00513fb28d0deb675ffa3cf3e37a06ac0f8c40f5775d412dcc9ebd5ff8d0d8b8

Analysis

user interaction
yes
max time kernel
209s
max time network
185s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/07/2026, 23:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
KittieCraft (1).jar
Size 1.3MB
Sample260710-3cdppsez2m
SHA256 00513fb28d0deb675ffa3cf3e37a06ac0f8c40f5775d412dcc9ebd5ff8d0d8b8
MD5 97911332268ee82d5c8043778cd18a58
SHA1 342e6f1091bb56684f676a2ca4f4b9f0c4d51ddf
SHA512 d0bb934c36b82904cb48fe24f672f344c0a000123e0dbcdeb29f337e46d2c5629975246c10e347b7e3bc5adf274d6380f855b1dbffdde7afe93eedda39b8622b
SSDEEP 24576:zgOuiqdFph+DeeH+UOK6hIpVefl0gWcGLgOuiqdFph+DeeH+UOK6hIpVefl0gWcp:cOIRFeLl6hIpVeN0gWcPOIRFeLl6hIpM
TLSH
T177552330647CA9BCEBB6567D5FCAAD46275206266E704136B2CF9DFCA8C480193CB3D4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5112	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134281993780006518"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe
Token: SeShutdownPrivilege	3872	chrome.exe
Token: SeCreatePagefilePrivilege	3872	chrome.exe

Suspicious use of FindShellTrayWindow 44 IoCs

pid	Process
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe
3872	chrome.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 3872 wrote to memory of 5008	3872	chrome.exe	103
PID 3872 wrote to memory of 5112	3872	chrome.exe	104
PID 3872 wrote to memory of 1048	3872	chrome.exe	105
PID 3872 wrote to memory of 1048	3872	chrome.exe	105
PID 3872 wrote to memory of 4184	3872	chrome.exe	106
PID 3872 wrote to memory of 4184	3872	chrome.exe	106
PID 3872 wrote to memory of 4724	3872	chrome.exe	107
PID 3872 wrote to memory of 4724	3872	chrome.exe	107
PID 3872 wrote to memory of 5108	3872	chrome.exe	108
PID 3872 wrote to memory of 5108	3872	chrome.exe	108
PID 3872 wrote to memory of 3800	3872	chrome.exe	110
PID 3872 wrote to memory of 3800	3872	chrome.exe	110
PID 3872 wrote to memory of 3496	3872	chrome.exe	112
PID 3872 wrote to memory of 3496	3872	chrome.exe	112
PID 3872 wrote to memory of 4312	3872	chrome.exe	113
PID 3872 wrote to memory of 4312	3872	chrome.exe	113
PID 3872 wrote to memory of 4552	3872	chrome.exe	114
PID 3872 wrote to memory of 4552	3872	chrome.exe	114
PID 3872 wrote to memory of 4840	3872	chrome.exe	115
PID 3872 wrote to memory of 5032	3872	chrome.exe	117
PID 3872 wrote to memory of 5032	3872	chrome.exe	117
PID 3872 wrote to memory of 2340	3872	chrome.exe	118
PID 3872 wrote to memory of 2340	3872	chrome.exe	118
PID 3872 wrote to memory of 2688	3872	chrome.exe	119
PID 3872 wrote to memory of 2688	3872	chrome.exe	119
PID 3872 wrote to memory of 4124	3872	chrome.exe	120
PID 3872 wrote to memory of 4956	3872	chrome.exe	121
PID 3872 wrote to memory of 872	3872	chrome.exe	122
PID 3872 wrote to memory of 1884	3872	chrome.exe	123
PID 3872 wrote to memory of 1884	3872	chrome.exe	123
PID 3872 wrote to memory of 1540	3872	chrome.exe	124
PID 3872 wrote to memory of 2196	3872	chrome.exe	125
PID 3872 wrote to memory of 4616	3872	chrome.exe	126
PID 3872 wrote to memory of 4840	3872	chrome.exe	127

C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
java -jar "C:\Users\Admin\AppData\Local\Temp\KittieCraft (1).jar"
1⤵
PID:372

