2a208c5668b12b99d1d1e50572cf24770bcf2b2c2a849aff7e16ad42fdbd8b93

Analysis

max time kernel
149s
max time network
163s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/07/2026, 09:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Supermium/Supermium (Classic Portable).cmd
Size 248B
Sample260701-lzqjcaa16m
SHA256 2a208c5668b12b99d1d1e50572cf24770bcf2b2c2a849aff7e16ad42fdbd8b93
MD5 b4d752e2506773ebb291f6ba4e296e1d
SHA1 0f0459bd3e98f77b6f5ae5cbe3f4534ee645e743
SHA512 4070352a4b67be5a93f1ed8aae55f4228fc0036532bd3a9e3a64882c4f0a1a969cd22c85b0a771d92de0aed4ac1b378d4bff2e4200d5ac8ccbf154701803c2d5
TLSH
T1E2D0974EB140BC2C380FE4323C2AADDB6F317E86930C1A2122241DA84FEB0A0421FDD2
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1056	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134273739063676926"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3956	chrome.exe
3956	chrome.exe
3956	chrome.exe
3956	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe
Token: SeShutdownPrivilege	3956	chrome.exe
Token: SeCreatePagefilePrivilege	3956	chrome.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3956	chrome.exe

Suspicious use of WriteProcessMemory 43 IoCs

description	pid	Process	procid_target
PID 388 wrote to memory of 3956	388	cmd.exe	86
PID 3956 wrote to memory of 4936	3956	chrome.exe	87
PID 4936 wrote to memory of 2472	4936	chrome.exe	88
PID 3956 wrote to memory of 4312	3956	chrome.exe	90
PID 3956 wrote to memory of 4312	3956	chrome.exe	90
PID 3956 wrote to memory of 1056	3956	chrome.exe	91
PID 3956 wrote to memory of 4956	3956	chrome.exe	92
PID 3956 wrote to memory of 4956	3956	chrome.exe	92
PID 3956 wrote to memory of 4880	3956	chrome.exe	93
PID 3956 wrote to memory of 4900	3956	chrome.exe	94
PID 3956 wrote to memory of 4880	3956	chrome.exe	93
PID 3956 wrote to memory of 4900	3956	chrome.exe	94
PID 3956 wrote to memory of 2972	3956	chrome.exe	97
PID 3956 wrote to memory of 2404	3956	chrome.exe	104
PID 3956 wrote to memory of 1444	3956	chrome.exe	105
PID 3956 wrote to memory of 4084	3956	chrome.exe	106
PID 3956 wrote to memory of 4084	3956	chrome.exe	106
PID 3956 wrote to memory of 4992	3956	chrome.exe	107
PID 3956 wrote to memory of 4992	3956	chrome.exe	107
PID 3956 wrote to memory of 2320	3956	chrome.exe	108
PID 3956 wrote to memory of 868	3956	chrome.exe	109
PID 3956 wrote to memory of 868	3956	chrome.exe	109
PID 3956 wrote to memory of 3704	3956	chrome.exe	110
PID 3956 wrote to memory of 1888	3956	chrome.exe	111
PID 3956 wrote to memory of 1888	3956	chrome.exe	111
PID 3956 wrote to memory of 3824	3956	chrome.exe	112
PID 3956 wrote to memory of 892	3956	chrome.exe	113
PID 3956 wrote to memory of 892	3956	chrome.exe	113
PID 3956 wrote to memory of 2316	3956	chrome.exe	114
PID 3956 wrote to memory of 2284	3956	chrome.exe	115
PID 3956 wrote to memory of 2284	3956	chrome.exe	115
PID 3956 wrote to memory of 3168	3956	chrome.exe	116
PID 3956 wrote to memory of 1936	3956	chrome.exe	117
PID 3956 wrote to memory of 4488	3956	chrome.exe	118
PID 3956 wrote to memory of 4488	3956	chrome.exe	118
PID 3956 wrote to memory of 2428	3956	chrome.exe	119
PID 3956 wrote to memory of 3544	3956	chrome.exe	120
PID 3956 wrote to memory of 3544	3956	chrome.exe	120
PID 3956 wrote to memory of 5012	3956	chrome.exe	121
PID 3956 wrote to memory of 3892	3956	chrome.exe	122
PID 3956 wrote to memory of 2848	3956	chrome.exe	123
PID 3956 wrote to memory of 3892	3956	chrome.exe	122
PID 3956 wrote to memory of 2848	3956	chrome.exe	123

