ce4b6e6b83df2ebdd9bb6c65b38541240cf304493b66690327521bcd32687aaf

Analysis

user interaction
yes
max time kernel
17s
max time network
202s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
29/05/2026, 00:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Backrooms 2026 1080p HD X264 1080p.exe
Size 954.9MB
Sample260529-ag6basew71
SHA256 ce4b6e6b83df2ebdd9bb6c65b38541240cf304493b66690327521bcd32687aaf
MD5 78f754f8681749f67a8422974b0c1030
SHA1 65ae6ffefc0ba1152b7d29095a5330dbb49e7422
SHA512 0473e0e309b1821e97f1d005dc8393446802ff17896d60b7610a6fd621975bc004cbba4b7a24f8e7214dd3694fdaf5dc6560076a10570e8c08334421f143d625
SSDEEP 98304:x5/+5W49eywzNi8DV9pGwwNmXXE8iFeY5MauqkyknKlDs:rr49eywPWuXwEFqRN
TLSH
T1C3A9123FB28B653EE06E1A367972E210583B7A6165028C4797E4CC8CEF255B11D3F786
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
4968	Backrooms 2026 1080p HD X264 1080p.tmp

Loads dropped DLL 2 IoCs

pid	Process
4968	Backrooms 2026 1080p HD X264 1080p.tmp
4968	Backrooms 2026 1080p HD X264 1080p.tmp

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Backrooms 2026 1080p HD X264 1080p.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Backrooms 2026 1080p HD X264 1080p.tmp

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4932	chrome.exe

Inno Setup is an open-source installation builder for Windows applications. 2 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral2/memory/5092-0-0x0000000000150000-0x000000000023C000-memory.dmp	innosetup
behavioral2/memory/5092-12-0x0000000000150000-0x000000000023C000-memory.dmp	innosetup

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 5092 wrote to memory of 4968	5092	Backrooms 2026 1080p HD X264 1080p.exe	82

C:\Users\Admin\AppData\Local\Temp\Backrooms 2026 1080p HD X264 1080p.exe
"C:\Users\Admin\AppData\Local\Temp\Backrooms 2026 1080p HD X264 1080p.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:5092
- C:\Users\Admin\AppData\Local\Temp\is-VXD295YMNY.tmp\Backrooms 2026 1080p HD X264 1080p.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-VXD295YMNY.tmp\Backrooms 2026 1080p HD X264 1080p.tmp" /SL5="$502C8,3910511,905216,C:\Users\Admin\AppData\Local\Temp\Backrooms 2026 1080p HD X264 1080p.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:4968

