c40d25aea88f4950e24746edadaf29fb113632cca3130bfea6e64b11b7c9e7ca

Analysis

user interaction
yes
max time kernel
335s
max time network
356s
platform
windows11-21h2_x64
resource
win11-20260513-es
resource tags

arch:x64arch:x86image:win11-20260513-eslocale:es-esos:windows11-21h2-x64systemwindows
submitted
01/06/2026, 02:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Legend of Zelda, The - Twilight Princess (Europe) (En,Fr,De,Es,It).ciso
Size 1006.0MB
Sample260601-cphajsdz5k
SHA256 c40d25aea88f4950e24746edadaf29fb113632cca3130bfea6e64b11b7c9e7ca
MD5 da10fc87dbb5d61307c8e299ba240e69
SHA1 4f6c2389f182d1d95db41e8dc49abc0d472bdf6f
SHA512 26b833264299682dc76bd2a67374ac0a41ebe20741bec7bd3e361d743ed64b5a42c3b2c28a8654a3f1d828a390db269464ae1cf1d631cdcd3b7ce4b281ce6ce3
SSDEEP 25165824:cJVKiMj9nIGHtRzY7HDcDgw3/M7QdjEykB/R:cuiMj9ZwcD3t5R0/R
TLSH
T17BB9332B578CD503FA2902345C0F778B43407C77BBE62A73B9D2AD84F6B67512C916A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 3 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe
File opened for modification	C:\Windows\INF\msmouse.PNF	dusklight.exe
File opened for modification	C:\Windows\INF\keyboard.PNF	dusklight.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4020	chrome.exe

Checks SCSI registry key(s) 3 TTPs 3 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	taskmgr.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134247543109015773"	chrome.exe

Modifies registry class 9 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.WindowsTerminal_8wekyb3d8bbwe\StartTerminalOnLoginTask	taskmgr.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1679180529-4058988202-686829476-1000\{3F9C99FE-3F64-446E-B3DF-E9A64BF72B09}	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings	OpenWith.exe

NTFS ADS 2 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Dusklight-v1.3.1-win32-arm64.zip:Zone.Identifier	chrome.exe
File opened for modification	C:\Users\Admin\Downloads\Dusklight-v1.3.1-win32-x86_64.zip:Zone.Identifier	chrome.exe

Suspicious behavior: EnumeratesProcesses 31 IoCs

pid	Process
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
2764	chrome.exe
2764	chrome.exe
3420	crashpad_handler.exe
3420	crashpad_handler.exe
2044	crashpad_handler.exe
2044	crashpad_handler.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe
Token: SeShutdownPrivilege	1904	chrome.exe
Token: SeCreatePagefilePrivilege	1904	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe

Suspicious use of SendNotifyMessage 48 IoCs

pid	Process
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
1904	chrome.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe
4936	taskmgr.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3500	OpenWith.exe

Suspicious use of WriteProcessMemory 48 IoCs

description	pid	Process	procid_target
PID 1904 wrote to memory of 2800	1904	chrome.exe	82
PID 1904 wrote to memory of 1476	1904	chrome.exe	83
PID 1904 wrote to memory of 1476	1904	chrome.exe	83
PID 1904 wrote to memory of 4020	1904	chrome.exe	84
PID 1904 wrote to memory of 4104	1904	chrome.exe	85
PID 1904 wrote to memory of 4104	1904	chrome.exe	85
PID 1904 wrote to memory of 972	1904	chrome.exe	87
PID 1904 wrote to memory of 972	1904	chrome.exe	87
PID 1904 wrote to memory of 424	1904	chrome.exe	88
PID 1904 wrote to memory of 424	1904	chrome.exe	88
PID 1904 wrote to memory of 3104	1904	chrome.exe	90
PID 1904 wrote to memory of 3104	1904	chrome.exe	90
PID 1904 wrote to memory of 4340	1904	chrome.exe	91
PID 1904 wrote to memory of 4340	1904	chrome.exe	91
PID 1904 wrote to memory of 4128	1904	chrome.exe	92
PID 1904 wrote to memory of 4596	1904	chrome.exe	95
PID 1904 wrote to memory of 4596	1904	chrome.exe	95
PID 1904 wrote to memory of 1416	1904	chrome.exe	96
PID 1904 wrote to memory of 1416	1904	chrome.exe	96
PID 1904 wrote to memory of 4564	1904	chrome.exe	97
PID 1904 wrote to memory of 4564	1904	chrome.exe	97
PID 1904 wrote to memory of 4132	1904	chrome.exe	98
PID 1904 wrote to memory of 4132	1904	chrome.exe	98
PID 1904 wrote to memory of 2996	1904	chrome.exe	99
PID 1904 wrote to memory of 3864	1904	chrome.exe	100
PID 1904 wrote to memory of 4284	1904	chrome.exe	101
PID 1904 wrote to memory of 1928	1904	chrome.exe	102
PID 1904 wrote to memory of 1928	1904	chrome.exe	102
PID 1904 wrote to memory of 1528	1904	chrome.exe	103
PID 1904 wrote to memory of 3480	1904	chrome.exe	104
PID 1904 wrote to memory of 1528	1904	chrome.exe	103
PID 1904 wrote to memory of 2892	1904	chrome.exe	106
PID 1904 wrote to memory of 2892	1904	chrome.exe	106
PID 1904 wrote to memory of 2452	1904	chrome.exe	107
PID 1904 wrote to memory of 2452	1904	chrome.exe	107
PID 1904 wrote to memory of 2752	1904	chrome.exe	108
PID 1904 wrote to memory of 2752	1904	chrome.exe	108
PID 1904 wrote to memory of 4072	1904	chrome.exe	109
PID 1904 wrote to memory of 4072	1904	chrome.exe	109
PID 1904 wrote to memory of 4068	1904	chrome.exe	110
PID 1904 wrote to memory of 4068	1904	chrome.exe	110
PID 1904 wrote to memory of 2328	1904	chrome.exe	111
PID 1904 wrote to memory of 2764	1904	chrome.exe	113
PID 1904 wrote to memory of 1620	1904	chrome.exe	120
PID 3748 wrote to memory of 3420	3748	dusklight.exe	124
PID 1904 wrote to memory of 4636	1904	chrome.exe	126
PID 1904 wrote to memory of 4636	1904	chrome.exe	126
PID 4856 wrote to memory of 2044	4856	dusklight.exe	128