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Supermium\Supermium (Classic Portable).cmd"
1⤵
- Suspicious use of WriteProcessMemory
PID:388
- C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
  chrome.exe --disable-encryption --disable-machine-id --user-data-dir=portable_data --classic-omnibox --classic-omnibox-border --compact-ui --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,TabHoverCards,PowerBookmarksSidePanel
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:3956
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data /prefetch:4 --monitor-self --monitor-self-argument=--type=crashpad-handler --monitor-self-argument=--user-data-dir=C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data --monitor-self-argument=/prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Crashpad --annotation=plat=Win64 --annotation=prod=Supermium --annotation=ver=144.0.7559.252 --initial-client-data=0x160,0x164,0x168,0x13c,0x16c,0x7ffec2ecea38,0x7ffec2ecea48,0x7ffec2ecea58
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:4936
  - - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
      C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data /prefetch:4 --no-periodic-tasks --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Crashpad --annotation=plat=Win64 --annotation=prod=Supermium --annotation=ver=144.0.7559.252 --initial-client-data=0x15c,0x158,0x150,0x1b4,0x138,0x7ff67d3b45a0,0x7ff67d3b45b0,0x7ff67d3b45c0
      4⤵
      PID:2472
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=gpu-process --user-data-dir=portable_data --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1584,i,18352204135762935959,14623100984106326862,262144 --field-trial-handle=1928,i,5427372254177655652,1518320494699273350,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1924 /prefetch:2
    3⤵
    PID:4312
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir=portable_data --force-high-res-timeticks=disabled --start-stack-profiler --metrics-shmem-handle=2164,i,14364541374982959094,2368286727959539535,524288 --field-trial-handle=1928,i,5427372254177655652,1518320494699273350,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2156 /prefetch:3
    3⤵
    - System Time Discovery
    PID:1056
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=2256,i,5813387484679141293,4581285535956381693,524288 --field-trial-handle=1928,i,5427372254177655652,1518320494699273350,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2212 /prefetch:8
    3⤵
    PID:4956
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=renderer --user-data-dir=portable_data --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=2888,i,5560691439861995048,1062814720156197725,2097152 --field-trial-handle=1928,i,5427372254177655652,1518320494699273350,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=2912 /prefetch:1
    3⤵
    PID:4880
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=renderer --user-data-dir=portable_data --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=2896,i,2097494536316957710,6147129525088375688,2097152 --field-trial-handle=1928,i,5427372254177655652,1518320494699273350,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=2932 /prefetch:1
    3⤵
    PID:4900
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=4852,i,1821429958930095760,16715589108005918746,524288 --field-trial-handle=1928,i,5427372254177655652,1518320494699273350,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4856 /prefetch:8
    3⤵
    PID:2972
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5156,i,4244200842348897526,13453982621581205650,524288 --field-trial-handle=1928,i,5427372254177655652,1518320494699273350,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=5140 /prefetch:8
    3⤵
    PID:2404
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5292,i,11255392352629628362,346884543069323536,524288 --field-trial-handle=1928,i,5427372254177655652,1518320494699273350,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=5284 /prefetch:8
    3⤵
    PID:1444
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5352,i,16736920525120266916,15320503443870619928,524288 --field-trial-handle=1928,i,5427372254177655652,1518320494699273350,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=5364 /prefetch:8
    3⤵
    PID:4084
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5292,i,2780648904585624335,1115610125163271952,524288 --field-trial-handle=1928,i,5427372254177655652,1518320494699273350,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5304 /prefetch:8
    3⤵
    PID:4992
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5600,i,14204497057322892824,23500790869083893,524288 --field-trial-handle=1928,i,5427372254177655652,1518320494699273350,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5604 /prefetch:8
    3⤵
    PID:2320
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5652,i,1685549222051056279,16393029131327500158,524288 --field-trial-handle=1928,i,5427372254177655652,1518320494699273350,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5656 /prefetch:8
    3⤵
    PID:868
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5368,i,13837069013644136439,11924374641167578362,524288 --field-trial-handle=1928,i,5427372254177655652,1518320494699273350,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=5648 /prefetch:8
    3⤵
    PID:3704
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5780,i,14843124522838460027,10353607433969375068,524288 --field-trial-handle=1928,i,5427372254177655652,1518320494699273350,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5352 /prefetch:8
    3⤵
    PID:1888
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5640,i,16704264882097109039,12807462441975394325,524288 --field-trial-handle=1928,i,5427372254177655652,1518320494699273350,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5368 /prefetch:8
    3⤵
    PID:3824
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5332,i,14914287416758358847,3771336387250230914,524288 --field-trial-handle=1928,i,5427372254177655652,1518320494699273350,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5508 /prefetch:8
    3⤵
    PID:892
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5372,i,7308236812523393907,13028232663674670703,524288 --field-trial-handle=1928,i,5427372254177655652,1518320494699273350,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5780 /prefetch:8
    3⤵
    PID:2316
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5932,i,10028561339466573251,10707430003814353996,524288 --field-trial-handle=1928,i,5427372254177655652,1518320494699273350,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5788 /prefetch:8
    3⤵
    PID:2284
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5848,i,6134736400298568204,8237379341730409706,524288 --field-trial-handle=1928,i,5427372254177655652,1518320494699273350,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6044 /prefetch:8
    3⤵
    PID:3168
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5372,i,11715592090061028609,8058315036989566337,524288 --field-trial-handle=1928,i,5427372254177655652,1518320494699273350,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=5788 /prefetch:8
    3⤵
    PID:1936
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5656,i,11228300285114550757,15590655122277186841,524288 --field-trial-handle=1928,i,5427372254177655652,1518320494699273350,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=5784 /prefetch:8
    3⤵
    PID:4488
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=6160,i,9856377300609941189,10728440462185413469,524288 --field-trial-handle=1928,i,5427372254177655652,1518320494699273350,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6164 /prefetch:8
    3⤵
    PID:2428
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=6200,i,3954677914052107140,18185497495992164989,524288 --field-trial-handle=1928,i,5427372254177655652,1518320494699273350,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6212 /prefetch:8
    3⤵
    PID:3544
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=6376,i,15899536181329716025,4826072874876986088,524288 --field-trial-handle=1928,i,5427372254177655652,1518320494699273350,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6368 /prefetch:8
    3⤵
    PID:5012
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=6060,i,6714842938042499884,14713786783211572934,524288 --field-trial-handle=1928,i,5427372254177655652,1518320494699273350,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=6440 /prefetch:8
    3⤵
    PID:3892
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=6428,i,304688342958909998,10199095633588464423,524288 --field-trial-handle=1928,i,5427372254177655652,1518320494699273350,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=6460 /prefetch:8
    3⤵
    PID:2848