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff9399ec728,0x7ff9399ec734,0x7ff9399ec740
  2⤵
  PID:5008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2132,i,6934531663389278069,11040419854246084889,524288 --field-trial-handle=2032,i,5911360791184481234,18188668987907448756,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2152 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1692,i,15820771950523916870,10127556667323731703,262144 --field-trial-handle=2032,i,5911360791184481234,18188668987907448756,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2028 /prefetch:2
  2⤵
  PID:1048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2420,i,432302032317867603,94954413566853666,524288 --field-trial-handle=2032,i,5911360791184481234,18188668987907448756,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2592 /prefetch:8
  2⤵
  PID:4184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3196,i,13811267828370617208,9795360610437164421,2097152 --field-trial-handle=2032,i,5911360791184481234,18188668987907448756,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:4724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3224,i,10078021431675922417,3269402592284564734,2097152 --field-trial-handle=2032,i,5911360791184481234,18188668987907448756,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:5108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4488,i,5481298297948543058,4774417796647743888,2097152 --field-trial-handle=2032,i,5911360791184481234,18188668987907448756,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4500 /prefetch:2
  2⤵
  PID:3800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4728,i,3173272928114809511,16398586574480731851,2097152 --field-trial-handle=2032,i,5911360791184481234,18188668987907448756,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4444 /prefetch:1
  2⤵
  PID:3496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4916,i,37268399993077808,4242572410618787377,524288 --field-trial-handle=2032,i,5911360791184481234,18188668987907448756,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4840 /prefetch:8
  2⤵
  PID:4312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5040,i,3170752507526936709,16282702879317942163,524288 --field-trial-handle=2032,i,5911360791184481234,18188668987907448756,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5048 /prefetch:8
  2⤵
  PID:4552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5532,i,6331456767576884491,3508740718677621748,524288 --field-trial-handle=2032,i,5911360791184481234,18188668987907448756,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3932 /prefetch:8
  2⤵
  PID:4840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5544,i,13280963025464238995,11017751966597729352,2097152 --field-trial-handle=2032,i,5911360791184481234,18188668987907448756,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5784 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5956,i,5258116189150764664,10415904726633336008,2097152 --field-trial-handle=2032,i,5911360791184481234,18188668987907448756,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5756 /prefetch:1
  2⤵
  PID:2340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3264,i,11816750766394091349,8032021847192005462,524288 --field-trial-handle=2032,i,5911360791184481234,18188668987907448756,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3200 /prefetch:8
  2⤵
  PID:2688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3964,i,9188799152796976251,9066676085949617982,524288 --field-trial-handle=2032,i,5911360791184481234,18188668987907448756,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4440 /prefetch:8
  2⤵
  PID:4124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6132,i,10515455559192262943,15287417438344218313,524288 --field-trial-handle=2032,i,5911360791184481234,18188668987907448756,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6112 /prefetch:8
  2⤵
  PID:4956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6064,i,8973288051752055098,14220254985972613476,524288 --field-trial-handle=2032,i,5911360791184481234,18188668987907448756,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6084 /prefetch:8
  2⤵
  PID:872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6108,i,5365087029377089481,1851340937072208213,2097152 --field-trial-handle=2032,i,5911360791184481234,18188668987907448756,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6064 /prefetch:1
  2⤵
  PID:1884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3252,i,6831261085829598546,3957323720980297256,524288 --field-trial-handle=2032,i,5911360791184481234,18188668987907448756,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4912 /prefetch:8
  2⤵
  PID:1540
- C:\Program Files\Java\jre-1.8\bin\javaw.exe
  "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\Downloads\KittieCraft.jar"
  2⤵
  PID:2196
- C:\Program Files\Java\jre-1.8\bin\javaw.exe
  "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\Downloads\KittieCraft.jar"
  2⤵
  PID:4616
- C:\Program Files\Java\jre-1.8\bin\javaw.exe
  "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\Downloads\KittieCraft.jar"
  2⤵
  PID:4840

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1108

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3708

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3824

C:\Program Files\Java\jre-1.8\bin\javaw.exe
"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\Downloads\KittieCraft.jar"
1⤵
PID:892

C:\Program Files\Java\jre-1.8\bin\javaw.exe
"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\Downloads\KittieCraft.jar"
1⤵
PID:1728

