4fca692a36f0c99e26b5bc7ef9db5269d2c1e21288184953898130fea9b1c4fc

Analysis

user interaction
yes
max time kernel
1049s
max time network
1045s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
03/07/2026, 14:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
$PLUGINSDIR/LangDLL.dll
Size 16KB
Sample260703-ryw8dsgt2m
SHA256 4fca692a36f0c99e26b5bc7ef9db5269d2c1e21288184953898130fea9b1c4fc
MD5 46ba3881f8b27f54a8d92d600e61ee7b
SHA1 15933b6ece85a6d45fd78ae499b445a3bc6d2d05
SHA512 6f64d3cb4634ed51710f578667b92a429aa871a0a141092df3cf7e0134a0b145f802f91126f1ce43ddb4b9d6cc6fb875c9acec22eab0cec86a72dd916e1f9eb3
SSDEEP 384:kTrZBV86AQINyQH38E9VF6IYinAM+oZtfpMVK:kXZL86A1MEpYinAMxZ5aK
TLSH
T12E725BB286805C15CE4B8D3274D5A537AA727B926BC0C1D7136AC1518B907C37FFC2EA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Drops desktop.ini file(s) 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Videos\Captures\desktop.ini	svchost.exe

Drops file in Windows directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1976	5136	WerFault.exe	80

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5232	chrome.exe
5272	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	YandereSimulator.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	YandereSimulator.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	YandereSimulator.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	YandereSimulator.exe

Checks processor information in registry 2 TTPs 6 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe
Key opened	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000\HARDWARE\DESCRIPTION\System\CentralProcessor\0	YandereSimulator.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	YandereSimulator.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	YandereSimulator.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	YandereSimulator.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134275630849715336"	chrome.exe

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2043432456-1617298091-2772621413-1000\{A4367A22-FD02-4354-AE33-2847D5D679AF}	svchost.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\YandereSimulator.zip:Zone.Identifier	chrome.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
5252	chrome.exe
5252	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5516	chrome.exe
5516	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 32 IoCs

pid	Process
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe
Token: SeShutdownPrivilege	5252	chrome.exe
Token: SeCreatePagefilePrivilege	5252	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe

Suspicious use of SendNotifyMessage 48 IoCs

pid	Process
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5252	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe
5528	chrome.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
840	YandereSimulator.exe
4528	OpenWith.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2144 wrote to memory of 5136	2144	rundll32.exe	80
PID 5252 wrote to memory of 5228	5252	chrome.exe	85
PID 5252 wrote to memory of 688	5252	chrome.exe	86
PID 5252 wrote to memory of 688	5252	chrome.exe	86
PID 5252 wrote to memory of 5232	5252	chrome.exe	87
PID 5252 wrote to memory of 3848	5252	chrome.exe	88
PID 5252 wrote to memory of 3848	5252	chrome.exe	88
PID 5252 wrote to memory of 2700	5252	chrome.exe	89
PID 5252 wrote to memory of 4980	5252	chrome.exe	90
PID 5252 wrote to memory of 2700	5252	chrome.exe	89
PID 5252 wrote to memory of 4980	5252	chrome.exe	90
PID 5252 wrote to memory of 4212	5252	chrome.exe	91
PID 5252 wrote to memory of 4212	5252	chrome.exe	91
PID 5252 wrote to memory of 1600	5252	chrome.exe	94
PID 5252 wrote to memory of 1600	5252	chrome.exe	94
PID 5252 wrote to memory of 5108	5252	chrome.exe	95
PID 5252 wrote to memory of 5108	5252	chrome.exe	95
PID 5252 wrote to memory of 6068	5252	chrome.exe	96
PID 5252 wrote to memory of 6068	5252	chrome.exe	96
PID 5252 wrote to memory of 2112	5252	chrome.exe	97
PID 5252 wrote to memory of 860	5252	chrome.exe	99
PID 5252 wrote to memory of 860	5252	chrome.exe	99
PID 5252 wrote to memory of 1824	5252	chrome.exe	100
PID 5252 wrote to memory of 1824	5252	chrome.exe	100
PID 5252 wrote to memory of 748	5252	chrome.exe	101
PID 5252 wrote to memory of 748	5252	chrome.exe	101
PID 5252 wrote to memory of 2320	5252	chrome.exe	102
PID 5252 wrote to memory of 2108	5252	chrome.exe	103
PID 5252 wrote to memory of 440	5252	chrome.exe	104
PID 5528 wrote to memory of 6000	5528	chrome.exe	106
PID 5528 wrote to memory of 1712	5528	chrome.exe	107
PID 5528 wrote to memory of 1712	5528	chrome.exe	107
PID 5528 wrote to memory of 5272	5528	chrome.exe	108
PID 5528 wrote to memory of 2608	5528	chrome.exe	109
PID 5528 wrote to memory of 2608	5528	chrome.exe	109
PID 5528 wrote to memory of 4692	5528	chrome.exe	110
PID 5528 wrote to memory of 4692	5528	chrome.exe	110
PID 5528 wrote to memory of 1216	5528	chrome.exe	111
PID 5528 wrote to memory of 1216	5528	chrome.exe	111
PID 5528 wrote to memory of 4820	5528	chrome.exe	113
PID 5528 wrote to memory of 4820	5528	chrome.exe	113
PID 5528 wrote to memory of 2980	5528	chrome.exe	114
PID 5528 wrote to memory of 2980	5528	chrome.exe	114
PID 5528 wrote to memory of 1324	5528	chrome.exe	115
PID 5528 wrote to memory of 1324	5528	chrome.exe	115
PID 5528 wrote to memory of 6100	5528	chrome.exe	116
PID 5528 wrote to memory of 4236	5528	chrome.exe	117
PID 5528 wrote to memory of 4236	5528	chrome.exe	117
PID 5528 wrote to memory of 3136	5528	chrome.exe	118
PID 5528 wrote to memory of 3136	5528	chrome.exe	118
PID 5528 wrote to memory of 2332	5528	chrome.exe	119
PID 5528 wrote to memory of 2332	5528	chrome.exe	119
PID 5528 wrote to memory of 5140	5528	chrome.exe	120
PID 5528 wrote to memory of 5140	5528	chrome.exe	120
PID 5528 wrote to memory of 4104	5528	chrome.exe	121
PID 5528 wrote to memory of 5524	5528	chrome.exe	122
PID 5528 wrote to memory of 3448	5528	chrome.exe	123
PID 5528 wrote to memory of 5020	5528	chrome.exe	124
PID 5528 wrote to memory of 5020	5528	chrome.exe	124
PID 5528 wrote to memory of 5244	5528	chrome.exe	125
PID 5528 wrote to memory of 5244	5528	chrome.exe	125
PID 5528 wrote to memory of 3404	5528	chrome.exe	126
PID 5528 wrote to memory of 3404	5528	chrome.exe	126
PID 5528 wrote to memory of 1736	5528	chrome.exe	127

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\LangDLL.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2144
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\LangDLL.dll,#1
  2⤵
  - System Location Discovery: System Language Discovery
  PID:5136
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 5136 -s 448
    3⤵
    - Program crash
    PID:1976

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5136 -ip 5136
1⤵
PID:2808

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x10c,0x110,0x114,0xe8,0x118,0x7fffac4ac728,0x7fffac4ac734,0x7fffac4ac740
  2⤵
  PID:5228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1664,i,15501010005845076189,2605325013946167119,262144 --field-trial-handle=2008,i,17246109213354329198,12812568944285680801,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2004 /prefetch:2
  2⤵
  PID:688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2296,i,13322466897836137906,2886627222999641711,524288 --field-trial-handle=2008,i,17246109213354329198,12812568944285680801,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2304 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2420,i,18317827006066083883,11396464692846897542,524288 --field-trial-handle=2008,i,17246109213354329198,12812568944285680801,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2432 /prefetch:13
  2⤵
  PID:3848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3216,i,17719114332567727341,14825011857266907737,2097152 --field-trial-handle=2008,i,17246109213354329198,12812568944285680801,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:2700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3240,i,8665758828697998571,1149800407651470705,2097152 --field-trial-handle=2008,i,17246109213354329198,12812568944285680801,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3364 /prefetch:1
  2⤵
  PID:4980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4340,i,1903896362514876159,16438719240490246421,2097152 --field-trial-handle=2008,i,17246109213354329198,12812568944285680801,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4348 /prefetch:9
  2⤵
  PID:4212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4732,i,6747480187759509865,8302900590148721373,2097152 --field-trial-handle=2008,i,17246109213354329198,12812568944285680801,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4736 /prefetch:1
  2⤵
  PID:1600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4324,i,4388625043869139752,11442858147113653443,524288 --field-trial-handle=2008,i,17246109213354329198,12812568944285680801,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4920 /prefetch:14
  2⤵
  PID:5108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5056,i,14691006942407721838,11999868063642602001,524288 --field-trial-handle=2008,i,17246109213354329198,12812568944285680801,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4476 /prefetch:14
  2⤵
  PID:6068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5644,i,8546335332918852508,16665180835453765518,524288 --field-trial-handle=2008,i,17246109213354329198,12812568944285680801,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5636 /prefetch:14
  2⤵
  PID:2112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6056,i,6252299493091771312,11693750296235043450,2097152 --field-trial-handle=2008,i,17246109213354329198,12812568944285680801,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5944 /prefetch:1
  2⤵
  PID:860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3664,i,12816998234037507213,17346269039894112451,2097152 --field-trial-handle=2008,i,17246109213354329198,12812568944285680801,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:1824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3600,i,1654201279657052945,2518924282939065400,2097152 --field-trial-handle=2008,i,17246109213354329198,12812568944285680801,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4708 /prefetch:1
  2⤵
  PID:748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6004,i,11508213022743755156,13263897377239212910,524288 --field-trial-handle=2008,i,17246109213354329198,12812568944285680801,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3572 /prefetch:14
  2⤵
  PID:2320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5896,i,7718398850385297476,15127802203806183773,524288 --field-trial-handle=2008,i,17246109213354329198,12812568944285680801,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5928 /prefetch:14
  2⤵
  PID:2108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5956,i,11691446462946871850,579649796665208949,524288 --field-trial-handle=2008,i,17246109213354329198,12812568944285680801,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6180 /prefetch:14
  2⤵
  PID:440