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

en-GB-10-1.bdic

Path C:\Users\Admin\AppData\Local\Temp\Supermium\Dictionaries\en-GB-10-1.bdic
Size 441KB
SHA256 eaed4a709abdbd2f14aa143f25fe9c4c1b44591c7cb1942f75f968fb2fcd3cf8
MD5 4bdce0578fab9c394414bcf856fed6c4
SHA1 f1440e154ef7c6bc61e8e59609670db184bf1c92
SHA512 16753dbffedc8e9f7ea9cbe94e466546d58184f03b610b67ac6bd4f30df925182be66e76f72906e0f19b4c01df4b20cb01c675c0fd74566abd68091cd7d478d3
SSDEEP 6144:snhwcsW5kKGjc5gDNZMonnD+GChecT5iorashvnEESij0EPou2ZU+:ChNsVKEc5gZZMc+GChea9hvEej0IoRU+
TLSH
T13DA4A5CAC369DAE3D409CA3C341616511A3FAD9ABF0AD1F40CD4763637593F88D2E25A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7b26edb0-6e41-4c41-a6d4-657bc704b894.tmp

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\7b26edb0-6e41-4c41-a6d4-657bc704b894.tmp
Size 10KB
SHA256 652c1ff948ba10052d7b3b44ccb892c975ed032c8f56d133024abf1a228ce4d7
MD5 96b3cc494ec0bb4aca5ebd4cc8cd766c
SHA1 a6ecc186b621b19c2abd036989955cbc84f990c4
SHA512 57167f26e8cc8d3258fa43f7d3420284b7d1e2d93ede4ce872ceab4ab0bf0b754ef70789ded74eff3a130799ec9d63dca3fe5868f92991950a3b42c983a23e3d
SSDEEP 192:zRVQw+L6YFVLSqMd8f8gBezgDwM7dQl9/pv7Kcu9VtHsb+WNmqZXsqL76yIsnDUE:zRf845k5wxpl
TLSH
T1D422642EAD106A7B6CC7D229FB66BB93D3F1203535902E48D6F88A2C17D79DC1217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