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Legend of Zelda, The - Twilight Princess (Europe) (En,Fr,De,Es,It).ciso"
1⤵
- Modifies registry class
PID:5108

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3500

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xdc,0x108,0x7ffd5b09c728,0x7ffd5b09c734,0x7ffd5b09c740
  2⤵
  PID:2800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1604,i,7566760070970850616,13570828710813301123,262144 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1860 /prefetch:2
  2⤵
  PID:1476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2280,i,17283333287768809992,2304355407491547970,524288 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1812 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2396,i,7387850936495367825,4522183652280201430,524288 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2368 /prefetch:13
  2⤵
  PID:4104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3220,i,437607557630505295,16887173721218617548,2097152 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3420 /prefetch:1
  2⤵
  PID:972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3344,i,7303919991344768753,13679307555429816418,2097152 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4380,i,9689425778110081203,71964927929203726,2097152 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4396 /prefetch:9
  2⤵
  PID:3104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4652,i,1908381803892678723,13500134243750361748,2097152 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4728 /prefetch:1
  2⤵
  PID:4340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5492,i,12497441967405836950,10353514185083820806,524288 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5476 /prefetch:14
  2⤵
  PID:4128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5832,i,17001538688548944143,4312252960889434209,2097152 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5812 /prefetch:1
  2⤵
  PID:4596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3888,i,3645353233933016170,3053121198565236565,2097152 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:1416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6128,i,3686029529959661482,13168645319938866873,2097152 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6112 /prefetch:1
  2⤵
  PID:4564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3880,i,14527135646805967480,6768390761982462743,2097152 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4744 /prefetch:1
  2⤵
  PID:4132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3680,i,12737030265314557389,15510927427706398788,524288 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3648 /prefetch:14
  2⤵
  PID:2996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3612,i,8241937133238424891,2892705638503233864,524288 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3672 /prefetch:14
  2⤵
  PID:3864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3608,i,13533120404700615956,13900949921168486975,524288 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5844 /prefetch:14
  2⤵
  PID:4284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5952,i,18112114492986766339,15530125759487847399,2097152 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5944 /prefetch:1
  2⤵
  PID:1928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=es --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3196,i,15269296872635315952,9151650289721742772,524288 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5840 /prefetch:12
  2⤵
  PID:1528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6032,i,15586340440222915164,10710785667853486197,524288 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3644 /prefetch:14
  2⤵
  - Modifies registry class
  PID:3480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5496,i,3324439616823803296,11545085632599505166,2097152 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5764 /prefetch:1
  2⤵
  PID:2892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6264,i,13568360400625580392,11884082587518754211,2097152 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6232 /prefetch:1
  2⤵
  PID:2452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5804,i,12170478680597574996,8826126443519098890,2097152 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6000 /prefetch:1
  2⤵
  PID:2752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6432,i,2985218341877360858,13447289582831698906,2097152 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6420 /prefetch:1
  2⤵
  PID:4072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6364,i,17640907309083042448,10398735042675302024,2097152 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5820 /prefetch:1
  2⤵
  PID:4068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6728,i,15874513252587045585,2796560843573663432,524288 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6428 /prefetch:14
  2⤵
  - NTFS ADS
  PID:2328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6732,i,12095343389862755240,4498104035417617723,262144 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6748 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3504,i,5845867045893373261,4996495689445269472,524288 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6896 /prefetch:14
  2⤵
  - NTFS ADS
  PID:1620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6860,i,16384039267820729513,3645234567496110018,524288 --field-trial-handle=1864,i,5809118957151926856,432957350542318312,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6864 /prefetch:14
  2⤵
  PID:4636

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:932

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4896

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3408

C:\Users\Admin\Downloads\Dusklight-v1.3.1-win32-x86_64\Dusklight-v1.3.1-win32-x86_64\dusklight.exe
"C:\Users\Admin\Downloads\Dusklight-v1.3.1-win32-x86_64\Dusklight-v1.3.1-win32-x86_64\dusklight.exe"
1⤵
- Drops file in Windows directory
- Suspicious use of WriteProcessMemory
PID:3748
- C:\Users\Admin\Downloads\Dusklight-v1.3.1-win32-x86_64\Dusklight-v1.3.1-win32-x86_64\crashpad_handler.exe
  C:\Users\Admin\Downloads\Dusklight-v1.3.1-win32-x86_64\Dusklight-v1.3.1-win32-x86_64\crashpad_handler.exe --no-rate-limit --database=C:\Users\Admin\AppData\Roaming\TwilitRealm\Dusklight\sentry --metrics-dir=C:\Users\Admin\AppData\Roaming\TwilitRealm\Dusklight\sentry --url=https://sentry.twilitrealm.dev:443/api/2/minidump/?sentry_client=sentry.native/0.13.6&sentry_key=e58dc50a0688fc811d2469d0f4299b7d --attachment=C:\Users\Admin\AppData\Roaming\TwilitRealm\Dusklight\logs\dusklight-20260531-222802.log --attachment=C:\Users\Admin\AppData\Roaming\TwilitRealm\Dusklight\sentry\6d346269-bc88-4541-d084-769c23dcf52a.run\__sentry-event --attachment=C:\Users\Admin\AppData\Roaming\TwilitRealm\Dusklight\sentry\6d346269-bc88-4541-d084-769c23dcf52a.run\__sentry-breadcrumb1 --attachment=C:\Users\Admin\AppData\Roaming\TwilitRealm\Dusklight\sentry\6d346269-bc88-4541-d084-769c23dcf52a.run\__sentry-breadcrumb2 --report-id=3a200212-c6d3-4323-5f42-b5cc2a4d8278 --initial-client-data=0x374,0x378,0x37c,0x350,0x380,0x7ff7bee46830,0x7ff7bee46850,0x7ff7bee46868
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3420

