4ea3658145d8cac5f3502b01a9b522470ea18f0c09479ebd5bf4bfa4da866e33

Analysis

user interaction
yes
max time kernel
378s
max time network
377s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/07/2026, 04:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
avatars-ALdzFvTZhvEpfnQ9-XFb4nw-t500x500.jpg
Size 21KB
Sample260708-e95yfsaz6y
SHA256 4ea3658145d8cac5f3502b01a9b522470ea18f0c09479ebd5bf4bfa4da866e33
MD5 44c04b263295b3f30d802c8ae667252e
SHA1 724bd310c5cf23b256f07e3832ed6164e8505160
SHA512 56039f9cf284f99fc15b136a143deea202d2132b6459d38706d14ce6c9fd32026adad3bb06b7f56f0e65de2b023896b2bb7b6d01bdab4275ec73786a0db43fc6
SSDEEP 384:pNq9TekH5dwoTpt93QM89RYOxWizvV7ikZqZQ004lidUUZA1:pNq9THH5btD8TYaDv9ikZqZQ0JU5Zu
TLSH
T1D6A2CF8C5B629A53C564F6D4B3085BB024C140A678D9A7E2DF7520E5C1ADDD7ECC82F8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery installer

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
218	4308	chrome.exe

Executes dropped EXE 3 IoCs

pid	Process
1784	Arturia Pigments v7.0.1.exe
5156	Arturia Pigments v7.0.1.tmp
2712	databaseCreator.exe

Loads dropped DLL 1 IoCs

pid	Process
2712	databaseCreator.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\ProgramData\Arturia\desktop.ini	Arturia Pigments v7.0.1.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Arturia\desktop.ini	Arturia Pigments v7.0.1.tmp
File opened for modification	C:\Program Files\Common Files\VST3\Arturia\desktop.ini	Arturia Pigments v7.0.1.tmp

Drops file in Program Files directory 16 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Arturia\PlugIn.ico	Arturia Pigments v7.0.1.tmp
File created	C:\Program Files\Common Files\VST3\Arturia\is-LK1Q2.tmp	Arturia Pigments v7.0.1.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Arturia\Pigments.aaxplugin\is-P7K7S.tmp	Arturia Pigments v7.0.1.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Arturia\Pigments.aaxplugin\Contents\x64\is-SRVS6.tmp	Arturia Pigments v7.0.1.tmp
File opened for modification	C:\Program Files\Common Files\VST3\Arturia	Arturia Pigments v7.0.1.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Arturia\Pigments.aaxplugin	Arturia Pigments v7.0.1.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Arturia\is-G7CAN.tmp	Arturia Pigments v7.0.1.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Arturia\is-0FRGQ.tmp	Arturia Pigments v7.0.1.tmp
File created	C:\Program Files\Arturia\Pigments\is-N5GGF.tmp	Arturia Pigments v7.0.1.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Arturia\Pigments.aaxplugin\is-AVPC2.tmp	Arturia Pigments v7.0.1.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Arturia	Arturia Pigments v7.0.1.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Arturia\desktop.ini	Arturia Pigments v7.0.1.tmp
File created	C:\Program Files\Common Files\VST3\Arturia\is-T9B4E.tmp	Arturia Pigments v7.0.1.tmp
File opened for modification	C:\Program Files\Common Files\VST3\Arturia\desktop.ini	Arturia Pigments v7.0.1.tmp
File created	C:\Program Files\Common Files\VST3\Arturia\is-JHJGQ.tmp	Arturia Pigments v7.0.1.tmp
File opened for modification	C:\Program Files\Common Files\VST3\Arturia\PlugIn.ico	Arturia Pigments v7.0.1.tmp

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Arturia Pigments v7.0.1.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Arturia Pigments v7.0.1.tmp

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4308	chrome.exe
4440	msedge.exe

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral1/memory/1784-851-0x0000000000400000-0x0000000000500000-memory.dmp	innosetup
behavioral1/memory/1784-1014-0x0000000000400000-0x0000000000500000-memory.dmp	innosetup
behavioral1/memory/1784-18111-0x0000000000400000-0x0000000000500000-memory.dmp	innosetup

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134279591887532942"	chrome.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{089EDCE9-6E92-4B3D-9291-E5C9015DA264}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3256	mspaint.exe
3256	mspaint.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
4524	chrome.exe
4524	chrome.exe
5156	Arturia Pigments v7.0.1.tmp
5156	Arturia Pigments v7.0.1.tmp

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 30 IoCs

pid	Process
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe
Token: SeShutdownPrivilege	1196	chrome.exe
Token: SeCreatePagefilePrivilege	1196	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe
1196	chrome.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
3256	mspaint.exe
3256	mspaint.exe
3256	mspaint.exe
3256	mspaint.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1196 wrote to memory of 736	1196	chrome.exe	101
PID 1196 wrote to memory of 1764	1196	chrome.exe	102
PID 1196 wrote to memory of 1764	1196	chrome.exe	102
PID 1196 wrote to memory of 4308	1196	chrome.exe	103
PID 1196 wrote to memory of 3164	1196	chrome.exe	104
PID 1196 wrote to memory of 3164	1196	chrome.exe	104
PID 1196 wrote to memory of 4472	1196	chrome.exe	105
PID 1196 wrote to memory of 1212	1196	chrome.exe	106
PID 1196 wrote to memory of 4472	1196	chrome.exe	105
PID 1196 wrote to memory of 1212	1196	chrome.exe	106
PID 1196 wrote to memory of 2184	1196	chrome.exe	107
PID 1196 wrote to memory of 2184	1196	chrome.exe	107
PID 1196 wrote to memory of 3496	1196	chrome.exe	109
PID 1196 wrote to memory of 3496	1196	chrome.exe	109
PID 1196 wrote to memory of 3812	1196	chrome.exe	110
PID 1196 wrote to memory of 3812	1196	chrome.exe	110
PID 1196 wrote to memory of 628	1196	chrome.exe	111
PID 1196 wrote to memory of 628	1196	chrome.exe	111
PID 1196 wrote to memory of 3540	1196	chrome.exe	112
PID 1196 wrote to memory of 4032	1196	chrome.exe	119
PID 1196 wrote to memory of 4032	1196	chrome.exe	119
PID 1196 wrote to memory of 628	1196	chrome.exe	120
PID 1196 wrote to memory of 628	1196	chrome.exe	120
PID 1196 wrote to memory of 5664	1196	chrome.exe	121
PID 1196 wrote to memory of 5664	1196	chrome.exe	121
PID 1196 wrote to memory of 5680	1196	chrome.exe	122
PID 1196 wrote to memory of 5680	1196	chrome.exe	122
PID 1196 wrote to memory of 5756	1196	chrome.exe	123
PID 1196 wrote to memory of 5756	1196	chrome.exe	123
PID 1196 wrote to memory of 6060	1196	chrome.exe	124
PID 1196 wrote to memory of 6060	1196	chrome.exe	124
PID 1196 wrote to memory of 6128	1196	chrome.exe	125
PID 1196 wrote to memory of 6128	1196	chrome.exe	125
PID 1196 wrote to memory of 6136	1196	chrome.exe	126
PID 1196 wrote to memory of 6136	1196	chrome.exe	126
PID 1196 wrote to memory of 596	1196	chrome.exe	127
PID 1196 wrote to memory of 596	1196	chrome.exe	127
PID 1196 wrote to memory of 5156	1196	chrome.exe	128
PID 1196 wrote to memory of 2244	1196	chrome.exe	129
PID 1196 wrote to memory of 5228	1196	chrome.exe	130
PID 1196 wrote to memory of 5440	1196	chrome.exe	131
PID 1196 wrote to memory of 5440	1196	chrome.exe	131
PID 1196 wrote to memory of 5532	1196	chrome.exe	132
PID 1196 wrote to memory of 5532	1196	chrome.exe	132
PID 1196 wrote to memory of 4912	1196	chrome.exe	134
PID 1196 wrote to memory of 4912	1196	chrome.exe	134
PID 1196 wrote to memory of 4468	1196	chrome.exe	135
PID 1196 wrote to memory of 4468	1196	chrome.exe	135
PID 1196 wrote to memory of 5952	1196	chrome.exe	136
PID 1196 wrote to memory of 5952	1196	chrome.exe	136
PID 1196 wrote to memory of 5980	1196	chrome.exe	137
PID 1196 wrote to memory of 5980	1196	chrome.exe	137
PID 1196 wrote to memory of 5996	1196	chrome.exe	138
PID 1196 wrote to memory of 5996	1196	chrome.exe	138
PID 1196 wrote to memory of 3100	1196	chrome.exe	142
PID 1196 wrote to memory of 3100	1196	chrome.exe	142
PID 1196 wrote to memory of 3752	1196	chrome.exe	143
PID 1196 wrote to memory of 3752	1196	chrome.exe	143
PID 1196 wrote to memory of 5360	1196	chrome.exe	145
PID 1196 wrote to memory of 5360	1196	chrome.exe	145
PID 1196 wrote to memory of 5392	1196	chrome.exe	146
PID 1196 wrote to memory of 5392	1196	chrome.exe	146
PID 1196 wrote to memory of 6068	1196	chrome.exe	147
PID 1196 wrote to memory of 6068	1196	chrome.exe	147

C:\Windows\system32\mspaint.exe
"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\avatars-ALdzFvTZhvEpfnQ9-XFb4nw-t500x500.jpg"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3256