05eebc7f-24da-4889-800e-a7f5d1ea9799

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Download Service\Files\05eebc7f-24da-4889-800e-a7f5d1ea9799
Size 2.9MB
SHA256 dd9ce6b3ae599ee1a027bbd1e53c071cda2f136ee144a7a8597f20e53405a29e
MD5 908bd695bee0ab27a83dd85e354d7b52
SHA1 cefa0550799dc33f0eecb9d6b6f522eaf6413245
SHA512 c13e4864d7b284b1c125c8d5901b16d53582cce1d51037600eb7206cfe8e4ec62d7d936beed1a536713703757b725545435f846d4353d8e2ac0d3b4091ba6065
SSDEEP 49152:NhAVYf3xssIVMJmS+/tJo1zv04WKEmTMmEkqRjViS8Nypc1c7EaKGjGf1tn6aHxi:WyGsIVMJ1gAcKXTMmUBcS8NypcW0fffK
TLSH
T1F7D533DA3E3922F0B25CF2D7598BEC2112B993555C2F3504573BFA7304196E628E2CA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

13102f1d-7e7f-476c-8e4c-ddb7b063c1ae

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Download Service\Files\13102f1d-7e7f-476c-8e4c-ddb7b063c1ae
Size 32.1MB
SHA256 89446c5a6bbf2205361df880c77df04e7a9a5460114cfd956991f23dfefcd175
MD5 b9cf8defd561535a44fe17fd3388d7ff
SHA1 882c9f733eaca7258992489185f412f1a9047366
SHA512 5e3701b61955d5358efebf36508aadb9cd484f202b10568eb967bedbcd250fccb707d14479b56925bfd52375fc3e34529ab080df70c594fed929ae5ff06e5d43
SSDEEP 786432:UyxMYF9lcVdl9bCEwimnBFZMvI0A0GDBUcc0c:Uyx9FLWZCymn/ZMvBoD6T0c
TLSH
T1F877338D2E50D78D4F573A001A28B1A7E164F10DEE2A7B84702225AE9F7DDE46C76D3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

249c72c7-c124-4a34-bcf2-a5e08a3c1d6c

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Download Service\Files\249c72c7-c124-4a34-bcf2-a5e08a3c1d6c
Size 18KB
SHA256 97ba2f1725c7180957dccfe821fb47e04c9d246c84e4f4f8cff80dcfee3b07b6
MD5 2382c449962b608feeaf7789e0fb6200
SHA1 6d35fcf0aa21c0dd8e7594c9114b8de2510950d8
SHA512 e9571bce8ab55e80dfb898f0774d5f85ba4471054dc416308d8d80fe23bf81e376ca5c99402b425fdbcf3bfc1f611728c49ed9f5b36af2aaf4179ce07d16b88f
SSDEEP 384:eXfvqPXzfCATGFHqvjdCDYRIOB1e6cghrt3m+gst:evvqrfmFqLEYRIOBM6cgL2fI
TLSH
T1A982D0073D5BD227D09215E42D684934CE7E0DB8AF46922B76A460D3D57C6B80EB9CCE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d33cd37d-0769-4ba6-b2bd-fa41cbb0b961

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Download Service\Files\d33cd37d-0769-4ba6-b2bd-fa41cbb0b961
Size 4KB
SHA256 cfee341cf97ad8147f9632d4ff1a8c4b22d7045c0c6b64cac9945c415a035751
MD5 624fad4ca58b3d7813dc754c1902b79b
SHA1 08904ee53bbfe8fab917b98441d144f77932a25e
SHA512 3724665097d8c123fba4a99b2e6055da8640f264d50b7f4da7df51e8f3e2ebe3771f3180aa9a7eefdd08ae484b8bbfa894e7b7d20cc05a7bddd1001b3bed9c86
SSDEEP 96:m3Rj9mJ51AO+mgvLQLOdpfi5NiLu2gYxB4+7G8qP:c4AO+XvJnu6ux94G8qP
TLSH
T1AAA15D8D4DFBB8E2E31283F476E25B629360C24CC1C12597602859DF2A3B6B127D5983
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d977cf6c-5adb-4282-84cc-026025639ea8

