6c06bf950d0fe3476e020cd363ec0c8c9d4ee0fc89a24c50780c44e6453995c6

Analysis

user interaction
yes
max time kernel
1799s
max time network
1798s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/07/2026, 16:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
diagerr.xml
Size 1KB
Sample260710-tsg8dscy3k
SHA256 6c06bf950d0fe3476e020cd363ec0c8c9d4ee0fc89a24c50780c44e6453995c6
MD5 d1e75542ec8d1b4851765a57ac63618e
SHA1 a231451f545d3133e5d6a0487a59c5dbd01ee50e
SHA512 89d3c182833b97b0899ecd45de1439f8341bf2ea11578e2085375a4db3cc18fad221998dc4b6f4407381d2134cb43d78025349ded1e50b6a4eea5919b18b168c
TLSH
T1A0416229B1992EBB5C9446F8DFD038C26F8097794106A03391C4FDAFA239082F5B17CA
MD5 SHA1 SHA512 TLSH

Score

8^/10

adware discovery spyware

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
434	4756	chrome.exe

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\Control Panel\International\Geo\Nation	Minecraft Education Installer.exe

Executes dropped EXE 1 IoCs

pid	Process
2332	Minecraft Education Installer.exe

Drops file in System32 directory 1 IoCs

description	ioc	Process
File opened for modification	C:\WINDOWS\SYSTEM32\WINBIODATABASE\51F39552-1075-4199-B513-0C10EA185DB0.DAT	svchost.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	IEXPLORE.EXE

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1888	chrome.exe
664	chrome.exe
4756	chrome.exe

Checks processor information in registry 2 TTPs 8 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	minecraft.windows.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	minecraft.windows.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies Internet Explorer settings 1 TTPs 24 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\SOFTWARE\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\Software\Microsoft\Internet Explorer\MINIE	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 409acd699010dd01	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\SOFTWARE\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\SOFTWARE\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\Software\Microsoft\Internet Explorer\IESettingSync	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\SOFTWARE\Microsoft\Internet Explorer\MINIE\TabBandWidth = "677"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\SOFTWARE\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\SOFTWARE\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\SOFTWARE\Microsoft\Internet Explorer\Recovery\AdminActive\{32676447-7C7B-11F1-B40A-62F9C1B4CF77} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\SOFTWARE\Microsoft\Internet Explorer\IESettingSync\SlowSettingTypesChanged = "2"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000008e214533908c949bd6f849ed4c4ef8200000000020000000000106600000001000020000000150426f9839c190f541c13d8a16719ff161026caae72566cf350ecf9e2b3b2a5000000000e800000000200002000000027f2f1a13aabf405e957993db32b05b7d77b979c725973b19ffe35ac3331754420000000b5bc5837c40a2e356996f1180617715b3810aeefc14f9fc808611ac06b1a50a7400000007c3a5e1dd36bb8458950c1d2cf56bdeaae66fbfef0d2e508b82ca1a64470d95759d1cf0252bf28ec98ade019511558c0aefd22940b793728e63b8ea2208a8769	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 506ec6699010dd01	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000008e214533908c949bd6f849ed4c4ef8200000000020000000000106600000001000020000000ab5f100006011c2e6a5314bbbcc3ba601c1076fdaf47d4b76e72424fb4cf3a4a000000000e80000000020000200000003614e5b0a009f60714ae579ec758b1bf5fce38cce54053f6bdb2e5f784f6915e20000000e369be5d30509ad52b740848b99d4fca67a1cbb56ba516f52828e90d1d69b37f400000004684e0870f59f533f451029d268ffc2799adcb899a3b86c5ba34c56c52d9ee31ebda31802425895aebb6ec0170c4f07cfb8b1f06f2546caee1ecc87ec50fb6ee	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe

Modifies data under HKEY_USERS 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134281740556800142"	chrome.exe

Modifies registry class 8 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{21DD370A-30B2-42EA-90D5-654400FD42A0}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe

Suspicious behavior: EnumeratesProcesses 14 IoCs

pid	Process
3532	chrome.exe
3532	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
5764	chrome.exe
5764	chrome.exe
2716	chrome.exe
2716	chrome.exe
2716	chrome.exe
2716	chrome.exe
4972	chrome.exe
4972	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 42 IoCs

pid	Process
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
2716	chrome.exe
2716	chrome.exe
2716	chrome.exe
2716	chrome.exe
2716	chrome.exe
2716	chrome.exe
2716	chrome.exe
2716	chrome.exe
2716	chrome.exe
2716	chrome.exe
2716	chrome.exe
2716	chrome.exe
2716	chrome.exe
2716	chrome.exe
2716	chrome.exe
2716	chrome.exe
2716	chrome.exe
2716	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3532	chrome.exe
Token: SeCreatePagefilePrivilege	3532	chrome.exe
Token: SeShutdownPrivilege	3532	chrome.exe
Token: SeCreatePagefilePrivilege	3532	chrome.exe
Token: SeShutdownPrivilege	3532	chrome.exe
Token: SeCreatePagefilePrivilege	3532	chrome.exe
Token: SeShutdownPrivilege	3532	chrome.exe
Token: SeCreatePagefilePrivilege	3532	chrome.exe
Token: SeShutdownPrivilege	3532	chrome.exe
Token: SeCreatePagefilePrivilege	3532	chrome.exe
Token: SeShutdownPrivilege	3532	chrome.exe
Token: SeCreatePagefilePrivilege	3532	chrome.exe
Token: SeShutdownPrivilege	3532	chrome.exe
Token: SeCreatePagefilePrivilege	3532	chrome.exe
Token: SeShutdownPrivilege	3532	chrome.exe
Token: SeCreatePagefilePrivilege	3532	chrome.exe
Token: SeShutdownPrivilege	3532	chrome.exe
Token: SeCreatePagefilePrivilege	3532	chrome.exe
Token: SeShutdownPrivilege	3532	chrome.exe
Token: SeCreatePagefilePrivilege	3532	chrome.exe
Token: SeShutdownPrivilege	3532	chrome.exe
Token: SeCreatePagefilePrivilege	3532	chrome.exe
Token: SeShutdownPrivilege	3532	chrome.exe
Token: SeCreatePagefilePrivilege	3532	chrome.exe
Token: SeShutdownPrivilege	3532	chrome.exe
Token: SeCreatePagefilePrivilege	3532	chrome.exe
Token: SeShutdownPrivilege	3532	chrome.exe
Token: SeCreatePagefilePrivilege	3532	chrome.exe
Token: SeShutdownPrivilege	3532	chrome.exe
Token: SeCreatePagefilePrivilege	3532	chrome.exe
Token: SeShutdownPrivilege	3532	chrome.exe
Token: SeCreatePagefilePrivilege	3532	chrome.exe
Token: SeShutdownPrivilege	3532	chrome.exe
Token: SeCreatePagefilePrivilege	3532	chrome.exe
Token: SeShutdownPrivilege	3532	chrome.exe
Token: SeCreatePagefilePrivilege	3532	chrome.exe
Token: SeShutdownPrivilege	3532	chrome.exe
Token: SeCreatePagefilePrivilege	3532	chrome.exe
Token: SeShutdownPrivilege	3532	chrome.exe
Token: SeCreatePagefilePrivilege	3532	chrome.exe
Token: SeShutdownPrivilege	3532	chrome.exe
Token: SeCreatePagefilePrivilege	3532	chrome.exe
Token: SeShutdownPrivilege	3532	chrome.exe
Token: SeCreatePagefilePrivilege	3532	chrome.exe
Token: SeShutdownPrivilege	6020	chrome.exe
Token: SeCreatePagefilePrivilege	6020	chrome.exe
Token: SeShutdownPrivilege	6020	chrome.exe
Token: SeCreatePagefilePrivilege	6020	chrome.exe
Token: SeShutdownPrivilege	6020	chrome.exe
Token: SeCreatePagefilePrivilege	6020	chrome.exe
Token: SeShutdownPrivilege	6020	chrome.exe
Token: SeCreatePagefilePrivilege	6020	chrome.exe
Token: SeShutdownPrivilege	6020	chrome.exe
Token: SeCreatePagefilePrivilege	6020	chrome.exe
Token: SeShutdownPrivilege	6020	chrome.exe
Token: SeCreatePagefilePrivilege	6020	chrome.exe
Token: SeShutdownPrivilege	6020	chrome.exe
Token: SeCreatePagefilePrivilege	6020	chrome.exe
Token: SeShutdownPrivilege	6020	chrome.exe
Token: SeCreatePagefilePrivilege	6020	chrome.exe
Token: SeShutdownPrivilege	6020	chrome.exe
Token: SeCreatePagefilePrivilege	6020	chrome.exe
Token: SeShutdownPrivilege	6020	chrome.exe
Token: SeCreatePagefilePrivilege	6020	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
888	iexplore.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
3532	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe
6020	chrome.exe