C:\Users\Admin\Downloads\Dusklight-v1.3.1-win32-x86_64\Dusklight-v1.3.1-win32-x86_64\dusklight.exe
"C:\Users\Admin\Downloads\Dusklight-v1.3.1-win32-x86_64\Dusklight-v1.3.1-win32-x86_64\dusklight.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4856
- C:\Users\Admin\Downloads\Dusklight-v1.3.1-win32-x86_64\Dusklight-v1.3.1-win32-x86_64\crashpad_handler.exe
  C:\Users\Admin\Downloads\Dusklight-v1.3.1-win32-x86_64\Dusklight-v1.3.1-win32-x86_64\crashpad_handler.exe --no-rate-limit --database=C:\Users\Admin\AppData\Roaming\TwilitRealm\Dusklight\sentry --metrics-dir=C:\Users\Admin\AppData\Roaming\TwilitRealm\Dusklight\sentry --url=https://sentry.twilitrealm.dev:443/api/2/minidump/?sentry_client=sentry.native/0.13.6&sentry_key=e58dc50a0688fc811d2469d0f4299b7d --attachment=C:\Users\Admin\AppData\Roaming\TwilitRealm\Dusklight\logs\dusklight-20260531-222821.log --attachment=C:\Users\Admin\AppData\Roaming\TwilitRealm\Dusklight\sentry\7a44cad6-7101-4b95-4b16-0fb1f2a1e33b.run\__sentry-event --attachment=C:\Users\Admin\AppData\Roaming\TwilitRealm\Dusklight\sentry\7a44cad6-7101-4b95-4b16-0fb1f2a1e33b.run\__sentry-breadcrumb1 --attachment=C:\Users\Admin\AppData\Roaming\TwilitRealm\Dusklight\sentry\7a44cad6-7101-4b95-4b16-0fb1f2a1e33b.run\__sentry-breadcrumb2 --report-id=0aeccd5a-a382-40fb-9300-ace558555f49 --initial-client-data=0x384,0x388,0x38c,0x35c,0x390,0x7ff7bee46830,0x7ff7bee46850,0x7ff7bee46868
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2044

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /7
1⤵
- Checks SCSI registry key(s)
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4936

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 b7e477cc4e37cb07a22d8b7fafea70d3d1b82fbb23eb1f34de98a49e0d08b217
MD5 a75bceb0ac8cb2874cd4e9f997ca92b2
SHA1 c0bf00796ccb66bfbd8148720796d12a8ef0c30c
SHA512 e60d9da07f72de3491afbe0d5917fbe7eab7132826343b769b06edea329485187796272be4a56020ce89e28cd1514533132ebf1c7f00a06b56369a6b6f0846a5
TLSH
T19AF0F9B6CA21AC3728FC172864944B47EB5013672B50494F3A3D930D8FB16378586C5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Size 374KB
SHA256 aa5482a1cb0e0e9fc7a09d90ce82d48765958ef2de12bb567c9a9dda0e70fe08
MD5 573e467d73dbee9c030ab6dd911a4ba9
SHA1 a7b2b2064ed4736ef28f3cb83c8d465343516927
SHA512 bc46278aae28a4c5952e9db988efae23e53d6e1eb3edf8bb92535ac93aabbe5cd97ed43b301722c61a0d692fa1f99d356822ade6f0b769d47be741ecff5516fe
SSDEEP 6144:2FMjqfaRkLaFLdTF5AHl+qC6naJJwUISq/1uwj+mN+MBtpc3WhHfVl:JjjCOFLdTF5I+qbaLV+yA+AtqWZb
TLSH
T1C98423A376B1F0AFDEC8697F03C63363A598B531B7D019C61D48B2A6122735C9FB4264
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000025