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Download Service\Files\d977cf6c-5adb-4282-84cc-026025639ea8
Size 18KB
SHA256 b6dea0e56ec1cc735d8369cb8ca7dd61698415a9f80eb177218892597d06e18b
MD5 55c17b6a8e1180f1979c7007bc696f25
SHA1 f8b8acb1fd08da73156c23f6c7e072b7add68caa
SHA512 9a9b26bf4769fe234b4c6fdb651e27a871c8268847761e90e0329ee99deb629d4d7d8520bf39fbc188e24eb2b0ca0e215ea2aecbcdb26c9ced605390a6016b1e
SSDEEP 384:3WCbdAybDcNvPdLkfYccqK9JKcljLYPB8U+mV/yEeiGCtBDz:3WCbaADEvJAKHLYVqEeiNtBn
TLSH
T18382D1A500336A57CF04CDFD9393E3EAA9D404282080372FAE797D97B129B6C5974D5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f27be600-9c29-41b4-a382-d2c877f244e7

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Download Service\Files\f27be600-9c29-41b4-a382-d2c877f244e7
Size 2.6MB
SHA256 37da69b3f3be524b0af3c483b2d606b3b99eaeee1e9d80f331d3d65512d6ae3e
MD5 b34e96e57b4152e3b426abcfb71639e7
SHA1 8a46024732d966e729003f29522f858a0d3c00d2
SHA512 d610d80439028915a1c8785c004234c1d02c9fd40d72ae7f2b4d5a2d90b245ac8c93e8de104b8633d744576a52dd9d2c2717c9ec785c90626e92b438a330f2f7
SSDEEP 49152:mbhICrfotHFXmy84KRLjte+AsypG8h44AGvVvxMeiX7vrvhIQv/XhCzYvnFpod78:mVrfotHUymjA+8p9jzvxMeY7Lh/nxAYD
TLSH
T112D5331075B5ECB0B69E5466EB641CE98AB3333996B42E703B20261BF57BF4193B44C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Network\Network Persistent State
Size 2KB
SHA256 39f6bbb47b5b1723aa290a21b0839e1f14688828849a7f8f5f55970f37ab74a9
MD5 80c92081ebb2fc7b36007ac366a25007
SHA1 2bda8af2bdb430e2c49c219d0a285e250fe0b8c8
SHA512 09853234a20d6c8e91430b4150cbd96e8a74c39637e9bdfa5e0daf126f7658412f3efdb7fa95d289bef27249ca87376036a18e58c431afc35698b6a63f7e4421
TLSH
T10A51C0F7C7E8826EC81115F5A7257E1BCE2D0914832C3C6AC8E4AF4B93E1471D259A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe59cfaa.TMP

