8c4c4fc6dccdd1e82cc5145135d76
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt
                                                                                        • Size 664B
                                                                                        • SHA256 86d40943593d38ccac1b2fad9849e30f21e571735cb32c15278ff231bee4ab50
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt
                                                                                        • Size 664B
                                                                                        • SHA256 5e76d27aa54e5d6b722dc3e9d36be1099493730b5c214c144412d25cff56ebd1
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt
                                                                                        • Size 664B
                                                                                        • SHA256 8f4a1cbbfe039dcd5751a905ef4bca35d3660efb293c152ef335278ed00ffc8f
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt
                                                                                        • Size 664B
                                                                                        • SHA256 96f32e4cff686cd8c8a5094d605d6906151073c29ef1bfdffb1ac3be5c895bf3
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt
                                                                                        • Size 664B
                                                                                        • SHA256 f13958ad318b84e6c02e5e4d84ae9e478c9a44a5ffd7c9d575c36686b2487441
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt
                                                                                        • Size 664B
                                                                                        • SHA256 38f6346114a58edf4a3815edcd0c25dad2d473b01fc9673326560f6476ab3641
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt~RFe58afc3.TMP

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt~RFe58afc3.TMP
                                                                                        • Size 169B
                                                                                        • SHA256 91dcb3d2622e225cec0ca183fce9fd83ffc799f9bfaecce4307361f2a624be6e
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        fa813c9ad67834ac_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_0
                                                                                        • Size 213KB
                                                                                        • SHA256 0f1f5e12cb45b734ca1a81e1a8875ec315c60ca8f0d7cd471b00c9ad23a0ecbe
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                        • Size 144B
                                                                                        • SHA256 78860a166e3ac0ea83396869849ab632bf3577c1d5b86057c455a2756f8cef9f
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                        • Size 120B
                                                                                        • SHA256 f766998e15f88f57383b50497450c3260bbbc038dba1c67c4ba71241a17a72c8
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                        • Size 192B
                                                                                        • SHA256 281810010caaeac28011bfd1f838712dcb846bf69b6ac85ebb92dc0f9e44fe5a
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index~RFe58a69b.TMP

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58a69b.TMP
                                                                                        • Size 96B
                                                                                        • SHA256 c4e007b161e45389d384fbc70ee8aba2bae85d84bc3f451d5271787116e23dbd
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        975998ae72d935ec_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\975998ae72d935ec_0
                                                                                        • Size 255KB
                                                                                        • SHA256 2ad0606d48163759fb4185ec70eddec1ff00648f97ed614f5cda5873253121ee
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                        • Size 72B
                                                                                        • SHA256 855c555d476c77c0237cef1260db9739c7831b11a28ae92acdc46ae950afc1bd
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        512.png

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir4716_2112362840\Shortcuts Menu Icons\Monochrome\0\512.png
                                                                                        • Size 4KB
                                                                                        • SHA256 d345d2dbe2efd56ff9494cb31cae0e28cde5bdf176a22bca9aee27465b117c88
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        512.png

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir4716_2112362840\Shortcuts Menu Icons\Monochrome\1\512.png
                                                                                        • Size 7KB
                                                                                        • SHA256 1e0b1b2e4dac49da1e2ce91a72e01f77fdb3bbb26ed3422e5d4037745cc307a4
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        512.png

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir4716_2112362840\Shortcuts Menu Icons\Monochrome\2\512.png
                                                                                        • Size 9KB
                                                                                        • SHA256 ad08077126e7106674e4219f5f9cfac2305e8b3f627247c1d3e72136399e6fd2
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        16.png

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir4716_511263515\Icons Monochrome\16.png
                                                                                        • Size 257B
                                                                                        • SHA256 d52376c8b210b8003f5aed9f4555a7916b4640d4c42a36cc81d9864991c87a8b
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt
                                                                                        • Size 150B
                                                                                        • SHA256 32a8a76d566b18e01e0516defdc2571814e72025a1487b4d8ad63e553f2a93a6
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt~RFe5f3699.TMP

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt~RFe5f3699.TMP
                                                                                        • Size 157B
                                                                                        • SHA256 0c55a0800da551fd6a4d519fe8e88736834f46c676912583e9f1d3a2253b1fec
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        Local State

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                        • Size 231KB
                                                                                        • SHA256 05b6b6987beadf2da12369f12fed306cdfbf00ff4681822c04795c8fa9acde5b
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Local State

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                        • Size 115KB
                                                                                        • SHA256 1184d7b5ffcdca3a118aa0f5a90c6d2b6b387f97ddf56c4bb419885fcd49d2c1
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Local State

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                        • Size 232KB
                                                                                        • SHA256 e343a2d5fa6466e5048f4b48d198812ab6706da8f1298cf461ac77b9762e16e8
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Local State

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                        • Size 232KB
                                                                                        • SHA256 351782faae5a973780ff7cc5050cab42e2cbcca61dd1206a38e9fb0ac127753b
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Local State