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:2356

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffdc6d6c728,0x7ffdc6d6c734,0x7ffdc6d6c740
  2⤵
  PID:736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1696,i,13644198089337649473,16129723240707637499,262144 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1932 /prefetch:2
  2⤵
  PID:1764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1616,i,2718607080625545281,894439064642646329,524288 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1812 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:4308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2432,i,156340826276597334,16119204056176246484,524288 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2512 /prefetch:8
  2⤵
  PID:3164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3196,i,1198197355819439752,9005103988966028410,2097152 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3208 /prefetch:1
  2⤵
  PID:4472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3220,i,10257835454478023469,9464807864993400863,2097152 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:1212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3964,i,878825000995697767,17498025304724286350,2097152 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4332 /prefetch:2
  2⤵
  PID:2184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4732,i,8592719335818460002,12925506502059452033,2097152 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:3496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4924,i,17180444847409034127,3623000884454958379,524288 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4928 /prefetch:8
  2⤵
  PID:3812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5032,i,6614366757058952594,11070790810680922550,524288 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5056 /prefetch:8
  2⤵
  PID:628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5512,i,17057160867605049784,15096626554219382698,524288 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5520 /prefetch:8
  2⤵
  PID:3540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6016,i,6694889339469920299,10993323056110120361,2097152 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5988 /prefetch:1
  2⤵
  PID:4032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4868,i,967160797617322181,3023244380531989422,2097152 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5944 /prefetch:1
  2⤵
  PID:628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4624,i,528547267616422638,3684198543419344187,2097152 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:5664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5576,i,2476744879267076539,13392771154624847446,2097152 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:5680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4736,i,3655542612192520209,6906612141446328171,2097152 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4828 /prefetch:1
  2⤵
  PID:5756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5792,i,7046377774377091243,7225071359246935452,2097152 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5852 /prefetch:1
  2⤵
  PID:6060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5956,i,17904470062423729100,14199234227001061512,2097152 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6136 /prefetch:1
  2⤵
  PID:6128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6264,i,10684245493910781843,9460221329848506134,2097152 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6292 /prefetch:1
  2⤵
  PID:6136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6464,i,6786115984404116245,8849432999918467445,2097152 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6436 /prefetch:1
  2⤵
  PID:596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=7116,i,15105555971729783497,642269582854921417,524288 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6872 /prefetch:8
  2⤵
  PID:5156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=7120,i,3311791706562833876,15465579544443095108,524288 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7148 /prefetch:8
  2⤵
  PID:2244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=7124,i,8141865965489561336,9765675041989593782,524288 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6832 /prefetch:8
  2⤵
  PID:5228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=7164,i,5328229360475409576,17341211314523095586,2097152 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6860 /prefetch:1
  2⤵
  PID:5440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6240,i,14865263162245011994,1009167796478271253,2097152 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6232 /prefetch:1
  2⤵
  PID:5532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6388,i,11449886839411934218,7193470359916892462,2097152 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6376 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6540,i,10863262451040876340,3652649208502379788,2097152 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6528 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4780,i,13966240376627374345,9435078255822152973,524288 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4808 /prefetch:8
  2⤵
  PID:5952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=5820,i,10746859331471296575,10388956075524322087,2097152 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6912 /prefetch:1
  2⤵
  PID:5980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7240,i,13770478405659328299,13095099990564288871,524288 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7252 /prefetch:8
  2⤵
  PID:5996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6128,i,11378262596319622836,16685355951284190326,2097152 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5848 /prefetch:1
  2⤵
  PID:3100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=3360,i,7212527300053824861,1193216978303876175,2097152 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3396 /prefetch:1
  2⤵
  PID:3752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=3456,i,939183741376292656,11142460750607509952,2097152 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:5360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=7480,i,18020212683260431705,1377553454430236038,2097152 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7472 /prefetch:1
  2⤵
  PID:5392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=6432,i,17340358369274834514,1422712544740104727,2097152 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6716 /prefetch:1
  2⤵
  PID:6068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6276,i,15586391219019205945,14803336456574357328,262144 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7124 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5616,i,12031041985358859980,6467914035120185287,524288 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5744 /prefetch:8
  2⤵
  PID:3948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6604,i,1433349059713419768,6163098434390245681,524288 --field-trial-handle=1916,i,7655682827856904726,5472424428804480506,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7292 /prefetch:8
  2⤵
  PID:5712
- C:\Users\Admin\Downloads\Arturia Pigments v7.0.1.exe
  "C:\Users\Admin\Downloads\Arturia Pigments v7.0.1.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:1784
- - C:\Users\Admin\AppData\Local\Temp\is-43BC2.tmp\Arturia Pigments v7.0.1.tmp
    "C:\Users\Admin\AppData\Local\Temp\is-43BC2.tmp\Arturia Pigments v7.0.1.tmp" /SL5="$140216,1681742534,990720,C:\Users\Admin\Downloads\Arturia Pigments v7.0.1.exe"
    3⤵
    - Executes dropped EXE
    - Drops desktop.ini file(s)
    - Drops file in Program Files directory
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    PID:5156
  - - C:\Windows\system32\cmd.exe
      "cmd.exe" /c mklink /D "C:\ProgramData\Arturia\Samples\Pigments" "C:\ProgramData\Arturia\Samples\Pigments"
      4⤵
      PID:5656
  - - C:\Windows\system32\cmd.exe
      "cmd.exe" /c mklink /D "C:\ProgramData\Arturia\Presets\Pigments" "C:\ProgramData\Arturia\Presets\Pigments"
      4⤵
      PID:1756
  - - C:\Windows\system32\cmd.exe
      "cmd.exe" /c mklink /D "C:\ProgramData\Arturia\Pigments" "C:\ProgramData\Arturia\Pigments"
      4⤵
      PID:1300
  - - C:\Windows\system32\cmd.exe
      "cmd.exe" /c mklink /D "C:\ProgramData\Arturia\Presets\FactoryEdit" "C:\ProgramData\Arturia\Presets\FactoryEdit"
      4⤵
      PID:4680
  - - C:\ProgramData\Arturia\Presets\databaseCreator.exe
      "C:\ProgramData\Arturia\Presets\databaseCreator.exe" "-d" "C:\ProgramData\Arturia\Presets\db.db3" "-u" "-p" "C:\ProgramData\Arturia\Presets\Pigments" "-i" "Pigments"
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:2712
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://codec.kyiv.ua/audio
      4⤵
      PID:868
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument https://codec.kyiv.ua/audio
        5⤵
        Checks processor information in registry
        Enumerates system info in registry
        Modifies data under HKEY_USERS
        Modifies registry class
        Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        
        PID:4908
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x240,0x244,0x248,0x23c,0x238,0x7ffdc828c188,0x7ffdc828c194,0x7ffdc828c1a0
        6⤵
        
        PID:6108
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1924,i,15883601485567126742,16369096114857553882,262144 --field-trial-handle=1908,i,17937219632830151639,11578647638769396644,262144 --variations-seed-version --mojo-platform-channel-handle=1968 /prefetch:2
        6⤵
        
        PID:4720
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,17325992818771990140,3707646302039467348,524288 --field-trial-handle=1908,i,17937219632830151639,11578647638769396644,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:3
        6⤵
        System Time Discovery
        
        PID:4440
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2624,i,15702231367557805421,13127881092953940096,524288 --field-trial-handle=1908,i,17937219632830151639,11578647638769396644,262144 --variations-seed-version --mojo-platform-channel-handle=2636 /prefetch:8
        6⤵
        
        PID:5280
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3596,i,2296485492079645807,18382754474702493940,2097152 --field-trial-handle=1908,i,17937219632830151639,11578647638769396644,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
        6⤵
        
        PID:5356
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3604,i,4803156729747334687,549028606487633841,2097152 --field-trial-handle=1908,i,17937219632830151639,11578647638769396644,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:1
        6⤵
        
        PID:5700
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4304,i,5193932406487959819,13253525305147273726,2097152 --field-trial-handle=1908,i,17937219632830151639,11578647638769396644,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:1
        6⤵
        
        PID:836
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4460,i,14217274703085238745,12114359798822838482,2097152 --field-trial-handle=1908,i,17937219632830151639,11578647638769396644,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:2
        6⤵
        
        PID:2812
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,13635199049190219473,10343516051225444591,524288 --field-trial-handle=1908,i,17937219632830151639,11578647638769396644,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:8
        6⤵
        
        PID:5332
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,13890700138123316582,3434657323351670366,524288 --field-trial-handle=1908,i,17937219632830151639,11578647638769396644,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:8
        6⤵
        
        PID:3188
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5224,i,17580057728916079862,765732371197863277,2097152 --field-trial-handle=1908,i,17937219632830151639,11578647638769396644,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:1
        6⤵
        
        PID:4384
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,3737835798009904179,10937886435907480544,524288 --field-trial-handle=1908,i,17937219632830151639,11578647638769396644,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:8
        6⤵
        
        PID:5296
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,600506461203931540,5008066987166370301,524288 --field-trial-handle=1908,i,17937219632830151639,11578647638769396644,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:8
        6⤵
        
        PID:2556
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5792,i,10398369780090816516,2771948478041053941,2097152 --field-trial-handle=1908,i,17937219632830151639,11578647638769396644,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
        6⤵
        
        PID:5272
      - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,482318689536205105,7075580106640039935,524288 --field-trial-handle=1908,i,17937219632830151639,11578647638769396644,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:8
        6⤵
        
        PID:232
      - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,482318689536205105,7075580106640039935,524288 --field-trial-handle=1908,i,17937219632830151639,11578647638769396644,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:8
        6⤵
        
        PID:2420
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6340,i,16261494002725808299,10025004305705914978,524288 --field-trial-handle=1908,i,17937219632830151639,11578647638769396644,262144 --variations-seed-version --mojo-platform-channel-handle=6360 /prefetch:8
        6⤵
        
        PID:3648
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6344,i,9673658977027352906,11475759582766530671,524288 --field-trial-handle=1908,i,17937219632830151639,11578647638769396644,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:8
        6⤵
        
        PID:5640
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6536,i,12825046698433108561,1509514845281399840,524288 --field-trial-handle=1908,i,17937219632830151639,11578647638769396644,262144 --variations-seed-version --mojo-platform-channel-handle=6588 /prefetch:8
        6⤵
        
        PID:1052
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6552,i,17749442719345636099,11295043367778842637,524288 --field-trial-handle=1908,i,17937219632830151639,11578647638769396644,262144 --variations-seed-version --mojo-platform-channel-handle=6632 /prefetch:8
        6⤵
        
        PID:2244
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6408,i,9760129780671556953,11049985141961639604,524288 --field-trial-handle=1908,i,17937219632830151639,11578647638769396644,262144 --variations-seed-version --mojo-platform-channel-handle=6604 /prefetch:8
        6⤵
        
        PID:4796
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6084,i,8122564874006486020,3689349352360265062,2097152 --field-trial-handle=1908,i,17937219632830151639,11578647638769396644,262144 --variations-seed-version --mojo-platform-channel-handle=7052 /prefetch:1
        6⤵
        
        PID:3648

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2360

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4176

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1452

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

is-JHJGQ.tmp

Path C:\Program Files\Common Files\VST3\Arturia\is-JHJGQ.tmp
Size 157KB
SHA256 476cbee43383ec87e7099d06f243784d440c2f5aed3107f1893daf77b81625bf
MD5 f4f30e8e15129d2786bfece066bc8816
SHA1 a82e8826791b53337c772a7bab39e4865b864e93
SHA512 d4584bb73c49e05dc3d0f9289d55bceeb4a050449522d859ce2802d05c85394d92ad7b25839105dcbcaf75b644dcac7219822a0edd94b22da7b656e67221f5d7
SSDEEP 1536:QQwM4suB18n7jxqo3t9YYCctWB/6C2tyaug/:QlB187jxR31CctWB/6/tya
TLSH
T123F30792A188FD57EB740B715226C94DD0637F34BEB49618A0BA357D0B3B3AE081E707
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-T9B4E.tmp