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Network\Network Persistent State~RFe59cfaa.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Preferences
Size 10KB
SHA256 3c91feee6fabe4d138fd2e2dd467f58e0356c5cc9a0eeba84a99751494bcef55
MD5 355df8f35786d128588374a7effa3a0a
SHA1 12c5ac0615820198f73e8189646ddab7e6b6b818
SHA512 dd90b09ad05b8fe28a55c243fe32c936a879fc7a7c33cedee4037348d47d4df16f4006c8cf36ad87f530cf45bd827b61b88cf90874655cfe38a1e4fbfda2c6f0
SSDEEP 192:zRVQw+L6YFVLSqMd8f8gBezgDwM7dQl9/pv7KH/U/6u9VtHsb+WNmqZjsmL76yI2:zRf845mSp5wx3l
TLSH
T10022642BAD106A7B6CCBD229FB65BF93D3F1203525A02E48D6F88A2C17D79DC1217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Site Characteristics Database\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\GrShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Local State
Size 4KB
SHA256 09151d5a86ac28ca0d3d41d39c7ce8f2b25aa474634e9d6bfbddc7db432b6ecb
MD5 201d0b977b781a52da9db966034317a9
SHA1 d347036c336b9c818661c2e212eb28decf20f5ad
SHA512 6152b59e26f434c30141824f72d0cf7895fdda1a975e1ced368fde51a7fe21bf61d09f6a4deb27d789031f6e183775be23745359283c5b55439340feb6c6ac1c
SSDEEP 96:81bJHFBWa9ZdyhyKLkPu5+Doto7VjhDVrB6hbqYvTQHim+4a:81tHFBWa9Z0hdLCdDUiVVVVEwHiv
TLSH
T161817472B84D9D36A8774092F6902943D3282239E3D7791889FAC60543FFEBC1743A67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Local State
Size 7KB
SHA256 fc18019a5f90e1d3bf8897798b686399e6a658c2f8ae36216d70bca05a369076
MD5 8aea1ef51fa93e3f31fe643924ca3dc5
SHA1 64e13169e3555495daaca5737a8249390aa5f12d
SHA512 bd731871e51f6f5bc6b5fb6f0bad26eb4fb275c3ed3044f3b0d4efe3740b8052aca810111d1a24c40ca47f54f9e81369c34e2465954f43b44b8e8fa1fb6ba9fd
SSDEEP 96:81bJHFBWa9ZdyhyKLkPu5+Doto7VjhDVrB6hbqYvxlPLAZlKCDeF/QHim+4a:81tHFBWa9Z0hdLCdDUiVVVVE3/oHiv
TLSH
T142F1337AFC4A8E26ECFB81919750F986D314536897C699D44CF68D0C42EFDAC260BC1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Local State
Size 2KB
SHA256 1b878311eac7f417c68b977879014af8dcedcf46936829952fd3537874892066
MD5 4981c1c8c0e50d1c69c4175097c7584f
SHA1 9692c6dda53ad4581ddaf7361dfa21e9b8c14425
SHA512 0ebf77b28683fb63c633d2d0cd132d3be9e2a9b4788f5278aa7902bb189eaf329908246559c94eebf71ecabb12e986530e4f6680d68e22b7cc283bdeb97f1a8d
TLSH
T1F34183626868CD7358BBD591B5C67E03C374612AE2606AA8E5ED0A0C03F7AFC1343413
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe58e1df.TMP

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Local State~RFe58e1df.TMP
Size 637B
SHA256 082391576f1c985a61694485638372b8a95ac8175489fd1b7f9f58a3c95a3991
MD5 eb2473b2a09a1acaea690e434e363a32
SHA1 3c6fdd739a5bcf0a0f979871a174237feae08cde
SHA512 e9784c5ae03f2ed30ed7d2bbb09176f53943eabc1008c84742246c8fa963936ea42bfe81a8e11e17a64d0ec812920fccf1d20082dd98359f47b7d32b6dcc9b25
TLSH
T146F002937C901FB0BDC6B6AA62D3DF9303616130C141084C62EE06244377BAC2227C30
MD5 SHA1 SHA512 TLSH

Submit Download

memory/868-202-0x0000015EC6A30000-0x0000015EC6A85000-memory.dmp

Download

memory/892-229-0x0000016BBC4B0000-0x0000016BBC505000-memory.dmp

Download

memory/1888-215-0x0000019D47200000-0x0000019D47255000-memory.dmp

Download

memory/2284-241-0x000001DF3C700000-0x000001DF3C755000-memory.dmp

Download

memory/2848-313-0x000001D281A70000-0x000001D281AC5000-memory.dmp

Download

memory/3544-308-0x00000216622C0000-0x0000021662315000-memory.dmp

Download

memory/3892-307-0x000002291E460000-0x000002291E4B5000-memory.dmp

Download

memory/4084-201-0x0000016567C40000-0x0000016567C95000-memory.dmp

Download

memory/4488-286-0x000001D3C14C0000-0x000001D3C1515000-memory.dmp

Download

memory/4880-162-0x000001BFB0090000-0x000001BFB00E5000-memory.dmp

Download

memory/4900-163-0x0000022069AE0000-0x0000022069B35000-memory.dmp

Download

memory/4956-21-0x00007FFED0DB0000-0x00007FFED0DB1000-memory.dmp

Download

memory/4956-161-0x000001872B1B0000-0x000001872B205000-memory.dmp

Download

memory/4956-20-0x00007FFED0D50000-0x00007FFED0D51000-memory.dmp

Download

memory/4992-287-0x000001A2B9880000-0x000001A2B98D5000-memory.dmp

Download