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:6004

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4544

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffac4ac728,0x7fffac4ac734,0x7fffac4ac740
  2⤵
  PID:6000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1592,i,1501514379176069553,3615279822666168400,262144 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=1840 /prefetch:2
  2⤵
  PID:1712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2216,i,7674194186861445743,3285430837175858906,524288 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=2224 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2372,i,13429745132449828862,411773800304543507,524288 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=2340 /prefetch:13
  2⤵
  PID:2608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3208,i,17440007964488179086,5176701381633527416,2097152 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=3372 /prefetch:1
  2⤵
  PID:4692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3336,i,904620490000779165,13266901760525202849,2097152 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=3420 /prefetch:1
  2⤵
  PID:1216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4556,i,6851952667471298604,16475889140694814491,2097152 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=4552 /prefetch:1
  2⤵
  PID:4820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4724,i,14881020103495892615,15975591463138774567,524288 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=4728 /prefetch:14
  2⤵
  PID:2980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4848,i,6320046662433787972,13857635084458727111,524288 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=4860 /prefetch:14
  2⤵
  PID:1324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5352,i,5815599485874875339,9226567325546979255,524288 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=5332 /prefetch:14
  2⤵
  PID:6100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5572,i,13354598264189036896,11971927416220008356,2097152 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=5412 /prefetch:1
  2⤵
  PID:4236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3672,i,1568401993556583115,1589309919676980787,2097152 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=3924 /prefetch:1
  2⤵
  PID:3136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3480,i,12559450704953458347,3652239415887622371,2097152 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:2332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3536,i,8433763590289365556,9754744321015586301,524288 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=3544 /prefetch:12
  2⤵
  PID:5140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5380,i,13136735381381596570,14535341317557078957,524288 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=5652 /prefetch:14
  2⤵
  PID:4104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5608,i,8321200419797519027,8004088232899683754,524288 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=5352 /prefetch:14
  2⤵
  PID:5524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5668,i,11683347950281957572,16855633737225248217,524288 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=3412 /prefetch:14
  2⤵
  PID:3448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5608,i,1106067322606311926,10937949526194277238,2097152 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=5592 /prefetch:1
  2⤵
  PID:5020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5964,i,18250743162069032083,10844807813627941687,2097152 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=5932 /prefetch:1
  2⤵
  PID:5244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6048,i,5830779246126558752,17000626154402250352,2097152 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=6164 /prefetch:1
  2⤵
  PID:3404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6084,i,15105864483452500166,13568293800213625541,2097152 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=6180 /prefetch:1
  2⤵
  PID:1736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6384,i,7780855032868474019,14485632203427150907,2097152 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=6424 /prefetch:1
  2⤵
  PID:2980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6644,i,16720691384325709038,6042526277557283312,2097152 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=6648 /prefetch:1
  2⤵
  PID:3800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6160,i,2116157780029622774,6481108555457835292,2097152 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=6336 /prefetch:1
  2⤵
  PID:5660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6060,i,13494939137722628424,705309283790820093,2097152 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=6860 /prefetch:1
  2⤵
  PID:3176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6516,i,3137568767935818120,11465198884530663345,2097152 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=6488 /prefetch:1
  2⤵
  PID:3996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=7036,i,4990935730216640405,3441662713502472175,2097152 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=7032 /prefetch:1
  2⤵
  PID:6032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=7112,i,970280031494582122,14832328245453205377,2097152 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=7080 /prefetch:1
  2⤵
  PID:5928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=7232,i,9009873904650028848,8303138697558457208,2097152 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=7292 /prefetch:1
  2⤵
  PID:3920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=6092,i,8996216609184158179,10868013814838435036,2097152 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=6784 /prefetch:1
  2⤵
  PID:5024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=7288,i,17101641243780473046,2009520706518977014,2097152 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=6440 /prefetch:1
  2⤵
  PID:1752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7280,i,14475177065358065542,9687142602918508215,524288 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=7312 /prefetch:14
  2⤵
  PID:5864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=6904,i,12245868870916894898,12417275365599785763,2097152 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=7092 /prefetch:1
  2⤵
  PID:2380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7124,i,6477825483776506139,5554925410617990119,524288 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=7224 /prefetch:14
  2⤵
  PID:4140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=7480,i,527170427981572193,12683556717609643666,262144 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=7468 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=7308,i,15823307511028859579,383165996904420274,2097152 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=7688 /prefetch:1
  2⤵
  PID:5808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=7792,i,1493841279791600979,14783098148550518610,2097152 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=7524 /prefetch:1
  2⤵
  PID:4500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6932,i,14695833375600086416,9638680928274819432,524288 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=6468 /prefetch:14
  2⤵
  PID:4064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=3504,i,18376660246138043359,6875804912212469528,2097152 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=5700 /prefetch:1
  2⤵
  PID:1728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=3640,i,8876076273315040783,15717010713872566592,2097152 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=5684 /prefetch:1
  2⤵
  PID:5600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=7820,i,14829165808810872841,14741537585297888727,524288 --field-trial-handle=1844,i,11097674663324797463,15917648489946063057,262144 --variations-seed-version=20260630-171645.651000-production --mojo-platform-channel-handle=7428 /prefetch:14
  2⤵
  - NTFS ADS
  PID:1308

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:6044

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4220

C:\Users\Admin\Desktop\New folder\YandereSimulator.exe
"C:\Users\Admin\Desktop\New folder\YandereSimulator.exe"
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx
PID:840
- C:\Users\Admin\Desktop\New folder\UnityCrashHandler64.exe
  "C:\Users\Admin\Desktop\New folder\UnityCrashHandler64.exe" --attach 840 2460886241280
  2⤵
  PID:5976

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004EC 0x00000000000004E8
1⤵
PID:4688

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:4528

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Drops desktop.ini file(s)
- Checks processor information in registry
- Modifies registry class
PID:2384

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Path C:\Users\Admin\AppData\LocalLow\YandereDev\YandereSimulator\Unity\f47473a6-42a5-49c9-992e-0e88d5309293\Analytics\ArchivedEvents\178309023700001.a94e9e6b\g
Size 1B
SHA256 d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35
MD5 c81e728d9d4c2f636f067f89cc14862c
SHA1 da4b9237bacccdf19c0760cab7aec4a8359010b0
SHA512 40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114
MD5 SHA1 SHA512

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\CrashpadMetrics-active.pma
Size 1024KB
SHA256 ae1bddb9e2cc97b0c9cd78ef3cd17553be6e5204677bd67e0b8f7fa27007f189
MD5 b0366599d64b0fc1adb2a712dcd02ee1
SHA1 b7a1c09ccd2846664cab5f76bd80b8e9f107acb0
SHA512 d7de6d48285018f8b709c81ca01688126db7893ce9f48829524ee3122aa6f2200c7f78186b5a558d0b1ecf8157ee78a20064b63b45ab89f7aa0835b8409435d0
SSDEEP 12:bHCsEXhVMMBKEKSCemJKlkQyYVhYJ0I+pPK6BsyW1inP6:biPROMMBS+MkIYWIE1BtXP
TLSH
T117252786A30815EFC54288B589AE03602374F9E55F52079B2E2DAA1F2E271D80F45164
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 53fd1950ce0c9b0a2b79e038026268b4b0eabf0d2f55ff12611dfc96d3671681
MD5 4501359eda6e16496457139ec888e5e6
SHA1 3fa1f2e2edba96a0d6fd3e519e4e119c9da80f70
SHA512 0a4cbaf5fe4deeb5e0e0a9346e04e524cd3fb6d4071cf541f6debc594ed86a0df8e0be51877f27ce9a79b1d9e1ccfc14fdfe8cd25f11f16da5c40010963c6b2a
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 2b5297463e0c0d9f32c55fd8bfa51d3a5c4e0825eb9cc1be693a2a7fd1657696
MD5 48fccffc197e6bd9d497b2f0e7a6e624
SHA1 640d57280ef60e765a926ab6cf15afd40527114f
SHA512 7b39cfb3166780262299b8fe2e6221b2ec402db399c88ffdce3d5957d733a6cf4cddc9f64544a3d47d5f01a156cf22d3bcb8b5b4ab5f6fb4dbc1623861e8ddea
TLSH
T1EEE02BAAC931AC271CFD5B9D61904756E78423472F50495F3B3D814CCFB1636468585C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 8f3ccb9ae9c8edb1e6a85d4050b6e8891ffb0065c390db3019f85762231a7592
MD5 c6adde15e7bdedcecca05de6e3c0e16f
SHA1 287d3dba0aaf3196811c6e5633763275cf477a9a
SHA512 d202a08e2f71b41119de55b8ef938110e3706f800b6a814314994f82a9355e44f0f552d14f965879ef2d96fbc3a24552c2ec2c6f47f3dce34b4007c7dff9b44a
SSDEEP 48:LTgW7MH6M+/76hU5MzGMh47ma3kFwLfJ0WG6n/WsnXiKA2nyuMU/vrYXbt:LcW7Md+D6hU5Mc0qzVnFnSEnyuH/Urt
TLSH
T1D113223D7EBEDE7ACACA457D24678F3643B0D240D0DAAA3B11BDBD5911443A0249E109
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 f46fb45dad887758f8d0520a1578f28ec1618ca8b7eec18ab040fe5906117dd4
MD5 bff702dc4b8a088c994c78483d12cdb9
SHA1 671576ab386070f672c3f68409ab944f8bd06b5e
SHA512 9ec236f33d63e1a70e6dae9fa3c943fe4d238f8592978cad425bfe51d206c30c37911ff8f68fa4c4489102fa59944115b76fdbdbfd505efa96755b96039ecb29
SSDEEP 384:0FSASNJoTV6XJzOEhchdrrgRs+ZAg2wOSJtvOJZeCtCHua+1s7T:0ghoTV6KhprgRDIwzlCZeC6hx
TLSH
T1694462F31906ED4BEB768EF0D205263C9C37160B6E9DC99CFA941AF150D29A5D538CB0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 d25bc72a13b7bd59b4c87c434859f4b3afa800529698e666c7468cad340cfed3
MD5 92c74550e80f57b94c3bc97a799f72ab
SHA1 99cdb0d95f536bab98da8d19ea747304fa006c35
SHA512 c91eb46d970e5295921367f83630983d1f99fbede95467beabc8c28366d16b77d162aa6a96f6b9cdfc9badcfb97998837fbdaad29e9744ccca78b9445b1551ca
SSDEEP 768:KhP6X9Tlt2awGb6hAAd2IFygCO7ZJK15r4sLmKyeDNAXMSQssGko7Oskp7QmCFKH:t9TltkO6SAEg3Jkr4wfHiNrKGlOf/
TLSH
T1FB258EB611429D5FCFB36FF081082B182DBAF94F6628D628F64442FD14E6A74D538E72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 10a3f167b3fa7f0f7420fa2f4195fa47b618cee1241f360e0a1e10d93574bb40
MD5 8f00cbc864add29d84c0cc7c8d15bc4d
SHA1 d0fdc5732b37127bb022a93b4300164d8e7e826f
SHA512 e5c021fcd02180f6d873991b5bd55a5a99d554744fba681526291f8087b9c94f1ae5e50bde228e3b3d103610040f10a2eb85970341e5f27d8d24f1cba22b57f2
SSDEEP 6144:w/Gc9/E1KWfln6OBDFEwEVb+WYlkDU1WSS5kPHxJBj7Jhz/nqLCap+OwDL4HEiMN:/B2imK
TLSH
T19D168EA70E68A941DA85EAB0FBCDEC1C7DB03382ECD794929127827D44F1FC52B8515E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000004