Path C:\Program Files\Common Files\VST3\Arturia\is-T9B4E.tmp
Size 48B
SHA256 0121b3869435f9c6ffcc154d6977b05b22695d83beb5ddd433d34226ecd5c7c5
MD5 3fd9a457e4fb03c9dfc15b7c2ee46385
SHA1 7aecb0ff07a387eeda70b80efd260d9d71b52e0d
SHA512 323228e47052ad7fd017ab19f0515456e31f0f022b079dbda45e735b8e1d601cc69476b84b6656d5645beba7aa919157c401346daada10b990824088fe3a9913
MD5 SHA1 SHA512

Submit Download

is-H5M5E.tmp

Path C:\ProgramData\Arturia\Pigments\resources\bitmap\predefined\is-H5M5E.tmp
Size 5KB
SHA256 09300dd492d0f481fea4dbd30a269b3b16a585bbb61229b8b2226e6e2b6d4f78
MD5 8bb3db798d4a0b7d4cb32e0634d0f91d
SHA1 50220420da9dd6c37487b80c247255128485b476
SHA512 fc6f7312dae1764a5413f66b53c4037ce1a20e1de902a57036466cb612f186855420c9c7dc10ccfc4f542a1deeb20d393755a61c038ce4594e327de8ea0fd175
SSDEEP 96:kI+fAiXfIb47GhyQJObtySvBXf+mXfEFKqFvpXGt+kF+fkL:uAivIb4/QsbESpvpvEFKqFvpWQkF+fkL
TLSH
T15AB1776A532EC9ADECA06EBAD030344237B8E526D971D354D373371F218B6DAC4946A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-6IK8J.tmp

Path C:\ProgramData\Arturia\Pigments\resources\bitmap\sequence_browser\is-6IK8J.tmp
Size 1KB
SHA256 a81c25c7216eaa99eb5b5c81ad1433a1e1fdafbb672fd9d40d63936d5636d5db
MD5 0e0a4cff072c82e8ee056dc1d8ec2b48
SHA1 42ee806b369007c87f60ab509cef9e52c5d53ab5
SHA512 649aa9ffb96fce06765fbf2a9dc2661ceb27caedb5b4af1ec3c961654776aeed4db3c13dd8c739c8540b1d767cca4bd0f29893713b169a4e1d9ecc0406de99e7
TLSH
T1A8211D89C759ABFCDC76CFE4C13850246A0F44EE39B2936C8A55CA22B1216C9C24F4CD
MD5 SHA1 SHA512 TLSH

Submit Download

is-S3186.tmp

Path C:\ProgramData\Arturia\Pigments\resources\bitmap\sequence_browser\is-S3186.tmp
Size 1KB
SHA256 b0935109276633b0362eb5fc4579035bd618a7be8bbbe4c7c3f1afdb64ecb4d6
MD5 58910735907bab4d3eb4deb0ef8669e0
SHA1 8529f17a052ae3184064816f61889d5571b406b9
SHA512 674274086da0ef95416e26be8c0680be8f3b46d61165879b7d69352c00228fead4453cf776de12bcea573e0ad4177d0d26aa4d1c7d62c7604117b5ab974747ab
TLSH
T1A82111FCAF74768FDA99DBBBD369B695012B9194D221064C9021C60F788185DFB2268C
MD5 SHA1 SHA512 TLSH

Submit Download

is-JC2FI.tmp

Path C:\ProgramData\Arturia\Pigments\resources\shaders\PlayView\BlurY\is-JC2FI.tmp
Size 142B
SHA256 6b522f56dfcc7430be59dcce34f8844b75f1fcad3aa8417641b5df92e3b01554
MD5 edd8b9780a18e1535713278d97a6efb4
SHA1 71331c763adf1f22c7da6b7ae1ca57272848432d
SHA512 1be06403c6812414508fce16846296edfdb31ecc71a5c33bbc2eefc4b4f8a913b624f9ec032dd3ddcab1daddde4d98e14205a8b3a5d9fca410f90a1042de3f95
TLSH
T1B9C08C2C088AE2742C22E1C4A108004283EEE86A2C00E8013903880A2A57080C320C78
MD5 SHA1 SHA512 TLSH

Submit Download

is-MA35V.tmp

Path C:\ProgramData\Arturia\Pigments\resources\shaders\common\BlurY\is-MA35V.tmp
Size 128B
SHA256 32e184208de6fc905f4ea8a57d1a93f6df3bd75c64a38dc40eb2c428e186f0fa
MD5 48f7ab959732450e485abfee1ff10a36
SHA1 6be0459c5904539e04d220569f8c54b836097daa
SHA512 c5ee5cc60c3b8f23912f9306b92812c6095e986939370133bf65af2d28f402bfefc7a445c0212317fb1a014b8a682bf4cff9e97cb95cb200f5a19844591d9da6
TLSH
T143B09BD14C7D44642F479C4A97334480C46D2A787DD5C79C711241651416473913FD08
MD5 SHA1 SHA512 TLSH

Submit Download

Pigments.vst3

Path C:\ProgramData\Arturia\Pigments\x64\Pigments.vst3
Size 29.5MB
SHA256 7b6fff90e2332efe2af47749c70a7e65b5462a69d2ca2301b4587d77a7c2ce32
MD5 921d6e2a9a2fc1958bb6d9865f5beea0
SHA1 4dcb1863e297dc59d41abaefb0b1403eb583e0bb
SHA512 87077ae0ea9fc885fc7c83c125bf4deeb9cb49891fd8c582c31a639d712d9cc594e3d0bd19b4a106559472bd465451ae2378166a45a43b8f1794a54b0686aee9
SSDEEP 393216:hfVjtjYnefGqVeeOuWhF+7v/eZmBLKvpDIR:DJYeJe224v/uU
TLSH
T1C867AE0EF56912C0C075E57AC95B5E13F773782443389BFB01F146295F6B3E8AA3AA60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2 Sharp

Path C:\ProgramData\Arturia\Presets\Pigments\Factory\Factory\2 Sharp
Size 39KB
SHA256 9436f7e315a08b3c34b58e0dada375f2db8e35d6c8758f4550da32b96e2dee98
MD5 af607d8bcea8a5f2251890ce2d69b541
SHA1 8960f331c9e8faa2684d05f048a7ae7c3811665e
SHA512 a2582c1c60fd5204ac0b77435647d374444f20948e0dffb30aa399206b91081d59fe5972ebfd41cbbb9f81c652933785e4d642fef65a045246a8a68c471451b2
SSDEEP 768:nRMeHjOn5phFwFMsdh4hmDr3O9EpzjdKi+kuTSmA3J3:RMwj+FwFMsdh4hmDr3O9EpzjdKi+kuTg
TLSH
T1500383A40BA4463CC5BC92F6F32B6EE563BDF6C653C5B4648768FCB8A01FD5291680C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5th Sweep

Path C:\ProgramData\Arturia\Presets\Pigments\Factory\Factory\5th Sweep
Size 41KB
SHA256 95b07df706f654394d331e9b243b227ead67bd2c235dfd081abf85049b74375d
MD5 301f133080fb0454b05a3c8ac9c1f3ab
SHA1 a9ba95f827db0fbb7bf669da4692b970fe87d6da
SHA512 a73e186ede871eefdb0fa4ac8277130b0360c63b803e36a766c4db3fe038b15e38abba9f6f502bbbac5e0c3a857b2572f2d172fa82ce07bb3b64ce6c5e8cef2a
SSDEEP 768:QNOZszSOxFDyVISU4hbDr+O9dpzEz31Nfg8SJ11yo6:QNOgDyVISU4hbDr+O9dpzEz31Nfg8SJi
TLSH
T1DD1382A40B64463CC9BD92F6F3277EE563B9FAC653C1B86487A8FCB8A05FD1185640C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8-Bit Crystals

Path C:\ProgramData\Arturia\Presets\Pigments\Factory\Factory\8-Bit Crystals
Size 40KB
SHA256 7db35fdb59150183e67e59c0ae57b9313fd75984ec8625945d2785c4b11f87d2
MD5 69fa3f3979477e67ea49204ac58b7694
SHA1 fb6259ed0b148554175447117138419e2f534e4b
SHA512 92cc99798a0142cf142bcfc80f848591610ff69c40cdea096fe4f476a685dce4560b289d4c50ff6fd72e5ac864b872cf015c5217dd80f805c2e4a97212824393
SSDEEP 768:PxBesOuzwyxloU49sDr+O9dpzqw3TDkg8SH2Ves:PxBlzwyxloU49sDr+O9dpzqw3TDkg8Se
TLSH
T15F1373A40BA4463CC5BD92F6F32B6EE563B9F6C653C5B8648768FCF8A05FD1291240C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

80s Disco

Path C:\ProgramData\Arturia\Presets\Pigments\Factory\Factory\80s Disco
Size 41KB
SHA256 237db7f9f86622b13d9bd15dbf851dd2d34053fb05a16581ba5212b3b3d29131
MD5 78c21fd6090e023c071c530eddcde66d
SHA1 fb26a278d2e137211afdb56c1d9192d33fee2e3e
SHA512 7a7c4caa21abbcd778f82dd0cbb3ffa34acceec7b393798353fa0259ba350119d45b2377d01807bc182ad8ce36a3306547a53ad60f5fd91ac4b15c0df3f5f81b
SSDEEP 768:MZAMDMaROxgXcHEArsbUqQJmnW6Ww3TDkg8SXC9e:MZjTugXOEArsbUqQJmnW6Ww3TDkg8SXT
TLSH
T11A1383A40BA4463CC5BD92F6F3277EE163BDF6C652C5B86487A8FCB8A05FD1181680C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

90 Soft Rave Sequence

Path C:\ProgramData\Arturia\Presets\Pigments\Factory\Factory\90 Soft Rave Sequence
Size 45KB
SHA256 54cac868242d724ad8b5d33507e14aed9b2c24482a83b9bd80a26f7d123e7647
MD5 1a32b4e709b9054fc44286ffe045dadf
SHA1 c0592e16668693c04c6de97a1c48da01d416466d
SHA512 f0b99f80a0a7b8245dc2017c618f7428ee153f370e7dccf9582a4cff2c4e1d81a46ad813fbc820867fdcd621d18e08c1212f277911b2a6541b1809c4ab39ec4e
SSDEEP 768:zR/HXd4Ihhrdfk36sgLSQ2K6ro79q4zix3AmkmBSi9c8M:NvKIrds36zLSQ2K6ro79q4zix3AmkmBu
TLSH
T11F2364A41B64463CC9BD92F6F3376AE563B8FACA62C5B854876CFCF8A45FC1181580C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

90's Poly Keys

Path C:\ProgramData\Arturia\Presets\Pigments\Factory\Factory\90's Poly Keys
Size 39KB
SHA256 6f7c196b53e68f1c0277deef22516913f299d1e3f0a4a1e21f14322d35f7221c
MD5 6a09daee7c68299aa5e758f4f9ca280e
SHA1 8674194dddf43d721f5c12d70cef5303e5eab4f7
SHA512 2b4d696b29e1fdae8b4aac2c1120c06924c9cf9699c0fbc8817e5827741f3b0e5dbb7e41db53c5547ae9e5413134312a46ed8a330488da5a33b41cc7c1623115
SSDEEP 768:cWx6YYBh1e0oBIh54hmg2NOIdpzV3jgfg8StJCM:cWx6U0oBIh54hmgcOIdpzV3jgfg8StJT
TLSH
T16A0373A40BA4463CC5BD92F6F3276EE163BDFAC653C5B8648768FCB8A05FD1291640C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Abandoned Bunker

