c0308f7c6ca599b196dbd53a01c0323e0621858208b941c7267b6db9362f85aa

Resubmissions

28/06/2026, 04:35

260628-e7yflafs7k8

28/06/2026, 04:31

260628-e5w5rafs5q8

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/06/2026, 04:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
orchard-1.21.11.jar
Size 4.6MB
Sample260628-e5w5rafs5q
SHA256 c0308f7c6ca599b196dbd53a01c0323e0621858208b941c7267b6db9362f85aa
MD5 4262d5f85ef335efdbc4b470b3b8635b
SHA1 25b55c5cc25afb6673ae8f95b10b140b862119ca
SHA512 0ba0aca1a2436102481865225540bc68a6214c1d4d95fe6558d6a27c7fbc3acc2d30e3fc1bc1e90e471638853f3559ee3621948462551db207ab9d063c635809
SSDEEP 98304:S/Me9Ge1q419Y5dQL6+2JJ9c6iH1RPOls+kldxWIP+MxGVdcT:SUe9G6AQ2+MhiHisFldXrGj+
TLSH
T17C26236E2F9FEDF4E48B42304CA78543651AA7C99324D0EB07D9D96B0E7C8491B06ECD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3516	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134270947677072985"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{FA089ECB-23D0-4F91-A323-1E25605560EA}	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 43 IoCs

pid	Process
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe
Token: SeShutdownPrivilege	768	chrome.exe
Token: SeCreatePagefilePrivilege	768	chrome.exe

Suspicious use of FindShellTrayWindow 38 IoCs

pid	Process
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe
768	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 768 wrote to memory of 340	768	chrome.exe	96
PID 768 wrote to memory of 3516	768	chrome.exe	97
PID 768 wrote to memory of 3856	768	chrome.exe	98
PID 768 wrote to memory of 3856	768	chrome.exe	98
PID 768 wrote to memory of 4704	768	chrome.exe	99
PID 768 wrote to memory of 4704	768	chrome.exe	99
PID 768 wrote to memory of 4708	768	chrome.exe	102
PID 768 wrote to memory of 4708	768	chrome.exe	102
PID 768 wrote to memory of 1060	768	chrome.exe	101
PID 768 wrote to memory of 1060	768	chrome.exe	101
PID 768 wrote to memory of 3364	768	chrome.exe	103
PID 768 wrote to memory of 3364	768	chrome.exe	103
PID 768 wrote to memory of 3964	768	chrome.exe	105
PID 768 wrote to memory of 3964	768	chrome.exe	105
PID 768 wrote to memory of 4540	768	chrome.exe	106
PID 768 wrote to memory of 2104	768	chrome.exe	108
PID 768 wrote to memory of 2104	768	chrome.exe	108
PID 768 wrote to memory of 4304	768	chrome.exe	109
PID 768 wrote to memory of 4304	768	chrome.exe	109
PID 768 wrote to memory of 4820	768	chrome.exe	110
PID 768 wrote to memory of 4820	768	chrome.exe	110
PID 768 wrote to memory of 2100	768	chrome.exe	111
PID 768 wrote to memory of 2100	768	chrome.exe	111
PID 768 wrote to memory of 3756	768	chrome.exe	112
PID 768 wrote to memory of 1792	768	chrome.exe	113
PID 768 wrote to memory of 1792	768	chrome.exe	113
PID 768 wrote to memory of 4196	768	chrome.exe	114
PID 768 wrote to memory of 4196	768	chrome.exe	114
PID 768 wrote to memory of 1840	768	chrome.exe	116
PID 768 wrote to memory of 1840	768	chrome.exe	116
PID 768 wrote to memory of 764	768	chrome.exe	119
PID 768 wrote to memory of 764	768	chrome.exe	119
PID 768 wrote to memory of 1824	768	chrome.exe	120
PID 768 wrote to memory of 1824	768	chrome.exe	120
PID 768 wrote to memory of 4584	768	chrome.exe	121
PID 768 wrote to memory of 4584	768	chrome.exe	121
PID 768 wrote to memory of 4940	768	chrome.exe	122
PID 768 wrote to memory of 4940	768	chrome.exe	122
PID 768 wrote to memory of 824	768	chrome.exe	123
PID 768 wrote to memory of 824	768	chrome.exe	123
PID 768 wrote to memory of 4880	768	chrome.exe	124
PID 768 wrote to memory of 1364	768	chrome.exe	125
PID 768 wrote to memory of 3096	768	chrome.exe	126
PID 768 wrote to memory of 3784	768	chrome.exe	127
PID 768 wrote to memory of 3784	768	chrome.exe	127
PID 768 wrote to memory of 1948	768	chrome.exe	128
PID 768 wrote to memory of 1948	768	chrome.exe	128
PID 768 wrote to memory of 4716	768	chrome.exe	129
PID 768 wrote to memory of 4716	768	chrome.exe	129
PID 768 wrote to memory of 5172	768	chrome.exe	130
PID 768 wrote to memory of 5172	768	chrome.exe	130
PID 768 wrote to memory of 5256	768	chrome.exe	131
PID 768 wrote to memory of 5256	768	chrome.exe	131
PID 768 wrote to memory of 5652	768	chrome.exe	132
PID 768 wrote to memory of 5652	768	chrome.exe	132
PID 768 wrote to memory of 5660	768	chrome.exe	133
PID 768 wrote to memory of 5660	768	chrome.exe	133
PID 768 wrote to memory of 5668	768	chrome.exe	134
PID 768 wrote to memory of 5668	768	chrome.exe	134
PID 768 wrote to memory of 5676	768	chrome.exe	135
PID 768 wrote to memory of 5676	768	chrome.exe	135
PID 768 wrote to memory of 5684	768	chrome.exe	136
PID 768 wrote to memory of 5684	768	chrome.exe	136
PID 768 wrote to memory of 5984	768	chrome.exe	138

C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
java -jar C:\Users\Admin\AppData\Local\Temp\orchard-1.21.11.jar
1⤵
PID:4212