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000004
Size 33KB
SHA256 a9daf8225ff81b64ccaeabaed589d26e8c4136e158c7ea39252a31f1debc51af
MD5 e51399910416db8bf89f763ae968e7d9
SHA1 93205c964bfd51ee113621db81443104f027fd4c
SHA512 d3a20168bcd00368f8704b1909d61a40c50b3ba75c375a80ca8f7acdc930c1a22ed3227cc60f9e80b3f606e577fc56ea58f8f1d49528c5275ca2e49a92372481
SSDEEP 768:UNPOF9vz6//TyZ1uD7ADTY5qluIwrX+SwIw9OlxzrnqnVA:UNm/LyS1uPADE8luprumwMrXq+
TLSH
T13DF2F14CBD90560172836FB7FE866E281978FE9A7D39C32E921C66CCC39745E49C7209
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005
Size 37KB
SHA256 50bce359419522cb9f3d373b636eb0fcd02224b08395410e9113b9d7faa1a123
MD5 8c742d2cd42fdec03d6a4be62683cb49
SHA1 87266b91c5bed248c4f92cc02abcda622b203c88
SHA512 5e4f5829f54398d5b77868dbb0f7fb68a5ee2732c8c94442a3a7ae5f4e5a7518ba5c9e30bc69daeac71dbaf12269b1f98a53176827bd41db1ec31b1515e40d69
SSDEEP 768:q967fqx8REHtkLcPwINFA2O7m+Mlp9rsN46w5mB63vA4T7Vs:97fq5LPwINFA2O5azser3vAge
TLSH
T1E103F1C9D9DA75042496E2D48D009CA6F719BA2D8F2CE52CA7F8207C063CE27391C37E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Size 68KB
SHA256 b2a301d2f32e9d219b227b30603aeadd7a8be1a52e97a08118082e01b9deba53
MD5 c44c8eeaab66b1abd755c1f6d112474f
SHA1 945b90f9b129d9a584d4cb430ad7b48add5412a7
SHA512 ff832b31556152eda3e327591c015d2cec40a2e81696851a5b5a8e76e7155417718fd0d97aa88856562964dec96fdadd9dcc00fc3f1480284d994008b1692f2c
SSDEEP 1536:gGUuvsA5QrLRoXQvLXiSMPXBWd7b1jV98f/1N/GGfDNKnztEQVutv:N3vsh/uXQd1V98f/1Rm+QVutv
TLSH
T15D6302509D0FAC97336D3123736D3F2430D728AEE69354FAA526E849BFC6126961F138
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000082

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000082
Size 69KB
SHA256 dd76aa99d8b21a47be23e1e7274d7420640428caed635101135fec70c040e33e
MD5 39a974e98d71efc8a62c01fd88035698
SHA1 883a71b2a4f2c82bee62e15c409fae0f90aa7dea
SHA512 b3138668130ab2d10ad7e1112146f7c8934517d2ba7f366be2a62981b457d466e526426f7072204d943b48eff355700160d3c5d5ad2721d848f4c622b4f9aba3
SSDEEP 1536:bGPuSm38ihc6nY2nFdL3PbOCwwpSigKapZG0A:buMYgzTOOpfae0A
TLSH
T1916302C3EDD72B60B84AA045031EE764BBB760B88956DC82FC67D619DEF16DE120904E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000cb