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                        • Size 232KB
                                                                                        • SHA256 ae76b112b1f01c459665f9e5e4099922138a30fbe55cb674117dbc2fea8dee49
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Local State

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                        • Size 231KB
                                                                                        • SHA256 2c17591ec261773c8c2ee5737360ed098a7fc2b849966ede19b0dece2fff46cf
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Local State

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                        • Size 232KB
                                                                                        • SHA256 ae60fc3391d5d11c6a59bf329ff812573fbab7490c84f8e6c487b9de02f8e391
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Local State

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                        • Size 232KB
                                                                                        • SHA256 d139ed3618722e15f51946e28f05aae44acb87204c5060e1c3df68ee1c294836
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Local State

                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                        • Size 232KB
                                                                                        • SHA256 b0d657543c3c2ec8ed054fc46a65e616c465fe516ea52d75d5cac92183e17f2f
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        CurrentDatabase_400.wmdb

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb
                                                                                        • Size 64KB
                                                                                        • SHA256 f1a4a978ce1c4731df1594043135cf58d084fdf129dd1c8e4507c9e06eac5ea8
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        CurrentDatabase_400.wmdb

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb
                                                                                        • Size 1024KB
                                                                                        • SHA256 0ab670f46f5f01155545c0768bc27d83059b7c341fda7d97756c1912ae1e61f2
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        WMSDKNS.DTD

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.DTD
                                                                                        • Size 498B
                                                                                        • SHA256 644fbcdc20086e16d57f31c5bad98be68d02b1c061938d2f5f91cbe88c871fbf
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        WMSDKNS.XML

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML
                                                                                        • Size 9KB
                                                                                        • SHA256 23dbf7014e99e93af5f2760f18ee1370274f06a453145c8d539b66d798dad131
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        WMSDKNS.XML.bak

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML.bak
                                                                                        • Size 9KB
                                                                                        • SHA256 cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        wmsetup.log

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\wmsetup.log
                                                                                        • Size 1KB
                                                                                        • SHA256 1459b1f8058f049088de0b5e637a68c77cff5a16f3c70bc8222c440461d8aa68
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        default.dic

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                                                                        • Size 2B
                                                                                        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                        • MD5 SHA1 SHA512

                                                                                        74d7f43c1561fc1e.customDestinations-ms

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\74d7f43c1561fc1e.customDestinations-ms
                                                                                        • Size 1KB
                                                                                        • SHA256 833191031dbbc7c00e6a461b5361ff3bdd227373c6cd82c286441c080f3ba919
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        74d7f43c1561fc1e.customDestinations-ms

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\74d7f43c1561fc1e.customDestinations-ms
                                                                                        • Size 3KB
                                                                                        • SHA256 11312d633e74565f55722dcbef996b6f5d0c88b415a88427ef7605abb55382b7
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        data.safe.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ho495kqa.default-release\datareporting\glean\db\data.safe.tmp
                                                                                        • Size 7KB
                                                                                        • SHA256 e2d783cddcacffe37a271703bbc9950062361762059ac9dfdc2ae349248667fc
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        data.safe.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ho495kqa.default-release\datareporting\glean\db\data.safe.tmp
                                                                                        • Size 6KB
                                                                                        • SHA256 e2e9fce8f560a93a04d2e6599c36eff3c6fdb838180fa71672f132b4a9a2cd5b
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        data.safe.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ho495kqa.default-release\datareporting\glean\db\data.safe.tmp
                                                                                        • Size 7KB
                                                                                        • SHA256 0372252855ce1fcfe709d128c3e052295bd7fd8742cd85555b82bce939afc04c
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        events

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ho495kqa.default-release\datareporting\glean\events\events
                                                                                        • Size 1KB
                                                                                        • SHA256 3873f67a14de97cf445eb01a9cfe4ae52b117c279d9f700e69d45946d5b0bda5
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        3e51c125-13a5-4ff0-9aab-c2fbc08b3620

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ho495kqa.default-release\datareporting\glean\pending_pings\3e51c125-13a5-4ff0-9aab-c2fbc08b3620
                                                                                        • Size 235B
                                                                                        • SHA256 f292a1b4e9a282e61eeaf94514886e2183ffa7334f2545be729c265392509895
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        75d81a83-7eb0-430c-9e1f-1ac6033f8734

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ho495kqa.default-release\datareporting\glean\pending_pings\75d81a83-7eb0-430c-9e1f-1ac6033f8734
                                                                                        • Size 883B
                                                                                        • SHA256 304de074829d254ae0039348c299808bbd5031867c99e8a60871e6f9d8677652
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        b38f2a9f-8caf-4897-99fe-de3c5ba94622