Path C:\ProgramData\Arturia\Presets\Pigments\Factory\Factory\Abandoned Bunker
Size 41KB
SHA256 9cf2ddafda5886abe7de49c0a8846ab474f0fc1a681b5ebb04f5ef18430872e1
MD5 f84904e1f5a1a3d1f079b2a6cff2000d
SHA1 cffc476ff2d6435754e8afbf8371abdcf837a910
SHA512 557610de3440edb462d4f658868b6e7c3d14bb5ad648f73caffcaf82012b1320eaad85a709139e82b4df0cbaf691ccb71e10e5a18cd947f64ba5a663a7dac7ec
SSDEEP 768:6Lv9NOxz6yr8cYerh/ia6O95dpLYw3TDkg8SlWjy:6LvQz6yr8cYerhKa6O9TpLYw3TDkg8Sx
TLSH
T1231384A40B64463CC5BD92F5F32B6FE563B9FAC662C5B8648768FCF8A05FD1291240C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Above Sheer Beauty

Path C:\ProgramData\Arturia\Presets\Pigments\Factory\Factory\Above Sheer Beauty
Size 42KB
SHA256 e7a6f1cdc03dc17c776ede8f743c0f84c108204023c71e471becf195c19fd12b
MD5 e4b713b01a97b8012b606fd4edbc7a01
SHA1 12754f7be1de7a5a5d6d58e659150b5aa4e9379f
SHA512 a0e987d7a2814cb5ddcda7c5f4562f49941ce726e803558226f5cddcbb7cc14c5fb12c6174398394c465e4b31b36d39a9262b6ccfae9b283cb46e59198e24863
SSDEEP 768:Z26ilnOdCwy+oC2K6ro79q4zpKAmkmBSBqI:Z26jdCwy+oC2K6ro79q4zpKAmkmBSBqI
TLSH
T1B81331B40B64463CC9BC91F6F3276EE663B9FACA52C5B4548768FCF8A05FD1181681C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Abyss

Path C:\ProgramData\Arturia\Presets\Pigments\Factory\Factory\Abyss
Size 42KB
SHA256 07831ed15d71e5d76d3755b731cb8d354cf420195e683653c2600a486a026b34
MD5 f106af41843acbb43659233d27b464cd
SHA1 f4f1d483012e535a13e5aa96f90f6d0a3007c53c
SHA512 a061ebd0e99bbc5d7d0ae72d78e3e8e8cdc3799d54aa9bbd128b88c962f5b6022acfb39b20041d4aa19d63a27701a441b3204880c2ad930a7d7f218689ee0b96
SSDEEP 768:OGmhO1INgWBOoUtKktm+O9dpzWw3TDkg8SIDvnhL:OGmfNgWBOoUtKktm+O9dpzWw3TDkg8Sm
TLSH
T1711384A40B64463CC9BD92F6F32B2EE563BDF6C653C5B86487A8FCB8A05FD5251240C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Acid Artic

Path C:\ProgramData\Arturia\Presets\Pigments\Factory\Factory\Acid Artic
Size 42KB
SHA256 453d0c41b6a1ee23fd4d0e79366dc35dd3a50ccc0503709807d7455f173aab7d
MD5 92169ed4c9aa4984fa1cc29c3dbee875
SHA1 b838163b1c40702e18bf7ac363d07346fd222ad1
SHA512 aae396e876f3e32fb8910508daaa8cdfa434a9e2b22060a4b3f5b46c655e30e271b79517bb988452be1e71b63710e3d927943b773849567479b2496bc44502fe
SSDEEP 768:W+aNn4hDWuYU4hbDZxPOw1Bos3TDkg8S5j0yUd:W+aiDWuYU4hbDZdOw1Bos3TDkg8S5j0P
TLSH
T1B31374A40B64463CC5BD92F6F32B6EE563BDF6C662C1B86487A8FCF8A45FD1181240C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Acid Funk Chords

Path C:\ProgramData\Arturia\Presets\Pigments\Factory\Factory\Acid Funk Chords
Size 41KB
SHA256 8fb504e0820c48465699329252ff97ab7e670dc242b1be8c411660d73b545daa
MD5 122d64ca32fe1031bbc984b35817519b
SHA1 61a94abf2383837a57f988e94c0118a1e2cea1bb
SHA512 c565e33ff7079a8b187c1b63b319d29f78663a68fb17834cd6844ee56527bd10f9e42d317aa05d9113f7664221a6844e649f862aafe71ead6ee7573d3f9de51a
SSDEEP 768:0fLi2ER/yF1ax4hb+MTnmd6873TDkg8SV6N2:0fLWR/yXax4hb+MTnmd6873TDkg8SV6Y
TLSH
T1DD1394A40B64463CC5BD92F6F3276EE563B9F6C663C1F8648768FCB8A05FD1291680C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Acid Research Systems

Path C:\ProgramData\Arturia\Presets\Pigments\Factory\Factory\Acid Research Systems
Size 39KB
SHA256 214cbce4d293a8f43c253e407226d7a39817c819dd3786372988cacd6e5c4e56
MD5 df46d43160975738cb06e0a641943efe
SHA1 aaba88f268348265bf6031e7146e2615ac007e0a
SHA512 76426db8fe9a5461b423a418926a3307179ee82272e5f93d8d0afdc0ce303f3b48ed3acf0aa1623ce684370a7e5c4438c717c56d3412e7aae4b08c4e626d16ee
SSDEEP 768:JyqquQ1OIXDKkSyTr14SSXoODdpEWwjTDPg8Spqm:JyqqZXDKkSyP14SSXoODdpEWwjTDPg8Y
TLSH
T19C0373A40BA4463CC5BD92F6F3276EE563BDF6C662C5F8648768FCB8A05FD1181680C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Acid Sequence

Path C:\ProgramData\Arturia\Presets\Pigments\Factory\Factory\Acid Sequence
Size 39KB
SHA256 bfbc088938cec70f07a3e91c3059342382f63b6f9aa22133d2ed5a2961093412
MD5 327ffafe92a1821a14733e7cb61cb632
SHA1 415d9f5a0adf191ce85982677381b6a6e1a2022e
SHA512 4a8549a1fb97539651595e695d617080f7c1ee15c82c1d61b42aaccd1d621a0d5a28ac5ef16dbb259ed4f68aaa7339629a817be2c52cc51b77bb43cbbe133e58
SSDEEP 768:Xzg7fGgOeSbOITU4hdDy+O9dpzWxPTDkg8SGs9D:XzEfZSbOITU4hdDy+O9dpzWxPTDkg8Sr
TLSH
T1B20364A40BA4463CC5BC92F6F3276EE163BDF6C662D5F8648768FCB8A05FD1191680C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Acid mouth

Path C:\ProgramData\Arturia\Presets\Pigments\Factory\Factory\Acid mouth
Size 39KB
SHA256 a45e9db5875366be57957dcf910200dc9a8fbc5e40e9a15e9b7dc90c2a64c633
MD5 8ec5a899b2be2e47b6e93cb401e49226
SHA1 7cd191af0fdf4ac201c7dac216f718d08ad7af2f
SHA512 2617c33159243f29793f1ed0413dd8bd95076a2ea406b81e29449798fb7d198acce238cf7dab341c649d867c78791e0f9f877b25fb3f6253b842fded62be2f48
SSDEEP 768:dxZ1NOIXDMiMYP4hbDr+O9dpzWw3TDkg8SMa5:dxZ3XDMiMg4hbDr+O9dpzWw3TDkg8SMM
TLSH
T15C0372A40BA4463CC5BD92F6F3276EE563BDB6C752C5B8648768FCB8A05FD1281280C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Advanced 6-9

Path C:\ProgramData\Arturia\Presets\Pigments\Factory\Factory\Advanced 6-9
Size 106KB
SHA256 3623bb32be95928bafba48754e6eac26febaff822311b1b44ff1c8eb253c41b4
MD5 57fbff3850e2c6f14f4f211d5bb5856d
SHA1 96749f63e24e3dd8966f1771981319a827320888
SHA512 ce3d3075afcb20b0478fe8a21cbc8d26867c5774e5c8f7c8e1817ed602ac9696aaae19dd3a3e5577c70be6e5411f83b3267ae755acc2b4f33fd7b4386abd0e9d
SSDEEP 1536:HI8oG0OAQvcKwakrtNMCNUiNecbIQZC0HCXaYTMw+U2tX:HIdr
TLSH
T15EB343B02B24512CC52D83B7F7A72B4A22FD7E8313A5F4649678FD6DB51EC626B091C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Afterlife

Path C:\ProgramData\Arturia\Presets\Pigments\Factory\Factory\Afterlife
Size 41KB
SHA256 214da436864004eec3c540aac11e069e378eca5eec42bd07219a382f2240cb66
MD5 ed2cb097f2cd1466c22487e69ccadf66
SHA1 0a0263b8f2a85242ff30f806bafa8a7525786ae6
SHA512 fed86c4a3b042d38b436b3c042d2cb5887d0f9b36d0a562d9918df02081d0d8e2c8a964eb657d9f81e5c3fd6092857d390e56ca3a00b573459eb0f90d1d961af
SSDEEP 768:VmHYUlAOIFibjoU5KSk1Em6W6b3ZNT3RTW23k:QHYgsFibjoU5KSk1Em6W6b3ZNT3RTW2U
TLSH
T1551374A40B64463CC5BD92F6F32B6EF563B9F6C662C5B46487A8FCF8A05FD1291240C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Agressive Squared Bass

Path C:\ProgramData\Arturia\Presets\Pigments\Factory\Factory\Agressive Squared Bass
Size 39KB
SHA256 138e7b1104dde18a2036c33d0ace8ac84aaccc49cb3f69860588651da051f616
MD5 950d7b3ad77f0321a261ab0c0af93199
SHA1 2d36adfeac50e215e8d3b775f46c1ce25945a0b3
SHA512 9ad5efe214756ec41022f777f2fbc273c16566290b10c7aac05db7e553495c75452e7743c78e497db232592d1598f63bb27dbf497bad3633348637be553400c4
SSDEEP 768:VrZMMUleDyXfITU4haUy+O9dpz433TDkg8STHuC:VrZtDyPITU4haUy+O9dpz433TDkg8ST5
TLSH
T19B0362A40BA4463CC5BC92F6F32B6EE163BDF6C653D5B8648768FCB8A05FD1291640C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Aioliane