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000cb
Size 42KB
SHA256 1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc
MD5 665db5e157d2138835c4037c971ff3a4
SHA1 41ca6b7e4818eb81531d8006ff7ddd971c640879
SHA512 6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a
SSDEEP 768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW
TLSH
T1F9130231EB70EE59962C903454E7FDA9433B1457D731ACA80E99A1CE6F8103454FACEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 cd0271b6adc490a98b645994721c0a9e59a9e2747328b54ccf5f9fd7a618c253
MD5 01357e62c8d4b1f497e877c24a1d1ce9
SHA1 c4c569a6a1ed7cbb291447e4e6fc0d9f3a51d560
SHA512 19eb20f238135e75b4575ee9e4a1d49f9bcdff2920b27a46e814d6e64a4ad2bc0731fa741ee6fb21db37658962ec3f75a8e1d2d4021bfd035061205e8202ff3c
TLSH
T11531AC69335F5459DBF43A3C37A9244AE13CDE5849E13B3B6301DD8472662B6B514433
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 840B
SHA256 e5b858664def8e20852552c911e21d8f221d131121c1d9555b0050aed6885f7e
MD5 e323396caf0af18f0b56b0fc59130400
SHA1 066a527bbc84fbd33ff4ba25603c2e67cd35e770
SHA512 9fdabe7d760f8cf075f8b35d595689ee8dbf012be059798f4b3053eb53063c3354b44feb2fdd9cea742649bd0c8cd68a4cacabe2b4e137a4d3f1a88c7fec8083
TLSH
T12801262C33BF201AEBF90B34379D2D8EE019EF580AD21B6B4541EE5532763A6E600007
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 4f9d4e4d4378f249f08109519fc02b0a8a560a50967d22d464a2fd167fc51bd7
MD5 0f493c1e2038e66c632d38ae2f0f1f81
SHA1 887ebed34bf3b071cf1a30ccf12cbc4a6c433ea4
SHA512 38440ae685a35752e3bed617a4e43908ca4975fe23aa6769a358dbd9019b5e34cd4aae2ebfeba749704b9853b3eeaa3ccea23efb0e26377d3f51c7adbdf3fceb
SSDEEP 48:A3nE2ZwkzgDquAiFGWhPml28PXWzGOKIzzdt83LTBt13A0v35sBYOlnRnj630:A3nE2QDqFiu88PLOb3di7TBjdKVpj630
TLSH
T1B481EB253B8B1CD6DBA55AB83BCB6C4C723495464CA32F563231ECB861437EE7508B17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 e1c5eec16ec104862011d21ae8148a674f61245efbfc0f86ba412e251bb99ce8
MD5 bb4344c31b1c8c871a2266fe581f48a8
SHA1 8e4b83701eec7a47f9b670c83de8dfec30b25c55
SHA512 4cb00f0750fe628196f263ff9ee96708fa25340c7bacc8605b8a18325030be4615f8292b1473cf0334b0094cad33be6b0d3d788e357117e7372581ac7cbdf14d
SSDEEP 96:v3nE2QDqFSuV8+DLbu/di7TB8dtaovpwq63bu:v3E2QmFSupuFSudbvpn6Lu
TLSH
T171910D253B8B1CD6CFA55AB83BDB6C4C723495418C632F563232ECB82153BAE7508B17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bd1c1633653976f30b14f2e883a1370776eb6801d172c434e885bdfbbc788e33
MD5 6c71a04f256207a01b0687cf5aa5290a
SHA1 a03d65aa1699249e959c86ccce0743c9c23d118d
SHA512 5dda5d45cda4d0cd58e5f31e71840b9874e8ac068b76bd9b6980109a56a3769f1d55ce060d20168005c8fee51272cc2f20af8f8415ecb3639d62578fbf058353
TLSH
T16671BB243B8B1CD6CBA5667877DB6C4CB23495464DA33F263132ECB421837AE7108B57
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 652d00a5c13758fc7a36c0aaeddfec3f672d1208311334618616476cda1658b9
MD5 bd85c1261abd3ec2aaedb6c192b1a9e1
SHA1 274dc6084d4fb846d835891f05666dd5da9627d5
SHA512 ce222422aca2f57d9fedc5de912b2a202b9ee42547bfe2da5039642a9385354862df952e87af1d22e421f78f512a5758b421c181465e5eb87d05a0d337fedc55
SSDEEP 3:MsEllllkEthXllkl2zEklhMWl:/M/xT02znT
TLSH
T1374404047FC01407C7501430C151D37103F0D5100D115F433C514C135CC57400D00303
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
Size 320B
SHA256 eb8359ea52cfaa9c4d442ca2a4b90236174cdc23854967cd8702c178c30dee3e
MD5 f0e8078cc408f5303397811cfc56bb52
SHA1 c86e6ca24f1169d5d9e4817508d3761e0b5c4e26
SHA512 7bd2d6a6f7d3fb2a3f7fd760b502ab9cce2cb913619269b81d201b3c6b8f4d1910b10459a24b5fe5ad48deb7116ca27f7911fc246b5fa7079dd3c8d8ca5aab56
TLSH
T1F3E0268835CCC56D44B498B3C775B34C8AE03811B3C83902679584822182A086BC12A0
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Favicons
Size 24KB
SHA256 147f3567ee55e35c52bb183270d4d444452fb3650937be4ac1ac5fb6399c315d
MD5 c0231a958c91fdc00d4622c13cddc0ef
SHA1 f701affdc6c26e68212c24673677cf074dc9f671
SHA512 3a0e9e204f081de2b8700e3f7bbb07f94bb701c4521e6aa159c468e3f2de28ff2b6cb016960fc451641d96922ad5dc5c7a925c4499d85417ab12e87de086f19c
SSDEEP 96:neBCP7Goxjx5HlxJHSx52epQRIadHetOUAEYOPA1Q:ncJoxjxZlxJHSx7QRAtOUAlOPA1Q
TLSH
T10CB2F88F6B30BD23EFA949BDB13699749D37C11E5F2A8CE53C7104211CB9E56403A6B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History
Size 160KB
SHA256 cf8bc03b59ef373adcfd131e90cca76cb2f09e99d4e8f2436c793b9a6c4d63a7
MD5 39982c7553e946b53a6417cb551ebcc5
SHA1 259fe824977f72bd8c6d14cb378d7c4c9728f116
SHA512 fb58f6a65abbf226b470fb457fe294c9229e604a25969e60bbe68b1d129e3f0e03847eb350a563859235ab91dd5d33ff1dd82020f499c90363d8ab99c6844fb9
SSDEEP 384:OCWSTJY4V/tIkUI3ijVYWNkqpej41iZ50Gy:OlE64idkq8j41iZ50Gy
TLSH
T128F32F5F9F206702CDBDC23AACE245A65D3DE02F871365C56CB104B1DEE2A63606C5BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
Size 9KB
SHA256 9d904cfaea11106f2e67323d8a29e90c303f4033713869be863a5bd0e5564f82
MD5 a9954bf454f81f7a2cc75694f108ee92
SHA1 7b686893e4856c15e5cf0e8315cf1451d93a99df
SHA512 c175b83e0787e6f2845601d14e0bb40ba44baf23411190fdb893102b8f1ac0619ecb05421486c0115f88950e98495a429f9b1352b15ea044bd94577f0360292c
SSDEEP 192:rua4iw9q5qjWF9gUSKjj0HM6epeRHA8+N0emi/q4geD:rua4iqqjpgHMQkmi/qg
TLSH
T1E1125C32D21ED5426E55C0CC11B7242A8BDE35F3A5ED23C4BFD6980AE9D945E8D2DB30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
Size 329B
SHA256 54f410d41bb0199c4182e19e644f73a22ff552c595bb9c345210d37a2ba726b1
MD5 241045d1d1b5c4cf5bc160122e83e232
SHA1 8871e797a457a163c81bdfbfaf65c1a54fa24828
SHA512 fca8e567e13df7311fef4bf6b2cf6ff807a893c917e03a34660cf9b50a7203e4c659d5e67b4e21deca059daa79f19c80e292c430fc6c3804120c5dd749c62c64
TLSH
T10FE0269436DDC56E1194C02B8264B70CDBF03815F7CDBB028B84A887B8C4108ABC13E1
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Size 20KB
SHA256 518e7e5a198b29ac0c19b71aa56362737553fdd89ca9d951e8da930ae745882c
MD5 08dd754319fd64555ca9101f21c68042
SHA1 1260e8e5d2a4d5998baabbab681c1f1edbf7acc6
SHA512 51277c1abf2ddc16c8512231e6cc7195b40bf769510ebc63c4375b279168a3b00c6b4b18ee0e943f294c092a25f1bc720c886ddeb780c846810ecb7f1c1e8bd3
SSDEEP 48:Tb9aw/aHLopFMavU1itNH1u/TjYgSP8OI22xMr6QEaOHJ63ndOPfsERg:XPareMaMbs4NM/3vdOM
TLSH
T1B292758F2F313121C8B4CBB1D9C4485B1E7C211D6B6769C5AA9541B2CDE24DBFA122F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 32KB
SHA256 817ddf7095e578f891e9479dffaa1f37419421bbb4d91ab68f733c8ec535ef8a
MD5 2c8a0510670941d78636012bb3c8eb6a
SHA1 137cb8d1923ce6e84b8ff7626c614efb4fad9329
SHA512 9b0c4e8526a18aa2cd9ef810d123c76da362b7e864023728dae5b9436ed61d1278620b17dd6173335a08a9e5aeb90705274969bd06857887c1757d516634f728
SSDEEP 384:D0uVitqXNJJyJbZUl0f4t+4eOQGeTTLtg/YIebtRJpBeV+JwPhJ5m/E2JpapAwkp:pANz0bT5Ofatd4/TkqaoGLxWvv
TLSH
T16EE29AF783A1D66E8A1156F49B14AE1BCF1D0625432C3C2689D0BE47E3E3472E16A74F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 a32a2ef4a291a0e303dcb80917cf149bbf0433844f342fe4e31deb1cbb54036a
MD5 c7e80e2ec32b63e6f64f2093e7d5b9c8
SHA1 e09025e0f9c9fdf9db5e64278ba40ac42de18f72
SHA512 88dae34ffd26c49b7bac403b8326daf68405e91f3dfdd1185c8150f843ded22585a3e23106c2226cfd9d2396e40c197fe2bc9268db8f9aadb9149a00cabcfd6e
SSDEEP 192:DX/JRE4FdaIBqTEgxC+FxNPIaPx6fPWIvmR/E:DX/JRE4FdaIBqTEgxC+FxNwap6feIvmq
TLSH
T172D1DCF3C3D8D62D890156F89B256F1ECE2D1A24432C3C67C9D8BE5BA3E2871D21164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 34KB
SHA256 a07c522421ccd663dab1fabb49c5a7b70daa6255e9df386f00920f0f64d01864
MD5 b8ac067cfd2ded32b2c35ac5b6157036
SHA1 d5366760a55111229c0c21c0c9136d4e18b17330
SHA512 e4f4c16480e8d329f99374f32a49f9cf2224c2bc2181ebaffa76c0e9e774e9e14abcb8f2481ac4d56dee935e3fa1d5bf9794048a03311767aab06346b4575f56
SSDEEP 384:DUOKOhBSZGyJUJnaBaP6LWKceYVPeDmbFQQj1esacJIBe6sLKh3JndaIByPrbL2M:sSjOlw25bTuvf4tdI/0kqa16ymgb
TLSH
T1A9F2BBF383E5D52E891156F89B14AE1BCF1D0615432C3C2688D5FE8BE3E2472E16A64F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 33KB
SHA256 870d62ccddf7e3ee451b3beb0058e7fed1bc0c324ed864159a69c652135b5a64
MD5 5ed24faa30fec3518172fa5d97dc0ae9
SHA1 d6403896b0ad564adbf9617561674ba90fface39
SHA512 bd6be074a2f094e0f4911865393d3a464573594d79c346a230bc7e3c76b910298ad2ef4ed5c05d5ad76d1546f802c5d55bbc17482a2c6ee29227fdd8a2cda2c8
SSDEEP 384:D0uVitqwXNJJyJbZUl0f4t+4eOQGeTTLtg/YIebtRJpBeV+JwPhJ5mUbqiskzHcP:EANz0xT5Ofatd4/TkqaoGLxwvr
TLSH
T116F29AF783E5D62E891156F89A14AE1BCF1D0625432C3C2689D0BE47E3E3472E16A74F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 38KB