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:4556

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /7
1⤵
PID:1448

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3384

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
PID:4744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x100,0x104,0x108,0xd8,0x10c,0x7ff92d31c728,0x7ff92d31c734,0x7ff92d31c740
  2⤵
  PID:1300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1660,i,10704361347117395785,5298115269498660406,262144 --field-trial-handle=2108,i,14998943039937875670,6393291296725619326,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2104 /prefetch:2
  2⤵
  PID:4428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1960,i,13153648023422700830,6497031002114117373,524288 --field-trial-handle=2108,i,14998943039937875670,6393291296725619326,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2164 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2436,i,380911924650435632,18319978199587474718,524288 --field-trial-handle=2108,i,14998943039937875670,6393291296725619326,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1864 /prefetch:13
  2⤵
  PID:4560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3264,i,8807949282562070696,5231316562488136626,2097152 --field-trial-handle=2108,i,14998943039937875670,6393291296725619326,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:1936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3292,i,3078529511161986573,2448875452114622591,2097152 --field-trial-handle=2108,i,14998943039937875670,6393291296725619326,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3348 /prefetch:1
  2⤵
  PID:2832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4304,i,8304693915861378778,10762132156507195567,2097152 --field-trial-handle=2108,i,14998943039937875670,6393291296725619326,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4316 /prefetch:9
  2⤵
  PID:1792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4692,i,7268170809014654155,8979829393441980602,2097152 --field-trial-handle=2108,i,14998943039937875670,6393291296725619326,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4736 /prefetch:1
  2⤵
  PID:588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5152,i,14360449100027144190,2729262324235869463,524288 --field-trial-handle=2108,i,14998943039937875670,6393291296725619326,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5148 /prefetch:14
  2⤵
  PID:3616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5148,i,15605339219958018474,12842926912312558958,2097152 --field-trial-handle=2108,i,14998943039937875670,6393291296725619326,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5904 /prefetch:1
  2⤵
  PID:1492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4768,i,14246319772408641705,11197928108362856543,2097152 --field-trial-handle=2108,i,14998943039937875670,6393291296725619326,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5768 /prefetch:1
  2⤵
  PID:4760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3512,i,2172036868012687005,1215269497960494553,2097152 --field-trial-handle=2108,i,14998943039937875670,6393291296725619326,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:4412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3432,i,965967622432755699,2096215826988362045,524288 --field-trial-handle=2108,i,14998943039937875670,6393291296725619326,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3412 /prefetch:14
  2⤵
  PID:4568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6060,i,17989514630988091430,6582792746161144272,524288 --field-trial-handle=2108,i,14998943039937875670,6393291296725619326,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6080 /prefetch:14
  2⤵
  PID:1920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6064,i,2830728126934144126,6537790868503314215,524288 --field-trial-handle=2108,i,14998943039937875670,6393291296725619326,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3348 /prefetch:14
  2⤵
  PID:1484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6072,i,4530717534130433408,4567491859631621677,524288 --field-trial-handle=2108,i,14998943039937875670,6393291296725619326,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3344 /prefetch:14
  2⤵
  PID:3892