Path C:\ProgramData\Arturia\Presets\Pigments\Factory\Factory\Aioliane
Size 42KB
SHA256 5b8040b7a2c80ee3168105abf54cf979a48b0bfffa2032677a53b57ec11701d7
MD5 8de1c512a5f58d4d8046ca7b3522145b
SHA1 6b8345677050a101828607c82a1f0420c58ed198
SHA512 11fd951f4d4ef2ce4040148053834a2079b8efc1bb92a60962f6c16cc2618f4ae89555464f94e47b573c726330017c90c52a9433fbb1b301601afd1ac47505e8
SSDEEP 768:FoodLIT44NSYucpE4hbmE+O9dpzs7TDkg8ScWO:FoodL+SYucpE4hbmE+O9dpzs7TDkg8SQ
TLSH
T1AA1353A40BA4463CC5BD92F6F32B6EE563B9F6C652C1F85487A8FCF8A05FD1151680C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Alarm

Path C:\ProgramData\Arturia\Presets\Pigments\Factory\Factory\Alarm
Size 39KB
SHA256 dd79d277ce471de27f4fb5fdfd6616e45de9bb81cfaf01535d719500b57f367e
MD5 49996d091ee26e75e729ba1dacc47a6c
SHA1 93070eb991d0362d76bc4babcf9a60287d4b28af
SHA512 65602b65213defacdc74f2a77a025f09283a0118e166f26db8eda78d9084b2013126dbc43bf28bc5315df57118e6531f08fc5adfdd3d4d6e2a6670a93232a4dd
SSDEEP 768:8ybaNOmwwBITU4hOD7fO9dpz1w3TDkg8SBbk:8ybiwwBITU4hOD7fO9dpz1w3TDkg8SB4
TLSH
T18A0363A40BA4463CC5BC92F6F32B6EE563BDF6C663C5B8648768FCB8A05FD1191640C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Alhambra

Path C:\ProgramData\Arturia\Presets\Pigments\Factory\Factory\Alhambra
Size 42KB
SHA256 ffff007bd08a622437136f2ae7d7e98009debc7095f04ee790ef695a742f1282
MD5 d0d96c3ae2c1b99077889a902d71724f
SHA1 50e6cae672702931836ae1f56ea1660766b26c36
SHA512 bb77757dc7e60cbf226f90bbec69fdc681b5daf16274af193f4a0e5aef76f120009b00eedf84b13e98ac2710d9ea2a389a1a9cafe5d504d01523d5d032997438
SSDEEP 768:80idffxt8yfjOp+4hD1/WMm9SIq/TNkCOv3cw1C:80idb8yfjO84hD1/WMm9SIq/TNkCOv3C
TLSH
T1771383A40BA4463CC5BD92F6F2276EE163BDFAC752C1F85487A8FCB8A05FD5291241C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

databaseCreator.exe

Path C:\ProgramData\Arturia\Presets\databaseCreator.exe
Size 11.6MB
SHA256 a98448a5902e15650b8ddaec85e03a833d5fae344a05127aa78e45b44dd17bce
MD5 ce6c0de09a4506783c459c8b4ddbc596
SHA1 1c66251b7d45523f71b655abf4f097bf8e6d09e2
SHA512 1e1eba8dce324548758cd970f8182567bf184201744411be57117c4fe3ec3daca5fa33260332bc798a28d6854cf3f8abe36e871ae59b45acfc13927f23bcab54
SSDEEP 98304:0W6WWOEI36eOQ365EF8nXUumzUqglm3+0g2HDE3EjErToZuF0R1:f65eOQ30C7upC+7kuvrT3i1
TLSH
T130C6BF46F5DA12C9C0BAC07C45ABE612FA323CA547285BF701E186751F6B3D07E3AB61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-7QRKS.tmp

Path C:\ProgramData\Arturia\Samples\Pigments\Factory\Internal Presets\Sequences\Presets\is-7QRKS.tmp
Size 15KB
SHA256 478146d58df3d4a5ddc7bb22243d2bfb2fd8aba80aa966b30e94edd45e05379d
MD5 8be0f2d14494988f6263a6f8484301d3
SHA1 0cd914eda96cbcd65ad6dda57b7a2261da2c7c6e
SHA512 4e2217866ea0e833c7b8709ada95ac8d1b987af85fcd3b52ac627fd719c9be06d7cde6b060cadcbcb559df898e7264c6f6cd0b45a2e8d629b2e640a6e2f4ae1a
SSDEEP 192:55p/h0tQ3ivjR1Q/Oxt13oyiQJqjHzwn+Q6baW2n0qDiPIjbLG+:5LZ0iKj0GxHoDQuc56S5usnG+
TLSH
T19162DD62BE04EC14D571480E8EBABAD34A8D711F3ED2879B5C61ED2A489FDB03463F54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-BPM06.tmp

Path C:\ProgramData\Arturia\Shared\images\vc8_images\packs\is-BPM06.tmp
Size 17KB
SHA256 3e8dfaac3ff6939629b2b2e0e0cb8f2c89e62f4cd9301f8689c3f196fffa0341
MD5 15e2a3f0dd838086a07c636b235dc63e
SHA1 458553fdad71c42cdc234c573af6118dbf9cb9f7
SHA512 37e24f3383d67bb7fe007fbe9153fdf2e7a46000209c0098365c025479e957586910be089686116585e1751eedbca4ec97ba7e3538254d75d58c29d443d7a624
SSDEEP 384:mDn2gX/Xnt7fUvY/usRswx0o+jfv4C5psEOoyzdTUhKD9e:m7t7fKYGsF+7gaXOTzdgge
TLSH
T15382D0C86F508C154D1FF8D99DFAB01CCB370BA8DD950D56AC8C860D2A90A9CDB19DD3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sqlite.dll

Path C:\ProgramData\Arturia\Shared\x64\sqlite.dll
Size 1.0MB
SHA256 90d2e953ff8aa5d3ae0c07ab3b03cb001deac428b62411c42dedab28761f4025
MD5 28381cc3ed948237a96ee6bc31e5abd3
SHA1 37d48e3b0e301b73042a4bb41a97eccc8d32601a
SHA512 64b6db3cd5018ac3860a40f5eb34a0d01a8d4925e0e9eea064fa6011c6899622334ac3636e581a5fa0097699a4f507d25196cd8854d76377b853eec19e23998e
SSDEEP 12288:JNR6aQcI5DCt6MO4V76Lo7Swk2YGgfZvn9gUJx1KcM09cwBTl3:JL6a+DCt+456LeSnXZlgLSTl3
TLSH
T18E258D47B2B900ACC857C1788A579607E7B278051374ABDB55908A6EBF33FE1267E334
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 5dd224e05eef52cc95b10d0ddad68a4e4f56babcfa5b4ed922610c248cb800f3
MD5 8e03d2c48f3e350b9baa35e501f08866
SHA1 57822c7484523fd2f9f331c910c7310073eb19b7
SHA512 f670f2f9060e6e97f1356598f95f976b6f29531d2905be1209d58784e536f70c4c0bd3f849153eeb75c784794e6fcb75887e7a4bded9438c09407c48790f89d2
TLSH
T1B4E02B97C871AC7B28FD4B1810914B45EB5513572BD08A2F3B3DC20C4FB5A2A458AC5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 50KB
SHA256 afbf0ff01fc8dd8c70876832ba19a95ba7f9eda96bb3f0989dae00650c655bc5
MD5 c6d70a04eee4728c8a76098ebbed9208
SHA1 5c21d89f1f7a36b4378e5a43cfd04b973c2a8355
SHA512 001a5f6f926c36288bbfd336804762fb97dd6c5e9960c04095b0c077e969c8ab8046592e752e6c52ab62e9c8ca1ce5f648967a566d3f6da7bb3cca3647f660d2
SSDEEP 1536:gUSTxL72JTHAizJms5oXtbrcDW2xbcm3Ii+/:gUST972JTN0T9YbcgIiq
TLSH
T19A33F1D60E2734FAEE8EC525286BBF1E15C52CD50C3490E93C86DE8A606CC4615EF8D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000023