C:\Program Files\Java\jre-1.8\bin\javaw.exe
"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\Downloads\KittieCraft.jar"
1⤵
PID:5072

C:\Program Files\Java\jre-1.8\bin\javaw.exe
"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\Downloads\KittieCraft.jar"
1⤵
PID:3176

C:\Program Files\Java\jre-1.8\bin\javaw.exe
"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\Downloads\KittieCraft.jar"
1⤵
PID:1304

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3903daac9bc4a3b7.timestamp

Path C:\ProgramData\Oracle\Java\.oracle_jre_usage\3903daac9bc4a3b7.timestamp
Size 46B
SHA256 6a1f1aeab789b543e91055dc628c27ff8aca39566c59674338daf40444231f32
MD5 7d8c8fc106f31092883f93f692b79aba
SHA1 1368227025cc030411aa5c4e7ba70f68ea5b752a
SHA512 72ce5bca9c08968dc90b841d44ab177602cd73a41e3c368362eecd3fb7c173ce3528f74d2d47b091b651e7b6bcb04cbca3fb7c35a30e586cfd5f8cdc1bad002b
MD5 SHA1 SHA512

Submit Download

3903daac9bc4a3b7.timestamp

Path C:\ProgramData\Oracle\Java\.oracle_jre_usage\3903daac9bc4a3b7.timestamp
Size 46B
SHA256 233795f0194d38894a38c4f8c4960cd6fdb265cb3e903e2f1b54b2096b264119
MD5 af331f47841ffd26063bf5faf50589f0
SHA1 78d2e6e06582eb3b3fe479f2458270115f1d0f53
SHA512 524f4e73ae364ada7171b66da6d55d798b4826db6e6d7ab6ddd30cdd2592bbc951991134d5acea790e288a548b6682f0a832747c78b2dbebc6426a1afa72e46c
MD5 SHA1 SHA512

Submit Download

3903daac9bc4a3b7.timestamp

Path C:\ProgramData\Oracle\Java\.oracle_jre_usage\3903daac9bc4a3b7.timestamp
Size 46B
SHA256 8b6b645a2c7a50094f47876ae93d942be813ff6dc8ccab35be9ff324baa2fcbf
MD5 5f68ee26b69f3e330d92ff8b9e8d8fa6
SHA1 6a3740e6c23f1495f49d757a903d129bfabe645f
SHA512 785bfe51013ea8c5b80328f753ef41eb17071506b76fc7746e33a981c2166ae99bce3a7620b780a0979738dfc286a6ac56824b266f25f5267c6284a045cfefb8
MD5 SHA1 SHA512

Submit Download

3903daac9bc4a3b7.timestamp

Path C:\ProgramData\Oracle\Java\.oracle_jre_usage\3903daac9bc4a3b7.timestamp
Size 46B
SHA256 44fff1bd9ba52f6196baf353623e122d6b0beb3ba477f3ad5e86de122968d294
MD5 ac555fd615ee37333179660833fa21f5
SHA1 c415eda25b2ac5194e6320fe25821eecae77ca3e
SHA512 94a06b90a38dbca269c208fe9f370aa419c85acc56e003af5660522a0bd70ee62e1f70f3cc293fd0ddc92db3f7fe359f7ff37901bce72216ed137db706c75fc2
MD5 SHA1 SHA512

Submit Download

3903daac9bc4a3b7.timestamp

Path C:\ProgramData\Oracle\Java\.oracle_jre_usage\3903daac9bc4a3b7.timestamp
Size 46B
SHA256 3e10ec22bbe9fc558ff409ed3890b831f962eaf240a5ae6182ea3f15e2eb8c91
MD5 69136e74de7f483e756be0f90f47d720
SHA1 38ccad87ce439acf955855e0af527c2889a74603
SHA512 52839af9fbcbda3ec8a53fab6ddc4360c38de1c67dfe45ea188c830608c3a740e494f9afc1b3395d8778f2d0e15358f1473c443a30d87d754bd552f42ee2cdc1
MD5 SHA1 SHA512