SHA256 0b9fce59b56c4bd75f98d4734d5d59928e296336e795335b5380ecb2408882f4
MD5 e81c71411edd8c4a364a378d77618ac4
SHA1 76ed9dcc6419a2953928d9af1821a0321ed95e96
SHA512 f059a1f474d8891d459494b1654e40fe88ca30b6a3860b77006d8649c953b5f029d19909a8db710a325ddea1ad5b342031220ad776d35e2211d09c9a3c128c7f
SSDEEP 384:D0uVitqwXNJJyJnaBaP6LWKceYVPeDmbFQQj1esacJIBe6sLKh3JnFUbqiskzHct:EAjOlST5OEf4tdI/0kqa16ymAUvz
TLSH
T16803AEF383E5C56E891156F89B146E1BCF1D0624432C3C2689D5FE87E3E2472E16A64F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 38KB
SHA256 724a30f5049c6e44c5f749e6695940af157007fcc5326208e76dcfe16cbb0fde
MD5 b4152a5b9c844e84a9e93c811ea1c83e
SHA1 131dd361cd03fc090c1707657f5622a96357d2a0
SHA512 c1d8a917ec3ed4b28c3e062b4652ab9851883d376a1e295a57f690961ddee48671a7cb5130634d39b473e1101d06da09b2b954d8220a09017d34936ac0603478
SSDEEP 384:D0uVitqwZGyJUJnaBaP6LWKceYVPeDmbFQQj1esacJIBe6sLKh3JnFUbqiskHaIf:QSjOlFTMuEf4tdI/0kqa16ymAnvx
TLSH
T15C03ADF383E5C56E891156F89B146E1BCF1D0625432C3C2688D5FE8BE3E2472E16A64F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 dffd3e5fadaae4c421d25595beb865e41ab365f883e4437e9392ecd9d0ffe0e9
MD5 9dd188059fdaaa64aa841de3ff0756ee
SHA1 e94e35b68dd59129d5a9c82d66d61c9d426024ab
SHA512 24a397c4c5ef50ac14ef42a2d34fda64f3b1da1d62d7bdaa22e46a134912156e0598cce9885b969ea371bb4a92d147cfbe764910cec26d5974cf7e6f50cf7124
SSDEEP 192:DUOKOhBSZGyJURaIByPcXngbL2IbZIKaPoiv/fPt/NPFdYHY85GhuQcqv7BjH:DUOKOhBSZGyJURaIByPcXngbL2IbZIKm
TLSH
T17A12CCF3C3E8862D891156F8EB257E1BCE6D0924432C3D668CD8BF1B93E2871D21564E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 f9514fc610671602f561c60a19c8835396d12edd387557f5b71db1864c5949f2
MD5 d35c472fafbcab4996105dc31d54d6f9
SHA1 f7d0152841318a5846f447370af4a7d9f4224d8a
SHA512 7af183e0c741c00fe4a1667ed0afd8afe9717da888b2c022c3cd3a7bae8a16365b61c642012701c0f6a2c58c6866b3a914add8bb1714b00aa78854e7028929af
SSDEEP 96:eIEumQv8m1ccnvS6PEDnEDoEDmEDzUEV9tESEPGEd:eIEumQv8m1ccnvS6PAbDSUst3MGy
TLSH
T13AF2ECFF1755B005C4D041B4E6064B4EFE2B20281BABAEE0D65809F2E7865B3A13C76F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 523B
SHA256 152365e4b6ec81a035fe42839fcc7c06fcc972e0eea9b089ee5ba16952e21f83
MD5 33486afce3fd7d16f7ce922cdece62da
SHA1 94248ce89f97c2fd361c0a0da2c8920843d24336
SHA512 8755b8abe2e411e28761ce6e94d246f95d0d03f21d9b701cfd6e1dfeb2c48d747f24ca920f03a41340194a95937171981e126d792230d86d6aa2dc81e9e11597
TLSH
T1C3F09EA7A7B97467107E58FF2D00BC067DB9B43506411CE5CEAA422DE0910F72F12453
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 5KB
SHA256 c29359691bf288919e2cde9b1f4895422367793dbde6bace210cb15c67e41603
MD5 7fe4cbd43ea10653087676589793a3b0
SHA1 98ad28a41a7556f6a3dc6ea6533206647643acdb
SHA512 75ca367d944a348980b082d8b6dddcbf9bd367167fc5f1305a6314ad54d62ef3e301b8eae29eacec19233ee4968fb1d39e858ffbb5ea7bfdcd39e2d4e6dddcac
SSDEEP 96:gUwU2VAUsUiUBieUAeUtUlUx4U+UWU7UdUzUhUgCUWURzoUTEUBKU+eUxDUgU84A:gUwUKAUsUiUvUvUtUlUeU+UWU7UdUzU6
TLSH
T1C7C18DA7D17FB46B20396CFF0D04B90A6D7AB432429174F8DE57C26DB0859FB172206A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 3c446fbdf4e148823c06a07f53be6b83c738f73e70c4c456f087fd004160a1d9
MD5 69eb5af67bf723a0d5733374aa187be3
SHA1 21ca76cb4f702851fa28646a5ebc9ad709262247
SHA512 f522fa06819754110553aa76280f4f2a9bd8782d7b6eb10cf2eaca0e9819daaca6d3054ae3ea845c2f6c0435bd9221859dacdadc8325f6c48eec969ba443ead2
SSDEEP 192:HR+YcBzWL4gExY2Gcjv7mhAPRp20sk9EHsb+WNnAf4mF2Rx2jeA0akVyIsnAUgtK:HRvmz3jxXba8X7aw0D2X2lO8
TLSH
T14C52E66EA920697B9CCBD229F9667B1BD7F5102571C11F80EAFC8A2C15E7ACC211701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f65c62ec5d347309f6daa7c8300d16215b2f667bf41edc48bc0fd20727ff7ad9
MD5 f53e0b8e01ec6d8474232e87d3ec318c
SHA1 01908f3b8b0c76c376269be4f28661848a4fe2dc
SHA512 1927f3416eee5075ef52cea4d2a7502b28becf1364bd8b6a5f4d8b424a86c153127b1e6d9ace1abe52d29bd278798b7263182ad7fd4607480c8836fadd06e549
SSDEEP 192:HR+YcBzWL4gExY2Gcxv7mhAPRp20sk9EHsb+WNckAf496YIx2jeA0aXPyIsnAUge:HRvmz3jxXha8X7awC3YI2lle
TLSH
T13D52D76EA920597B9CCBD229F9657B17D7F5202271D01F84EAFC8A2C15E7ACC211701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 c7c31a9986d866c21000b90ea456c9f37010a4cbe84c2868a73a1b5ad20350a2
MD5 3d7ab16b53395cb3c4fff82193a03e3b
SHA1 743b42af8adb5392ca8f16618aa59b7e0d08e1eb
SHA512 fa0e56a2d2a469030b21d523b93e01c840779835804c996976fd2bb4cb16b07a7c5e0b147105611fbe548da4fac154242615ed7d116443d2717d87db99bbd97e
SSDEEP 192:HR+YcBzWL4gExY2Gccv7mhAPRp20sk9EHsb+WNnAf4iZeEx2jeA0aiVyIsnAUgrK:HRvmz3jxXIa8X7aw0/eM2lQe
TLSH
T12052E76EA920697B9CCBE219F9667B17D7F5102271D11F80EBFC8A2C15E7ACC211701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 43dfb467d4017876b8ef7caf69b2ac03c05df2539f8fe81fe4134d8aab203727
MD5 e52cc4be93908830bbd1de2f3375a04e
SHA1 c54f5ec47d78f8d9bc58ac74a9a217c91b534a42
SHA512 db72aa63c19d645f4d9e0859d6b6d49f8a0a85a6f9fb6df6736671397c649228dc3c964fce702f7413162e80ec4d20b88cf82d0d4d063993950a843d0059ebea
SSDEEP 192:pR+YcBhWL4gExY2Gj+v7mI9PRpJ0qYRq+Zt9EHsb+WNgQ0qpBBm/0kb2rCx2jeAm:pRvmh3jxY6aeXLH8awjOT2r+2lve
TLSH
T17E62D76FA8201A7B5CCBD629F8A5BB1BD7F51021A1D01E84EBFD4E2C15E76CD2113017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 5d217665b93f5c50191a135db7801646816ffb9aa24ee0039d09ac7a39f01e6a
MD5 94293db79f1cde4301a1e5f36f9c0867
SHA1 2825973fb4e05a364f105a78b8ff6df0213fdf5d
SHA512 29a9cb6535b20a523a1e24f2a31e325af8ccb2f89a97dc725c6e98c29fd9a5c57b17c17060d47613c50745b8036e2b3113b75c7ef9add291aaf6ec7dbf7c913c
SSDEEP 192:pR+YcBhWL4gExY2Gj0v7mIAPRp20qYRUt9EHsb+WNgxqpBBm/0u92wx2jeA0azVK:pRvmh3jxYwaJXc5awDOj2A2lje
TLSH
T1C152C56EA9201A7B9CCBD619F9657B1BE7F51022B1D11E80EAFC8A2C15E76CC211701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 436860ea9d90c44cbb4b96347e74b669904766b0ed4b2b80395e5fc74d833ef4
MD5 762c5082ad0d29bd9abe0f8709cfd437
SHA1 9ae33539bb9d0dd9a79d61e2c04fa917daaf10bf
SHA512 30505e915f4fd9807d22e3c9c02afaf0592a8b9e7c02f9fada7fa7af273f866eb8476db9c4e59f6decd781ea0181f15f8198c07fc90c67cbedd5af4fa37b6f7c
SSDEEP 192:pR+ocBhWL4gExY2GjQv7mI9PRpJXIqYfcILyS+Zt9EHsb+WNpxCd0qpBBm/Mw2qA:pRJmh3jxYMaeXPG8awCOyx2X+2lve
TLSH
T15872C56FE4201A7B5CDAD629F891BB1BE3F52021A1D01E84FAFD8E2C15D7ADD2103457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 ab5d1090229dd9c6e8e0c97d7d5bd4afc2d35472305dd1608d5baf191fe991e8
MD5 5cfa844685913cfa1108fe396569b705
SHA1 4b72a641ed1dc0bb36283cac38cf988ace10adbf
SHA512 b36e6a2679f0fe250edf03602de7d740979e952d848a68f4dc0fdc57559bfdd3832584095d6ee5ee7646b5444149989362a3f39540b0329f0d5ce670cae75ffc
SSDEEP 192:pR+YcBhWL4gExY2GjCv7mIAPRp20qYRUt9EHsb+WNgxqpBBm/A3x2jeA0azVyIsB:pRvmh3jxYOaJXc5awDOYh2lje
TLSH
T1E552C66EA9201A7B9CCBD629F9657B1BD7F5202271D11E80EAFC8A2C15E76CC211701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 6c13fb376b6287c73fd318072a51b5a7c7ad4e6b6125516435815331327291ad
MD5 6c5729c6d0da2a80a45b7e23cc638592
SHA1 931dc5e0daa7754643b85f7bf3f5f3c0274e27ed
SHA512 bc15d6f06772d28e541e97bf52f781ffed40ef72bdf696a36111d5852a48787c61000f198fb97fccf9f13997ba349b697837e3c582129bc88c54441239fedd8f
SSDEEP 192:dR+ocBhWL4gExY2GJwv7mIc9PRpJXIqYfcILyS+Zt9EHsb+WNpxfpad0gp4Bm/Ma:dRJmh3jxysaIKXPG8awO7yx2C+2lve
TLSH
T11572B56FE4200A7B5CDAD629F891BB5AD3F52022A1D41E84FAFD8E2C15D7ADD3103447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 b742ea9af894c51be75a2dbf2147ee79fbaee0d01b34cd3e7cc2bebe2ef5e69a
MD5 5e3a3221ca70c4f725e83b123f09b492
SHA1 fc4234c652bbfaf4e2408f840473ddf2408ed4c5
SHA512 73533d6261a4d0893d5f2a2688ac4591159b2bd680a399f903b7f526dd95aa7ee0826eb801fe3a86bf93cc5c4c75a370b54509a8c02267db2f60906f91fc996b
SSDEEP 192:dR+ocBzWL4gExY2GbAwv7mIc9PRpJXIXcDLyS+Zt9EHsb+WNpxfpad0gp4poew2v:dRJmz3jx7saIKXT8awOVsx2B+2lve
TLSH
T14272B46FA4200A7B5CDAD629F8A1BB5BD3F52021A1D41E84FBFD8E2C15D7ADD2203417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 e543c557061a01b68a1fac09f3bc258de541c125f4e15c377aa7e7071ce764e8
MD5 abb2e65bccfec91547ac98ac8d52af01
SHA1 bacf05f77cb681561812f22cb3393d3c97b9eb76
SHA512 520ed88d709b39fe3eae591ad0f6891cca054a2eb935726738284af16abd15f77cdcf7c44eb32de9d3b54cbe3a4b5bc659a2da9dcfb4ffcb76154f5c71b1b740
SSDEEP 192:dR+ocBzWL4gExY2GbAdv7mIc9PRpJXIXcV2LyS+Zt9EHsb+WNp2Bpad0gp4poewy:dRJmz3jx7daIKXs8awDVsx2B+2lve
TLSH
T14672B56BA4200A7B5CDAD629F8A1BB5BD3F52021A1D01E84FBFD8E2C15D7ADD3203457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 d35fbbda5fa791b53d79914c4827b63e12afaa3305720ef91360f3dac36976b9