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf8,0x124,0x7ffc5c12c728,0x7ffc5c12c734,0x7ffc5c12c740
  2⤵
  PID:340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2036,i,3391159180993159949,8139191687631949311,524288 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2176 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1692,i,14733169986815749154,1571927479138763961,262144 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2128 /prefetch:2
  2⤵
  PID:3856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2316,i,8614023011813606796,10372483595587679439,524288 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2572 /prefetch:8
  2⤵
  PID:4704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3240,i,2224386747948330660,18106067012110347056,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:1060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3260,i,11530355196659447523,1422399759882178995,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:4708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4460,i,13073699188997890184,16259569753446687308,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4472 /prefetch:2
  2⤵
  PID:3364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4716,i,1550386134805376676,5857086679623781254,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4728 /prefetch:1
  2⤵
  PID:3964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5504,i,11636507050446655836,8999106409472342630,524288 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5432 /prefetch:8
  2⤵
  PID:4540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5796,i,7507587843645413338,18002320429497613047,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5772 /prefetch:1
  2⤵
  PID:2104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5748,i,15843981166685304209,15987808106863417790,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5996 /prefetch:1
  2⤵
  PID:4304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3688,i,2500110183221781783,15709334021572879349,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:4820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3356,i,12046869657266662237,17194676255677126588,524288 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4864 /prefetch:8
  2⤵
  PID:2100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4836,i,7845044412294938853,2287774812619080657,524288 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4808 /prefetch:8
  2⤵
  - Modifies registry class
  PID:3756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6080,i,11518739574143310491,18105268058657471572,524288 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5520 /prefetch:8
  2⤵
  PID:1792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6580,i,106039344697989880,1892751970630139794,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6608 /prefetch:1
  2⤵
  PID:4196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6492,i,8578142477380653578,12709199499803585142,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6508 /prefetch:1
  2⤵
  PID:1840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6536,i,12671995439889992888,10382903615004062205,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6824 /prefetch:1
  2⤵
  PID:764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6808,i,1271746605700317653,8405169581603346630,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6780 /prefetch:1
  2⤵
  PID:1824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6624,i,8368537396320217325,12907082149663797286,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6568 /prefetch:1
  2⤵
  PID:4584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6944,i,12116429481278168540,7376851251808670555,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6964 /prefetch:1
  2⤵
  PID:4940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6948,i,9913876994933542292,574641562470417544,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6712 /prefetch:1
  2⤵
  PID:824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6656,i,11745753068893514329,12965699981961279787,524288 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6596 /prefetch:8
  2⤵
  PID:4880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6724,i,2195017033435259544,3425236924357735673,524288 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6608 /prefetch:8
  2⤵
  PID:1364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6764,i,18245116914915856895,4240114194377463745,524288 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6716 /prefetch:8
  2⤵
  PID:3096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=4480,i,9829598404407494946,11652105053433113979,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5944 /prefetch:1
  2⤵
  PID:3784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=4548,i,6602906242668198178,13553112338542119035,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4508 /prefetch:1
  2⤵
  PID:1948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=244,i,6711097883630070696,15806874891852307660,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6196 /prefetch:1
  2⤵
  PID:4716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=7664,i,14235811596883858976,9897088685355773958,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7560 /prefetch:1
  2⤵
  PID:5172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=7692,i,2307418882647139874,4535761308307681392,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7720 /prefetch:1
  2⤵
  PID:5256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=7828,i,5084077105923402918,14770396450392651131,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6340 /prefetch:1
  2⤵
  PID:5652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=7788,i,11730473885341891693,12376428300694921079,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7952 /prefetch:1
  2⤵
  PID:5660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=8088,i,10349988653360115932,2688004786405586861,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7696 /prefetch:1
  2⤵
  PID:5668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=4624,i,16653740828947882839,3593224070900924693,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7860 /prefetch:1
  2⤵
  PID:5676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=7608,i,15671907868180079722,902499197491961686,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7596 /prefetch:1
  2⤵
  PID:5684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=8224,i,1556080979580945505,5054287145489883922,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4700 /prefetch:1
  2⤵
  PID:5976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=8312,i,226233721481325651,11428996177634243707,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8320 /prefetch:1
  2⤵
  PID:5984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=8564,i,16854526136138216730,8873906047909766098,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8580 /prefetch:1
  2⤵
  PID:5992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=8604,i,9789763200393244770,7060569733615327462,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8616 /prefetch:1
  2⤵
  PID:6000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=8868,i,9226590436223552020,9356942196181737093,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8872 /prefetch:1
  2⤵
  PID:6008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=9016,i,11717316326601950514,7983742988647158745,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9020 /prefetch:1
  2⤵
  PID:6016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=6716,i,17134027598672014150,2835108380752267095,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8636 /prefetch:1
  2⤵
  PID:5420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=4800,i,967719078940027341,8769598065839824049,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5888 /prefetch:1
  2⤵
  PID:1052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=4656,i,15671522250758803051,6735572549888160813,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5776 /prefetch:1
  2⤵
  PID:876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=8832,i,9947469055864055355,12066617367867744624,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9284 /prefetch:1
  2⤵
  PID:3880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=9292,i,5924112351960634533,3537187636148669031,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8784 /prefetch:1
  2⤵
  PID:3628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=9320,i,18322647511323363514,15793006575487410079,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8564 /prefetch:1
  2⤵
  PID:2620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=8740,i,11646769323117737957,13911966401275989149,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9328 /prefetch:1
  2⤵
  PID:2144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=9456,i,4114539600390067883,13221040403917262132,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9464 /prefetch:1
  2⤵
  PID:4436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=9496,i,16447298912418593226,1347605528411055123,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9512 /prefetch:1
  2⤵
  PID:2112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=9968,i,7711782937988927676,3301670400432843150,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9980 /prefetch:1
  2⤵
  PID:4516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=10024,i,6669040699024474573,15263116557548872862,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10036 /prefetch:1
  2⤵
  PID:2648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=10156,i,5689459683722674725,9045091344344710687,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10172 /prefetch:1
  2⤵
  PID:5232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=9988,i,4141589207841623231,5740783056585009822,2097152 --field-trial-handle=2132,i,5779586196147666671,9998613654304403417,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9852 /prefetch:1
  2⤵
  PID:1112