Submit Download

3903daac9bc4a3b7.timestamp

Path C:\ProgramData\Oracle\Java\.oracle_jre_usage\3903daac9bc4a3b7.timestamp
Size 46B
SHA256 9120f3db33926cd4a27724efeb423bfb3b76602b383bf7cf7afaf74e58fde0c9
MD5 699831c0ef7097a7e791a7f0d29712a3
SHA1 a54ea458d966857bbe5408e5e7e46e25e830130c
SHA512 e8c0380d943bc813a9d8c7d85ef46981a128d4580dd13ef3e3ed19b362ec9b78814dfe9a81dc6c47e7c0a80e198b3fc9a2a3142a4c9011151fa1986af216b63a
MD5 SHA1 SHA512

Submit Download

3903daac9bc4a3b7.timestamp

Path C:\ProgramData\Oracle\Java\.oracle_jre_usage\3903daac9bc4a3b7.timestamp
Size 46B
SHA256 441e0f0e56677ab9ce7ebb08942956d07136a344c00ad6953334af843770d12a
MD5 665d59b04bfbbcd9986e3f7de8ad84ae
SHA1 8fee5f50379b8978826c6e2ceafd990d07ffd2d5
SHA512 70c93c021c36915cd642906bcf27a82b4e609acabf3b04e4e97225414d734dd42809f446b54a67ea272ccfdf6e3b9d4b8582cbe88bf635253745ee74f9e0fa87
MD5 SHA1 SHA512