MD5 26175384a2ab1a183d80a2e9a6a6fed4
SHA1 a6ecbc97c19f437fa2f0e900238b202bc4471545
SHA512 94d8257aff630680d9885442de14d4692bca727620d328ef4639bc140274477fc77aaffc36a39ab26e89b5478562f37af16e431f672d5d9e901d42bd31b19a42
SSDEEP 192:dR+ocBzWL4gExY2GbAlv7mIc9PRpJXIXcV2LyS+Zt9EHsb+WNp2Bpad0gp4poewy:dRJmz3jx7VaIKXs8awDVsx2B+2lve
TLSH
T11072B56BA4200A7B5CDAD629F861BB5BD3F52021A1D01E84FBFD8E2C15D7ADD3203417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 835ed0250173e3343c92659a86e3faa35f543e9b6eec8dd8afc4e330c850497f
MD5 fe8598698348cb987e5ceebc21ea08e8
SHA1 967e5fdc185da020481f7f4a27f344cca2f75f4e
SHA512 d40d80a93cf83b29ae35fb9c53cd7880c5ec6423625a03b9f7b679f6a2edb3092b83ccc97dacf98401886e488752e59c4b960632d818236225dda3d6c0329f14
SSDEEP 384:dRJmz3zx7B5aIKXrH8awDmjZsx2f+2lvvaS:hmz3zx7eIVawSf+29aS
TLSH
T19572C56BE4200A7B9CDAD629F891BB5AD3F52021A1D01E84FBFD8E2C15D7ADD3203457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 a253acac3241ded0af2ed96c48bed15cde57637f5da11799620b2281425910ea
MD5 71d166b1c3727e3454811555cfe1429c
SHA1 db5c6c9a7ae52c0c8bee5489cc33738822de93d9
SHA512 3e1927a816b9293d5be24980cb9d59d268796a18b5207c440bb58e7049e8bad48a0eba6f4f8bc623c15a1460ed74112cec5e283469584bffaab88b7d182df509
SSDEEP 192:pR+ocBhWL4gExY2GjJv7mI9PRpJXIqYfcILyS+Zt9EHsb+WNpxfpad0qpBBm/MwM:pRJmh3jxYJaeXPG8awgOyx2X+2lve
TLSH
T1E672C4AFE4200A7B5CDAD629F891BB5BD3F52021A1D01E84FAFD8E2C15DBADD2103447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 58411cca857f0eb64cfd9c41c0c381cab6b0ae7a0d05c587384414ec1cbaaeb1
MD5 83be5a359bcf858dac187bf13ea48db0
SHA1 764d84dc977c8b357b87c35549cf29134d2f6361
SHA512 17beae3a1bb53c9a3c000b0f9d55eb0766b648a26d1c957bdafc5b3a3d898c0ce8ca5dd4137bdf10ab57962cd7060e035333c35110a29c49b071f06686104d92
SSDEEP 192:dR+ocBhWL4gExY2GjJv7mI9PRpJXIqYfcILyS+Zt9EHsb+WNpxfpad0gp4Bm/MwF:dRJmh3jxYJaeXPG8awO7yx2C+2lve
TLSH
T12872B56FE4200A7B5CDAD629F891BB5AD3F92022A1D41E84FAFD8E2C15D7ADD3103447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 ef2be3667df7f41ab0bbb137915f8d54427da3f57239a2593bc01a0aa137f0d4
MD5 067ba3e27abed5116eedf004ed6775b8
SHA1 57690350508eb8e5861752614b66bef01a7dc1f1
SHA512 343037e88952850ee0578c42e69345683eae36315b7726657fbd20b6e3af1fbde380cee19df4aecea91484d0fc9f587fa065fb91845a384a70edcf6f603745dd
SSDEEP 384:dRJmzPzx7qbaIKXrH8awDNFsx2k+2lvvaS:hmzPzx7q2IVawtk+29aS
TLSH
T1A872B56BE4200A7B5CDAD629F891BB5AD3F52022A1D01E84FBFD8E2C15D7ADD3203417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 0cbd46f8143d0c9c376325f0ce19a6377964d16c4214bde57fd007387a15c603
MD5 b19da913da04f7d776fe352cf7b4475d
SHA1 b9ae7cf970285bb6448a0cf6462d769dbe60c9dd
SHA512 c231e990d191f9354964ba1a4c1411414c6431fc8e699601f2571c142446e15b7e0a83a800a58d36b66e2fe2fb0e3fddeb31f1cc3611bbba907dfd20447f330a
SSDEEP 384:dRJmz3zx7+5aIKXrH8awDP1bsx29+2lvvaS:hmz3zx75Ipawr9+29aS
TLSH
T1C872B5ABA4200A7B5CDAD629F891BB5AD3F52021A1D41E84FBFD8E2C15D7ADD3203417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 6ecd9ca9e316117285d6ac06c681f45bbc78c757c5a2b0e85c01ab04a1f7bc76
MD5 eb182e05cd87068dc986fdd6cb26a95d
SHA1 9fd9b92c62ff28f6d4da5eb95abd1e15de30351f
SHA512 78976ff4d341975c987a2c8e7a1925b9ee780d59bcef845ded0a07739734db43a8d79d157b5ea19616183840d69ebd67e294161757efb902b83ff59d192f493f
SSDEEP 192:pR+YcBhWL4gExY2Gj0v7mIAPRp20qYRUE9EHsb+WNgxqpBBm/A3x2jeA0azVyIsB:pRvmh3jxYwaJXc4awDOYh2lje
TLSH
T12352C56EA9201A7B9CCBD629F9667B1BD7F5102271D11E80EAFC8A2C15E76CC211701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 b5fa2c533530a1510f4d825698115378b0a95a0b795caa9539e8869268451b8c
MD5 a8c0bcd4adce76a91ccdd993e08126dc
SHA1 92d5455c643698da3d398f0c0b590406c1c458f5
SHA512 f072158933105339a10050cad6dc7aaa2c9702831591af54d4bd6536f821abdc16a8fdf8d3553728284a352d10098415731f47c0af9ad74865019fd032147bb2
SSDEEP 192:dR+ocBhWL4gExY2Gj2v7mI9PRpJXIqYfcILyS+Zt9EHsb+WNpxfpad0gp4Bm/MwF:dRJmh3jxYCaeXPG8awO7yx2C+2lve
TLSH
T17C72B46FE4200A7B5CDAD629F891BB5AD3F92022A1D41E84FAFD8E2C15D7ADD3103447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 eb4bdaad6e032382fd5c92974399de8f8566f9693da8edf055107b7de6744332
MD5 c5c60ab7746402ced9178c07ac943257
SHA1 973d0ff14b4fb6980d203b0415bc8b0de4c6114f
SHA512 f69944af7926b5d0669f249dd575d7e3f615756a8c4cb756fd5deaa609f191a8364b19bb6187c06c2bd3b2ee08196c5b1a06b8223e6ca35db8b17199715e135d
SSDEEP 384:dRAmzPzx7qbaIKXrH8awDNFsx2k+2lvv2:4mzPzx7q2IVawtk+292
TLSH
T18D72B56BE4200A7B5CDAD629F891BB5AD3F52022A1D01E84FBFD8E2C15D7ADD3203417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 e62ff86c0586df004ec776c1e3e9bfeff3f1db497e472b62f4d93b52e7179a30
MD5 5061405e334580a3a137ec6aec01b217
SHA1 dc3809ce98cc1aacea8b9062f2317df2f0923055
SHA512 53ccf66a4b621716ff85e10364c316710e8633b199e521cb13947a004a1119e6ad16d028f0b64b68f68fb3bd3161d3f2e740473f664d9d2ac81bb1a9fa02e978
SSDEEP 192:dR+ocBzWL4QExY2GbAHNZv7mIc9PRpJXIXcV2LyS+Zt9EHsb+WNp2Bpad0gpI2Ib:dRJmz3zx7t5aIKXs8awDLwbsx22+2lve
TLSH
T1EC72B56BA4200A7B5CDAD629F8A1BB5ED3F52021A1D01E84FBFD8E2C15D7ADD3203457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 78f2b9e9ebc08798880cb4679beee8aef2e584a4e9691c5edb1c0165ca1273af
MD5 f3fb909317ed06709bfdddf6e293f823
SHA1 f9840b19b75e8120807aa0784c1bde6154aba029
SHA512 4bd189ef0e2f72445f5af07954ee4d6ebdcc450090a92b283a2c281a3cf530c9eff525dfd48ea12519fb7f49e455434598bbe11f388dcada8c12c9ada348e50c
SSDEEP 384:7NjnO7KxkXqKf/pUZNCgVLH2HfgslOv7pLuLcSjZkXODnq+ErU3BHHGu/n0To:7NnO7KxkXqKf/pUZNCgVLH2Hfgs8v7pU
TLSH
T18172E9A76C4C9E370F94CACCDC1A7B4FADB6024B65E9886443FA582503D5ACF114A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\000003.log
Size 4KB
SHA256 4c74088ddb952fd177b4fc45d93593daca5e19b91f0b070d9ad00af31e8b6201
MD5 de413a565b9baab083530a986c7395eb
SHA1 42086aefe39c5df55c507607b0fac68140ef28e1
SHA512 ee1e04cc42f5c415eb00e8788ed65f35f20b816e5a146adaaa810f3f951ae2ba599484bbe90a0e4a084c1fc3090aa6d389640f1e6faeed1bbdd36076d4f5658c
SSDEEP 96:F1mKHMqRwcnDh1J5pjLXbXFXKXTEFXSXT1tLXFXKXTdxhXsXS0XbXNXKXTduZXIA:F13s1mDhxFL1ajGCj1tL1ajt8VL9ajWZ
TLSH
T11BA16C6EB50A184EE4AE0936CD79571B5F69CF0C2BFE3767A9DF8A0405B0A5701086F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG
Size 333B
SHA256 eff82994b1f1f2773404105d973208a16b7c73757d764efbb5d4454b569069c7
MD5 833802b42523c4dd9f19e3460ab695fa
SHA1 fdc42712d4491f094ec1070c666162cd70362b22
SHA512 1110fa86b59607f0b0ff42e10bea57cff1fe037395aff9070782805a858341c18bfe83a9e9cf3216e23588eda3be6b2b4317fcbb6d096631e57121790c18ba8a
TLSH
T100E086903BD9C9BE10E785670664B30CB6F47825E7DC78125FD9DA5051C9A08B7E22E0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 91dd8710fd9cc25cbd476a35980ea014846b269e6e6d6c53de7916ad8c8d238a
MD5 e3f1aa8f6a0ba30724b0e4ad7ab512cb
SHA1 904052e0822b5b3ab7ba0a43e9ddf743e65fb1f4
SHA512 65fc35c030218f157d8574f5d975557f873cc678d752d5785b212c3920514835328dc9df389fd2ef755f673ed0c371baa20590a799986911e7804b480816644f
TLSH
T1D0B012C084015551C00303F8114234887154DF11960A1B2563E06D2398255618414050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5989c8.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5989c8.TMP
Size 96B
SHA256 5d68f16ec97f6b5cf68685d60d4e68686b1122adb5ee177140f74716def72033
MD5 bc1fa2ddd2aa125723f1d858e8bc3015
SHA1 411d417859e9a9ec02c64c7a6ff2d42380994a25
SHA512 65598006568a34a6b2a6cf7caa54a10003f8b5fdb70997e2516572c411c163d2398029a69313046166317da0eeedc8c573679a94b42a860ae449592ede67f6d2
TLSH
T126B00255C5027212D18223F03995A5F875A1DF36CB17527A97E02F66DC25A604525660
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
Size 1KB
SHA256 54ca4dd5cc35e0630cf74f0a95f07c492381b1fdca062254a1df43ef816114c8
MD5 157ba8f071a6f35178841c5efa330cab
SHA1 026ee263088bafb4bb6e81f35b5de3935d4fa451
SHA512 f5427b2c30d9d17d77525559d80356c86bb9f1420b926722582ea0e0074ea481ef7e635fc784db615a65d40298a5485dfe629f843d95071eae7c0bea7ece244c
TLSH
T16E31D1E72DD4313BFDF8E6759CD6D2584731B1820A408CCFDA44375E001A6137A1107A
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
Size 320B
SHA256 640a06a9a933cd3e3375d0e668b7dc599a87b804e2315532a52bab28f4ba860d
MD5 91bbd9a46ab7fac8829a1c332108d64e
SHA1 bc4d1e2587aa7ebdebbee465229093a5af5b695a
SHA512 fa6a2a292dc4906b0da53f16e1a0977752fc643f258ddfc0db27f966367ce9e71d8130dc91659128f147039df72c0f1b47e15d77c31742c25b1a219ae82f407d
TLSH
T122E086D839DDC56E20A9C53B0261730DC7F43824F7DD79035741DCD6228550467D22E0
MD5 SHA1 SHA512 TLSH