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3624

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3308

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

910ddf6c-e37e-4f57-b985-6e33e0d34586.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\910ddf6c-e37e-4f57-b985-6e33e0d34586.tmp
Size 235KB
SHA256 20813b6e82ccf978c7560429cf2d5b3aa5712502c5f72da5e2bf33971c2b315d
MD5 6ece8f563eb028d36428042f906e274c
SHA1 88ddd987ada14ab1ba5197cd639e0b1d6ef50aa6
SHA512 f7f9f94fd8900f95584684c5e0afc8ef8526ef5031d5a1cf0d3248622bb9f3ac897664cf34684b6027e06e68cd92d4a001a1e78de69e4f0c735825c0c59a10ec
SSDEEP 6144:GiY2WL7LAd0ZqyPvNm7Rkm1tYpBeh2BAoW:GN2WU0I9oBGcAoW
TLSH
T1BB3423139DB5A83A007AEF1A748D0B4F0EF14961CD6CDFE6D9D02F4472EA6883E49535
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 a9bc91a3244e7d72467b656c5486d15c0ed9f92add88f691c3853e2b856cbd81
MD5 b1e1deec2c4182d0013a230b355f4c7d
SHA1 126437183b8f548051a3f561eea1eb0ee68fc9cc
SHA512 e718639402727b342725497f1be1fb31c240520b2883d9791df2e05dd851d0e309e06e9942c2a24d6090668922ba1d9f9a1ebf9b87311e7d55ee2d605549ce06
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 79eb69e4530063afd51988b50f5a76dc941ab038c5040df5f685390cd1d4e31f
MD5 0705c938ce987b47b2219c87afafadce
SHA1 bdc3891c03db6a837edc499e29e24e58f38dbf86
SHA512 20cf21f9b4057ec5a80a82644a8c6777a3a20c013e55c343720f193e89dbe733033a2f3a4d25eb371e32ba0962459f39076f77c56ce7d5f2a6a641ed46a30fbd
TLSH
T1E3E02B66C9239C3718F85758A4654749EA5113173740984F373D410C4FB973E418685C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c
Size 57KB
SHA256 6303475cdd19a7c08d011c6c6862e3789b39f95797602963a78cac17ff73d1e5
MD5 73fe08c0771b0b44243114c8ea8b86bf
SHA1 03015c3d3ea5bb634dd29a50623a6147d206dc0c
SHA512 f4fe1b7b7562c4f1187ca0621ff4006be0fad055e41d772a1ff4a421eb0d18794e3c21dad72cc469b889c6ed9642616ab9c8b5bd27d87d8fb5b8f228c96407d6
SSDEEP 1536:5HBwP9e8JdgrDq3W2leMPq1AOFgHDU3kQj2W:5hc7grO47C9Du
TLSH
T1284302CFF0D8C6FE215052556E6E7628C261891FEB118DB2443F2FB2999D04172FBAE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d
Size 650KB
SHA256 685f5974a60a3ebbbc75900914a7077fc6f39e970c64f70592a4fc16bbbf75e9
MD5 1b2a260faa50a98f14bd899f72b5f649
SHA1 36a39d1134c7ded05cb88097858d4fb1a624bafd
SHA512 9f10b44e2d8194be3221e858268ec2820d4e69e72e2263a9d81268abdc9482d73a73ebaa635313e28cd8ef53e0a3eea95b3fcf20587d3cfbaa2d5721b35a6f0c
SSDEEP 12288:b0CH8n5hwglP2o71Tqq9A00OCOSZENtc9X97XeadZ5JAItJ:b0CcMglTejjENaX9Dn3zAIP
TLSH
T11CE423DDCEC06CA03B005743E4B5FC560AAB546D4E206B1EAEFD24E259E2AF31D494B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e
Size 22KB
SHA256 01a444271a63c294f0e67e198e33c0e7d10e0ac9ca27f46ea89c4026ee41408b
MD5 12edeccf9afc70d9b9abc320144e61db
SHA1 e0a8f1a901ec2c00e45b802400b3de273209cc47
SHA512 9ad7f51d391dc8c545530d43fcbb6026d73e6895268b1f81c9807cadb9d9d75009bf7860aa6acda59be22d63cdad44593b2f175cc5cd79e63fed03bdb3f7ba57
SSDEEP 384:Sr2JPd0/gCBszJ3KKm5bSk/A6sIg95EA5iE41OAlYd0orplV994qlmwqlB6YrXe:SiJPDCiBKKKY6WkA5itcAKqo5f4SmhBi
TLSH
T108B2E18F9FC42272242188FED1E83DE1597B4AD8141EA1F62DA254817E198F62C990CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f
Size 34KB
SHA256 59692b6319f411a4904b6324525d2ef3ef3ac55142959959e75eb54efcd7cc6f
MD5 8a202fa4db4bb2d8abdd8a4e4a9d0b21
SHA1 135d1b4f2504c299b099d7f0aafbb21ce276b2c2
SHA512 8e3a32ab136176863b52fac2c135b1b9c9e4d548442c46a26e889c0cf28956f826eb7b05423547f0118b0917ce50368eb09ca721152935337a45486fdb84483c
SSDEEP 768:J9KjQRJ5bfUCpN26M+kZiLAMuFpeDvhtV0H2HrN9GLiX6n:J9KjQ1jBd4cAMuFpMv3V0He59GLiX6n
TLSH
T163F2F1C742E24EA8845869300DC634735AA83B5F07B67E92CD8165B2B2DE74C7779B0C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000010

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010
Size 274KB
SHA256 c2c2ecbb3b138ca3dd06c8b7c8697be9dfe8fab8f6b7d3760fb4cade00f039b9
MD5 f62f2ab06511a995bf1b081c0a7281a3
SHA1 ca2c9bfd08704257ab2e87117697048011ce7563
SHA512 bd5626b76c1d823d8e7e69f95544f53e6faadcd65061b562745629c6c0a1ddada106eadf7f9b314468ddcb0358d44f7bb906504a5750e4461fe9ecdcf1f164b9
SSDEEP 6144:io6lmb7i7yulCCjUChUafh1LHcNhoW9p7n2MqKIcF49EOAo0OM:io6c3CRUqDfh1H2hoW9pr2FdcFSEO/q
TLSH
T1815423B9074EF207D889271E0F74C8E0ABFCD9570C31A66685E257BCDB40FB2945A366
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003f
Size 73KB
SHA256 5f66ef35f19e1bc8bfad52e2139ad510998e759dbb99d825f7876b8c3cdbdee6
MD5 3cacf51428fa145226351f4db893235d
SHA1 e65afd58ec5d9e1aada6996d71482ddcf9f9827e
SHA512 20df0266b4f3f351d860c174140c8f8f730a97b47f4e1fcf71e28503e03a460ff6df97614e48142bb52ff71e5d4d285da3c6401330287a50d7cdfa551448d23e
SSDEEP 1536:kkCI+9iACUcDsSByHXFtZiqVU3/+hnVVtRq+1z0hpTI+AuXkx+R+jy:W9BtcDRyVt8gnVVtRq+J8TI+XUxlG
TLSH
T1AF7302753BBF4E1A45D6FCC453E344184BF578AE6D65EE9F62A3C90EE831C46C00A292
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004f
Size 61KB
SHA256 405a13b02b86f8bbf4e4e2658fe5ad94e4cc26afe6ed90033ca4b33c41750b24
MD5 da107f3c885a5138bce4689230d903a7
SHA1 b39daea41f7811a55dabe37167a0f110bd576c98
SHA512 755668c3efa380eb332e91263481ab11233911c7f36557fead3bea40aee840c7d93595542ba32a49ca6fb396114efb46c75d17c79d4a92b0c74fd7642f3d43a6
SSDEEP 768:EZZAnrn5+eA3uT1YQalw8zhzK3kg9sIZUBuE1sDxxbdEy0ySjHvLCQUpzdkaeSAo:EYj5i+5YfKIUUQ/8JaBb0yS3CzzdQjC5
TLSH
T1AD530224D8D9FDE08E5D72FBB6BE464A3068F4A53FE0615DC91A3036B10675A6014F29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000052

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000052
Size 21KB
SHA256 42d4e8f1a0d2f0529ef1bedd2e9652c257f3244f1f008deb9360694f09afadb3
MD5 e677f3a0ad6e120a1000c5ca6be38f98
SHA1 2077b8f2880ff8c33a9380e4aeaff6902266484c
SHA512 a15611104ebcdb197b597c4cab3221abdc9ae28986e5dcc6a1749c8ea77ce8a0869161c1ce93e7563be2ee10f08d3d0bad0915e33224f3bcc209047af6017c36
SSDEEP 384:xxIa86wNeXcY9R1K/2zASArFAsz1KE0/rg+N2eRYYy2VAWJflJdg0vpVON/le24f:zOne1D1K+6FAsz1cv1YYy2V3JflA0vpF
TLSH
T13DA2E1C161EA9F7A8A614481BF1493E3425C5FB86F34D981B143C7C74150267BEACF4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00005b
Size 158KB
SHA256 60072b4eb6fc5f1f1214a34fcd55b3cbd1d05eddf778f85611f9b352c4c6452d
MD5 83266658f29f5cb762001d5d9f6985a7
SHA1 9ff52157193e1e798944e6a3172d938183f5e550
SHA512 60b2a8749bb597b71c6cb7113c4ea6c430ab90c6f6a5f78a36ab5fbd2676fbc173ade236be939e862569c786fbdc8e0aa984f1ae4263e91de2ba681cc8ce5d66
SSDEEP 3072:pqj6fcYjfI87fn/NWUEu+Y4rwgnWSPrrGh9SC2VRvkQdv45cf+Fg:pTvjg87fnVTEu+W3rSC2VRpBf+y
TLSH
T196F3232CABB1EF2298ADD32D789EF491C870553AC097303BB84FDF8575154348A7684E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000067

