Overview

overview

6

Static

static

3

keygen.exe

windows10-2004-x64

3

keygen.exe

windows11-21h2-x64

6

Analysis

  • user interaction
    yes
  • max time kernel
    899s
  • max time network
    895s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    06/06/2026, 04:28

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    keygen.exe
  • Size 977KB
  • Sample260606-e31p6ahy3t
  • SHA256 3b51e61442fc40a74e957a121c7cbfa386d569a36785f91c40d988defec327bb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discovery

Malware Config

Signatures

  • Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Drops file in System32 directory 1 IoCs
  • Drops file in Windows directory 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 64 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 7 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 3 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 45 IoCs
  • Suspicious use of SendNotifyMessage 18 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 32 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\keygen.exe
    "C:\Users\Admin\AppData\Local\Temp\keygen.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2512
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x00000000000004D8 0x00000000000004C0
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4660
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:5072
    • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
      "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
      1⤵
      • Suspicious use of SetWindowsHookEx
      PID:3216
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Drops file in Windows directory
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:4396
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc49a4c728,0x7ffc49a4c734,0x7ffc49a4c740
        2⤵
          PID:2552
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1684,i,7719099064429306750,2556815261724732468,262144 --field-trial-handle=1984,i,9018758635583415983,12324068554119905776,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1980 /prefetch:2
          2⤵
            PID:488
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1512,i,3359257572139988611,17604748427033333058,524288 --field-trial-handle=1984,i,9018758635583415983,12324068554119905776,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2260 /prefetch:11
            2⤵
            • System Time Discovery
            PID:1644
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,11530926333816249859,2421020864226801906,524288 --field-trial-handle=1984,i,9018758635583415983,12324068554119905776,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2560 /prefetch:13
            2⤵
              PID:1500
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3260,i,6276437146939464546,7904390123029251868,2097152 --field-trial-handle=1984,i,9018758635583415983,12324068554119905776,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3476 /prefetch:1
              2⤵
                PID:4380
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3268,i,3686463729571531759,9027024085876382929,2097152 --field-trial-handle=1984,i,9018758635583415983,12324068554119905776,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3536 /prefetch:1
                2⤵
                  PID:2348
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4452,i,15120226567459234428,12156989651226806157,2097152 --field-trial-handle=1984,i,9018758635583415983,12324068554119905776,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4468 /prefetch:9
                  2⤵
                    PID:2084
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4756,i,1769521028578150032,7887997498946926810,2097152 --field-trial-handle=1984,i,9018758635583415983,12324068554119905776,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4776 /prefetch:1
                    2⤵
                      PID:1548
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5516,i,6573778353327256785,11019654437285871611,524288 --field-trial-handle=1984,i,9018758635583415983,12324068554119905776,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5500 /prefetch:14
                      2⤵
                        PID:892
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5700,i,13197227617832131116,10096907662789401854,2097152 --field-trial-handle=1984,i,9018758635583415983,12324068554119905776,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5532 /prefetch:1
                        2⤵
                          PID:2728
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4784,i,5225869629420520774,15154986254701406349,2097152 --field-trial-handle=1984,i,9018758635583415983,12324068554119905776,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5928 /prefetch:1
                          2⤵
                            PID:3612
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6064,i,2025210392726277566,7952536716098726545,524288 --field-trial-handle=1984,i,9018758635583415983,12324068554119905776,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3632 /prefetch:14
                            2⤵
                              PID:3768
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6060,i,3623564240400645858,11025910504040559578,524288 --field-trial-handle=1984,i,9018758635583415983,12324068554119905776,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3636 /prefetch:14
                              2⤵
                                PID:3860
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3504,i,14222234278875533035,2434029661131471713,524288 --field-trial-handle=1984,i,9018758635583415983,12324068554119905776,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3580 /prefetch:14
                                2⤵
                                  PID:3820
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=3640,i,6821814000636679601,14226078365971764057,2097152 --field-trial-handle=1984,i,9018758635583415983,12324068554119905776,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3620 /prefetch:1
                                  2⤵
                                    PID:2904
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5944,i,9778705097028454100,18410694361476768124,2097152 --field-trial-handle=1984,i,9018758635583415983,12324068554119905776,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3520 /prefetch:1
                                    2⤵
                                      PID:3124
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5812,i,5823359489986831534,8377888259629850164,524288 --field-trial-handle=1984,i,9018758635583415983,12324068554119905776,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3640 /prefetch:14
                                      2⤵
                                      • NTFS ADS
                                      PID:1472
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3288,i,10546560881244057155,12618127885557102717,262144 --field-trial-handle=1984,i,9018758635583415983,12324068554119905776,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3684 /prefetch:10
                                      2⤵
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:3904
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=1468,i,5532722903282982904,9558671836551799569,524288 --field-trial-handle=1984,i,9018758635583415983,12324068554119905776,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1196 /prefetch:14
                                      2⤵
                                        PID:1276
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4892,i,1862223272271723492,987257921663563328,524288 --field-trial-handle=1984,i,9018758635583415983,12324068554119905776,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4780 /prefetch:14
                                        2⤵
                                        • Modifies registry class
                                        • Suspicious behavior: GetForegroundWindowSpam
                                        • Suspicious use of SetWindowsHookEx
                                        PID:4384
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4840,i,6368928657829487671,3210618925974757135,524288 --field-trial-handle=1984,i,9018758635583415983,12324068554119905776,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3732 /prefetch:14
                                        2⤵
                                        • Modifies registry class
                                        • Suspicious behavior: GetForegroundWindowSpam
                                        • Suspicious use of FindShellTrayWindow
                                        • Suspicious use of SendNotifyMessage
                                        • Suspicious use of SetWindowsHookEx
                                        PID:1764
                                    • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                      "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                      1⤵
                                        PID:4432
                                      • C:\Windows\system32\svchost.exe
                                        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                        1⤵
                                          PID:1748
                                        • C:\Windows\system32\mmc.exe
                                          "C:\Windows\system32\mmc.exe" "C:\Windows\system32\eventvwr.msc" /s
                                          1⤵
                                          • Drops file in System32 directory
                                          • Suspicious behavior: GetForegroundWindowSpam
                                          • Suspicious use of SetWindowsHookEx
                                          PID:4372