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000025
Size 39KB
SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
MD5 9a01b69183a9604ab3a439e388b30501
SHA1 8ed1d59003d0dbe6360481017b44665153665fbe
SHA512 0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca
SSDEEP 768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO
TLSH
T13703023A5E3CCF1A84157A703950F6D9A8481E548E9D143B4F1AC7BF085DDE2209B6D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 13660a591501aa5c00623e296d54ca16cfdc80731842007c723378e78831dfe7
MD5 25eeae64bac87b1e8e33f61e731f35d2
SHA1 e6b922e2562986cd5805da590d22f7a884850ddd
SHA512 fd1eb1eb42547ab698261fc355d53830a164f7b769c9e5f602ad09cdea346b86f1fe4d779b64045922c3681e85ac4b4bba0e3d07b7e7ff2dcc78c657a55de906
TLSH
T1D5C09B4CB4D14451DBD2B7F40D718CDD744059780451861FB2C4D478F967FD19508556
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 003c483cf01acf03f9259ec537d113b56c265cc0013c6c22d4c4fbbec8b6a157
MD5 d7157871cd3c2aed70739e7e12ce6e53
SHA1 ca6a4bb6d60192515bc925fb8eb1c9664354888d
SHA512 3435f35c77f70af85e14cca5845146e6b9748584d25ba5580a20011370601991958c36978d64ac012fa4c56a88fbe83afd5b1091215b278e80fd9b3a2cfb61d5
TLSH
T173616204D4F07D22EFE6E539C5E4AB1D72B0C95A18435F972358CD703EA3B825B10C92
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 0e2606868deefae18856dac6d5fcfe86ceb3faacb46f0aa78e3c8ed1f8f62a5f
MD5 aad78274caa565cbf8fef73f11564004
SHA1 513c1936ff2b8bb63ff6a9d5402056593b797c35
SHA512 5c837e5b9acb7556b8f5d23ef018629b8c51f1e69b7781ce24ee3561ef7fb5233f227026c652b9bfa564fa3c26a7228f029a60298e0c6a8f71295eba6af2730a
SSDEEP 48:YALlqUqAhS1qxhOhDsGRsGXLsefoKsc9gmzscafscposcYKsccqzscBtscFF+scL:DFDU0gJBDB9Za3pMY2c8BlzShD4pE
TLSH
T109916DF7C7D8C56DC91156F4AB25AE1FCD290A28532C3C56C8D8AF4B93E2872D21534E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 e961ccbd63bef9b0182bee8b770b63f9ea3cecc13953b0b90e4cc937c320d1d5
MD5 90bc7286c454822590119778a0662611
SHA1 fbace18a08979f6f1e003e7a1238214173c4ca2b
SHA512 99ba51615631160e86cc64e03ecf9b6032fad8169eeb9e885c112d4a0d5686fc9a813d7eb25be291ea7c6c38f977efe28d953f9956d3b00bbb7c8a9d5ed3621d
SSDEEP 384:DFDU0gamK21sq0eR2ZwUeJJzJ0moBDzI5ByKIKIa/zgnzDrQ1YdNAy0m4Rw2RINe:gpL45AydmzMXLiS6
TLSH
T18B62ADF7C7E8C52D891556F4AB25BF1FCE191928431D3C6688D9AF0B93F2471D20264E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 15KB
SHA256 deab706d424720b5af18dcf42a1ba7df276f44f998367bf8339f6874fd8e803d
MD5 d90d989f1af74bbc2bb18dd3ca4ea433
SHA1 63d58525c7ed7e79748611e31a95b8fa8c1d829c
SHA512 7b21e26b69a31525330d277213e09d482de450542b3c1d3a6ef955e8eb5c884d924aea0214f96c6e23523573729ae1a660ddb24ddec5e26ce4f6a5ca5451b12f
SSDEEP 384:DFDU0gamK21sq0eR2ZwUeJJzJ0m3nBDzI5ByKIKIa/zdzDrQ1YdNAy0m4Rw2RINe:gpL/CAydmoMMiXge
TLSH
T15462ACF7C7E8C56D891156F4AB25AF1FCE190928431D3C6688D9AF0BE3F2871D20264E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 51bc3874f57062e8854ea0f21fc38d67d03e7235fbbfb8e1ca0604e53b86f315
MD5 ff93513e47a23eb3de89b6ab6bfe5911
SHA1 93b2d5d99e55e37351b8173277b08903bb739505
SHA512 ddb8c8fae0e965578925727c9d92eccca8313444fd7faa9146a8307de0f6f0858ae0a52f418daa597fecbef0a13ec6a16a1f44c7504144a5167a7cc1d102e2a0
TLSH
T1D941C0EB96BEB05F1079597B0E45780D1DBEA43612416CF0CBDB812CF081DF74B1606A
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 06cfe398387eebb21019a90ab19541ff8eef6d2868858363b5d2071e6bce51ee
MD5 818fbd142d0dfc759a479d5f92e862a4
SHA1 00bc81a85aff339b36cefa7f63ab448fd5604d0e
SHA512 b81c67bc295d8d51dfc9a4a1d70b6e502b475073bff4b27de3d7f1bff3ad9dd115f5317faa455228127157f2d9908e8fb40bdc5aa8f8aaa7515d431d9b4ae905
SSDEEP 192:YRBv1jCAqVjFRpM0v7sBpAPRp2rM9NHsb+WNn9qBns2gg2xGkwhVyIsnAUgtaJ:YRB9WjzRpMw8UXNrwUG2V24n8
TLSH
T17142E62FAE14657B5CDAC329F9227717E3F4202176942E84EAF88B1C24E79CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 c78344484c63fef9f013a096b7ceff094c221ab28d430c372aee16a1134accb0
MD5 0e7a7fce5288eefbd76535e524e242f4
SHA1 c05df45eba15363b434f70975affb80f203b9e49
SHA512 edf85686ff0644e1ac46e6da9a6b524719fe6361859666fbbe5d91afaac3ce6b26ade8ba6db12e7b1d5f6c274f922ac331a6b1bb5a15fd4585cfc6d0ce0c2940
SSDEEP 192:YR9cBzv1jCAqVjFRpM0v7SBpbPRprazW9NHsb+WNBo9qBrA05g2xGkwhVyIsnAUp:YR9mz9WjzRpMweFX/rw1u0G24ne
TLSH
T1F552F82FAA20297B6CDFC329F9217717E3F4202166942E84E6FC8B1C25E79CD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 54485e069eaf0ed7df4629e5541ba3ae852e05f2b9c8f32cb73223da547099dc
MD5 f661938458557ab80bb2a85f43da8666
SHA1 f8572ba4d3aa37cb4f6205962bed52b3a61918b4
SHA512 7489876cbd721d8157ffc6582fe92add2961500b988dd6a1f275cbaf5fa52d321623aa9bf7ffea09ed177e71d56556ab4500ae59ddf68919b29de694ca48a1bf
SSDEEP 192:YR9cBzb1jCAqVjFRpM0v7SBpbPRpre0I+l5BW9NHsb+WNtSzL9q+AP+rA0Gg2xG2:YR9mz5WjzRpMweFXbCrwtDpx0H24nvO
TLSH
T12662D72FA924197B5CEAC329F9257717E3F42021A6D42E84EBFD8B2C24E75CD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 b0ba8e8194c6b8d79bbab5673bf8a2ed0d5d7299130b0cf160d8d588aa2b2b2d
MD5 ed15d4d5f53ae8b55de201a560a08d48
SHA1 f08c4332063dbaf14f988c96f40f56b8da86cf59
SHA512 10f4157e11ec3cb75ab3181742de9ea3d4b973f103e0c46dae707ec0401558403370677bc6407f6b1d28d663127352f4f9dd3d47e6666c87d5f3fecd050e05da
SSDEEP 192:YR9cBzs1jCAqVjFRpM0v7SBpbPRpre0I+l5BW9NHsb+WNtSzL9q+gwMrA0ig2xG2:YR9mzwWjzRpMweFXbCrwtDe/0z24nvO
TLSH
T14862D62FA924197B9CDAC329F9257717E3F43021A6D42E84E6FC8B1C24E76CD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 219db7acf380c142a244fd11d2def059b6c8fc454e0d1f267f3170f83d8f20f4
MD5 6829413167491e65583f4bbd120f3ba3
SHA1 13fcd5864497cf2d1561d82a3f2afb41116cd9c8
SHA512 22c4813d0f7309f4d63bde121919cb6b4ab623c4dc8b048501dd9e934dd890260eee5efc595875026c6ca72c540a8f457811ca6bb99d7796439ae3ae6485c3e1
SSDEEP 384:7tjtw7KxkXqKf/pUZNCgVLH2HfgslsD7pLILc2j5EXODtw+ErU3UlH14wnTGv:7ttw7KxkXqKf/pUZNCgVLH2HfgsiD7pg
TLSH
T1EF72F9A76C4C8E770F94CACCD817BB4FADB5024B65E9C86447FA581903D5BCB110A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 4bef89190d0ad2d28574ad531a4c26887a24bc23250c8da0a9f2d3292041da17
MD5 b14ec5d09964377ca9980089749e09f9
SHA1 76ca55e8abf7ca8ee50436edfd5c2dc50a8cb109