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000067
Size 16KB
SHA256 31b8af5d23addf7e2458d83082c0a19c0a4cad8536722ad119d66091debc7423
MD5 6d6500d74bdb62d26f489953a29a4806
SHA1 78ad9cb6440f40f2f423010ba750300cada596ae
SHA512 1408a622d07e454e07218b65119011f0909992c8f25bc39c9030324ebf395aa9525e54024d9406597243b63deeab0d7f4f67f88c1603ced1d6238036cbbc2181
SSDEEP 384:MOoJ0OpqyxAT0/k8NaYiTSSkvu75hjBSk1yWosD7FYozHKjb:ZORpNibpTSSkQQOF7FYoob
TLSH
T16472D07E24761178DF9BDEE71B6B721374A50E2B073EB07292BD245A055C709320A768
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ddd5235390a393fb_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ddd5235390a393fb_0
Size 3KB
SHA256 32cbe0ad1298d0561ae465d2f22241f07751163b9e120dd3ee7fb21bd77676d9
MD5 d88d9173f5ad2997ddb9bf0a42e0b077
SHA1 02edca8adaec8696beaca94c1520b2389ac52b3f
SHA512 cc2aaf0583e4e08b199e348ce246e13754c6dd8f15690b5105bc5bfb278a336168f5b72640b3c4ea60e28471b30ad583e9bd292e1cf436a2da3129d71d7c7390
TLSH
T12F71859A97408A7ACB3643FD52938656333580047FD7D32734D1ABA91C843F3B99AD8E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f059332b9db6e78cd773393489252a6de1d56c4a6c4c280152ec697c7acba5c5
MD5 16c1f5a634b39b6e0d94b4e4ef0c1517
SHA1 6651c75f805a4d89c0d74421b694bb6f51844444
SHA512 0af94b5cf7a2029148f09312e7259379f936b3bf51eaf388cbcdf75f66283a1fe8f23f60d542cb8f6711eb4b860d22f0a2b014a7b11d70ce28212a4b528576a6
TLSH
T114612DAA45CE9C54EF634DF118F86D683370508391537F5B48E2293765073E89A92CD7
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_eaglercraft.com_0.indexeddb.leveldb\LOG.old
Size 389B
SHA256 2289ecc398aadc8af1e143881fefa15d5800d9f8e5c0015ebcfee9a3d49cb4f7
MD5 1f5e21671a8f3320b234b038f5f82ee4
SHA1 c5fe0319414e47a08999b82cf6f8f1d93ac3bc1f
SHA512 a86d6eac00d44b5fb243aa5a04bb631147f6d9c84b52536013917574bcd1f28f374949bd38befe498f1f90741f0b5e141cee4249567454424d9efb91f6d6e949
TLSH
T1BAE09B9CB4CDE36F9314805755B47B4DD6E23A0EF7DDEC861F41D55472C151460ECA50
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old~RFe5949b1.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_eaglercraft.com_0.indexeddb.leveldb\LOG.old~RFe5949b1.TMP
Size 349B
SHA256 3f6301e2ae64b7ffd1f446e2dd32303802c6e55637b37ffa90e29fe1d7db6a62
MD5 2a27f1e6151ec1f9ec00f584ce4c128f
SHA1 2d5e12ca8c09013a7c6fd51cac3228ce7a1c0dba
SHA512 35c1b87d7f79671944752e6e67ce02bbb738851c0e6ff4f40228f60bdffbaffcfe7778b187a106499f77641507dbb5a7569c80f4494fbd91a19033a360d6dbb6
TLSH
T181E0D819E4C9D36F5314C1661970BB0EDDE2650DEBEDA8861F81D81871C645C64EC650
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
Size 261KB
SHA256 2e082be65421187e51e17f0c9927511610578a40c11c791056846cdc07d2bc20
MD5 77e585c76beb28991a2cf85bee960019
SHA1 1c977b573d7faa22f033c1028868b92b88c512b0
SHA512 16a016df5032365424f31f31fc51d28beb800fad761ada80c24b5bb367b6084b0de88d1807f4faccd98632cb6def11ca654bb614cdf3a13da65ad7ab83eedf68
SSDEEP 3072:7GlJXrbGzkodM5YXMIYQ5k5Cs8bwLQAVs8o0V8488bwLhWNtJ5HZurN96Spww3IG:URohJuMEI
TLSH
T10B442B1A21E1B2D9E11D43770D128C46D3B6EAC895ED30AAB9E1760C63F7B1137A4B3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000008.ldb

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000008.ldb
Size 32KB
SHA256 2be21bc39b01d786dd84bd5815731ea5af3a50f19e1e6b6ea64ab96862db9c68
MD5 003eb0056214fc56f28d1bb8babd5fdf
SHA1 5a6e0271c7229eff56a35b3a12e05ed762a2595a
SHA512 4c6581380226cde24da432636da51f252deaab42cf13692b70d83536508c12989ef28f3cef333582b7597e415e585e0008ef31a9b9bb30c53018f5c31e51aa7d
SSDEEP 768:SN+uRbN9oCx2HnnkwA1LfpkPrLhjbOsgJeh4J/7j:SN+eZkHnkxLxybeISX
TLSH
T10DE2B0EA7ED5C5C3C174A237D4FD23C9BA24B91F2155A0AC6BD7221818627AF248DF06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000009.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000009.log
Size 96KB
SHA256 2269efba53b3aa67e2a3628ef13ab66300ad1054eab760187b7910caf8fa036d
MD5 cbc0f51e0a4dfeda15d4b1eec44d83d8
SHA1 0b7f564efd8c06a9dbc895d78977018cfeccf4bd
SHA512 94da4a471aff758313720c1e54266b4c90466a8f94d473cb1eac140d2674456b3e479f28a8cda8cc5af8cf31bb7da2781a605777dc38dfb6023e84dbe0465911
SSDEEP 3072:nHJmOHl3n37v7ShRe1ainbI839n08a719cNrt60nbm77oVLOVyy:nFrtbKHoo/
TLSH
T1EAA33A0F48EA869BCA00D1F55C7D43896F2CEC8428FCA2EEB58DF50DF1B92241B64D59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000011.ldb