Submit Download

Tabs_13427563139774936

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Tabs_13427563139774936
Size 3KB
SHA256 eb34509d013afcae5a982c2a6e9f5ce5b2710dcd23099b88568bd71ca2daa40f
MD5 d5ec13ebaf7bef88b246663fa80fde58
SHA1 701528345e70bde4c99450fb7f227d21b203599b
SHA512 c97561a0ceedd909c535b02e3ba71b032ba4e409e93e2c4834552b983dc6a1817bc0c5aa68b93c563bf3f1e652ab59724f26edea51fbe23265bfb52f076e6cfb
TLSH
T1D8814022AAE4553EF27F9539CEB661E16E36F94271424C6F647212010833E039FB5F76
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 64dd4550c470ca7329a6dcfec826c5cb6e6adaa435faf1e6a87c63b8f352fa84
MD5 38e9da3e710f2ef418c1d758ce965830
SHA1 a3137c62d97238f2aee18a70b87faf076f163347
SHA512 2dc0d2c09fed31dcd323f7dd0c454bb0f4f9e9bd9043ec8fe0334920d887ea1c78558c35dafc8ab5a49dc4fcb197f00fabc5be39ac3110c348d969e42c02e57b
TLSH
T1CAB002D458C99E46D90C43FC7DE2C1E27365FD940B274303E5E05F65E52F28A4152351
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 5f3f9469a2d96a5a046910b2c57c428451e9e3ddaf0764030c738f4332d7cd21
MD5 919e8990c1753412782006e54c3c71a4
SHA1 f53a7f1b9635d39a780640719a47500bae32f4d6
SHA512 dd0ed5ade9bdb05bc28b7aa296ab6d2ae36555c311839c5e2afd6ec44f178884411559d10b840de2c632eca9a4903bb79c2de9b12be25b2447eadbea31243ced
TLSH
T159A0021005C81941DD4027FD669185C2735048600355D713D0916646D8772436531254
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 ac2f03b3aa12b0b99bca8cfe7cd233466f63ecc54b28ad9525861c0de0ceaa64
MD5 e85924eee43978543a78d7e0d5f22f42
SHA1 4cb71b1a63101da4e233c8a49fcaca9c42b3f96f
SHA512 5cc4580a0801e67fde47d86ad52d5856a8465611e662cd22765a11acc22e6cc6405bedbfa78ebc4ed822bd5c6198848b301f2c838af98bd43c266806bbb67dac
TLSH
T1E9B012843B20D505F4C8153405C187846700F8053052C473DC645F144C0B7A5AFD1CC1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
Size 345B
SHA256 094d1530ef0cbe2e998386ac41b3d068c169fac96ef54c14e376599050a7351d
MD5 7d70d22b434b40e1190caf3cb07affa5
SHA1 2722f136ad01b7eb618c0ed728669a438f5c8f15
SHA512 0845f90d7b0188eac6381d4c2446f51c3093529be4a14f577597b70016fbdf74586ec41fe25ef66d69d7de2d965c02aea07160fd5a7e5c13912a5cae3835266b
TLSH
T1D2E0DFA03FC98A6F10E6806B5230F30C96F1BC10E7ED64226B88A0A0638D60477C23A0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
Size 321B
SHA256 a6a533324144bbbc73e283591ef81a170d73bff1858964e9a0729cf89f359a6b
MD5 68666e54b17362cf7dbdd309667882f0
SHA1 346d325e3b7f58b6f3bea2ac8357027dcf9d0830
SHA512 c9db708c20ff6fa8f6af99638849f648a4d539a75030c29f0ac95596d9a441d51e5af8131dcc47b32c97f136587e5e934ccf519947b67f8ad5267e19ccd83df9
TLSH
T1DFE026B13AC8CA7E00D0C1234264B30C96F07C15A3DDB506874C605071C4208A3E12E0
MD5 SHA1 SHA512 TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Data
Size 138KB
SHA256 1f70e54b6235ce8965f4d4c35e9d4d1f6fd14ef7312a2577d4e6a066f388b2ef
MD5 1184d39407de728736c202d73fa5a796
SHA1 7facc23382542894ce8f7a5764fedc6d83816ffd
SHA512 77faecd3f1d00fc01883339a3eee8a7adeabac45314b5d295efdd71e3c57bac0de1ce4e3700f80a88b90cd17785b79185124815f3189194d6ed787ff7ece5f2d
SSDEEP 192:tB+XuvBnl3JsueMEGvIW1/rcP2wj96UQ8kqpjVumOw9j:jeuvBnhJsueMEGvIW1DcP24qoVumOmj
TLSH
T1A3D3874B3A747002EDE59A721CE051BF5E3C716D8F55A5D4287620688EF2913B23E4BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager
Size 40KB
SHA256 97487af1b2d0470fc2ef0aeaa86d7e309d2ce6538a0e16c5074e1a5481777a9e
MD5 c4de7037755b9234b16abe2323f78f47
SHA1 d24088c6394d6b6164ba64307723fb8f8df41ee3
SHA512 90896f90ab96ad25c3e176d2ecaa9a6aef3178745460dfec449c024145ff749f0e193f172f981dd6c9f555ac673da0ba2a46a89135a2906b693788ef83b15b2d
SSDEEP 96:f7doKsKuKZKlZNmu46yjUKVXwX4ZY+XvXv:7ZT0nzXggmff
TLSH
T136033D8F562840F3D0B2C13FE9C645E6FD7C260CA7223A9519FA07659DAC03390192EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager-journal