SHA512 8003ac5c4631dfa29ec974d99670a2ea274604d8d51ca3011a08da749f51b7a153f3b85b581b1f2a72729d7ffd10d28c4473114710c2601bc07b3c4d9957a18b
TLSH
T190B01251C0025511C09202F41142148CB2559F50DA0B270253E46E2798256508A140A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a75ed.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a75ed.TMP
Size 96B
SHA256 2bf0825580c5310d1a95210181bca999f5513df5b0301a6940a835fefbd0f458
MD5 4b0c6f982e3f19d0d37f089780f94513
SHA1 91301e0bd8e941f6baf12bc5c04e18d7b239cdd1
SHA512 e727fe2b5413cff3a4c802fb0f5e93ce6feb4c6b0c0a1caee2d6d803f2014ec10d8f538e09a8318cf090ddfe04fdde95e2ce8e300b6acb2fc7bddf433585bf68
TLSH
T1A1B0025AC1067217C08203B43DA596DC7166EF25D7031736B2F11E66DD6A76489295A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 4404dc95335bd62296048b3e16499f2a558423480a285ac852df2876cd238023
MD5 7568ae78d144e98abc266e406403a44a
SHA1 44384b543fa688d923616652bbb50fd9dcd6a20e
SHA512 2fb77222ca523177339c521a4881fdf5fedfe8578e7dd51e87cde6e92f3259b7bf565ab01a2b390c8e3f56136e13b930e5c908dee7bf5186f63cf408bc328846
TLSH
T181A0029125C56C05CC4246F21192896EF720BA5101128B0BB0D15444DD62641C5E5015
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 150B
SHA256 6c9edf390761a1f9ba1710ea132d6b2c802b63570016d492cd7e571908a80972
MD5 d94b323641eb830b86ba5457228a853e
SHA1 e602c83a5058657b34c853ea1987ee84cbd15886
SHA512 2e15e2cc03fc6d9e5f176b0fd1bac246e7adaec6081048dc6650298cffd6e19f8ae37b3efe4b5f4db836dd5af307b85b858df8b8daab29b0c3fc57d509b87184
TLSH
T1D9C08CE32924454B0A30DACC142CB22DC40B424C8CC8CCE885CC81261439E228002628
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5b7b18.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe5b7b18.TMP
Size 157B
SHA256 adb41a6f87fc57ce7066b5ffe71534cf44d0c58376ef91a8edae183ead8a22a4
MD5 16addad607b33806a1ecc0e5eac7a7b2
SHA1 59e9577763798fa51186a5987ccd0cc987738336
SHA512 5b85b7f75966c86cb70bdce07809c0afe7099901d6b3694177fd0697fcda57a83fb919bc9b40ccf610d38dd0879b6e820a4bf095fcc2b51dce3a18734560e574
TLSH
T17DC08CE3293406470B30D9C9542CB21DC81B4E4C8CC4CCE886CAB126203AE238002628
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 ff93d5c8c843e5c1a0141f710664c75ff0e515000ca7f6c2885eade6a991b624
MD5 74ac75dffdcd9cf42344a259c9ba4d6e
SHA1 502bc6a191f06635ed363796353c839e478f325a
SHA512 4873cacefd7859eee8250b819475a52f98a09f0349a4c03c75c559492f35fc0e9d0935d7b66db5bde024ace227b1bf4894420c2a96e56726af16af9dfb57bbfb
SSDEEP 6144:5VFm4vCuuwbzIUqSs1qK6m7Rkm1tYpBeh2BAot:52zwbzIUfIV9oBGcAot
TLSH
T1F834233BEEEE9DB555B82565614E150B3DE0C7838A206E46C8C64F057BFA6CC4E4DC34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 2d08a87d068d9629b59bb45e8ef87d5bbcc9438ec65064ceb75b8ef684d2856e
MD5 612be7e1d01e87adf318b93ee256ebc9
SHA1 1a240f340df0a0afc3e262d7e3605bfc6809e5d3
SHA512 68e55b0d6dbf256316bcde499d71e6320ad8895e99de75a8d4e4cd2b2c8edd9c555cc81a25a1c95eabf3675d5603ac62b917964f5a43f4a871996a85b4d8dc17
SSDEEP 3072:2Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMe:Bm7Rkm1tYpBeh2BAoe
TLSH
T1EEC312375D75A97759B9B70EB08E0B1F1EF14EA6C920DE82C8D85B0437E97CC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 832a8b019f1136d3433074a20dd8e20913bdcf10671cfde7a1ff98d307636589
MD5 287617001593e59f888debb1ae84e3d3
SHA1 2bdea2602f51446062ab2d557340931214883668
SHA512 e9f1713567fa2fcde0a82c489f5ca3a9133dd1734ef11058a178944de95316d6e5dbba3e01a9c55d351e013b40d6fc1d4069cdf57d15ac2a354ea5032f47776a
SSDEEP 6144:fVFm4vCuuwbzIUqSs1qK6m7Rkm1tYpBeh2BAot:f2zwbzIUfIV9oBGcAot
TLSH
T15234233BEEEE9DB955B82565614E150B3DE0C7838A206E46C8C64F057BFA6C84E4DC34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 1ac1fd11c27c0895d783489952b1b5690541be2b62675fc4a26d1fc7c1f89517
MD5 a309d35891eb380b74a0291622af217d
SHA1 a3867d2bfb6cb59232f7a4be8ec5165b74eed695
SHA512 4280682f29116d459e51f72c17d7c9ec35015d505c6c1c54c63c08569fb72a06a6c70fadafb89a4203638088b7a0cc267e612ad4a4e1103b4bf337f52abb0109
SSDEEP 6144:tVFm4vCuuwbzIUqSs1qK6m7Rkm1tYpBeh2BAot:t2zwbzIUfIV9oBGcAot
TLSH
T1A1342337EEDFDCBA59B42555614A150A2DF0D3838A20AE4988C65F057BFA6CC8F4EC34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 234KB
SHA256 c2ddb1b246debf2c06ad6aa6f5d9f981f83a7d0d5a980077d043ae40be89ff83
MD5 f2034c7042f85d5a4aebd9652966123f
SHA1 49403bcd7d0dd40c28a4adeb2f3c8e744676694e
SHA512 c9b203190518a434f66065d7769337be3cb2ab84be0200b5af2fc1cfed46865b3b6ad0d0f567115dc4a2e6af819ab40ef1d9670d3b95ee19d1c15be3390ff206
SSDEEP 6144:5VFm4vCuuwbzIUqSs1qK6m7Rkm1tYpBeh2BAot:52zwbzIUfIV9oBGcAot
TLSH
T19B342337EEDFDCBA59B42555614A150A2DF0D3838A20AE4A88C65F057BF66CC8F4EC34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 234KB
SHA256 aefba071cb6e704da0fbd8313ddd2f96958516c5a19059a1ca32297d13af617e
MD5 8b2e94cbde42bcb83058b7e786b7e8d5
SHA1 de6f1db52f2736e26c3b2748f2bc2bb67d0181fa
SHA512 e926d05fe32c0d1532cd33f0de586fa5fff5be2c200f4a816e6e06c0cfb19720321fccf3adfdb62607b9ad158caefac446044164575554d0d28cb1060b1259f9
SSDEEP 6144:UVFm4vCuuwbzIUqSs1qK6m7Rkm1tYpBeh2BAot:U2zwbzIUfIV9oBGcAot
TLSH
T17C342337EE9F9CBA55B42554614A150B3DF0D7838A20AE4A88C65F057BFA6CC8F4EC34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 e9ff709802c1479fdc60142c00033791b640174f6baa14a387de350fa25efdf0
MD5 50cbc33f1b243785e3b34aebcc457bc7
SHA1 9ae0d90a2dd7f1598e658f27c4616ba1d37bad19
SHA512 1e8e47eaeb2e0bdd43a3da5b5e1e6b67610235fd4b901f4eb579806bf571e9d054a2ad9ccf82b3fda9304e58b3c581e6815a197030920e63f14c690c21491309
SSDEEP 6144:CVFm4vCuuwbzIUqSs1qK6m7Rkm1tYpBeh2BAot:C2zwbzIUfIV9oBGcAot
TLSH
T1AE34233BEEEE9DB955B82565614E150B3EE0C7838A206E46C8C64F057BFA6C84E4DC34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 445530d2f0ff26e4c6ad4e1cfdec1e7d15f57ab77e16004589a61f4d1bfbef50
MD5 ee258ec893269aa9a9072af3934dbdb4
SHA1 693b6dae809faf0dfb8a69f756d181720b730d75
SHA512 f058101bf3cc8a65a3739e57f0e2dd7ffcd56e78963fe9a1bdf1557ca55e33021c1843f6f1fc6ebbd79ac5801b8cc5074b545b71a7c5d98201f9f937ddc9281f
SSDEEP 3:MsEllllkEthXllkl2zELpK/:/M/xT02z
TLSH
T1834404047FD00C05C5C1D034C013C3544370D4700515D743375154337DC7DC01C04304
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dusklight-20260531-222802.log