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000011.ldb
Size 12KB
SHA256 36c961c594e249127153f74f2c727179be28cead12aca722bda9aa8233703e05
MD5 9ebf63ec149d1b2d397859037c04c603
SHA1 bb16584a63b2b2087290fce62858957843edde8a
SHA512 aadf8f6eaed231ffc9fe96fa69449acb144fc600c96d995bddca41e200a4fe34a39e5cb7e609152d335c9b9515aa983c7ef7421197b5f42f6dd15c14f02bcac3
SSDEEP 192:xTwB8k8Al4xHat1n/WroSnuSkSVC2+smYvdFXCa68zgxIyACi9qDv3QckTpJeqsZ:FwBHuIt1cujELaWmi8DgJeqeSNNTy
TLSH
T1CA429F4B2AD9809BD1B1F27AF4FE63C97F71780F3249E15D8687111C04626AF24BDE86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 3KB
SHA256 613ad8e582095271560f2797334856321d1fbaaed63f2d6d5c06571fa7db9948
MD5 197d5535f53c01dd87543593a8665275
SHA1 8817bc484b328a0e62a638e43a87b47d30a7d288
SHA512 72e7ff4aeceb26a7ef41f482a53d5bb7ca0a8d31a2de54c30aa20eecde62430200ccc9638fd7b262e1dd6fd90e825119ce9df1532715bd793d43d354d04ca786
TLSH
T13D719EDF9D49A6BE02D1C121C91D6285C85C520BD70FDB186B6EA7CF43F222BDCD2269
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 415B
SHA256 92e5f73d2cfa07de2c9b78a2e10f24c9bbc4c58ccc4df0489758575590a6ae74
MD5 a87cf4f17fc6122d386957ea11aaf503
SHA1 c1cd6fc4851cc237da799cc5286c23fff0190384
SHA512 c8e5aecf1811897e0e09d37d8e50f3952c57c565cd12a3fadb4b93ed0d6679285d722e7e908373a978d47a0ab7bf7e530eef82d2431d123adc25399c139eda63
TLSH
T1D4E02B11FFD1E1D2F0784830657FF382E62270CF1506C21F226DE05669A23024D1010B
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