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000023
Size 163KB
SHA256 d191355161c3ea864dee66820a42427126776522a4f4f5713a11ce56663d6084
MD5 36654c2963a0d7354cd2ecbdafe039dc
SHA1 8ac66899ce36e3ffa17c5aee723242d0e6799d9f
SHA512 ff0eacbae6d98a09fa4987b2249464a4d47434d775af0a72eb66cedc4362e466bfba11b8089f6fa1e5aca98ff213dd322439927890171005c0e18fa14a4bc13c
SSDEEP 3072:rBvHtHDLKRYIzvMhKcHMtCkGfgh8Qy7Am00/0q3BqML:lvZI7eKntPGf28QyUmNx3
TLSH
T16CF323DC64A773AA8DDCBEAB1D654FE32B0B26D38298CA811F3142F5D134D887787254
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 0f2329383119d97f988f6a3bd2359eac415bf5c402a08329d81029cba0d0e437
MD5 2ff3d658cb4fa187b3a9e05f6072ac3e
SHA1 9d5631586588ddda162289b7a77d4b1a00653296
SHA512 7d23e68e881bd253911e6f0647ad9af33c2b1309aa3866ecdae23b5a4def6fb2f72e488413cffa3d8c74ba80ac7c8e052767de18b41ac2381e30a91fdb2485d5
SSDEEP 96:7FRrjNNZpv4UCEkoRWi5UymXWQDeskRL2:7/NN3pCQcfyQBDescL2
TLSH
T1AA91A1A4C380B1DEEB993E7863F1E78632B44C3063439F47CD503A3864273A846AE147
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_wetransfer.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_wetransfer.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 19KB
SHA256 db0001ad942c1b8bb411f47808cbdca1853d64a334485fae3c6f7e9c9a6314f6
MD5 42c8dc9af04fddb553f9b6fe3212393d
SHA1 26ea3448cfaa98cbd330dd5aedab632aeaf1cbfa
SHA512 69c11c8659283a49fb5cfa8c833d85534498dc67b3ee9da482745eaff23ebcfa10b44a08ba5e49e9bbbb9ccbeb25a880fe827c810f77ddd20307fea54da7e4b7
SSDEEP 384:DWNCI74Z6LjTebrmiIJtJ+XSGvdeKzaIJim7b1J/RkNwrl9flkWxcC2KqRGGxV4X:+zckAx1dkzlQ
TLSH
T15992E2F7C3E4873DC81552F46B146E17CD2A0428636D3C2785E9EE5AE3E24BBD28164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 15KB
SHA256 625823585e93418d644ba8830b1c27d074f2d3cb4d6aab2a537b1157519ae264
MD5 18305558c01e1ac622b01b207ee08732
SHA1 43f40186fb0f5b85c4e4bca46af7380004d4743a
SHA512 ed251806041af92efd9e1e2a94def3f800fe71e86c33c82c99dea52d213c8609565483fe324fd81d4f27cc564399ad94d66103c2c9e54b2062e72503eabe0543
SSDEEP 384:DWNCI74Z6LjTebrmiIJtJ+XKaIJipAjGIky1J/RkNwrl9flk2HxcC2Kq7fRGGxVW:+zFkAh1d+zyv
TLSH
T1AB62C0F7C3E4873DC81552F46B106E1BCD6A0428626D3C3785E5EE5AE3E24BBD28164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 18KB
SHA256 6d89eb5e487d98a5bfccf1f6af68cabdbd1d4e8fd00e00f1e820835976189039
MD5 dad63944593a81d6cfa5e0a39511bbd4
SHA1 db9e89990882f7f5339796a7bf08665efa48cf04
SHA512 38c44ca2a6841b52361b4cae291ef892971e600193e90025247319e3f6225b824cc399109377d33a4f62494d10d3990899a3f6ea908e8d3e3a112ff418ff0f29
SSDEEP 384:D0uG8WyyVm+zeiAmiIJtJ+XSGvdeKPjsaIJimib1J/Rk4wrl9flkWxcC2KqRGGx0:Kzmkdx1dkzKgG
TLSH
T1CC82C0F7C3E4873DC81552F06B146E1BCD6A0428636D387785E5EE5AE3E34ABD28160E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 c757d22e98dd2285406454c03f004e8fadb4e0c76d3b82c81c5af24c580d5ed3
MD5 4af7b24bb64bcfea65baa4ceba8eb72a
SHA1 ec7ffa08bfd50551fdd41e70be90cf75a0193684
SHA512 219346a4928d04a8e3bcc52b4d82055842fab4548742ab89eae24a4fb942b60fb7de5d1d80f1ce0fc992633e7348cad10187fde080dcfab7e34f2ce463ce28d2
SSDEEP 192:DRt0LlNiY4XA28fv7hMNPRpWAo95Hsb+WNnv8dcGvY9Gek/fHa9u8sDHVyIsnAUp:DRtyHiC2839aXUrwkPY9G3/PaAhe
TLSH
T1F362C51EA910793B6CCAC22AF9217B57D7F6106275902E84F7FC8A5C16E7ACC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 4450c1e24f3c54a6dbcddc3f19182cf111fb2bc2e03aec3804716bf6830c2fba
MD5 df288978d556d5490b8a2ff13d822f95
SHA1 345f227423f1bca1b876b5dbe41ec2773224a2b3
SHA512 ad98f00b2d4ba92ffecd6a28eefa76680d4d6c9c7aef8ac8dc5c1788ae1082f4f91b3b994a0e65dd2ea786e179801bd22a11a95976fd3130d042444e9b70b855
SSDEEP 192:KRtsLsNiY412ONfv7hhAPRp2W95Hsb+WNnVS0Mek/fHa9u8sAHVyIsnAUgtaJ:KRtqAib2ON398Xtrw00M3/PaVh8
TLSH
T12742E72EB910753F6CCBC21AF9263B43D7F6146131942E84EAFC895C15EB9CC222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 36b80313215ab9372f8873c7158504160ed9489cce94744ee77852fa8c65620a
MD5 785b0bc334d01dfa8bb0ffa91b06f3ce
SHA1 6839de89241d2f13a7a0781d18bc8f0d803457fd
SHA512 842c4837fd6ac44adb59da4f0c713c15990d23e0520f695598f03202e1983a395f0ec2895ca23c18d3bf94fbd713708d9a0f6e35e50ca1bc7e69a88fb81ed53c
SSDEEP 192:KRtsLsNiY4XA2ONfv7hhAPRp2Ao95Hsb+WNnVSMcRe2Qek/fHa9u8sAHVyIsnAU/:KRtqAiC2ON398X0rw0Y2Q3/PaVh8
TLSH
T14F52E72EB910793B6CCBC21AF9267B17D7F6146171902E84FAFC8A5C15EB9CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 bf7c372660243aa08bc7745e9796ede1619b32b597e0f13f838f69143a13d64c
MD5 b404cb5e1e07874d9870fa9cb1131fba
SHA1 b493449b173c8673faa60dcb4ac67fe2c40db040
SHA512 ac521f1141706b5f2e6ecfee0176f78ebe616c68754bab1d5873e395894f95bce7d8fdadfd7f940e9366d24911ce381ebb967c89bbe65b3bc27fa9e820e49ecf
SSDEEP 192:KRt0LsNiY4XA2Pfv7hhAPRp2Ao95Hsb+WNnVSMcrwepek/fHa9u8sJHVyIsnAUge:KRtyAiC2P398X0rw00ep3/Pakhe
TLSH
T16752D72EB910793B6CCBC21AF9227B17D7F6146275902E84F6FC8A5C16E79CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 32ae67c18e0135cbe4591f33a60fe2c407f0df1fca6901bdcd818d011bfd40c5
MD5 4342ddb4f2aeb5453e4e1216eb46e857
SHA1 bd4745a72e2a6b6c3e5c044d614104d99021fb3f
SHA512 f2e56475cea0977d1598bca3a12f45a6ffe4869fd8441a50c0098a453ea9bd31e7b8959ff9741308d9520111b444e0a6d74048b8733f53bc8827a053a349a41a
SSDEEP 192:DRt0LlNiY4XA2tfv7hMAPRp2Ao95Hsb+WNnv8dcGvYozek/fHa9u8sJHVyIsnAUp:DRtyHiC2t39tX0rwkPYoz3/Pakhe
TLSH
T1C252C62EA910353F6CCAC22AF9217B57D7F6106271942E84F6FC8A5C16E79CC321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 8906bafac3ed0c8a3b0aec698a81e5f6ae09cb25dec6e7d26971924ea85ee5b3
MD5 03a3e5de0ba2d0f3c86165229b1c5d2a
SHA1 de4937a666738e18dd35be52ebc2a6d07aa35428
SHA512 b4d164f8f386e68f18f13f645f7a0d50300d9e4d1cd30ac212545239101734b1ccfebfeaa24ce1b70c322f353996ed2fa0ef94de674dbbfc78d5abd54a392160
SSDEEP 192:DRt0LlNiY4XA2/fv7hMAPRp2Ao95Hsb+WNnv8dcGvYozek/fHa9u8sJHVyIsnAUp:DRtyHiC2/39tX0rwkPYoz3/Pakhe
TLSH
T13D52C62EA910353F6CDAC22AF9217B57D7F6106271942E84F6FC8A5C16E79CC321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 7f2c3bb0b002e4d7d49e8ebd780daefdc42e5000eb8a51c5ee9d65c53ca14658
MD5 238ecb1a3e1c98f2912f099b0b7b8a1c
SHA1 8ef41ba79237b6d6468df95cd855e11fa292bdcc
SHA512 ce27ea08a3f6036dcdccaf5606f131bfeaa96a34cb88aad7fdbbef444d0eb669f860c23142443bbec8334482763511fadcc152f5ae3ac7f75fcb910a49c20877
SSDEEP 384:Kkj+F7KxkXqKf/pUZNCgVLH2HfgsloD7pLuLcSjsNXOD+F+ErU3qsHGZ45hUeHD:Ko+F7KxkXqKf/pUZNCgVLH2HfgsuD7pY
TLSH
T16D72F9677C4C9A3B0F94C6CCEC277B4FADB6024B65E9886542FA581503D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa813c9ad67834ac_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_0
Size 62KB
SHA256 a7b5bfd2cce53bb6e40f7ded1822b5eec51f4ae409382b5d9e5f758789b6d4bf
MD5 759b4d5e0ff4ada03d5fccce7f046b7b
SHA1 e8d0d462954e013e8cda85e5061dee500dd5dca2
SHA512 243603b4c11efe84b9ec47f2932952e4e55efaca850d759423f4a9a3f5b0bbcf7ba5b8a29473ed8049ecf008c9b6ee3222fd18549ae14654be0581093d67a23f
SSDEEP 1536:/waGJUKEXr6EYQ85iwMiJXH91gb5MV2VhO/gkU0nIjNjHWlvkLNTo:HsXH91gFRNjHu
TLSH
T13D5319E7341B00A21FE776BFE856E9E5BC33615D6CCC8954FB30892D0384A7C166B998
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa813c9ad67834ac_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_1
Size 104KB
SHA256 6d0213ed8cfbf4dde994766c3d5792caeceb17e6db550182e8c37b8e6ac6ccc1
MD5 a0f04ca1c7d7e288abe11fc9c7b1e922
SHA1 2bc554c1699bca43495e8f5718681f3de917d8dd
SHA512 f6f091c5e5aafdc31ff459e0383b4cd9a57bf844f4a614c474eae2d1d65de62527fdcb086dc4f534530f392c21d046248d9da5524719a6db49ee830d26f98e9d
SSDEEP 1536:JocECWU/CpnqcMoHDvm8hzbbOGPRHGKRBwlSGFGcrqM/aCl1TSp:/WSCZ88IGoNFzfpT8
TLSH
T162A3ECC2BF8A7BF1CFB7257A54D2C1A6BDF291CF1FC1C126E561920A189816912F701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 04f0a97d6af2abb779fb74967b9dc449ed1e66a16e2bed4c92c9f571130c0509
MD5 41cdcc0ee9b90a43326133fcf0b3826e
SHA1 d2e951f01c454b86505e0b6c785fc43d2c520641
SHA512 be76e8137dc2ea11f67b6b626e3a573748a50f52df77263a1f7180d0208881f0c976e146e4effa76f759c79b9413433f39aa66cadad34a2d3831fa3ffcfb6843
TLSH
T16EB0120080025A11C04612B0129614C87124BF209A0A1B0243F07A33D8375A98414050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 168B
SHA256 f5fea6c4a5ccd9e9a8b54da65b127ea0746685337905d820833e35e2b7138d10
MD5 aa485121789edf674b3aecb54428d33c
SHA1 59046a7eedb8b5b09251d49eeae2faa0bbd95efb
SHA512 a21399534d3ea70e9827dbc0975a80650ec75bbf833c462bc61d89ba94b91848bd9d68e95debdb37946852b0a119e9ef971730c2ce611a296ef4730bf836832e
TLSH
T1C3C02B00CA017011C00203F04161909870F45EF8A30E0BC021B0582F5C3253580401E2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d07a.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58d07a.TMP
Size 96B
SHA256 79b8352333a678ec7c5cf89a6d9dd0ae7677bd487a4dee32b2906bb0bc2157c6
MD5 20a4b79d3011053605b5b3fd48e6a20a
SHA1 539b7aded0da5170f8b4b12bc25b262847b2ad4e
SHA512 f627ca3a23cd06980dbf46ee3ef6eec8ff7644a38cb42086c201ff007b0c0a07c319736c2849bf31460e16a84f10feb6d2f9bf0de0102a5c4b45ce8a7e7053e2
TLSH
T178B00295C1626216C04203F0259996E971B0EF6AEA43962692E03B67DC35672852D260
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 a49b688972ae3120fb9a4a5a6409f59ae541b7c80f75c2300854504659495281
MD5 c18669ce1db8ea9b8c57df7f484ce14d
SHA1 bc0337511039657bb79530930090000b342f6113
SHA512 5e5252dc8cbc592beb45d8d9d25585c1f558403a5ccfdfe5a4ab25662fb72f4d2727a011ecfa3caa875bbdee0c4e42e88f1db1fbb1f179bb6df9860376bf178f
TLSH
T1E0A0021435408111C955077129C68146A370BC754325824674D11857C8D01904B01005
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 312KB
SHA256 62dc149a2faced97f79059e1e78d46bd3bb29edc97a0fcfd6707bc13b9ee334c
MD5 e344b0594d70b8401361f325f55e656e
SHA1 3535b49fe77b18d2c9f969b3b25bc42629914c1b
SHA512 eba9a73643242db39e72fe0ddca8334040fd641575675f9f9d576cb5f331e2190ccd71fe061ef6da4db202c81b205516a3e9dfdad15e7ff2a236da2b36780f2f
SSDEEP 6144:0QXERxS1g+0fZMLpoIzZL/0iK1L/Xjh59MMSGymoleFH4iqZ/ZLW3ExQ:GRxF+0frIzZb05L/1XTSG3oMjqZ/piQQ
TLSH
T10A64237AFBC42E3B2D299A207003AE517DF588DA40747206F76AFAD72C55E837441D8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 232KB
SHA256 e43b09530ea4b3108cf8b148b74b7d27a1fb18de3a2be0403502da2dad46c9de
MD5 d1edb0e22a779849dde1e68eb2e7753b
SHA1 074dbe6a6785db90e404160b724a08ad39298b1f
SHA512 95d62a7bf7cceae7f839b2dd4cfa4464cc0f01d2135855e6553bc2a65fb2ddc3a5825feaec88ec52e8902fc3c280fc87843880e0d534563ea800d5522525bed1
SSDEEP 6144:oPIzZL/0iK1L/Xjh59MMSGymoleFH4iqZ/ZLW3ExQ:CIzZb05L/1XTSG3oMjqZ/piQQ
TLSH