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ho495kqa.default-release\datareporting\glean\pending_pings\b38f2a9f-8caf-4897-99fe-de3c5ba94622
                                                                                        • Size 734B
                                                                                        • SHA256 d5ab9ad4549f784d05b6237a36733f3b4dad605936bfa4c4a04bb100e7039895
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        bac0ca31-c6f1-46df-8f26-8fe4ef76c542

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ho495kqa.default-release\datareporting\glean\pending_pings\bac0ca31-c6f1-46df-8f26-8fe4ef76c542
                                                                                        • Size 886B
                                                                                        • SHA256 2020db7ce124b54603766b3dc2cc2114951fa32ece1764268fd4cedff47b437d
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        c130256f-4976-40dd-9090-1b0671656fe6

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ho495kqa.default-release\datareporting\glean\pending_pings\c130256f-4976-40dd-9090-1b0671656fe6
                                                                                        • Size 2KB
                                                                                        • SHA256 344e2b80c54c88f086795eb71a7c833df6155c5de265c8e5e299e583f6ba7247
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        e7661ea5-dfcd-4232-a7ee-0cad55a16c11

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ho495kqa.default-release\datareporting\glean\pending_pings\e7661ea5-dfcd-4232-a7ee-0cad55a16c11
                                                                                        • Size 235B
                                                                                        • SHA256 2e247c2d18082e96e8a1f8d2a81a35b306125661430198c8a47f8ed98c2d7087
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        fd0c0eae-4a40-417a-ac94-e3b7ecb20a9c

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ho495kqa.default-release\datareporting\glean\pending_pings\fd0c0eae-4a40-417a-ac94-e3b7ecb20a9c
                                                                                        • Size 16KB
                                                                                        • SHA256 6776669f8cd626e648ac00636b6d857f249ee1fc609c452f7ba98312ec25e114
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        prefs-1.js

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ho495kqa.default-release\prefs-1.js
                                                                                        • Size 6KB
                                                                                        • SHA256 9456d67816b8b3ee417f7f4fab9b450713798786ca3e8b2a8b9714a9260a49c7
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        prefs.js

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ho495kqa.default-release\prefs.js
                                                                                        • Size 6KB
                                                                                        • SHA256 6d2a5947f044e8d9caab7aa0982bf92d9061c017ebe1fd6a1b9a66bdd709b9f0
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        prefs.js

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ho495kqa.default-release\prefs.js
                                                                                        • Size 6KB
                                                                                        • SHA256 2326d8845c7c6dbfe32e0efb5e8f45a1d40ca9b38decc08f5db52979bfbe6ca3
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        RedoExit.wm

                                                                                        • Path C:\Users\Admin\Downloads\RedoExit.wm
                                                                                        • Size 744KB
                                                                                        • SHA256 811b32fd91ff21cfc42c6537f106f57c22ad7e9b0a4c4151c9378a8b30055ea7
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        python-manager-26.2.msix

                                                                                        • Path C:\Users\Admin\Downloads\python-manager-26.2.msix
                                                                                        • Size 44.3MB
                                                                                        • SHA256 66f0370d3f47068916dbd35b2afdc7cf72cba57500e070844a6ca2aa43ec5d70
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        search (1).htm.crdownload

                                                                                        • Path C:\Users\Admin\Downloads\search (1).htm.crdownload
                                                                                        • Size 628KB
                                                                                        • SHA256 05afe490278476173ce3fea245ce2446e3c31fa8288249ec2c859fb737cf9961
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        stealer.py

                                                                                        • Path C:\Users\Admin\Downloads\stealer.py
                                                                                        • Size 46KB
                                                                                        • SHA256 d70c7da8a9ea75d4480be2e3120bd2eb6716086f61959895b36744145d012708
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        memory/2068-1100-0x00007FFC0EB90000-0x00007FFC0EE46000-memory.dmp

                                                                                        memory/2068-1098-0x00007FF6DD9A0000-0x00007FF6DDA98000-memory.dmp

                                                                                        memory/2068-1099-0x00007FFC203B0000-0x00007FFC203E4000-memory.dmp

                                                                                        memory/2672-1039-0x0000000006FE0000-0x0000000006FF0000-memory.dmp

                                                                                        memory/2672-1043-0x0000000006FE0000-0x0000000006FF0000-memory.dmp

                                                                                        memory/2672-1038-0x0000000006FE0000-0x0000000006FF0000-memory.dmp

                                                                                        memory/2672-1044-0x0000000006FE0000-0x0000000006FF0000-memory.dmp

                                                                                        memory/2672-1040-0x0000000006FE0000-0x0000000006FF0000-memory.dmp

                                                                                        memory/2672-1041-0x0000000006FE0000-0x0000000006FF0000-memory.dmp

                                                                                        memory/2672-1042-0x0000000006FE0000-0x0000000006FF0000-memory.dmp

                                                                                        memory/2672-1037-0x0000000006FE0000-0x0000000006FF0000-memory.dmp

                                                                                        memory/2672-1035-0x0000000004F10000-0x0000000004F20000-memory.dmp