4d7a9cf5-0be3-4f91-a83d-90c73adfae49.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\4d7a9cf5-0be3-4f91-a83d-90c73adfae49.tmp
Size 6KB
SHA256 3eb52cd4a04763091a2bb1e2b1236100905e7cec6b67fad032b23d190b9a0c83
MD5 894cf326ce4a535835a88aff7c436fdf
SHA1 24d3a687275a6f0c183f3e5db66c8742d5fc63ed
SHA512 f1e925dc1baa1b549a1e05b3c307c74a2e956bac4e370e88e04bc067cdaacb6c4b31eed82ecd4d0bcb83331b0f3b1c36770b0f6793aaa05b5128665c7e4bfc7f
SSDEEP 192:sU7UCAUCUpUwUHsU/UhULUPUYnUjUtUpUaUsU/UhUfdU4UYUTUS0UbKUuUFUhUJt:sefAfyhisqYwelQgEZ/GY4dxBW8cKFAD
TLSH
T13EE19BA3A2BEB45B10285C7B0D55BC09ADBEF432029168F8DF97C1BCB1825F70A16527
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 41KB
SHA256 6ca68904052302737be4fdd3e7683be622e86531ba61ac5a5889c266f57bd3de
MD5 3234bc827978ede02be4af29e2088770
SHA1 cccbe6c5ba6a8a62accc706409838310f1d884f1
SHA512 8beffcab0a4e7d08ad3f1104da60212c441467fee7ec582ffc022beb3764739633f78071834a6f1d27bf175290d64d02f87ab8194c4bf90b93ea6f9611a1ec16
SSDEEP 384:DwhEctf19KZeHMuPetUJIf/SeCueneST9BeFDjMhhBeKede7xnJPKFFenJjJSIKJ:8H3jD1iZp/Bd7u9dgFxceLjSJ2VFp
TLSH
T1F013BFF7D3F4857E881155F2BA183E2FCE2A0924575C3C1A85D69F8BA3E2471D28198F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 eb03be80fc1ad6550500b0985c5b2b7a163ff5826bcaec4fdc7267d441fa17ef
MD5 45c11f84edf55b9a3bed1bd92088cb14
SHA1 73f771a426115467f6573a04ab2c4ff21308c22f
SHA512 ce34525369c05d251746b38d2282f01dcd42a7c7d85f0edf1e8fe2714b33e9e476c784abc3bdec597f039cdf64df109ff718c4a8c6fe70464722b81bccb00be9
SSDEEP 192:1Rf7HSs/e/Cv7vF+pAPRp248Iaf9HHsb+WNnlSibc2fuSeR2tsam+VyIsnAUgtaJ:1Rf7mOjoUXM1wEb2E2iam28
TLSH
T18952B62BAD206DBB6CDAC219FD21776BD3F5102526D42D84EBFC8A1C16E76CC621701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 12e1b87db7678e2f01e4914fbd006bb060a41d5752902d9d9749e0dae63a3c10
MD5 19dc221ebb99fa34fea7750af48b30d2
SHA1 bf1f9c32d426787671718fcfae0c10706cfa1deb
SHA512 518451dc39f10999a83dc807c866ab175fd6df44dbaa28ffdddb9a235a13d8d948100f47daf01604359109da41b664d2735d0ee67c076e467870036e17aad849
SSDEEP 192:aRjcBz7HSs/ehCv7vF+MAPRp24GtZXLmY9HHsb+WNGejnNByvUbc2IuSeR2tsaLj:aRjmz7cOjotXU1w7KR2V2iaL2e
TLSH
T19F62C76BA9201DBB5DDAC229FD11B76BD3F5102626D42D80EBFC8E1C16E7ACC610741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 de2022f53e040974f5c62150eaed6a9e9c5f8c4c84e829e96913f6a37bc82718
MD5 c5b9154ce763b317529c88dcd4481fa2
SHA1 408d67be83d3e6ae79a06499522ff74ffbd8dbc6
SHA512 7e6ae0a4a4f5e4fa81932e09ef2cee1e40f9690173a91d17b08a53bb9f3d881e28ca859a5860667b4a5a626fb13b75238398cdace16d25e3dfba086b3482023c
SSDEEP 192:aRjcBz7HSs/eh7v7vF+McPRpj4GtZXLmY9HHsb+WNGejnNDpnYMyvUbc29uSeR2/:aRjmz7cDjoBXf1w7K1R2e2ia52e
TLSH
T1AB62D66BA8201DBB5DDAC219FD11B76BD3F5202666D42D84EBFC8E1C16E7ACC610701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 ad2307b2130fc58cb00cf841f31a2414bbbfa36d03791e76132b94ffd9bad510
MD5 ef14f80ae440b13e9eb0d30c3254c10e
SHA1 1ac2bd210c7d543af0c4743994c431d7507e3955
SHA512 3b06436b3c9b02d8df362292f131ff2d1be3b9fcf3136e553ec0d74340b84aacd850af2ff37cfc284cfdb191897c81f8f87989232b5db06db6ffe086c398c585
SSDEEP 192:aRxcBz7HSs/ehcv7vF+McPRpj4GtZXLmY9HHsb+WNZ6LejnNDpnYMyvUbc2iuSeC:aRxmz7cIjoBXf1wpK1R2j2ia5Ue
TLSH
T1DC72D76BA9201DBB5DDAC229FD11B76BD3F5202566D42D84EBFC8E1C16E7ACC210740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 50470134168a2bfd8d4e46ee618b61af4ec17806f6b0485863c1878d876ebac7
MD5 42c5163f586c18950ac87d1669e3a242
SHA1 bf36f9520d58660660deae04025ca8b61e23e51f
SHA512 1249a7583af793e239e631aa2fdf62bfe31da9bfb217f7bbfd5b90332086cb342e73b9e7bf24e8d0651d8d4acc38789bf41ab59aa2830edf4de942cbb5f8d2f4
SSDEEP 192:aRf7HSs/ehCv7vF+MAPRp248ZaY9HHsb+WNHjnNJbc2+uSeR2tsam+VyIsnAUgtK:aRf7cOjotXC1wZW232iam28
TLSH
T1D252B52BAD2069BB5CDBC229FD21776BD3F5102526D42D84EBFC8A1C16E76CC621701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 34d3b150d9ebc3413240a436dcd8cc4d2da0e46d00a681d2118263aea9d32f3e
MD5 73285efb9f7ee0bd384426865ccccf8e
SHA1 51903f2b7a36fa90857257254c2bebdfe5da7eef
SHA512 e9bab3e8a04453bd7ca516137298f57170d38058ccd5df170108532fdb6eefb2d5ae94de47967a5242cb07be597050bef4f69d7f740877c626e131f01424e28d
SSDEEP 384:TRjPq7KxkXqKf/pUZNCgVLH2HfgslT37pLuLcSjFgXODPO+ErU3voHGjBm2oR0h9:TxPq7KxkXqKf/pUZNCgVLH2HfgsV37pM
TLSH
T1287219676C4C8E7B0F94CACCDC167F4F9DB5025B65EA886482FA582903D5ADF01061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\0a15114c-b33b-4dff-8d68-b6efc273b907\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\0a15114c-b33b-4dff-8d68-b6efc273b907\index-dir\the-real-index
Size 576B
SHA256 f90806ee6a210857d292f20bcd903d7e29e92e387f07dd049e218d1e4e03d78b
MD5 8cad4239a98fd1499e9323d328e7d928
SHA1 300c96a550dc8abc64f89119b1546c69d15960be
SHA512 c1529d5e1f493a69409210777878893cf9a7f80d2fea7bb9d4387c0ffd5dc28244d222c0503bbb6c743d74f3d5f9774df55993b6f5c35e99f93257a20ed0ba1a
TLSH
T15DF0F13B26F22469DE0054B335A31E4C713484AA552A7B47C258E83F7AAF383CC42098
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e124.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\0a15114c-b33b-4dff-8d68-b6efc273b907\index-dir\the-real-index~RFe58e124.TMP
Size 48B
SHA256 332dfa6ae90a83c16194d1883c5e0f8a7a67707ae7cc3e5baa96d9a7d2eab009
MD5 ae6178febf99f8eb07717812d8ebff8e
SHA1 b6ef94ef2fa34b463215f7f2b456611dd47e75aa
SHA512 a4019935ae40cabac74fe6cd9377d3044efc43356e534cd7214e829480fd0d15ee8af2297b784243b6bf9807f343886ec9dc0ea06c4352f762c39a5b9e082b70
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\eb8c2f15-1eb2-4446-a057-5b3e059b5806\index-dir\the-real-index
Size 2KB
SHA256 128d4cf3d73f10cc85b85a04aa85c246a815e21ed1ceb1b31df088a46b420060
MD5 59288b1945fef89483296d996bfd44e0
SHA1 3fda47b25ce2ba613f3aecc54ce370c7a1245436
SHA512 3e0c49845eedd41734d9be571319c14d8ba8d1aa07231949e6edfe2c72d7800fb12a5f3af9703b0bb6ca24a9b87934f278714cf76a4fdd54585e47274ee7b8b5
TLSH
T1A941864CCC8097DDEC7451BA2D9015B557B41D38FC58C35291A4F6B73403A682B4B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58877b.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\eb8c2f15-1eb2-4446-a057-5b3e059b5806\index-dir\the-real-index~RFe58877b.TMP
Size 48B
SHA256 0513963a52dd2a980ed00218568eb39c2ae830fa3579c497a05352099a34c17a
MD5 5b65e35d66909e11a6483df8bc0853a4
SHA1 b482d10bb52660591bd2d86381056496816afcfc
SHA512 bf504b674d5f9d5e859b0ef1f8b9f226c4d4fc6d490061298a9aa7a70f9928ba08dd808eedb354b73747a37a895c15ff9b7cba44867600e775955a57cd332e33
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 a237d5ac8540411588b3180049f122ff6d47439698a44f693182c32f229cbe45
MD5 bc260000fff34111d7972e5c91a956a2
SHA1 141dd2ac894638de21a3db21d8129b44f5ed7674
SHA512 2920e0cab424661df16420f222828f3d913d0a16cb3289bff9548207ea0396aa9141210dc30c5336d025f3771121c6b8fab7777c3b93d966a8b16be3fb6bf8a7
TLSH
T1BFD022D6057289572B34AFD4707C229E802EAF8AC8C4DCD8D44CB08330B8A23C403B75
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 243B
SHA256 c414d95e207a05ff91f9d83cd6a7a5b67afa36453118ed17247b1ce8f4085e28
MD5 adaaa98f2d30109f245e4daa91966e19
SHA1 6f7604b260c40a6f291bf2e3a6d77c4e4390bd83
SHA512 1917fca6dac1e0da3faf72901667603d75a06c9bd2039fabb7b7b11b2c65b1c84d6f929c8b35ffb24cee66cd768287b5af64479ffd77fdbf8e7b6f3fac88d6f0
TLSH
T15FD0A79B6D5001DB63355EEC3874725DD23F9F889CC1DCAD6695B4123278913C462E29
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 b285ad0d7c1ea98f72caf518c153719df7cb28c9fe6638dc5077c5a716ed5d23
MD5 87c6b3b12af8bde1622a20f393da1a01
SHA1 4f6acded690867b9ee71c2df28248c9ba068fcfa
SHA512 9b78f5b2f014584066eccfba6136c7bd092623121e96c15783a5f97d0598de7d4d5839c26dd257f20e318a9a0128f1c824cf78662ae0ec4de50e0b34e66c11d2
TLSH
T165C09BE3151046971675EFC42075675ED52F8388C8C4CCE8904C54422074A538403A35
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 239B
SHA256 61bd5db944eecc8d6487efcebdc79456a961156a56ede87f6da9395a8a46ba4f
MD5 c1f5b03c78d91ad481b6d5a4d22edc4d
SHA1 9bedd72a2a6fb4950172072e60d20112f380f345
SHA512 322646323d1e6d4e492e845ecba3a962a08073f2ab5a4824ae186606d2c926c5c68fa370b95a03b4611ebee6e98627cbdd6e1522f69762febc02703a1ba6ddcb
TLSH
T1FFD0978F6E0001CB22319EEC3864726D922F8B889CC0CCAC6294800222B4903C022E38
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 76320682c5a56e001ece509eb45716f96a9daf285d8d60f0b6781ea9d6689fdc
MD5 b98be5ea5faaba98cb8bd25698b30b58
SHA1 324dcc1199c903ee20a81ff09e8060b2d4164d5a
SHA512 49ddb42a96a8da334d1ea3ef14296306008f60b9a2f4fefeefc0363b9c64b2599e86fbc809a7d79c175ef1f47a9a054efa5ba841d71e6ae34c10ece652712dcc
TLSH
T18ED0A7A2553046CF23319A853835965E44278F54C884DCA85848B09221B4A03C511631
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 6c969f448286322e4be364d76fece00d8ed2e9f2310f5620b3640fac854d9dc4
MD5 35d32bb8c0efa72520af0d0d2453df7e
SHA1 bab48425fc7647679a4e75438a97a6b2846841c9
SHA512 76ab9a9b4bc7257bd0d33708677db1d39dc4c34ff6008663ca234c4ce4b1d01bc6cfcda0ccab2ec7c44c3d51583f8d01fff6d6f043ce4e304b7ceb07905ed8e0
TLSH
T1FFC09BE3191046D71771EFC83475775ED52F8388C8C4DCE5944C54432274A538412A35
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe587c11.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe587c11.TMP
Size 137B
SHA256 e2a6c257f0aa950783e26c74a6fc90c67b2daa9c044dabccaf6e02e0a28fd463
MD5 1b6e46ae863edc5a64709225d74efe5d
SHA1 786bae2b9054a0bbb0ecdd964a20bcb163a1344c
SHA512 faab3f3618c83fc1a88357108a45f9899fe2413406ad1570b5edb9cd9afe1a4f781e706320fdc44d7c35886dc44679f709a934eea6b05e0cf36df69144515163
TLSH
T1C2C09BE3155046971771AEC56075A75ED53F8F89CCC4CCE4904974423034A53C441E75
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 168B
SHA256 03997db5542973caafd26c00877a6e26c4781fd7e734a7b1a400c35f38f79343
MD5 1deb557fcdb2683137b797db3df6e089
SHA1 e7bd97cc6d5f547e2f31fe3a1e2ed8fb9ce63f5c
SHA512 f08106935747ca6b85da2d4cbc5422b0f5d9b971fd9b543ac3d18aa8528567a4c887704cce09fbcc3624c8ad2d42cfbff8851eceec71e187f2ebdcd3162effc1
TLSH
T17FC09B50C881E151C11607F4195225CD72B6AED59E0A1B0146F47D6F6C6B1B192545D1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58da9c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58da9c.TMP
Size 96B
SHA256 e51981eaf1a7eeb7c035d4c87001d71ea8b9cf08627affabdf4fb50f1c5f6345
MD5 a0d1b69e76444d65dffa4cda378c8030
SHA1 7ef4efaddc8f2400a118b47a1240c2500559fd0e
SHA512 ec563efc71d8089a3af35886d8ee64db65526a8d0e302acccf16f23262a0bc9a37280ce136f573ce11f2c88cd8784dec7d9f79a5729ae39e075cb3e1ed475c7d
TLSH
T1ECB00299D1076356C0421FB83995A5D87564DF26C617222393E01AA7DC25E714A291A1
MD5 SHA1 SHA512 TLSH