                                        Network

                                              MITRE ATT&CK Enterprise v16

                                              Replay Monitor

                                              Loading Replay Monitor...

                                              Downloads

                                              BookmarkMergedSurfaceOrdering
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                              • Size 6B
                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              BrowsingTopicsState
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                              • Size 649B
                                              • SHA256 be02884132b5f1d1feef551be6950c7a698d043f094e27306a2815b76bac4c66
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              temp-index
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                              • Size 768B
                                              • SHA256 de7c6db51cbeae879a01c3d73f4459e34bd6975ad646f1ec7829c372380940a2
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              the-real-index
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                              • Size 744B
                                              • SHA256 1313be2a0cf9caf2ede276eb457dc7b9a4299e165f49555ba59151953a610399
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Network Persistent State
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                              • Size 3KB
                                              • SHA256 66b81e790b95d403a027d701449e89fe8db4f1a9c7574c270c303b64381228c9
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Network Persistent State
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                              • Size 4KB
                                              • SHA256 b573a5224828bc494b74546fd816e62e41ca98fabee18a26a30c45bb5e60dcd3
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Network Persistent State
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                              • Size 4KB
                                              • SHA256 aeb3a057f5d276969626790b0c970962195e0b5b77c541c31a45b27329003bab
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Network Persistent State
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                              • Size 4KB
                                              • SHA256 63ec06f575320cb93e9babcb53f08dca7a0f4db62920c2f6cc25f56e8171fd75
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              SCT Auditing Pending Reports
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                              • Size 2B
                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              TransportSecurity
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                              • Size 1KB
                                              • SHA256 78b19a9745028c65c95fe01426c1f8f987769e048479a247ead1dd25456d70ec
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Preferences
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                              • Size 12KB
                                              • SHA256 3ac7fd8047e9c5092c74b9ce6794ed3b8294e4365bec997865e1f95d83b6c624
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Preferences
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                              • Size 12KB
                                              • SHA256 1df94f486cd5b201f0a99d551d72107d5b0ed186bce232097172cdbd460bc5a1
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Preferences
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                              • Size 12KB
                                              • SHA256 5d1e2aab04e0d41e9f8d197e7506839de9c586533d5af814c0e4b04f57ae992e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Preferences
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                              • Size 13KB
                                              • SHA256 4d9d2bc9127389ad7bb76955b3e07ba4ca8803ae9838f08adf3272e05348c41e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Preferences
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                              • Size 12KB
                                              • SHA256 e0f629c6952e982925afa95c5dec80e6ccf718a0f824ce6599271716ad9c3ee4
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Preferences
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                              • Size 13KB
                                              • SHA256 4f15ce7573df2161c28560be838bc6f6f4233cac095482eaa06b695662d2c0ab
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Preferences
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                              • Size 13KB
                                              • SHA256 2d67fdf0e1d4a2306aa917690023ce9e8e366ee6cef13e9f2d38cc653fb58f0f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Secure Preferences
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                              • Size 17KB
                                              • SHA256 86a708718cf15f4439caa697f6058448e2b7016cb1cef9cd2e54315587d87208
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              the-real-index
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                              • Size 120B