T14834133ADFC52D371E7E89207143DB566EF114DD80346213B5A7BAC72C92A53B542C8B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 214949cc92bf6c20da9ee01679fa3dc518f26432556b5a6bc8c741ffac25da3e
MD5 84bfdd035eb1230cd6b46f43bba9ad07
SHA1 1fa0217739938754a15bda07d9e610d906eea0af
SHA512 65f8a8c265efef8da209e2fd01399bf623739203e92a10716dcc5acfa57319c315099c9b60f166f2dce4e2727549e2546df22ff63181c7520ee59c0a2a342738
SSDEEP 1536:6byD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:4qfd7NtZL8cHQRZEQ6Sps9
TLSH
T113C30237EBC31F375D82CB64BA534FDA97B644A99030D301AABD3BEB6C93451644249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 232KB
SHA256 d75d7516bb80836a088497cf909507c6d20ce2007e81c7765548efc7f0548adc
MD5 be1a0fddb2ba2bfab141528281550241
SHA1 09a28af2e0aecdee7b366b82b11e771e2a2bb30b
SHA512 ec8ad96047fa52b086120b91c662ff96d8f111145ca4608ac4e857e92ef02f8478c1d79de2389bb9b9e432fe978f87d6ca9a50cceec7c8b0af305286aa1b2d4c
SSDEEP 6144:gIzZL/0iK1L/Xjh59MMSGymoleFH4iqZ/ZLW3ExQ:gIzZb05L/1XTSG3oMjqZ/piQQ
TLSH
T1F0342339DFC92E3B1E7D85207153DB566AF214D840756323B6B7AAC71C92A43A183C8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 223fd3f5ef533366712fb49302b6597b3f79dd07583d714196b102a7577815e6
MD5 7ed451745971bece2cb30b552572e9d5
SHA1 879fd78e2d465966634b603444ec316128198df9
SHA512 b19229718edcc9adf765bfdb530db53f878af1bdecd65d31f5e51e39985a947de6f253a0d3b62574b901933c328f2096ce5d787d554c05524788e471109a84b3
SSDEEP 6144:4PIzZL/0iK1L/Xjh59MMSGymoleFH4iqZ/ZLW3ExQ:yIzZb05L/1XTSG3oMjqZ/piQQ
TLSH
T13034133ADFC52D371E7E89207143DB566EF114DD80346223B5A7BAC72C92A53B542C8B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 231KB
SHA256 9c153c06975f87a995173eb09572f6011d154e3a3ba8e24de6bc1ccd20423ba4
MD5 ab13dca852459542cb1bfb5476bb3b20
SHA1 87a83b0786827db739886c320c8440d6efb03fc8
SHA512 81ae0a1a5ee7dfe5329c300256b90b4248e19ab4c2d7cf41cb04f11dae4c5a4486b7c3a098b342b8ff2fc542b6a4aed4a65ad6b277cc49ce48a1975d791016f9
SSDEEP 6144:iIzZL/0iK1L/Xjh59MMSGymoleFH4iqZ/ZLW3ExQ:iIzZb05L/1XTSG3oMjqZ/piQQ
TLSH
T1E6342339DFC52E3B1E6D85207153DB566AF104D840756323B6F7AAC71C92A836582C8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 232KB
SHA256 dd8f04466ce3de9c1838613fa67e21f13b9e35f4229812751d7420319a5c2fb7
MD5 18673a2e7bb9158a61ac065346b935ad
SHA1 fa8f0d0811ccc17dcf628cdfbd116e47e629db45
SHA512 1d948a2cf680b58e8895724509fb2170e8e2e855523b4cc05cb1739565f8d7936fd0b0a05a5156ec056221f7a330d1b33fcd4e976424dfac2764b0193c680642
SSDEEP 6144:XIzZL/0iK1L/Xjh59MMSGymoleFH4iqZ/ZLW3ExQ:XIzZb05L/1XTSG3oMjqZ/piQQ
TLSH
T1C5342339DFC92E3B1E7D85207153DB566AF114D840756323B6A7AAC71C92A43A183C8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 231KB
SHA256 fa67f1956b78eabb867acb49827b324f4fcbc96f3ebd059ded80b84609346df2
MD5 7d28fc0b04e06632817d8c323dae7967
SHA1 a14f2f54e41493dda64c5ce69cad7e1432213846
SHA512 d581ecfd3fb4b260fb73fe9f995b9b2a72e42c9a12cd2f987828e0c0ad11e12ed6e597756bf146eb3fb1cff28c8fa5ad3b45a27b4fb738aed928e908a523ba91
SSDEEP 6144:gIzZL/0iK1L/Xjh59MMSGymoleFH4iqZ/ZLW3ExQ:gIzZb05L/1XTSG3oMjqZ/piQQ
TLSH
T1EF342339DFC92E3B1E7D85207153DB566AF214D840756323B6A7BAC71C92A43A183C8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 994380ffd288a5f1a9acc9eb76a487a55b12cc1daec839d811240f6cbdc4da3a
MD5 f5ed4946834be586ac6410ed88740a7c
SHA1 6108ce368e8b3bb8012956bb25606c3b16835c7b
SHA512 76bf60b37c50422ab125edd3da70629e685408a106655a9b7e5cb6aa7b6a9000c76d8ac2f5dc85e58e893b61bef9b539b9488ac894f1fc1338a58944dc9f4711
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P77:fwUQC5VwBIiElEd2K57P77
TLSH
T1E5B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2deec6a95ec52614194a78a23d73e7d01a237bb1c36f177b2d079e01904bbb02
MD5 1a081c1a44490c52836d469b86ac0024
SHA1 afd36b8efece8f0b6da93e52448b0b0b92b7f2e0
SHA512 19264593eac6e8fc2b1fc661bfd6a9ea2c8b80318a9fd4358c9f04722074d457d449cbd4766b079f4cbed4f9218c79e4304ea56aee93a1d3484cb9deae7c7b51
TLSH
T1F8D02320763CFCC1C628117191218F007B355452315BD14AF2558C1D5CB50C197D6BD1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 556d6ce853f7e1eba3697d0e815bb220ca117369adb57a5973fa90ec6c94f93f
MD5 dc9e4e93d35e8e5b5883f1bb9bbf4dcf
SHA1 154407b9c8665597cbc37d6c1e2701ad70a2f032
SHA512 1b634d8f37848df2fd5d72f71928c4a5f2ac74b217df80c20a67b4ab0a35a98ed2f53fe27f6132c4e086892d741d2c3c5297f3f1e4b04c901f61e9b8a6edb350
TLSH
T19A711B780E22C982D3B117B0D0D23FFC74FDA1B50A232DCA015499BE9A2FF67A439404
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5e0c52.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5e0c52.TMP
Size 3KB
SHA256 f72fde39c1b158186cc053f5a65d0cad71380f80da7fa844d4c9515102d25922
MD5 a0ae19c814fa4c387e5f4c381eee0002
SHA1 fc0b1907068edfa1e0f0a9b7e1e4253da1ff74ef
SHA512 56e50af3c1183de9ec4de9a45d110a5c8a287698727c7e23dfff9d7582d5c361c331c510214079132a5969068d31d4edc5e674a30e3d46e5cc7a267b8a9fd4e9
TLSH
T1606109381D22C886E3B117B1D0E13FFC79F991B50E632DC9018499BE9A0FF63A139508
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 280edd7d2cbfc9110321804a001683157d7faf986f501172a967027326c1f322
MD5 836634db29cf9053d317162a9a8b2ef1
SHA1 7a98e5851cea22639d2ca1e1068028d2a2e1e52f
SHA512 36100ca66bebe8b968b7e76356792168fd631693a09ad41fcdaa679f4c0d8ffa428b38d5cbdac838c9a3f70bb4f57b3e07e230da5f13e3771745bc1d374bcd18
SSDEEP 96:DcOTVJT2J+T8JTF7azm1oTITYbqTKT2POTvbqj6Vw4iNTzPFTZPfujyby5yjByWv:DXxJ6J+wJB7ay1o0QqmCPOXqj6VFiNHH
TLSH
T13DC1B1F3C3D88A2DC95165F8AB146E1BDE1E0919422C3D1689E5EF4BA3E24F1E141A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 15dd70bf8970526f83a40d5a72dcc75b80e10eaa691f4bceb0c885b0c4ceb4c0
MD5 374fbf757384972a59ff2e0860e4e789
SHA1 b54912306bb7da09ecbb20fb683ebdc5834225de
SHA512 4aed7131ded42eb5e1a82cf71699193de40eb3b8ad9af23cea7c524062f713cad0fe3ff0981557515a00f1f49348c6f38024a1938c7ed545370d5244b024b501
SSDEEP 192:sxZzR7yM/jK1Ml8Mie/fZsAwdsaasIdpiHHW6+WNRlG/at54LoQobIg4J:sxZzRqe/fZsAqva1IHbG/yc
TLSH
T10D52E816AA34597BCCC7D219BA14BB53E6F51463E6900E449EFCCA0C05E7AED2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 012b6296b40828be06f251a011a32072ab8e85667acd1b1a3ec82155d4575922
MD5 ac6d573683efe1eb9a3be7fe8ccb1659
SHA1 74022598e48d8468c518e28687d4d824696aff1e
SHA512 d328f3f37f15f0e41f9fd6c933f79ecdf45ac5ef3c0bd9fbcf81a08d6b418f388ebc054e7790711fc2402a4a029013d47dd2a29f2265f89e640f31ba15e30ca7
SSDEEP 192:sxZzR7yM/jK1Ml8Bje/fZsgWpVCwdsaaFIdpidq24HW6+WNkFTmFXat5/LrVIpI5:sxZzRYe/fZsgWvCqva2XHbTXb0
TLSH
T1BD62D712AA34597BDCDAD219FA55BB53E6F51423E2904E449EFCCA0C01E7AED2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 02c16940245e6d4566a1165e3b7ff7d800cde16351c5960ed6a70428b397b1d8
MD5 fbc7c96b5c83f713cddb486b79fb310a
SHA1 c8473a38edb7c9f6c3f38302b16b51b10ccd038c
SHA512 ebefb14cac5288b697af3b9f9790257c24a929e751d109c993539794888e2b47381b632728586d34513ef5bb4cd8c1ee64a2b1db32766f4ac84da539cff3f575
SSDEEP 768:nTs6pTr7pLuL7x1WvxzUj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVQTwILlWwJNdro9:nTs6pT9E7x1WvxzUju1ja1TwILIsNWDx
TLSH
T176F2FB3B6C0CCB7E4F844E9CEC2A7E9A7DE8018B9698899447FA445C03C66EE11175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5370f6c9643f759e47788dc6ac84e6fff2f90bef37e6d392c33819e0a17e49f9
MD5 300cfd354ee936d27b5a7e8b4289a96b
SHA1 a0aeeec5b2439dff035774b9d3afd4f25d62926f
SHA512 fb837305d5ea868e062e69d63e3514292fa80983a4266cebecfc9f4d855ab6e6ba0922ba095906e0796d79e97d6c3ceb73cc834c3b26448b792d9646c1f41f0d
SSDEEP 96:KUAAKtePbJSKqoCe589p7nTkjn2PdhkKlBdzkRJpW7kxOqGAo5:iieBe589p7nTqn2lhFBdz6JpW7kxOqGl
TLSH
T1A8A1C11236B703123C3E2918E26487268782FA637418E92F77AC50B55E67E344DFD5ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c8e3d7d7-eae0-4d19-a544-5bd25d373b4a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c8e3d7d7-eae0-4d19-a544-5bd25d373b4a.tmp
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 8bb163fe9110211af24706c9843fc5cae9f2508458662a454ddf17497dc6d4ca
MD5 7823ee30e0ce7c1946061c12f78f99e3
SHA1 3414d8ae35fa01fee7e4c43ebe4652754209f4c9
SHA512 0673b94003c79913028d67984f741405f2af14eea4122ff60bcec9cf26d70f7743c7b216d387bf733cb6dcf875cd59cf93b688f5f25f4f41c72316d7cf54db93
SSDEEP 384:nftNn/s3n9SfsNWDou4Xw+TXua9wvzJrqvOXScjmw+:fj+9U94v/8hcOX1jK
TLSH
T13B928E336C299C67A9E2D485F94B36179FB441B396852F80D8EC6F0C01DB6BC1367E26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ac0e8c811f620da0b6b9eb9b579d9eb33d5c0e516b398980bcacea9b73a1d9c9
MD5 985f92b0442260cf1a4844926a700a48
SHA1 c4d2e8835fd0daa5f34628e2b1c518e74db90206
SHA512 79f0931d33e4f68f91a61efb0d083c503ccd20586eed9ef06b9593c190cc89f81e27e9cbf06100378532c8aaa214f04a8af78217b3b581e35387dbcfe4b69715
SSDEEP 96:nqONkXQsjpfg7+otEol5ih/cIPURHl8h4otop5rJDYB8PHvIVytb0gigBabJxgG9:qONL6O7+3hQmiUyFsGttb0j3bvgGk6U6
TLSH
T1AE02F8356C6C6CBB9EF2AD45F58727235FA5117BE9A62F80D6E81E0C00D765C2343826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 da31c78304f729e62646fc96114658b38907775cb399d966923ed22d527e798b
MD5 1832dd1b8ee58a9df0f7d4de5d43ad40
SHA1 643952d319505ee9e8c41411ba28e83040d4b564
SHA512 6492e97b11a7878c5c17a16c641fe2aa776fd827ee14354e1101ecbc60273cccf59ccf6af92ef0b653eceb9648d3c9321c6fca058f950f993624892b47e52d46
SSDEEP 384:nQtNn/s3n9SfsNWDou4Xw+oXP2a9wvzJrqvwbAStVX/sX0xKe1tzMLMScjmw+:Qj+9U94s/38hcdSEXkKe1tIo1jK
TLSH
T1DCC27DB1DCAA1DE744E1D8C9AA47E6136EB4017785890D0CD6F9BE3E31DF5BC1362822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 46c51a975b37b7e3199655a38c892ebcf20c094ab32b2c53e5e173ce81497d6c
MD5 a354e7ef5de0403ab08df2de2d59e651
SHA1 c9b00b3515432d6a29e98a776db934aae75e86ca
SHA512 78c74ca292a7e06d6513f51918e57c368c8ef72a8f29a74eb17d8e0f1ca7674c52bcde4a48a0ecaaee26f6d2c17500548d728e76d9fc3ac100eb140f5c4c6750
SSDEEP 192:dONH6O7+3fQmiUyDsattb0j3bsuF0SJrqOecNUrqH8XU6:dONH6LBat9wvzJrqIOXU6
TLSH
T14B121B3668685C6B6DE2E485F5873213AFB54127EA8A6F40D5EC2E0C01EF56C2357C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1de3c337-05b4-41c1-9bfe-92e0aa2d61fa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1de3c337-05b4-41c1-9bfe-92e0aa2d61fa.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 47b07c4bce690e5d6146b8ad1f7f51cd607dea591ebada92609589f0b387df73
MD5 2464ca0e62b28eb0d17c30c7f217b39f
SHA1 7a86b5ee2a0b2b2636012f0b8b5f59b45fd9d876
SHA512 f37062330ea856e32a66d7673d5538df05cc946514f4ffbda8bfb37b507af561dd310159c8f6fc9e270bf56c353a6aeb5a10f5f8ea6f2697962bb80f0f0fceb6
TLSH
T16C410959B7EA1148B3B76F1A9FF6A96E487E7C362E06C49D10110E4E0A33A40C971B37
MD5 SHA1 SHA512 TLSH