Submit Download

abdd98b6ce098a1c_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\abdd98b6ce098a1c_0
Size 63KB
SHA256 d3dc003204a48a87bf4022a906e7968f1a87b35631f3aaa86b3359bf96a4e449
MD5 21874d445843d94840590f1fa5aef1d3
SHA1 50b9a92c508fca06a74c2726e8b96433b630a663
SHA512 1e75d65dc1d3c1a02063af3bc58010e6acf59de3cbd193b3b63a6d87c49c8c9169c59dcb34e90c1d7ea5abf795cf337b1e6b8b5c2259ccc71752f66e73a902d7
SSDEEP 768:YeJDcwZ9olHJrD05l7eEFfgoAxWhrJTV9/5oZ+UyA2xGu/5374WAiEAXnR8c6BVy:YDJ0VPVR5yyJxGSV4V1C6c0VVEO
TLSH
T1EA535CA633707477827BA1F1905F130B713AE167F40494E8B194EEE54A44BAA42B7F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 120B
SHA256 216f5fdfc08c764e2525d6b901cc8144f616990b792d0139c333a94fbf21df55
MD5 909a9ce5d44c6ce4d49c20fb720b57c7
SHA1 1907bb7068fa2888c8265bb02b1226d34c5f232c
SHA512 2ed0bc865e48703109ad2ceb72b820c91c23f6706abb85a7cc64c7c420e160c9226138a4a55a5876fac7d884d23ade9a5045c05df5609bb938452b293be6dc83
TLSH
T13DB012748C40C225C56C85F906D4458153081CF6130367074CC4058368150804177411
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 ba343502d565147af6c47404233ea25863998a03f0d380ddc0bafde3f2c12be0
MD5 45f2200e7e5b073076a42381b887546b
SHA1 a6d017ad1e9b35ebc0227e10b1b530389c1496e7
SHA512 d56ea3b8deb3227bf3bc8c3f074c731392e94a4d18cf1fa8e06b6720bb5d48bf9b39de79363ddbf8fe56b86845c0cc4303c22c092e0f61edbf089f5a472db259
TLSH
T130A00274B582859ED10243763585C65067507C155613474965F4198F9850150555A848
MD5 SHA1 SHA512 TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir768_1323930263\Shortcuts Menu Icons\Monochrome\0\512.png
Size 4KB
SHA256 d345d2dbe2efd56ff9494cb31cae0e28cde5bdf176a22bca9aee27465b117c88
MD5 97193e4d969021cb6e6ad1b25bb7499a
SHA1 69cb3acd8bc0b31b63791efc9dc47d5657bbf40b
SHA512 1df06713846ea152089ea40434f3fcff250ba2d2c0b5afcbc546b82a65b68f3ad1cf503dbc4e8246765c01f191b4f8389c4c55efb7da507f443d858a8dfd704b
SSDEEP 96:TTcYKfambSQTNpzzBOWUjfRVS/TFm9BfyKhnaBS8ZP9jeLWfbOGp:SbSQTNh9gD+mLfB49ZILWfCW
TLSH
T1B0A1968E8CB5488E66658747D48538A2C5B030A7A7BFC3BE719D174851E32C6FF29B06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir768_1323930263\Shortcuts Menu Icons\Monochrome\1\512.png
Size 7KB
SHA256 1e0b1b2e4dac49da1e2ce91a72e01f77fdb3bbb26ed3422e5d4037745cc307a4
MD5 cc525d60c0dc9696ddfe9524dc9abe82
SHA1 fc94cbd2a45bf2ff0fbe411f57a7cafa31126bfd
SHA512 09ab42f7dc3d6a08b9635ef229539a5c4c240506378a9de4eccf1f69d52b266222cdf084e9a567c6d21f19e61c4da7ccd98928870d6f10cd74e9158c64a4142e
SSDEEP 192:U3/tgbWgm8Xl2X+xqWwB3kUXPmv9rCywxAQU:2/rgXXExWKdXPa+txrU
TLSH
T159F1AF6F639B59EA3AF8493D4BD7A21FD62E108A2F275B71C5101045628A1C1FC69F0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir768_1323930263\Shortcuts Menu Icons\Monochrome\2\512.png
Size 9KB
SHA256 ad08077126e7106674e4219f5f9cfac2305e8b3f627247c1d3e72136399e6fd2
MD5 660ae59d489be5b5e1e9036b88b4a033
SHA1 b1ebdb9421bf14b5c43a399b4dbd92288d91a604
SHA512 3bf52f4d1e92ececb7691bedf1f53dea75041615447eac2c1ec9f99d07417a571e08fbd2db58896506350e8af831e8fc943d35e35747a8cb6db9a03d880331f9
SSDEEP 192:uJTyU9sUZdxl59pfNK8EliT9Tjx/t0xM6LwZx4nwBmJH/Rr6O:g9sUxXM8iiJKMfcTJIO
TLSH
T1F022BE9744E4E7A3427CAEBF4684D914DF4E1B7384366E10020B199F0D7AA8268E8B93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