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2172

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2416

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 b9786df533c99777ba87a9a6fdc90af4965f26c07fa1adc174ac17fe9fa05279
MD5 988ac81a122c3901b57f70c18a22567a
SHA1 c3b490dec5ed5e0c52f9f87bed5cffc3daf3ad43
SHA512 7129e47fe8d88d84c5f945771516cd3e9e8780cd459ee92e0368f07128838966a47781c4fcdfb0169201aa887bd698051bc4e2ea79928df15606544fa0877cf1
TLSH
T184F0F9A6C921EC3B18FC0B1834644746F79413672B41895F3B3C520C8F7173B859996C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f
Size 374KB
SHA256 aa5482a1cb0e0e9fc7a09d90ce82d48765958ef2de12bb567c9a9dda0e70fe08
MD5 573e467d73dbee9c030ab6dd911a4ba9
SHA1 a7b2b2064ed4736ef28f3cb83c8d465343516927
SHA512 bc46278aae28a4c5952e9db988efae23e53d6e1eb3edf8bb92535ac93aabbe5cd97ed43b301722c61a0d692fa1f99d356822ade6f0b769d47be741ecff5516fe
SSDEEP 6144:2FMjqfaRkLaFLdTF5AHl+qC6naJJwUISq/1uwj+mN+MBtpc3WhHfVl:JjjCOFLdTF5I+qbaLV+yA+AtqWZb
TLSH
T1C98423A376B1F0AFDEC8697F03C63363A598B531B7D019C61D48B2A6122735C9FB4264
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 d768fd7e9992e6113cc9e2dccac8aa8db536d8f94973536269ef8a2341098e07
MD5 615ff4eea00d8f98ff9579170cbf230a
SHA1 9bb1a199eff856054390631ddc26acea925aadf6
SHA512 d46d344eb8be6c73ffd304e062adef44ac0dc0e07fe2785eb664352c74b41f94496f1192123b474a6e71cbddb12820a73b771db3c4a1ce5bd6fe5b40a609c6ac
TLSH
T1C7212F715DCD5D15CF2B6971A2DD2741383202B62A330E865F6C5D71D3B3BA92421C4D
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 51949ab11c68d3fdd010724336dd9fad22224fab810f5ffa4524b1438733b2cd
MD5 ebe858bbae65a3f8355e5672986d6ead
SHA1 b3eccb56e22e4d48c6c11b2539c00635ae2361c0
SHA512 a78fadd17384e7699cae1027263112f06ecc27356e9cc543c8787ff36ebffa787ddab67b718e14cde456f75dfec37f763d56a2e6de7618c16149ed8e0da4be23
SSDEEP 3:MsEllllkEthXllkl2zE/lFX+ll:/M/xT02zOu/
TLSH
T1B24404047FC00407C50113304055C3701370D51007335FC335510433DDC77450C40500
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 9b43301f33c194a9017c780d556708aa2af490cf8e74c06582a1db66029622fb
MD5 751e4a0f8db680af465d29783944092e
SHA1 df1827062f4b4cd0337733889d2cdf2aceabe622
SHA512 aa61a5a37855088d70bca68682133067de26fd3109fbe9ce0a5617469c37b620aa04ae8a938130084d1062c079e5c99fbbe8f1c17a886948928db9bcc4e18e90
SSDEEP 192:DDIJtxLGJHlVukY/M17Jqn7HZmbeE8U58q/xa:DDIJtxLGJHlVukY/U7Jqn7HZmbeE8U5+
TLSH
T1ACF16DB3C3D4CA2DC81167F56F247D1BCE2A0964526C3D6689E4EF8B63E24B2D25134E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 c3ae211ef905ecdfafc33ea7d947856dcd19246055da2be57917f999385953ef
MD5 76e8c08905cc4877360460b33136a16c
SHA1 0ba39c43ecda9b3d2f29d5b7751bb61ba6027203
SHA512 0768f721c3eb5d4c9ab4ce6526274b24a549d0e14b969dcbdc74735bea78c861250997d1edd6f88cd6994b1c1a4b2c963388a29653765f47e8219ecc5049762e
TLSH
T18B219E97967DB967512D08BF0E467C0A5ABB7832014198F4DFAB427CB0A1AF71B13463
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 505995fa6fb9acbe221d31cc51f54870ebba418d9cd6f4d5efce095d56853868
MD5 86c33ff4fb2f895eea75dbbdcb540c16
SHA1 7ba064286c71050ddaf65a84e741274ca064c600
SHA512 df8dddbc14a4c12159e508f402bfb51167bd954bf2949fdea83a0244de9ce30e5942ebee3a5345db576b3b33888dae7d69e7852095ab1f35d13d28d1ba93a115
SSDEEP 192:hURtUufZtN2+crv2bVF7xy1CyoiGv7dpAPRp2F99Hsb+WNnlBdISCkwNA6VyIsnH:KRtUIQnv2bVF7xy1CyoiyZUXKrwTdoZ8
TLSH
T15542D62EA914683B5DDBD21AFD617753DBF6107125842E44EAFCCA2C08E79CD222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 05a78ee84331e56009c154803e43eaf73e0888d0c8eefef9fc469d8c85d5dc69
MD5 07375fabd9fc72e5fd80e6a716d99e54
SHA1 0a17432601efaa1ac3a717a11ad7616986e3af63
SHA512 5355bb6f01f831b2fc80e0d106b5684459d3bd880cba35be93eeb701817548e740df4a72f2361ae194de5f68279f8012a8cd20d6604850d352d3f5e075adfb62
SSDEEP 384:KRtUIQbv2bVF7xy1CyoiyZUXvrwTh2LZ8:qUIEv2bVF7xy1CyoiWMrwAa
TLSH
T17D42C62AA914683B4DEBD21AFD61B753DBF6103165C41E44EAFCCA2C04E79CD222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 86a708718cf15f4439caa697f6058448e2b7016cb1cef9cd2e54315587d87208
MD5 c23047ed70b8fe98404f2d539506eb71
SHA1 777411f14fab3beefe67a6f475f14f7e6e56c013
SHA512 0a47725dfc0cd3a51a0c13fc01329dccf73a0e6fe775075f027ab629f4c8fde68db8b61d4cd2ce4269a02632bafb0dcbc043ec6377186b9c4b1d39ea91b3d0ec
SSDEEP 384:8mjoj7KxkXqKf/pUZNCgVLH2HfgslTg97pLuLcSjuvXODof+ErU3i4JHGtovIld:8Goj7KxkXqKf/pUZNCgVLH2HfgsZg97V
TLSH
T1C77208676C4C9E370F94CACCD8167B4F9DB5014B65EE886483FA982903D5BDB110A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 71d14aa0cacf26c4ff8ddbfb2d6277570d39c1a4e134614291f9532f66506c2b
MD5 b90df57fc14ec020a5f120f922ee9d06
SHA1 f7f4fda5a5d11c864fabd7d627732b30f645bb22
SHA512 9303325584096365b3c0bc8231cbe4d1b90309e1e5160e430ceca5f1bad5e9a6c3a46f0d7fe58ab415248c6c296921577cb03abab3ca24bb97a24c419d07120d
TLSH
T1E4C01205C803A171C00B13B51457D89CB2149F3DCE0A238A87E0793BDC34921C435151
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a4a49.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a4a49.TMP
Size 96B
SHA256 06b36d2a676e8824cb9c3bb748255cc35a9ac25a114ff39d606f55f13e04c7ac
MD5 a51843c9b85eabfc6e18fe4650a9911e
SHA1 3cfda7e2c19dcb56f7a49b3629f01fc1340b9eaf
SHA512 aca84a81d8e3c4005f51a0d63e56f8074014845709d4dbc8aa9d92d99ef8b1bfbac4ee5ae96f2c0b7a7335ac62ab4dae39500a5cfa7aa470ecb58724582940fc
TLSH
T118B02208C002A222C80203B02B828AE83AF0CF32C303020382E02F33CC2A2303038820
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 273KB
SHA256 b6c96489fc15355ac3553f20d90108619bc7195a7abcfb03333a99f965115feb
MD5 581075b9959565389fcdd8ed7b53529e
SHA1 ec336f90ce0a51d1612917fa343216e0f9f44a3b
SHA512 038bbd94113d1dadbd2a5e8f12011dfb2cb60efd4739f838d9bea330cbe2262ea2608842b2647de215304f4451c9c97d1703811db0c79d8892a4ae64e441c239
SSDEEP 6144:IVLY4+weljVyX3RDzGbEbYIybJHm7Rkm1tYpBeh2BAok:IVj+ToBLb19oBGcAok
TLSH
T1B85423736DBB9671187A3B28384F961E1CF546B3BA18FB5A94D56B0032DD6C85C0BE30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 232KB
SHA256 3e37f844f33e0145020595886cbd782d95c91bc151b64e57b738b687f94d5e31
MD5 294c03f6970f7bada19e77aa7915fc1e
SHA1 a15f661e61699effcdadc279f910c5f6d81ee482
SHA512 3cec988d804271f0815f7b6a3fe270b672d945d68504166ca9b56f79694a64910b5146ba456b7f77042dc0672d33f690559b2c9b212a89f711c5a773998bc55a
SSDEEP 6144:GqjVyX3RDzGbEbYIybJHm7Rkm1tYpBeh2BAok:GqoBLb19oBGcAok
TLSH
T1983422735DBA8AB2487B3F25704E665F2CF159B1BA29E7A1D4D5AB0032DD38A4C03D30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 916805972d7fa69f3a040af2079ebb6ae5e178e2d557eaee5e207e3fa44a66a4
MD5 841e1251ff17e3e42ce6e91eaecd0a59
SHA1 f662a7d3c5c30ef375eedca4096f27afb9943b5b
SHA512 4d82bb71569de2c049bde6a566e91efc710aad22e373074434c70e6505728bd034fe84ae1bc96414dd76e6c85d6df068a2696b4e2d04c02a6bd43fd8bf9a6958
SSDEEP 3072:BGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:Qm7Rkm1tYpBeh2BAoi
TLSH
T1F8C312375E70E9375979AB0EB48E0B1F2EF14DA6C820DE82C8D85A0437E97CC1A45E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 232KB
SHA256 aa6b1757578702506a29d001eb03e0cb941866fbffcab8055856ccb5d226ba92
MD5 3daac7bc6f1287b748361384734765c6
SHA1 3247f2a78298f4456d3ee0b76a415ddde4cb7159
SHA512 c440c6659a6c5cc408978382d6200873677963af7bc29b9e9cf3e684f89c134fd4a12438f502abfe245c174a7a5b027e76b7a174ac3269e666660ae75d35cbce
SSDEEP 6144:3qjVyX3RDzGbEbYIybJHm7Rkm1tYpBeh2BAok:3qoBLb19oBGcAok
TLSH
T11F3423735DB68AB2487B3F25704E655F2CF159B1BA29E7A1D4D5AB0032DD78A4C03D30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_isdecmp.dll