Path C:\Users\Admin\AppData\Roaming\TwilitRealm\Dusklight\logs\dusklight-20260531-222802.log
Size 5KB
SHA256 514e0cab2e2834d1939bcd3a63a89c6d2777fc13f382a0dde3850f26cc8404b9
MD5 eaefc079edfea21357f2d8178d419ce5
SHA1 98cb62d5769f46f6b5076e853c6e1479179f1e4c
SHA512 79ca310d29cec1dd8bdde53cf240d1cdad95e0623e20600277f77d5cca3fe478e945957dd0fc2b7c36dddadf768fc0e1f8aac44b15cb428692eb53e36e8d78b3
SSDEEP 96:/ZhvhPj5ZCQk5ZHy/rVRwVio1UhiWM2/z70Ecd6xXeyeDJ:rNv90ovi
TLSH
T10AB1DE272830F59F2619F960B76DEF8ECFD4221D858466CD0268CEDA9923B6D426F434
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dusklight-20260531-222821.log

Path C:\Users\Admin\AppData\Roaming\TwilitRealm\Dusklight\logs\dusklight-20260531-222821.log
Size 5KB
SHA256 5f370b78bff1f3faa42b1cbfad9273c99d4938d47d5e6c68e30422b2e4439ce6
MD5 d0d181380999db555d8ebabc2c7d1506
SHA1 c9b5125850be315cc7b27f33a9af2818c58c5607
SHA512 687edefd54f48b8ea0551c36a68877dddaa28fc2bbf5e0dc88277a760016da0f467cb3af6a3249beda4aa07945830a57db593678a03ae12c2c86deaf0194c612
SSDEEP 96:/ZhvhPjNZC8k5ZHy/rVRwVio1UhiWM2/z70Ecd6xXeyeDJ:rFL90ovi
TLSH
T1AEB1FE272830F49F2659F960B36DEF8ECFD4221D858466CD0268CEDA9923F6D426F434
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__sentry-event