Submit Download

3903daac9bc4a3b7.timestamp

Path C:\ProgramData\Oracle\Java\.oracle_jre_usage\3903daac9bc4a3b7.timestamp
Size 46B
SHA256 102aebcf8c3e171d47a931c9aac7f4fab02c05780e0bc28c8a53e8cadfe944f3
MD5 d6a04bf47e9140c50614ef02244bac32
SHA1 2d48566a3b5a5e0f3e6dfbeb2d97cdbd9a93c8e9
SHA512 53297647f5955aa8b88c73edca485a12545987fb27cc0de18d71bf00f0fe5fc077a6e91851e2b9fcfeea83d9e1476c71aa361fe3ca991978585efd31c182968c
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 bd6dd7551383441a98c51a1ffbdf91939649d16785f16a12817ea4ed9fa79723
MD5 c406529aa44c1c6a0bb3f9fd7b50d8c0
SHA1 f41d7bc4b832fcede3d8706dde3ff4c3a2b5bb7d
SHA512 3f534d8f0cbb927ba406d2463c289f193290e36cf1d16562d557d8a8161a39892e7191c1f8b6f50f61eb97b317a9b6c87240f750693d690eb6c106c86e23cdc0
TLSH
T144E02B6ACE629C3719FC1728B4654749EA41135737409D4F773D810C8FB477A8686C5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 122KB
SHA256 36eee7c94d4e988d1a3a0e60f8be04e8ab71a5317be35cdf502e696ed705728e
MD5 fbc4dff27cbb5f4e036d27e6db0c85d6
SHA1 ea778f4faddae2367e661db26a363884b8a36f77
SHA512 c0d9b7ed7c7f508117c26a9923fa492571204a3ed04dec977fa1865313fa33a9fe9de599ddf6dfcb90544a4b081517c24dd7a3a7838a35e11d5469e7a6def150
SSDEEP 3072:iFiPV1TlJjwoxCtDZBUyKcyGZ4MsA9+VNn2KlvVMcE/6dMAtZM:wiPVhlhwoSLvZ4y9uN2LTydMa+
TLSH
T120C3E1A9960ACF89CB9485F17DC389435B3080C99950CBBB837E761388B736575CF1BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 5cb039d304e4a03ad475248d4d9726bf8c7178271526b11997e2c213d2edf9f2
MD5 7da3cfc75c4d779f9d91e3cdb7ece0c7
SHA1 1bfefc360c546af10dac96b305c90cb66013c58d
SHA512 9409376a8c254b1f5b3290a2de612e8604602c084295fc298676842daf5a97a62973b3ad19110a62713cc08c662b2e389336eb1a68bb516f88645e086b41bb38
TLSH
T1E2B011002A80808AC28C03B008F08A00BA220EFF03A38A82A2C00AA88A28FA0820A000
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 cc40ac14481de2a115fb4e128a04c7f1b44575aa65907748287c188a51639154
MD5 eaa8d264dd5b5ae7222c409332b45ebc
SHA1 e9e3a583ae1be0409e5296e363a6691f70672329
SHA512 b1927db3aedc018989eb8a338f0aaf77255ebc10e881ee2d25cdeb4036b20f94276525a6373cf3b9e18925297bdd9f3fd5c3f0fa6d4a661b9e477ac5c31b3039
TLSH
T152B024501341C141DF0C07700C51040050414C1F11331573D3C00144CDFFD73034F340
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b0fe38a7f904ce523c34de4ace73f6f5bbf715822849d1ade53617eb15705fcb
MD5 1e719146bc8850cb1d7a2ec27d00a118
SHA1 99ce37337cf70f94d18eb6852a9ad7e4124e6aab
SHA512 0501d89da7a4ef198da8497b64dd3c7346b3facea922589f5a2fdfe8c22235895bcc6c6c94287dee11ec7348eb2b3f98ced5260292db3b7d1bb31418cdb66db6
SSDEEP 3:MsEllllkEthXllkl2zE/l8f:/M/xT02z/f
TLSH
T1B64404047FC00C17D5C411304053C3501370DC100F13575334530D337CC57400C00000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 913161cf7dd60a8c7b58939e3e3435933ec92e0f7d8c7ddd4bd427fc9ec6f186
MD5 db5770679d10d4d82c672b0fb2b69181
SHA1 4b2eb6fb64a309174ea7bc9681db8d5697a1041c
SHA512 83f93ab016c7268c21f4ba2b777b55a1a7b171fed67fdaab0938a29d54f92ce04c1ffd6076a7ec77e06f7bac612660a40f55871d4554a9f991fca0a84d7b26d5
SSDEEP 48:YALlqMIqFFyiFy0FyVhGFy5zafo7XLsdgmzs74s3fsuosAHKs7MFqsQFDMswH+sm:DugnB44YaaYY3zwHdMY1cHOujf78jFv
TLSH
T1D4A1A0F7C3E4866DC91196F4AB116E1BCE2D0924536C3C66C8D8AF4F93F2872E24124E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 84f6a3dcc86788d387d6e15ff763669a7402c611de65cb3864c7cddb0b1e4965
MD5 e7276323774c080c172a04141aa165ed
SHA1 0445b2b657620a3a52bed3afce244738b2493033
SHA512 e1e15043b77dba7a1fc48768a3cc66abff59e52f29e0f0670c74e862aec19e69dc6007f1a6555341af30ae170297e7bba5a5707effc10668064fb006611f30f4
TLSH
T186216AA751BEF417107A59BB1E44FC09AE7AF87502A298F4CF96925CB0918EB0B12072
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 0ab6934f6236a879d3b0330c42a611879ac46375baa8b52cdbff928f8d78f1e6
MD5 841d6c7353d95cd86a1bd4ed67ca16bf
SHA1 c11bf5d4e022605d9fec05f46120f6b0acb65060
SHA512 0ae71035c361fba19eb33b80537fe83592ecb73f78769bfaa69e385591b348d6a6e1a8e64b3be91c6c0b5818840cd34b1345f0ba368aa9967444d92e0bfd0372
SSDEEP 192:TRcBpSan488v7MF+hAPRp2S9HHsb+WNn5O0s4vA7eVyIsnAUgtaJ:TRcBI6ogo8X91ww0hZ8
TLSH
T1C642C96EAD11697B6CCBD639FD267B93D7F5103121942E84EAFC8A1C08E76CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 b6b8b50d5c03e342b971775789eccc9e5f6cfd694a35d52b7c1c13078805779e
MD5 744574df7e339c8948a0e987da759f2b
SHA1 81782bdbbec4654e0665f13b03e3ebf34d944614