Path C:\Users\Admin\AppData\Local\Temp\is-HD952GV77N.tmp\_isetup\_isdecmp.dll
Size 34KB
SHA256 31d04c1e4bfdfa34704c142fa98f80c0a3076e4b312d6ada57c4be9d9c7dcf26
MD5 c6ae924ad02500284f7e4efa11fa7cfc
SHA1 2a7770b473b0a7dc9a331d017297ff5af400fed8
SHA512 f321e4820b39d1642fc43bf1055471a323edcc0c4cbd3ddd5ad26a7b28c4fb9fc4e57c00ae7819a4f45a3e0bb9c7baa0ba19c3ceedacf38b911cdf625aa7ddae
SSDEEP 768:Z4NHPfHCs6GNOpiM+RFjFyzcN23A4F+OiR9riuujF+X4UriXiRF:Zanvc+R9F4s8/RiPWuUs4UWXiv
TLSH
T11EF23AA1BDED1F53DA8A0A3056C994235C31E1D44B0008F7D5D9CA672A8E3A75FB329F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Backrooms 2026 1080p HD X264 1080p.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-VXD295YMNY.tmp\Backrooms 2026 1080p HD X264 1080p.tmp
Size 4.2MB
SHA256 24d47bf0251d84e4edba78876e1db8b20ea09b5b6931340e065324b5016a0a5e
MD5 938111dd028d520dabe32d0535dfd42b
SHA1 00a4ce29797aeb62bfb18f7698b090bd7e46102c
SHA512 bae346fb460193a20b0cde42fe4b320545fdacacaa31ea0eae6ba85dc2beb6d0261cfa28cd4d6068656faf015bf9d8547289cb38908a3b0b0ec8f1e09b96e4f4
SSDEEP 98304:+3U5HY/KwjoYY1j48UWm2eTMFdC+Jh333D:X4/1jorPmEb
TLSH
T146168F03B348753EE4671A3A483FA684983F7A213A26CD4B6BF40D5C8F396416D2A757
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1448-25-0x000002C0951C0000-0x000002C0951C1000-memory.dmp