16.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir768_1359643894\Icons Monochrome\16.png
Size 257B
SHA256 d52376c8b210b8003f5aed9f4555a7916b4640d4c42a36cc81d9864991c87a8b
MD5 6cc922565abd761f4039c816d86018c4
SHA1 05393c91529467f8ddec22a121fe482701365d6f
SHA512 8732f24ea85ab3fa845b3cfa2a354a85cab63a507947fb61bd8119c623e31c87d6f0735ce7f06119db597ec4fce4ad44c15046859b574cb11fb1306e489cf995
TLSH
T1ADD095F2E311DD34C52E96900533C473F433171B1DD56055664491DA4D9E90533C8D59
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 4c8f45a9bceb5ab05446e4d9c8cd7a59aa3efd3dc35dc82d1d1b76d2957e4301
MD5 1c5dc69b3fd8f37fa9737367382c5ea9
SHA1 00e312e0c7be8ab278b12410408750ae921b1772
SHA512 df2d07aba408d37f18402ac328eeca28d0a699b0c9b96a9f0782b8ce40758b4e2898bc8bfcc0d1176d2f20cc4475e728ec75fc928977fb73de90fb7a5401f52f
SSDEEP 6144:GyY2WL7LAd0ZqyPvNm7Rkm1tYpBeh2BAoW:Gd2WU0I9oBGcAoW
TLSH
T1AB3423139DB5A83A007AEF1A748D0B4F0EF14961CD6CDFE6D9D02F4472EA6883E49535
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 e64b7d33344f94f1545f37bce8a693b598951eb2c678eb3b1bfed766379391cb
MD5 19ad04c8a3e584d15897216d589797aa
SHA1 5d315effd6f435536f55e5ed8af14d10af7a9d57
SHA512 608dc9b7f4f2665139a1d1046dede9389c3b3e18187c215370ad34dc304ea326e7f74e1ceb9f5cebec017d221d1431e2fa8fb6d4db591bf2bce994f899f03e72
SSDEEP 6144:/yY2WL7LAd0ZqyPvNm7Rkm1tYpBeh2BAoW:/d2WU0I9oBGcAoW
TLSH
T1313423139DB5A83A007AEF1A748D0B4F0EF14961CD6CDFE6D9D02F4472EA6883E49535
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 e98434c31e87b74cab63fcf7d20b7b8e1ff40c0a6e78dce653b271c34c770c6a
MD5 46190205ee9c5dc9d1acaa25ebdcb4de
SHA1 6d20c8ecbbaf0d2e351235f8c0298a8339bc2254
SHA512 92d296d92c1d46ff3f12c74b0e808e037d51058be11118fc2685ce7c6e7fbf79b6bb46a51eccbb2309a322cb62a98f2b6a866b1e4cb5e886dbf1c1c8aab3d4ae
SSDEEP 6144:/NVY2WL7LAd0ZqyPvNm7Rkm1tYpBeh2BAoW:/w2WU0I9oBGcAoW
TLSH
T1E5341233ADA5683A047AEF1E704D1A1E0EF14A62CD6CDFD9E9D02F4472EE5882D49534
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 219f58725a12cbe1dbfe40dd6fa2f7c5c1bdde2790ee55627a049d81f16407b4
MD5 fbfa18b3fa2c2ae07da56aa420b05a3f
SHA1 4ab3b5d93675cf039c924ffd39627a5026b85c86
SHA512 b78334a674c59085cc0a1ec5faa29dc77c5b00c73925f8310b38f0d73728cca3d2097c231147a12a05a72dd7b200d1059166389d4c046c924c334005b93eb6d4
SSDEEP 6144:/3VY2WL7LAd0ZqyPvNm7Rkm1tYpBeh2BAoW:/22WU0I9oBGcAoW
TLSH
T145342233ADA4683A047AEF1E744D1A1E0EF14A62CD6CCFD9E9D03F4472EE5882D49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 0688b0b988742b1bd7c246e7abaea346e68388ba54730c78eddd9d89d6bb248c
MD5 0ca388469edc35ed67ca641cb9407cb9
SHA1 ed64fdc383132464aa27c36356c182c1d289181b
SHA512 63b493ef1e2d04e31bfee6eb120ced97faaf32b5799d7933348776a5b86b764df5decaa80f4208eb9d872a1184735f826853864bb1b06b78e7f18886d8c8512c
SSDEEP 3:MsEllllkEthXllkl2zE/l:/M/xT02z
TLSH
T16A4404047FC00417C50155314151D3545370F5110713574737510C737DC57C00C00040
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ac55b5ce-7290-4e0b-b2b8-c958dc4a39d4.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ac55b5ce-7290-4e0b-b2b8-c958dc4a39d4.tmp
Size 115KB
SHA256 fc627ec9963752b93c23edaafe84c942a0e2c12a53d087ab31b5931115a8089c
MD5 5fb20c8c1ce3d313979d58f829e5d8b7
SHA1 86ca2d7a83d347ffd539e970c2f4e24b0144ba33
SHA512 363284b705040a3be0aa8aa63092661d443b714976a5f5b5337ad880d841773313a46b5878de24cc050d6b15fceeaa9dd79901b0d270dfcdb73705d71b2f5087
SSDEEP 3072:/xGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:/gm7Rkm1tYpBeh2BAoM
TLSH
T189C312275E75E9375878BB0EB08E0B1F1EF14AA6D930DE92C8D86B0467F97CC1A05934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4212-12-0x000001D68B170000-0x000001D68B3E0000-memory.dmp

Download

memory/4212-11-0x000001D68B150000-0x000001D68B151000-memory.dmp

Download

memory/4212-2-0x000001D68B170000-0x000001D68B3E0000-memory.dmp

Download