Suspicious use of SetWindowsHookEx 10 IoCs

pid	Process
888	iexplore.exe
888	iexplore.exe
2228	IEXPLORE.EXE
2228	IEXPLORE.EXE
5208	CredentialUIBroker.exe
4008	minecraft.windows.exe
4008	minecraft.windows.exe
4008	minecraft.windows.exe
4008	minecraft.windows.exe
4008	minecraft.windows.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4472 wrote to memory of 888	4472	MSOXMLED.EXE	84
PID 888 wrote to memory of 2228	888	iexplore.exe	89
PID 3532 wrote to memory of 2200	3532	chrome.exe	103
PID 3532 wrote to memory of 4368	3532	chrome.exe	104
PID 3532 wrote to memory of 4368	3532	chrome.exe	104
PID 3532 wrote to memory of 1888	3532	chrome.exe	105
PID 3532 wrote to memory of 4336	3532	chrome.exe	106
PID 3532 wrote to memory of 4336	3532	chrome.exe	106
PID 3532 wrote to memory of 2280	3532	chrome.exe	107
PID 3532 wrote to memory of 2688	3532	chrome.exe	108
PID 3532 wrote to memory of 2280	3532	chrome.exe	107
PID 3532 wrote to memory of 2688	3532	chrome.exe	108
PID 3532 wrote to memory of 3344	3532	chrome.exe	110
PID 3532 wrote to memory of 3344	3532	chrome.exe	110
PID 3532 wrote to memory of 1256	3532	chrome.exe	111
PID 3532 wrote to memory of 1256	3532	chrome.exe	111
PID 3532 wrote to memory of 1316	3532	chrome.exe	112
PID 3532 wrote to memory of 1316	3532	chrome.exe	112
PID 3532 wrote to memory of 840	3532	chrome.exe	113
PID 3532 wrote to memory of 840	3532	chrome.exe	113
PID 3532 wrote to memory of 376	3532	chrome.exe	115
PID 3532 wrote to memory of 4504	3532	chrome.exe	117
PID 3532 wrote to memory of 4504	3532	chrome.exe	117
PID 3532 wrote to memory of 220	3532	chrome.exe	118
PID 3532 wrote to memory of 220	3532	chrome.exe	118
PID 3532 wrote to memory of 2088	3532	chrome.exe	119
PID 3532 wrote to memory of 2088	3532	chrome.exe	119
PID 6020 wrote to memory of 6036	6020	chrome.exe	121
PID 6020 wrote to memory of 664	6020	chrome.exe	122
PID 6020 wrote to memory of 2680	6020	chrome.exe	123
PID 6020 wrote to memory of 2680	6020	chrome.exe	123
PID 6020 wrote to memory of 4228	6020	chrome.exe	124
PID 6020 wrote to memory of 4228	6020	chrome.exe	124
PID 6020 wrote to memory of 5056	6020	chrome.exe	125
PID 6020 wrote to memory of 3792	6020	chrome.exe	126
PID 6020 wrote to memory of 5056	6020	chrome.exe	125
PID 6020 wrote to memory of 3792	6020	chrome.exe	126
PID 6020 wrote to memory of 5484	6020	chrome.exe	128
PID 6020 wrote to memory of 5484	6020	chrome.exe	128
PID 6020 wrote to memory of 5492	6020	chrome.exe	129
PID 6020 wrote to memory of 5492	6020	chrome.exe	129
PID 6020 wrote to memory of 4300	6020	chrome.exe	130
PID 6020 wrote to memory of 4300	6020	chrome.exe	130
PID 6020 wrote to memory of 5568	6020	chrome.exe	131
PID 6020 wrote to memory of 5728	6020	chrome.exe	133
PID 6020 wrote to memory of 5728	6020	chrome.exe	133
PID 6020 wrote to memory of 4452	6020	chrome.exe	134
PID 6020 wrote to memory of 4452	6020	chrome.exe	134
PID 6020 wrote to memory of 4956	6020	chrome.exe	135
PID 6020 wrote to memory of 2816	6020	chrome.exe	136
PID 6020 wrote to memory of 4004	6020	chrome.exe	137
PID 6020 wrote to memory of 3452	6020	chrome.exe	138
PID 6020 wrote to memory of 3452	6020	chrome.exe	138
PID 6020 wrote to memory of 1220	6020	chrome.exe	139
PID 6020 wrote to memory of 1220	6020	chrome.exe	139
PID 6020 wrote to memory of 692	6020	chrome.exe	140
PID 6020 wrote to memory of 692	6020	chrome.exe	140
PID 6020 wrote to memory of 5604	6020	chrome.exe	141
PID 6020 wrote to memory of 5604	6020	chrome.exe	141
PID 6020 wrote to memory of 6012	6020	chrome.exe	142
PID 6020 wrote to memory of 6012	6020	chrome.exe	142
PID 6020 wrote to memory of 5716	6020	chrome.exe	143
PID 6020 wrote to memory of 5716	6020	chrome.exe	143
PID 6020 wrote to memory of 3184	6020	chrome.exe	144

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\diagerr.xml"
1⤵
- Suspicious use of WriteProcessMemory
PID:4472
- C:\Program Files\Internet Explorer\iexplore.exe
  "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\diagerr.xml
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:888
- - C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
    "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:888 CREDAT:17410 /prefetch:2
    3⤵
    - System Location Discovery: System Language Discovery
    - Modifies Internet Explorer settings
    - Suspicious use of SetWindowsHookEx
    PID:2228

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffe8025c728,0x7ffe8025c734,0x7ffe8025c740
  2⤵
  PID:2200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1696,i,16022355343733633997,4019117494007688170,262144 --field-trial-handle=1932,i,14452961481884979467,4260512781261248585,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1928 /prefetch:2
  2⤵
  PID:4368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2200,i,17332857069232350957,2579862098614457046,524288 --field-trial-handle=1932,i,14452961481884979467,4260512781261248585,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2228 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2420,i,5531848916731417989,18018178846256826854,524288 --field-trial-handle=1932,i,14452961481884979467,4260512781261248585,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2432 /prefetch:8
  2⤵
  PID:4336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3232,i,6629905345319756999,14927018627121012145,2097152 --field-trial-handle=1932,i,14452961481884979467,4260512781261248585,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:2280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3260,i,1910671299250548770,6575894876167843160,2097152 --field-trial-handle=1932,i,14452961481884979467,4260512781261248585,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:2688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4436,i,6833629002816332694,16203437709625505265,2097152 --field-trial-handle=1932,i,14452961481884979467,4260512781261248585,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4472 /prefetch:2
  2⤵
  PID:3344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4700,i,2405798937179486366,837244575647673994,2097152 --field-trial-handle=1932,i,14452961481884979467,4260512781261248585,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4728 /prefetch:1
  2⤵
  PID:1256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4868,i,8698792775169939553,17603491466978977311,524288 --field-trial-handle=1932,i,14452961481884979467,4260512781261248585,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4884 /prefetch:8
  2⤵
  PID:1316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5036,i,9090657679908170591,1571065605517947460,524288 --field-trial-handle=1932,i,14452961481884979467,4260512781261248585,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5044 /prefetch:8
  2⤵
  PID:840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5528,i,17108683352377062378,11185365866109661928,524288 --field-trial-handle=1932,i,14452961481884979467,4260512781261248585,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5520 /prefetch:8
  2⤵
  PID:376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5796,i,2091619730453029188,14628647875805872892,2097152 --field-trial-handle=1932,i,14452961481884979467,4260512781261248585,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5736 /prefetch:1
  2⤵
  PID:4504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3360,i,11159662639526826780,13468505805016069764,2097152 --field-trial-handle=1932,i,14452961481884979467,4260512781261248585,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4268,i,14695453863261251256,16537095673006340084,2097152 --field-trial-handle=1932,i,14452961481884979467,4260512781261248585,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3392 /prefetch:1
  2⤵
  PID:2088

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4356