Download

memory/1448-24-0x000002C0951C0000-0x000002C0951C1000-memory.dmp

Download

memory/1448-31-0x000002C0951C0000-0x000002C0951C1000-memory.dmp

Download

memory/1448-32-0x000002C0951C0000-0x000002C0951C1000-memory.dmp

Download

memory/1448-30-0x000002C0951C0000-0x000002C0951C1000-memory.dmp

Download

memory/1448-35-0x000002C0951C0000-0x000002C0951C1000-memory.dmp

Download

memory/1448-33-0x000002C0951C0000-0x000002C0951C1000-memory.dmp

Download

memory/1448-34-0x000002C0951C0000-0x000002C0951C1000-memory.dmp

Download

memory/1448-23-0x000002C0951C0000-0x000002C0951C1000-memory.dmp

Download

memory/1448-29-0x000002C0951C0000-0x000002C0951C1000-memory.dmp

Download

memory/4968-22-0x00000000007C0000-0x0000000000C06000-memory.dmp

Download

memory/4968-16-0x00000000007C0000-0x0000000000C06000-memory.dmp

Download

memory/4968-13-0x00000000007C0000-0x0000000000C06000-memory.dmp

Download

memory/4968-14-0x0000000001770000-0x0000000001771000-memory.dmp

Download

memory/4968-5-0x0000000001770000-0x0000000001771000-memory.dmp

Download

memory/5092-0-0x0000000000150000-0x000000000023C000-memory.dmp

Download

memory/5092-12-0x0000000000150000-0x000000000023C000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads