hxxps://www[.]mediafire[.]com/file/k5gq8nuenhck1zu/Prestige[.]exe/file

Analysis

user interaction
yes
max time kernel
81s
max time network
80s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/07/2026, 00:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.mediafire.com/file/k5gq8nuenhck1zu/Prestige.exe/file
Sample260709-a3cacaa17m

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
112	3036	chrome.exe

Executes dropped EXE 2 IoCs

pid	Process
1104	Prestige.exe
416	Prestige.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3036	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134280314674779392"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe
Token: SeShutdownPrivilege	1088	chrome.exe
Token: SeCreatePagefilePrivilege	1088	chrome.exe

Suspicious use of FindShellTrayWindow 42 IoCs

pid	Process
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe
1088	chrome.exe

Suspicious use of WriteProcessMemory 23 IoCs

description	pid	Process	procid_target
PID 1088 wrote to memory of 2184	1088	chrome.exe	84
PID 1088 wrote to memory of 1616	1088	chrome.exe	85
PID 1088 wrote to memory of 3036	1088	chrome.exe	86
PID 1088 wrote to memory of 1616	1088	chrome.exe	85
PID 1088 wrote to memory of 1548	1088	chrome.exe	88
PID 1088 wrote to memory of 1548	1088	chrome.exe	88
PID 1088 wrote to memory of 3644	1088	chrome.exe	89
PID 1088 wrote to memory of 3380	1088	chrome.exe	90
PID 1088 wrote to memory of 3644	1088	chrome.exe	89
PID 1088 wrote to memory of 3380	1088	chrome.exe	90
PID 1088 wrote to memory of 3736	1088	chrome.exe	91
PID 1088 wrote to memory of 3736	1088	chrome.exe	91
PID 1088 wrote to memory of 3252	1088	chrome.exe	97
PID 1088 wrote to memory of 3252	1088	chrome.exe	97
PID 1088 wrote to memory of 1224	1088	chrome.exe	99
PID 1088 wrote to memory of 2968	1088	chrome.exe	104
PID 1088 wrote to memory of 3904	1088	chrome.exe	105
PID 1088 wrote to memory of 2448	1088	chrome.exe	106
PID 1088 wrote to memory of 3508	1088	chrome.exe	108
PID 1088 wrote to memory of 1104	1088	chrome.exe	109
PID 1088 wrote to memory of 3420	1088	chrome.exe	111
PID 1088 wrote to memory of 3420	1088	chrome.exe	111
PID 1088 wrote to memory of 416	1088	chrome.exe	112

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.mediafire.com/file/k5gq8nuenhck1zu/Prestige.exe/file
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff9e9a3c728,0x7ff9e9a3c734,0x7ff9e9a3c740
  2⤵
  PID:2184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1680,i,10703238994800813365,4708899602814249430,262144 --field-trial-handle=2000,i,1336405731464593561,6072199598378403017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1996 /prefetch:2
  2⤵
  PID:1616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2096,i,15837295170975357076,9206542095853205961,524288 --field-trial-handle=2000,i,1336405731464593561,6072199598378403017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2144 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:3036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2404,i,17249210988726716287,15937169881089957887,524288 --field-trial-handle=2000,i,1336405731464593561,6072199598378403017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2568 /prefetch:8
  2⤵
  PID:1548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3132,i,16371132396614503723,2660230638449978458,2097152 --field-trial-handle=2000,i,1336405731464593561,6072199598378403017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:3644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3136,i,483198745039966383,5727854948611355089,2097152 --field-trial-handle=2000,i,1336405731464593561,6072199598378403017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:3380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4268,i,12501772195566711942,6997432827853839817,2097152 --field-trial-handle=2000,i,1336405731464593561,6072199598378403017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4288 /prefetch:2
  2⤵
  PID:3736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=5632,i,830480594185978196,2268741565040964050,2097152 --field-trial-handle=2000,i,1336405731464593561,6072199598378403017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5368 /prefetch:1
  2⤵
  PID:3252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5972,i,380513401772190120,8189585661750379003,524288 --field-trial-handle=2000,i,1336405731464593561,6072199598378403017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5980 /prefetch:8
  2⤵
  PID:1224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4708,i,14089005969100677983,6921207830663208380,524288 --field-trial-handle=2000,i,1336405731464593561,6072199598378403017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3216 /prefetch:8
  2⤵
  PID:2968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6076,i,5550162933304654100,6521897546482776799,524288 --field-trial-handle=2000,i,1336405731464593561,6072199598378403017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3348 /prefetch:8
  2⤵
  PID:3904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3240,i,15101110120717419382,12043048073440093125,524288 --field-trial-handle=2000,i,1336405731464593561,6072199598378403017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6112 /prefetch:8
  2⤵
  PID:2448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4892,i,13772550364588481092,3281085572394577302,524288 --field-trial-handle=2000,i,1336405731464593561,6072199598378403017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4876 /prefetch:8
  2⤵
  PID:3508
- C:\Users\Admin\Downloads\Prestige.exe
  "C:\Users\Admin\Downloads\Prestige.exe"
  2⤵
  - Executes dropped EXE
  PID:1104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6128,i,11980617878570472288,16577304502936609797,2097152 --field-trial-handle=2000,i,1336405731464593561,6072199598378403017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4884 /prefetch:1
  2⤵
  PID:3420
- C:\Users\Admin\Downloads\Prestige.exe
  "C:\Users\Admin\Downloads\Prestige.exe"
  2⤵
  - Executes dropped EXE
  PID:416

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4816

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4684

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 4c4de49b812e25366fff64529844983ef1d2f744afbd9dc048cd91061caa781a
MD5 5a4489de11baffc4851930645320a534
SHA1 e4f5256d8331d7d5b9b6df7e6fb8247ef55d9eec
SHA512 a0f5b45e841fca999c40ec89d62432cf1e18110fab6dff6e6b8192b700af0c5bfefe026aa31973758dcb0b0ff40b8b599f0ab32ad3e4ed12c9a9a2cacc3c7ca7
TLSH
T1DAE02B7AC821AC2719FD071C60150A8AE750135B2F90594F3F3D530CCFB0A2A41C6C6D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 432B
SHA256 48885a426000a82d894a7d69cd9766e0f5526f15c67e57a2275e8c22d8127a77
MD5 b96c10ad2d0552c6877ec85ebbb97013
SHA1 1514bef83ce59fadc2ad5ec1ca8df3f692296aef
SHA512 f380da988356db55b41adcbd71608051117ebf149a620fafae5568cce5f0bf64a5869be60246f1e39d9e688f5a8078250c7f44310dda5806c2650dd9780ffd6f
TLSH
T135E0DF0BA4F834F2CB18B434CC577F51202D1740015136326ACBF627675F9EC801A960
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 79604f4cc35b61d895243f14e8892098385a7e1cc6f56fe56cbefc266384afd8
MD5 0110763a6904932cadc32b5064c38db6
SHA1 b11f21786eb9cdf2e92797b708b56ae208020651
SHA512 a898ddd6176da0e9b8f76b629a60d7f9b754dc0100042d6d71f493ed6115d2ad90a02c33d8ff888ecd71ba7afd79caad8a36a69c6cea7798c2b545e327e6dd12
SSDEEP 192:D6VM+LHK4FmaaIEdGLHQh44Iq/YXezX4VMi2dG+u4XcerQK:D6VM+LHK4FmaaIEdGLwh44Iq/YXezX4m
TLSH
T158029BF383E9D62E89015AF896146E1BCE1D0B25432C3C2A88D5EE5BF3E3472D15964F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 8455c6ff47fb73e2dc40b8103834edd732fcbac8255571d61cb2fec99123eaa2
MD5 f79f8eddceeac1f18732c3abf1f9ba27
SHA1 d910dd1ed7e570b35bf296cf4467c4b70717c806
SHA512 82de7e588d96e37ff3a75582ec1e368f8e2968c220984a1f1aa4ee21346fb2042f1a8061d149602f7faaeac6fca828b17e75167e6bf79d33c30edd07b9f1a36d
SSDEEP 192:KRnPCt1jzYyLtv7spdPRp52Az9wHsb+WNPxW1z8oSX2oE6f2feYv+kgOEBVyIsnv:KRnP4pYfXECKwsKXGoE6a8E
TLSH
T13452E83BF915297B6CCBD22AF9227B5BE7F5106122902E80E7FC8A1C15DB9CD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 8a20a74c53fbabe46a775830e5f882834666c518a86d76617f419bacc49ba03f
MD5 ca96e3f2c08cc389c635b2996e8589c2
SHA1 1d46e4062e16159b7c91fecf456a866c83667634
SHA512 f139824b3146a60f8bede4baef5515dc5f442f5eccaddb22548bc771d1e61c971584fe30d30f516a59b6e055c04206ee6bfc0f343b178ec16925a78dde91131b
SSDEEP 192:KRnfCt1jzYy6v7spAPRp22Az9wHsb+WNnz8oXkeAfeYv+kgOEPVyIsnAUge:KRnf4WYUX/CKwQ7eYwe
TLSH
T17942C73AF915697B6CCBD21AFD227B5BD7F5106122902E80EBFC8A1C15DB9CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 359dba6cc5336489bc6689c1c7f8b3f5041960110ae048e012c82ad944c1139b
MD5 e88b299b33341c5aafb539b04180830e
SHA1 370bfe1720e65ad5b897602d7b8067be3393700f
SHA512 3986630ef0fc92d1959f152ebd62f453740b91f3cabb46eebf6be2e9fba930d81f5791208e2e18788ea492ee05508eb4aa33e5e222c72cf613fc293e31bc8008
SSDEEP 192:KRnPCt1jzYy6v7spAPRp22Az9wHsb+WNnz8oMDYvHdfeYv+kgOElVyIsnAUgE:KRnP4WYUX/CKwQjYvj6E
TLSH
T17642C63BF915697B6CCBD21AF9227B5BE7F5106122802E80E7FC8A1C15DB9CD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 379d96542283773f422c052abe7293924621df1604b63c9a59676e1514d2db6c
MD5 d066f854d368cbebca026e5da297c2c3
SHA1 4f2f84d54b0a8dfd273bbdb70bcde51ad5e2f12f
SHA512 613285c6b38983d33fb336394c5eff7edb692f60dfa433defdbf45524dd1c84cadfc8cba744a39b1c75482b318f7db6eaaae9842cfa8649a9ad00cece8442e41
SSDEEP 384:gCjUH7KxkXqKf/pUZNCgVLH2HfgslsZ7pLuLcSjCDXODUr+ErU3/NHGcmyqOqjmo:gCUH7KxkXqKf/pUZNCgVLH2Hfgs+Z7pF
TLSH
T15A7209676C4C9E370F94C6CCD8267F4F9DB5024B65E9886483FA9C2903D5ACB114A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 97822ad83ae32285bd944ac8c9d05409c05713a64f385982d8cc5fc53f27a313
MD5 2e8b22f0835119953f32b8ed62719dae
SHA1 d791582545bd4397d2b59e5ebd59fafe3ee57550
SHA512 b178c2aca8b8541e20ecd033628144154b56ffbab79e6f6733efa629932316a5d4a6a5db21e458fb7bf2f94aeae6999510ed2d199e657d3d70b58f4e79d43484
TLSH
T182B0124184239141C50206F4125254897518DF10EA0A170243F4693298691618418054
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe584dcd.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe584dcd.TMP
Size 96B
SHA256 3b341e58fd55e80631d006d984fb821a0d9fe06ded733d38ca31418e3e86961b
MD5 638696f93e93f896cd38926c46ef8af7
SHA1 505bf3efae39a57aedc1600eef8c75f9985c3c45
SHA512 898ba28eec64e27b51cfe07fc33610bdd019ca3923d0201ba786aebd3b9025bb8116eada8d38a1a3ab55e7ca38871b49d6f2feaa76a6889f8af150dc814f1a7a
TLSH
T129B002B5C213B61FC18203B439D5E5E87160EF25C6035217D2E11E66DC296714567774
MD5 SHA1 SHA512 TLSH

Submit Download

a5acc760-be55-4cd4-8cfd-f13537ef9c4d.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\a5acc760-be55-4cd4-8cfd-f13537ef9c4d.tmp
Size 12KB
SHA256 00c6d2d295d93f3daadd5a26d872a4ca50d2cdf5eed40ce3739ff210ff0742bf
MD5 a61579f4763947521377d2369ff17454
SHA1 4f74cb0e0c87c3d7bb06b3034104fe2e8c02efc6
SHA512 39d569e8f7f23009aa08125529ac169f2535fd3e8f35ad865c3966bbccc8c688e2a1b324d166e6bd1ddffde6e53b1d5b90b0e92e4e4194b076aff683a82f5daa
SSDEEP 192:KRnfCt1jzYyZv7spAPRp22Az9wHsb+WNnz8omt2PfeYv+kgOEPVyIsnAUge:KRnf45YUX/CKwQn2pwe
TLSH
T13E42C73EF915697B6CCBD216F9227B5BD7F5106122902E80E7FC8A1C14DB9CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 e86bf84ec04769bd410807de21f01567a0ed3f0f0809ab444266709e95262eaf
MD5 2b18820e5ddfd0d5245291410ae8a348
SHA1 ee8649790533861c650be42bb0657af537b7b0f7
SHA512 237976f53c5733fdaf923b26da5b3b926b48a655a5c87452e5f7941f5165e4d655c2afd0475c58dd6e36f199cace00b86c19e9f4fa2b7cb2368543adafc5238c
SSDEEP 3072:4Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:zm7Rkm1tYpBeh2BAoK
TLSH
T16BC3123B5D65E87759B5BB1EB08E0A1F1EF149A7C920DE52C8D85B0423EA7CD0A05E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 802f584a19e472db655ccfd95c9f68d9c581bca1f0a568a0441f2af691a64787
MD5 ac3db9cbb6062861936bededc01079bb
SHA1 d32a94387007d6b01f442f2f6ca9364ec5ddc977
SHA512 c18b50368c3c6b4da089c1f4eb97be28cdc2a39b12e32017b325f92adcfee362ff86b419ad92ba26227824fc457fff0e7adad699d07762b7f1002ea8622ac890
SSDEEP 3072:OGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Jm7Rkm1tYpBeh2BAoK
TLSH
T11CC3123B5D75A83759B5BB0FB08E1A1F1EF249A7D920DE42C8D85E0423E96CD1A05D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 1e7abf1c4993d4a02520331f55b831dd987279696472423ebd7a39c0c556040d
MD5 0929ccd6f79f083b500880457c5e530a
SHA1 07db8251e620b27ce7f5d11b50a3e2de7ba03ad2
SHA512 59f7221026c765d967c293e05c23b591ae89d0fa8a7683822a43e404609cacc4a82ad148cbc652c27a2390d590d597c85d409d2891fa026841640defe548ef2e
SSDEEP 3072:YGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Tm7Rkm1tYpBeh2BAoK
TLSH
T171C3123B5D65E9779979B70EB08E0B1F1EF149A2D920DE52C8D85B0437E97CD0A04D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 f7fa24238dbf27ce112e4cc3b5bbca1a949eb09d380da45e64566b9368a9face
MD5 149adc22b28ce220ea7d93651c0b25d2
SHA1 6d3548838c748333dc0a080b0bb31ef0c6478c30
SHA512 bc09bc13cdaa684eedc4ba31fbe69f5b2b2e4f5a533695ed6ad02903b10fcdda662e9cf7b72276ae4cd37d04a4ae367c9ffdb394a6d027dd522272120fe3d384
SSDEEP 3072:sGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:fm7Rkm1tYpBeh2BAoK
TLSH
T1EBC3123B5D65E87769B5BB1FB08E0A1F1EF149A7C920DE52C8D85B0423EA7CD0A05E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 6e717e68208d5d3a7eb960f823387edcf5908bda655923877ebb7bde3f79b25d
MD5 0ce8f15134ffdf7a4c02c3aa23ce75c0
SHA1 362ab4cd31e60946e19ea3beb466b55d80c3bacb
SHA512 9db64b9f3d762c89bbd2fdc9ba6bfad5d6221dfea10f42f365bee36df66ac07bc948252b9f081c1a5b8034a5396f5302c230d42fcd860f783661923dc7b539d7
SSDEEP 3072:RGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Am7Rkm1tYpBeh2BAoK
TLSH
T1B8C3123B5D65E87759B5BB1FB08E0A1F1EF149A7C920DE52C8D85B0823EA7CD0A05E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Capture.PNG

Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Capture.PNG
Size 124KB
SHA256 57779029c19544e050b6faabe335d2b81fa5bbe2b9c1f712a983df9d3a6e4b3e
MD5 6f28b1f057729c65c95665e99cc7a8f3
SHA1 d03239bdf37a14b3733904e9a3728a9795781c7a
SHA512 bb368c508662b0633929b203e939f5ad3e752f97ea79e618d5c7a0681eff20578df7e084150bdb07b71f1d9d144a438476173efe7a3b5d5d7ac166199afc8875
SSDEEP 3072:iAzPK1JFo1mEcvxKIG4UeBbBsacap5lbG+CiJd+2FQhcXcjY:iLq4xOapfFCkd+2F0ecjY
TLSH
T141C3121BCF8248DEA05DED9C6B1D10909A83A4219EFFD374730268E975507163EFA5E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Prestige.exe

Path C:\Users\Admin\Downloads\Prestige.exe
Size 562KB
SHA256 e3ffce0e0396236960a7724db95ee98dfee357f28b612ec473f8efbeccb054b5
MD5 a758c08254c748288ec926c862c369c3
SHA1 dd3fb932818e19d348741f5be81be3a855ecae26
SHA512 15803d65a8c01ee9869301bccd85d7f9d4b45b3c7d62e659657634a16ac918197a9a13ea336fb8d062e12b2bca4ca6a3b82bfb32be3fb6d9112ee80316ddb908
SSDEEP 12288:eciZ4qN4ZkKdcLtmUzG8GIJ9Elqak7WUk+bEa:125kkKdcLt08/9Eqak6poEa
TLSH
T1FAC49E19D7E405F9E1B7E578CD834902EB767C494761E78F03A4B9A61F332908E39B22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download