                                              • SHA256 3de0144497d4c3a11ba09763ead547884cc32aeef96d35c547265e7172c4caed
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              the-real-index~RFe5c1881.TMP
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5c1881.TMP
                                              • Size 96B
                                              • SHA256 9d34fe4d1a1964ac8de910e047466d2b4c8f9bd61a34441bf8f2b714e7508c4f
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Local State
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                              • Size 232KB
                                              • SHA256 f5fb4a8da046a9ab2709e75f5d8e3a2f68b15ca70e7fa850c7aac23874fb1b36
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Local State
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                              • Size 115KB
                                              • SHA256 72773c2a1ffcfb44cd856821c668a3f92b671c9132fa7ac23607be69af9580ed
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Local State
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                              • Size 233KB
                                              • SHA256 acc2cb8ddd71b131fde2ffe1af8c6c5618e9baa5fef60ee36d16d5f736d9adc1
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Local State
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                              • Size 232KB
                                              • SHA256 f85e3e0e11e91aedf8e03d6727429ab55844475fd0b51d83b92ed77ba3ef6926
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Local State
                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                              • Size 233KB
                                              • SHA256 5ff0121ef6b530cf7940dbb3edb93cce451ff40eede652ce06c06435dda5a3ca
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              iconcache_idx.db
                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
                                              • Size 28KB
                                              • SHA256 a3fa6cb390d3174512f8125cc792704a2471d324c41833dda3e1a79824306527
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              SearchHoverUnifiedTileModelCache.dat
                                              • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
                                              • Size 20KB
                                              • SHA256 05f5f41bd6027217f2603b0865e03c5490658a666ef4a1c9e6a3558c6ca818e9
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              SearchHoverUnifiedTileModelCache.dat
                                              • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
                                              • Size 20KB
                                              • SHA256 0d1822d8515e957ecb53acd283a8fdfb33a48bf92dcd2c40269f4014d3d65d70
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Chroma.key
                                              • Path C:\Users\Admin\AppData\Roaming\Xynth\Chroma.key
                                              • Size 236B
                                              • SHA256 5c7e05847697bce4d3e2c6bc37f890e597fa264a03a3accf709980e12c332bf2
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Chroma.vst3.zip.crdownload
                                              • Path C:\Users\Admin\Downloads\Chroma.vst3.zip.crdownload
                                              • Size 4.2MB
                                              • SHA256 59e5cd2ffb03328ec4357be7a56aa869e5221441762f4b53e78ab32d635df1a8
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Chroma.vst3.zip:Zone.Identifier
                                              • Path C:\Users\Admin\Downloads\Chroma.vst3.zip:Zone.Identifier
                                              • Size 158B
                                              • SHA256 fe4553ab7898e420354edfc01f77633ad6db148b8ca875109ca939b642eb184b
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              memory/2512-3-0x0000000005410000-0x0000000005420000-memory.dmp
                                              Download

                                              memory/2512-398-0x0000000005410000-0x0000000005420000-memory.dmp
                                              Download

                                              memory/2512-407-0x0000000005410000-0x0000000005420000-memory.dmp
                                              Download

                                              memory/2512-5-0x0000000005410000-0x0000000005420000-memory.dmp
                                              Download

                                              memory/2512-4-0x00000000053F0000-0x00000000053FA000-memory.dmp
                                              Download

                                              memory/2512-6-0x00000000010E0000-0x0000000001146000-memory.dmp
                                              Download

                                              memory/2512-2-0x0000000005440000-0x00000000054D2000-memory.dmp
                                              Download

                                              memory/2512-0-0x0000000000850000-0x000000000094A000-memory.dmp
                                              Download

                                              memory/2512-1-0x00000000059F0000-0x0000000005F96000-memory.dmp
                                              Download