Path C:\Users\Admin\AppData\Roaming\TwilitRealm\Dusklight\sentry\6d346269-bc88-4541-d084-769c23dcf52a.run\__sentry-event
Size 523B
SHA256 f45e61bcddd75836d923aa1e4ccd809c329892a04facf0e0353309b1433937aa
MD5 b07553fcb0789e7a9cd7c6ab1d6dfabf
SHA1 031507049009fb505b1f6be2083d1f1368e4ea34
SHA512 66dc0898d2be46974468394d9d821fe46c041f490e8c8ba9dfc477a03931d56963050558d2cb6fc01132f2f8016c5f5caa2b3ba67f499f0ae5650bf085ecaddf
TLSH
T1DEF0C9C245F0922735A61F87613C18964230EAA39A8247433BA30A47CB58E09AA12229
MD5 SHA1 SHA512 TLSH

Submit Download

__sentry-event

Path C:\Users\Admin\AppData\Roaming\TwilitRealm\Dusklight\sentry\7a44cad6-7101-4b95-4b16-0fb1f2a1e33b.run\__sentry-event
Size 523B
SHA256 433c15f5da659934a907e951a321d5ab8cf1fc8d7e41d331fd71ac03794e2e89
MD5 1ecfebe07c14c4e73f848c5db50ddf8e
SHA1 0588995dd7ad0b95c68e928557601e3901af5f39
SHA512 6b75e70a19111f71fcde4306beaa52beecb10b886d5a5bd63518ea57263b23c683cf257886d75c68054c78f52d8579342b7b9c4cf9315f4d7573a539a6c92175
TLSH
T19DF005D103B0C3333B660B57927D259547747AA315829703365705565B44E19BA1AF39
MD5 SHA1 SHA512 TLSH

Submit Download

last_crash

Path C:\Users\Admin\AppData\Roaming\TwilitRealm\Dusklight\sentry\last_crash
Size 27B
SHA256 e32c6e98cfbede3cd4575438b0a203e7491ab8976d89cf60053be8175cd88872
MD5 0f559dac122231e0893f629929d4f545
SHA1 1c85b4ec955e4c4c8c0ba1eac8128d95a44038c6
SHA512 d5966d209d4f7fe56a01e270d64fc03a6c0f061a5e6c2b5b1499f9137677479695548d2af04a0adc40f7d6f3202b2fa8220a51e09b975f422c52ea384c1aabd1
MD5 SHA1 SHA512

Submit Download

metadata

Path C:\Users\Admin\AppData\Roaming\TwilitRealm\Dusklight\sentry\metadata
Size 16B
SHA256 74bb477693267b31a9425b2cb64cf9c66f2cc01da9a876d4e3d83f5a3cd56f11
MD5 3ca39fcdc86a8254fe06af7e616c3d9f
SHA1 0f90395a67b508f21889689688fdba680d6b05fb
SHA512 8b94f989b4e33e981ac31a2575b17bc4d33a830df31886815189a599ef3325593d89996a8f573b707c8aeec71b3ff6982c802d061bcbd8e899d5875a76e70515
MD5 SHA1 SHA512

Submit Download

3a200212-c6d3-4323-5f42-b5cc2a4d8278.dmp

Path C:\Users\Admin\AppData\Roaming\TwilitRealm\Dusklight\sentry\reports\3a200212-c6d3-4323-5f42-b5cc2a4d8278.dmp
Size 318KB
SHA256 aca872c655e3e13c14b61b145d3d9b0806bcda0a923f38b9ce60958c45162eae
MD5 b3f97b8e02b0b954919a90d81d06365f
SHA1 e9c34057e03b00d6237af174697568e5f65458f0
SHA512 d157752f559d05041ba6d4bf548a56c0985f12a3341f37a45571863f8fd3aa64f27e0f83e1ca038651e14917621ec155742eac7451e37a535ff285c5991a2ffd
SSDEEP 3072:WfrEBtC6cU3ksdgR0FYzE5vqBfb3Cevd57vdSa/6:C+tC6cU3ksKGuQvBevd57vdSaS
TLSH
T10D645152B791485AF0325631D9B7A7206FF3C82187529B1F8BC0476A2CE6BC4ED32ED5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Roaming\TwilitRealm\Dusklight\sentry\settings.dat
Size 40B
SHA256 24a25ee40ef3801f20c9edd1b0783c5dab458f694bc6e39a6ed59e03703399b1
MD5 b57fe4e2e798ac4d7d90747f7c261b40
SHA1 14c7f6aea91dfb0a42ae5199d9cf0f11d4ab898f
SHA512 12b3fd704337ab0ba11d9b444d5e6abb2972546291e0f642a8e766f4eab7eb224a836c3685176d61579e7edf5a49b620305cac480f047640e674d2343fcbbeea
MD5 SHA1 SHA512