SHA512 782774beb52934b505a8801fdbf78cb6f56ec592083418d1ced6e5d7d737cfe0963ac3e1a8bbb0d05b1816aa9adbed64e46ef2955f24c00562318f72c394e667
SSDEEP 192:TRcxpSan4y8v7MF+hAPRp2tW9HHsb+WNn5O+tie74vA78VyIsnAUgraJ:TRcxIQogo8Xr1wwZeMTe
TLSH
T13952C76AAD01697B6CCBD629FD567B97D7F1103122902E84EBFC8A1C19E76CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 006411340cb5b3906918d9dbaf079210396b293ec1e2bf7c6516dd8c6f30835f
MD5 961e76f14bec24ae341dc934427cdd99
SHA1 3fe6e160a2ca69944945dfb6f321a0081dfbccbe
SHA512 7c400578eb361a9e622ae1aedbc447bc343aae04aa513a973da0d994b5a041390c159011263407e2f823beaee49dea55739483cd2b0e79031276b09f219e2ac1
SSDEEP 192:TRcBpSan4y8v7MF+hAPRp2tW9HHsb+WNn5O+87234vA7eVyIsnAUgtaJ:TRcBIQogo8Xr1wwZ2oZ8
TLSH
T12452C86AAD11697B6CCBD639FD567B97D7F5103122902E84EAFC8A1C08E76CC321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 34d3b150d9ebc3413240a436dcd8cc4d2da0e46d00a681d2118263aea9d32f3e
MD5 73285efb9f7ee0bd384426865ccccf8e
SHA1 51903f2b7a36fa90857257254c2bebdfe5da7eef
SHA512 e9bab3e8a04453bd7ca516137298f57170d38058ccd5df170108532fdb6eefb2d5ae94de47967a5242cb07be597050bef4f69d7f740877c626e131f01424e28d
SSDEEP 384:TRjPq7KxkXqKf/pUZNCgVLH2HfgslT37pLuLcSjFgXODPO+ErU3voHGjBm2oR0h9:TxPq7KxkXqKf/pUZNCgVLH2HfgsV37pM
TLSH
T1287219676C4C8E7B0F94CACCDC167F4F9DB5025B65EA886482FA582903D5ADF01061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 8d8a8877d6d93d53800578afbe97e0b4bf1b6c6de84e04ee85da2698787b878a
MD5 bff808a229adb4c58c2a0e53c9742baa
SHA1 bbe478ef9c806cbcf561d7ce10b26fbf7e35a5cf
SHA512 8292771a1d6a1c65ff00f302a1898f8e5e1d4dbb837c7908c0092dea8abd1f344ec23ddd567680b7dae9b467e5b6edd5c2eec0d094da2a678ff635b6afe70a5f
TLSH
T1ABB012808406A501C01203F46242148871159F20E60E370143F07A628C251908815060
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595d0a.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe595d0a.TMP
Size 96B
SHA256 c97db0b4344b9a90938dcd6e8fcd0b08e8800c112879286b60415a01fc0b90fe
MD5 1eb5a767a17d31cc3cf5b061766f1ed2
SHA1 99660ab4dd6b77df5ce4d685c2eb14f3872ff321
SHA512 c69004b429ffe56ef3a847c7d56384bc9d538979b053138294547bba9db12949b9d6f9c5baf60274cbd74524ddfe8584526743697fc520bba4f2d99e3e25e16b
TLSH
T11AB02200C00A2302C08203B0A8E2A0EC3230CF20C203020283E00B22EC202200230020
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 232KB
SHA256 61f4b68aa9159323e94cad4d198a5f6141637e95387376308e3a8df889d68cda
MD5 3fdfe0f70d0a1ae9e0c06275000414fb
SHA1 e3c065f37dc5c25b450e1146c1158ab208e1c383
SHA512 c29d8de31a688fd1166f0693a22c85e2ec190ae902b595cc4ac5919ede94f89e7e6760930c13bec13e7304d6817c4b60d6a71208319fa57862e5fde83c8cd101
SSDEEP 6144:Mol52bI0SkmXv8PhN2DvDJtm7Rkm1tYpBeh2BAo0:Mof28BXvM0jDJk9oBGcAo0
TLSH
T1743412132FB61E7A7476772A72CF5E2E2DF10DEBAC10865598851B0077FB6481E06E70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 b5eea515f59ef22979647066079e597c19db3ed1d9d0a1079af37e23ae4f2ba5
MD5 6c2faf3b6c2049607826e1ebc8df3bd8
SHA1 8222e3e0400e090b267e3dc1fa93624663b94272
SHA512 54c01670b203ca22053d3304c2916f636c8b01fe857a96fa80ba02892743892c9bb35eb8cfd20b9196188f2af0a46bcbb4b1a9948a2f48777dc299cd30920e56
SSDEEP 3072:/7Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:/im7Rkm1tYpBeh2BAoM
TLSH
T19BC312275E75E9375878BB0EB08E0B1F1EF14AA6D930DA92C8D86B0467F97CC1A05D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 e179b322fad87ec1bd96ad480ea5194507e2cc62ca8015696a696f36cc688333
MD5 f733c213167f1471a7aa67f53f99fc20
SHA1 d3acbe99cdebd5302a82ac37653f4b3f0b43c1a6
SHA512 e63ee78aa956d5b475c28fd22e930daf7525d5ee8497224c57548401208735353b9b323a49e2210e78902ab660869de926fd84e961c8f069aa0df817bd055831
SSDEEP 6144:M5Vl52bI0SkmXv8PhN2DvDJtm7Rkm1tYpBeh2BAo0:MTf28BXvM0jDJk9oBGcAo0
TLSH
T1233412232EB61E7A74B6772D718B5D2E2DF15EEBDC10864598842B00B7FF6481E06D70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 232KB
SHA256 d064a5487dcde4ff3ff7818fe7e2e6ba7a01928f58493a3989babdb89b796a05
MD5 4c0b592d5e43364379f9fb3e379a059f
SHA1 63d08f1fc434c66560b17d84bc02717a51cd947a
SHA512 bfa6617ac2473fd32f157d0459e82fa27370f860639653f80d9972bdcb88a5eab2cd52d987137524a772ff168726ec090d9b6926e6c84d04bddbf10499f06dce
SSDEEP 6144:Vol52bI0SkmXv8PhN2DvDJtm7Rkm1tYpBeh2BAo0:Vof28BXvM0jDJk9oBGcAo0
TLSH
T1283412132FB61E7A7476772A71CF5E2E2DF10DEBAC10865598851B0077FB6481E06E70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

KittieCraft.jar

Path C:\Users\Admin\Downloads\KittieCraft.jar
Size 1.3MB
SHA256 00513fb28d0deb675ffa3cf3e37a06ac0f8c40f5775d412dcc9ebd5ff8d0d8b8
MD5 97911332268ee82d5c8043778cd18a58
SHA1 342e6f1091bb56684f676a2ca4f4b9f0c4d51ddf
SHA512 d0bb934c36b82904cb48fe24f672f344c0a000123e0dbcdeb29f337e46d2c5629975246c10e347b7e3bc5adf274d6380f855b1dbffdde7afe93eedda39b8622b
SSDEEP 24576:zgOuiqdFph+DeeH+UOK6hIpVefl0gWcGLgOuiqdFph+DeeH+UOK6hIpVefl0gWcp:cOIRFeLl6hIpVeN0gWcPOIRFeLl6hIpM
TLSH
T177552330647CA9BCEBB6567D5FCAAD46275206266E704136B2CF9DFCA8C480193CB3D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/372-2-0x00000299E17A0000-0x00000299E1A10000-memory.dmp

Download

memory/372-12-0x00000299E17A0000-0x00000299E1A10000-memory.dmp

Download

memory/372-11-0x00000299DFEB0000-0x00000299DFEB1000-memory.dmp

Download

memory/892-211-0x000001E7D3070000-0x000001E7D3071000-memory.dmp

Download

memory/1728-233-0x00000292E1EC0000-0x00000292E1EC1000-memory.dmp

Download

memory/2196-175-0x00000244A5B60000-0x00000244A5DD0000-memory.dmp

Download

memory/2196-174-0x00000244A5B40000-0x00000244A5B41000-memory.dmp

Download

memory/2196-164-0x00000244A5B60000-0x00000244A5DD0000-memory.dmp

Download

memory/4616-187-0x000002A2F6380000-0x000002A2F6381000-memory.dmp

Download

memory/4840-199-0x00000270A5720000-0x00000270A5721000-memory.dmp

Download