Submit Download

bf7a44d1-0a1c-45aa-bdde-29d4a8023010.tmp

Path C:\Users\Admin\AppData\Local\Temp\bf7a44d1-0a1c-45aa-bdde-29d4a8023010.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

d85c4984-01b2-4a55-813b-870e3c0f8b27.tmp

Path C:\Users\Admin\AppData\Local\Temp\d85c4984-01b2-4a55-813b-870e3c0f8b27.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Arturia Pigments v7.0.1.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-43BC2.tmp\Arturia Pigments v7.0.1.tmp
Size 3.7MB
SHA256 fcd75e60331ca772fb64c915ef16468c339ae370a00947f95ed1276a916eb14d
MD5 faf42506c7278f8e13792f243b13f4ba
SHA1 0ac5adb095b94b59152e45ff9a688c20d24a0637
SHA512 cf392e4c78669ed3b9aeede0d9e2a117aad4106f690474ba775b3ac3912282b1619afae50e16794064b7ee9f50b9c434969c89d6ff3b8e950c92c3efab298786
SSDEEP 49152:0viYUtaivJlWSM0WXo7FhDGS6Yh2ewYAJpg7xmUzWc8UecQ3/fmmowkTOs333tx:pgoDyS6Oy/+H333tx
TLSH
T1D7066B13F284613BD39F1E35453B869499377761692A8D276BF8AC4C8F750802E3BF86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4908_2016971855\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb0d873a-b454-4839-b763-85e18d685596.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4908_538594275\cb0d873a-b454-4839-b763-85e18d685596.tmp
Size 152KB
SHA256 f83832c37a0969ce89f77b16eaa07457b03f43029abaec00eaedce2674adbaf5
MD5 d2e80cd29c43ea745d16284dc1f58ea6
SHA1 53fe0165f9f303b333be9284865c8a74f3553c0b
SHA512 375fd3e65b12f80b92a63c1cf6f0ace9fe878c1a0cb5179d869c99aad0cfde14715fd1499eab22a04f353e5f292c19d6a5aeccb43ec2ff5cd6878a5226b005ca
SSDEEP 3072:bHVqfst2F+fBXzSKmg3n0OIH1iCylcLMLgaK9enj59Ah8MuBX8Yk17CF:b1qkfBXG801idlcLMLgaOeV9A2XdBkda
TLSH
T1DBE3E13C3EDACD26C21B20F97F287587C54D8F17A10BA50BE14A84015A76B5E17E2DEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1784-18111-0x0000000000400000-0x0000000000500000-memory.dmp

Download

memory/1784-851-0x0000000000400000-0x0000000000500000-memory.dmp

Download

memory/1784-1014-0x0000000000400000-0x0000000000500000-memory.dmp

Download

memory/5156-13981-0x0000000000400000-0x00000000007BA000-memory.dmp

Download

memory/5156-13615-0x0000000000400000-0x00000000007BA000-memory.dmp

Download

memory/5156-14307-0x0000000000400000-0x00000000007BA000-memory.dmp

Download

memory/5156-11419-0x0000000000400000-0x00000000007BA000-memory.dmp

Download

memory/5156-9205-0x0000000000400000-0x00000000007BA000-memory.dmp

Download

memory/5156-11995-0x0000000000400000-0x00000000007BA000-memory.dmp

Download

memory/5156-4523-0x0000000000400000-0x00000000007BA000-memory.dmp

Download

memory/5156-15361-0x0000000000400000-0x00000000007BA000-memory.dmp

Download

memory/5156-1015-0x0000000000400000-0x00000000007BA000-memory.dmp

Download

memory/5156-18093-0x0000000000400000-0x00000000007BA000-memory.dmp

Download

memory/5156-12685-0x0000000000400000-0x00000000007BA000-memory.dmp

Download

memory/5156-18110-0x0000000000400000-0x00000000007BA000-memory.dmp

Download

memory/5156-16748-0x0000000000400000-0x00000000007BA000-memory.dmp

Download