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager-journal
Size 8KB
SHA256 d0467830251a09239b06de1b5896bcd8e9382d98285e3d42f74324dc0c9b2da1
MD5 0c5b83b6f614017010092e54f280849a
SHA1 92efa860daa7f4a6177211bfe89f55c7cc7b5a75
SHA512 388af0a0c99fbcae808ab0b15dd27307fbb9b7c7b7f7ad7f3d23534e0f8e77f4548e6ddb90ecb6b2037a1403fdbc7279c34abc2d5e22b92a994737421299444d
SSDEEP 6:qt9lqVkZVp/Y+Bcc/XKuqHKu42n/dpKsZCc/mLEJOgLEJLdx6:AqVkZo+BXXwX4WZnmLULIdx6
TLSH
T11202205F7444484FDC55013FC5DD94A26F254DAC3BC3361528E645049CBC223C0457CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000003.log
Size 27KB
SHA256 56b255365be5bd295512583429c66c3a9353de21b45fa723d74ff3859f4cf93e
MD5 ad6519f250af852eb1e5ccc1fe2e2ae9
SHA1 a28db726e89c13f031b1c29e28763f06b9a037fc
SHA512 f281a0610c523fd08ae9d4dd7347cc46dc2410d0b3fd437072d8068d5090e7ef3d8f4c5c323be452412f74d7379482fb4df970567a81d655217442ba68e9b983
SSDEEP 384:EAn6sdGrcAQ2IIIBb5MIMIBTb4msdGXKt9YsdGOLX78sdGCdGexIiX77SsdGCdGN:+cAQjOPxIvR
TLSH
T1AFC2D65A93781B85DCCFD7FFBC55CD7E0BB6DC89459A0002E0925AFA3863E06494339A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG
Size 317B
SHA256 ef62aeaee3ba60bd0168a1fd6eccb8c7a3e29b163e94282150400eb99816a3bf
MD5 d1c46c524fe519109a5dae6b0c581f1c
SHA1 3e0feb4be426b8e9311d2d5c11c0669b73bc6147
SHA512 08613e3127b45abfee6ff6c64f28e51def7dc2347f7dd23435fd4c37b989d68cce7f4a6d8a57e3a5922b78a9321f7588abb2f16e4e3ae51aeb1f3ae6b9ee14b5
TLSH
T123E026807FC8C5AE70A6892B0120770CB6F03D11FBDC24064F44C8445080208ABE12E0
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 a47a4e8fd678d17ff42a7799b8a22de88d2887ab0faa0c76777cdd89f583567c
MD5 4ab37f5bb059aa267ec6d0a463cfb41b
SHA1 431df32881a1fa280a7b40a33fd85134f48efc04
SHA512 2047b7d35db5517997c295bf33c3eb67a94ada24243adb5bd8350779c0fb3220449befe88859a5822d2c4292af01b5f1d515655d1b9cfa9e627bd91e491e514b
TLSH
T19B212855F330C519D10A877B647E6B591378C4469FF8EC1F05B620797EB6E000D4B2E6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
Size 335B
SHA256 be8e6295e90baa7933002ffb2e9b9c7e68e898047377006924099022be6813f7
MD5 b4b59c0b7e6dda5a80d017233a701ea2
SHA1 79673a8ccf6a6d3da9211900901eb5eefc966caf
SHA512 5b931a42c9c82795ec6afa157cd57f20deb45998637edaf5b579ed8980f859b93db0d82f4326621c2e2895484f92be13e96cd17adc2982ced04c8434f608a241
TLSH
T187E0268079C8C5EF40B1896301B0B34CA6E43C10FBDC3E024F84C86456806087BC23A0
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 08ed041272b1a425911993f2d7afed40e8d268972b14b8718e8c90c0b0d41f63
MD5 e9fcb86086e50ed7c0a30ec48c4db15c
SHA1 b5469add32481f2d9bde5d50211d937a14aa28fb
SHA512 899cc0fea7ccd7f6b0fe75fbd1242e8ebe0fe7dc93bf898d35502c17aac4858042ccd760d02a8fdf84c367926f67e866a18a93a6d9c6bb5fc51f8c0fd9a90897
SSDEEP 3:MsEllllkEthXllkl2zEklJMpRKtl:/M/xT02znqKt
TLSH
T1444404047FC15405DF1010304711C3550371D4100517574334534C13DCC55400D01C01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
Size 13B
SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
MD5 43ef949d3c6e9956545979ace65d0085
SHA1 63f2b2de8727854597e49a1216e8e74c68117c07
SHA512 313a5ab7ac9b5efd955beba4615784bdc2a9058ddaa804d85fb2d0c651dd3de07e382d61a1bb482499520a80e0b64c004ff2af03459cbc1daef47f540f0a6905
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 c29ea3269fed7dc9c4394c3966c4d93fe7f02fea30abe77f28d8fd6ec88eeeb2
MD5 a489e3440f790e65921781dedafe0c3e
SHA1 ee400a80979b828ce15ca70d9626b076c46b9b94
SHA512 32e2e3d4dbf378e6100ec3ebb46aaa17c7fecea1678ef06a3a8be634e81616ce39d728f5e1013fd6fc95c46c0ec34a01ef892e639300f5de4dbf354bad3a15a1
SSDEEP 6144:Sdmg1kQfATCFbzQACjTm7Rkm1tYpBeh2BAo5:S9neAj9oBGcAo5
TLSH
T19C34231F4EF0997E1A551B66708A0E2E7BF24F7BCE215ED4C1D90B4437EAE8A1745830
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 a3009bba632e59371b642cd7e21ebcb8d4ba564f481acb82f1afaa1ecd8641a8
MD5 8dd83987df5c530ee4b08db76d48be05
SHA1 6ef1364cffdbb46ce4ef5266598cb005a82ed083
SHA512 88b1e9a7c55a7486a79c48b591d6783810bab2f8347ef4862b3a966eda7ec068ecd2cd51c5f19d3dda149ac8a71c88a1a456d51d81d0f1f7207b10fc4f049d22
SSDEEP 6144:Samg1kQfATCFbzQACjTm7Rkm1tYpBeh2BAo5:SqneAj9oBGcAo5
TLSH
T1C834231F4EF0597E1A551B66708A0E2E77F24F7BCE215ED4C1D90B4437EAE8A1745830
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 123KB
SHA256 65ae21389644bfa65749475227cde1bb5a07082a80a8ea04b70391e90a0b694b
MD5 4dc228ac00a708eafdf26cfef3f1f914
SHA1 d0542309341cf480d6f45df2a0ac60b72d66ff55
SHA512 6a9999d0dcf3562f14037107d92f3b33228f7b2c498f4843e32cf79a79c328e43466f877014365569b98f9bfb8b9f9423cb0d58970883d618954057b3ec90b7a
SSDEEP 3072:cf91mgCELZtCpXh5qTfATCuIbzQACV1cnJLL5s:crmg1kQfATCFbzQACjd
TLSH
T150C313BE49F00DBE1722049132821E65FEF5A77FDE562EDC836E0BA616CAC891747412
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 b91e30575b057a16f70a144a3c527fddc5e81004b270544fb20cf07f041d604a
MD5 1579e4dd9c0aff63b188eb1ec83ae75c
SHA1 a66c5235f180347fab9d15e656e81eb6f7478bab
SHA512 67c7df412cbe1889afa854593e9c762acc6ae4ae3ea9ab3f3b0e165feaa613b290c8f22dedcc30c27d8f048228d5578ee6a27a91063761057830e01983c4e0d3
SSDEEP 6144:Vdmg1kQfATCFbzQACjTm7Rkm1tYpBeh2BAo5:V9neAj9oBGcAo5
TLSH
T1AD34231F4EF0997E1A551B66708A0E2E7BF24F7BCE215ED4C1D90B4437EAE8A1746830
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 123KB
SHA256 5f0a9814184a937be94fb044e40c057f3a7f008636408eed6681d4155d607922
MD5 99a794cd69101360132008de0cb77b4b
SHA1 3a37f2b6e83c11de8a20cc00af5aea15af977187
SHA512 d493320dd3246ac81eb0cade2811fd9a46256bef874887c360803cb96b0c53799dadb1dffd87be66879fb2dc6ac867a9d87e68d94895610bd2d10062ce819b52
SSDEEP 3072:cB1mgCELZtCpXh5qTfATCuIbzQACV1cnJLL5s:cvmg1kQfATCFbzQACjd
TLSH
T1E6C3129E8DF40DBE270604A271821DB5F3E5A77FDE522EE8836B07B616CAC461347812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 123KB
SHA256 811b9d0e5618c277597b44f6f42e9c8259757665656b93228cec6172a49dbfa8
MD5 36e9d572a350b8406e317baf034795ed
SHA1 cc0515bd88a9f5bd5b19e4dc699b4d46b335c6fc
SHA512 5f7761e19996f2fe6fc20a27cbf3b26e45168347b62eb9336f8a28aa49f858458ffe00740b1042be63c4e991fb82601f80fba0922ef401b0fe58de1bfd674c6a
SSDEEP 3072:cB1mgCELZtCpXh5qTfATCuIbzQACV1cnJLL5s:cvmg1kQfATCFbzQACjd
TLSH
T1BAC312BA49E00DBE1722049132821E65FEF5A77FDE562EDC836F0BA616CAC891747412
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 124KB
SHA256 eec292337c5ee84a3bc66b6113b9a78f45db07d59fd4743162a5a8cf3068b7ea
MD5 055dd1bb2cac97d1ab0d77c7c703fd82
SHA1 10adf3d6801566ae9563d7ce3f73c8c2e2ad5a33
SHA512 725dac98fa1ac2e0a884b45b6a2eda412bbca1db70ccd8334f5edab2725ff0bc119fd701c99e374b050806d960fbaf2aa4b1091c202516f7b683263828a989ce
SSDEEP 3072:Il1mgCELZtCpXh5qTfATCuIbzQACV1cnJLL5s:I7mg1kQfATCFbzQACjd
TLSH
T19DC313BE49E00DBE1722049132821E65FEF5B77FDE562EDC836F0BA616CAC891747412
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 26e744b105d8531e826658e2a1b01ea4246037227b1d4ae985287cb89a133bad
MD5 673b3d55604a43c3acd6d20e53cbe175
SHA1 3af5fa07967aad27692c7a53e094e717995ff761
SHA512 91a04484077eb1c108dd2e69fe07ce55db14c236522cedd9a10e69af3d3b3b0adab4911043ca0c129abeca0ac4f9c4b195c7a66ab378f7811fe2918397a98c95
SSDEEP 3072:3NGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:3Em7Rkm1tYpBeh2BAoi
TLSH
T10DC3123B5E64E93B5C75BB4EB08E0B1F1EF149A6C920DA82C8D85B0437FA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 124KB
SHA256 6d41bee677a1f4ba5d31b4cdab4bf4b322a4604751234e9a373bad65f3938f8a
MD5 e094014d6ff6cb2be7e5fcfcf92e26e7
SHA1 0e4b2f0f1fc072030a60b13922f36ceb24208a18
SHA512 63be8a4209a1c0f0ccfe9ce96745e36e3813ed3ff286ade0fc72a1769f79d6e9703351b7d6cc85c055d65fef54210834d1bf522ec9b7f6fc79f997703155d560
SSDEEP 3072:IX1mgCELZtCpXh5qTfATCuIbzQACV1cnJLL5s:Ilmg1kQfATCFbzQACjd
TLSH
T17FC323BE49E40DBE1722049132821E64FEF5B77FDE562EDC836F0BA616CAC891747412
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 123KB
SHA256 1232c3402f3d42b6f478dfaf9555e7124987933500a92516dca2eb287e7717e5
MD5 3a316a960e1b317acf731670f81dd637
SHA1 938eda69515287985efd91d4eaa06946024d167e
SHA512 95162b44640b45e9a047b3c345edc7346e496cc7d13a449e790329bbb325b780f5865a70e0a2c24ecb4943a45dcaca824fdafbb1e656a6a047f9baeb85169047
SSDEEP 3072:cX1mgCELZtCpXh5qTfATCuIbzQACV1cnJLL5s:clmg1kQfATCFbzQACjd
TLSH
T1CFC312BE49E00DBE1722049132821E65FEF5B77FDE562EDC836F0BA616CAC891747412
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 2d2e4cc009f57fec33fa674df2d9812613d62651eda08a41997eaf68bb90be5a
MD5 12650573ff394ece0c8dd51f1d346fa4
SHA1 55102168e8e0149a7613d05709ddc130aa315c97
SHA512 7a22068314708ed6aa4f1eee95a00ab0b97ffcb6987d58e54a8707221f7a2af89b288ffbbb80dafcbacb641d81d7dd0ce717b9143e51d40a86b46ee5e6930066
SSDEEP 3:MsEllllkEthXllkl2zEkldll:/M/xT02zndl
TLSH
T1324404047FC00505C75010344151C3D10370D4500D31574334514D13DCD55C00D44041
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\component_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

ukm_db

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\segmentation_platform\ukm_db
Size 48KB
SHA256 f337adb7ba89a69dcc43b6511f9f659dc642e3b3d273c296f53d81a4e2fab381
MD5 8d199b925bb9dbb597bf873e8f97a232
SHA1 bbb61a3bf49c74cb073380d724038c425192a887
SHA512 16ec67b473be034b95b68f9570c744f46cc3c20cc550f969597d83d168bd910d2d0031d199e2e52f7e46745674bc8570762f8a7552e70efd745602d6b4273d68
SSDEEP 24:T66Qcn/CVdn+xxnFn6ZOTs0n/YSRltqtD9ijuoxAYGduhr2fk05b53HxOSRtK0Jq:TkkhCU2QB2zbBxx3O4x5JpsO4xS+yEOM
TLSH
T1F023FC4F2B2821D9E1E5593EFEE24C913C7E4F998A1B68D208E008724CE14EE512F5FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

desktop.ini

Path C:\Users\Admin\Videos\Captures\desktop.ini
Size 190B
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c
TLSH
T11EC0121892F93224A1728D12BD7460119AB1F4217C16CA9D1380508F08A1601E631B53
MD5 SHA1 SHA512 TLSH

Submit Download

memory/840-1463-0x0000023D9B840000-0x0000023D9B841000-memory.dmp

Download

memory/840-1464-0x0000023D9B840000-0x0000023D9B841000-memory.dmp

Download

memory/840-1465-0x0000023D9B840000-0x0000023D9B841000-memory.dmp

Download

memory/840-1469-0x0000023D9B840000-0x0000023D9B841000-memory.dmp

Download

memory/840-1468-0x0000023D9B840000-0x0000023D9B841000-memory.dmp

Download

memory/840-1467-0x0000023D9B840000-0x0000023D9B841000-memory.dmp

Download

memory/840-1466-0x0000023D9B840000-0x0000023D9B841000-memory.dmp

Download

memory/840-1459-0x0000023D9B840000-0x0000023D9B841000-memory.dmp

Download

memory/840-1458-0x0000023D9B840000-0x0000023D9B841000-memory.dmp

Download

memory/840-1457-0x0000023D9B840000-0x0000023D9B841000-memory.dmp

Download