Submit Download

Dusklight-v1.3.1-win32-arm64.zip

Path C:\Users\Admin\Downloads\Dusklight-v1.3.1-win32-arm64.zip
Size 32.0MB
SHA256 5f770062d51abba12f66d58330a1d4411795145ac959d203d06cd38ae26c46b3
MD5 ad24cae1105a4c5e65f84039cf37547e
SHA1 352f25fe0cb2cdd861a86aa718482f8d5c5bf887
SHA512 ccd8f8337556352b6f063a1068cc1581fc982e1403b717c9f839384ff71ffe1830408f9531fc1c2ceb001a9fe22e1349939e60e49f2d36984ec7bd9afc8f100b
SSDEEP 786432:KIUy7qEw37/xMJzoF+PAhE9CaDz+NLmNslYees4C81th3mPj/lX0CIYgX:Kvfr/uZP/PNslNTPjnIRX
TLSH
T17A7733BC6A223193C70454B2DF988C65BB7B4E2A3CB7505D3B65580A01C70FDBEB166B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Dusklight-v1.3.1-win32-x86_64.zip:Zone.Identifier

Path C:\Users\Admin\Downloads\Dusklight-v1.3.1-win32-x86_64.zip:Zone.Identifier
Size 1KB
SHA256 5fcd41b08781385c3e2b8cd2504c0a18f53d3f9ec1d23aff23f8b77b9f1b0ba7
MD5 e6f4c0860c96a424df3c175360b13561
SHA1 58fd5bd940409fe408400cff92c56e9216b0824b
SHA512 7eb1ca8a8a2010451fe943b04171a77b253b3d4dc62e3fa04c75cfe5f58832c1236f44a5ff3ae60a9a5403359dde6c8e1faba6c6655fae566f97a459c5b48755
TLSH
T1431132F79015E68E3B03BA92D94D6D6FA417B0EFC606168D1159C04DC0C12BBA2D783A
MD5 SHA1 SHA512 TLSH

Submit Download

keyboard.PNF

Path C:\Windows\INF\keyboard.PNF
Size 117KB
SHA256 acc1f1a1b6b852d83d08ead7b45655ed55037145d46cd97c1a9e8b2fede7c1f8
MD5 31ecb8b4492a86c849aa144fcb4004c6
SHA1 d7f20b2dceb63d368b062a79235c543bbfcab6a2
SHA512 04a00a3fea5e399f11af2018c7997352b1aff2130d591979387ace4128f2bb361f5ca982e9945ba2941f0057403b67a8baa46395926963c0369b37abf8ce346f
SSDEEP 3072:rmFt2UdqFFG0VLbeMh65Xq4fHzXXFJrsntPX6UFt:ry2a2KMAaX6et
TLSH
T1CEC3675176E90B2AF2F32A752BF152A788397CD15D20DB0E1561734F5CB0F80CEA5B2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msmouse.PNF

Path C:\Windows\INF\msmouse.PNF
Size 94KB
SHA256 afee1192ff45330955ff70e8c0a2dbe1dc335ce7ddc36a3bf54925c7b422d7a9
MD5 ba87af7aaca89e92c18198bd78b7f1a6
SHA1 a37e8379285aab973fa1fc17be94de671274da68
SHA512 45615e09d9d1d578f1ff8fdb9d8b6a4c0a1907538d7cf16cd5d6eb495f193d70b7268f525009bfaec0b305ef53a9acb99bda2097a3dfc6913ea954976d900902
SSDEEP 1536:Kz4FlJ6uZ+u4Gz8A5A2Y+qrEcnaLbZ7npTyXfYpzRhlodzWc6sWUPZnm3QywjMUI:m4FlJ6uZ+u4Gz8A5A2nuylodzWc6sWUa
TLSH
T14693685176ED6B1EF2F71E716AF551674826BCC29C20D70E1960B30E6CB0F81CEA1B26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3748-738-0x000001F0D3E00000-0x000001F0D3E01000-memory.dmp

Download

memory/3748-736-0x000001F0D3E00000-0x000001F0D3E01000-memory.dmp

Download

memory/3748-737-0x000001F0D3E00000-0x000001F0D3E01000-memory.dmp

Download

memory/3748-739-0x000001F0D3E40000-0x000001F0D3E42000-memory.dmp

Download

memory/3748-741-0x000001F0D3E40000-0x000001F0D3E42000-memory.dmp

Download

memory/3748-740-0x000001F0D3E40000-0x000001F0D3E42000-memory.dmp

Download

memory/4936-955-0x00000204AA5A0000-0x00000204AA5A1000-memory.dmp

Download

memory/4936-945-0x00000204AA5A0000-0x00000204AA5A1000-memory.dmp

Download

memory/4936-954-0x00000204AA5A0000-0x00000204AA5A1000-memory.dmp

Download

memory/4936-953-0x00000204AA5A0000-0x00000204AA5A1000-memory.dmp

Download

memory/4936-952-0x00000204AA5A0000-0x00000204AA5A1000-memory.dmp

Download

memory/4936-951-0x00000204AA5A0000-0x00000204AA5A1000-memory.dmp

Download

memory/4936-950-0x00000204AA5A0000-0x00000204AA5A1000-memory.dmp

Download

memory/4936-949-0x00000204AA5A0000-0x00000204AA5A1000-memory.dmp

Download

memory/4936-944-0x00000204AA5A0000-0x00000204AA5A1000-memory.dmp

Download

memory/4936-943-0x00000204AA5A0000-0x00000204AA5A1000-memory.dmp

Download