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4392

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffe8025c728,0x7ffe8025c734,0x7ffe8025c740
  2⤵
  PID:6036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1972,i,12483721432911031953,13720544653180302042,524288 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=2088 /prefetch:3
  2⤵
  - System Time Discovery
  PID:664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1724,i,4496368707689529589,4421609737311642320,262144 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=2056 /prefetch:2
  2⤵
  PID:2680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2384,i,14885053907023020583,4948915408414410435,524288 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=2392 /prefetch:8
  2⤵
  PID:4228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3236,i,7235424300906970029,8800945330437605469,2097152 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:5056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3256,i,5759723259571543753,8767581537831040572,2097152 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:3792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4532,i,13856561363091238625,13072100550189612862,524288 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=4540 /prefetch:8
  2⤵
  PID:5484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4696,i,2907114958606489550,9807297761293956712,2097152 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=4712 /prefetch:1
  2⤵
  PID:5492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4868,i,141736023403361181,3297869623904312380,524288 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=4860 /prefetch:8
  2⤵
  PID:4300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5304,i,4952916464244786827,5291586988865341407,524288 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=4956 /prefetch:8
  2⤵
  PID:5568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5552,i,14907732260881617731,14721930458817754305,2097152 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=5376 /prefetch:1
  2⤵
  PID:5728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3276,i,4309782825840448216,4799352146015877211,2097152 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:4452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5740,i,4952989014770252632,8439433412070088036,524288 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=3408 /prefetch:8
  2⤵
  PID:4956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5716,i,17269326943880223412,6562057544472920258,524288 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=3372 /prefetch:8
  2⤵
  PID:2816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5708,i,8296009080204578891,3550536163724553298,524288 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=3364 /prefetch:8
  2⤵
  PID:4004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5708,i,15346203110892814760,8407718899190581600,2097152 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=3352 /prefetch:1
  2⤵
  PID:3452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3340,i,6958701982106739228,12640668769918747046,2097152 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=5700 /prefetch:1
  2⤵
  PID:1220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5556,i,3356478809139166155,7442185760686153967,2097152 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=5772 /prefetch:1
  2⤵
  PID:692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5716,i,10815419947213064359,7841608838580467388,2097152 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=5488 /prefetch:1
  2⤵
  PID:5604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3924,i,5049021854980270098,3863935221194278157,524288 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=3404 /prefetch:8
  2⤵
  PID:6012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6012,i,16593249869766977571,15868558599602349163,2097152 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=6008 /prefetch:1
  2⤵
  PID:5716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6148,i,2883436582754432044,11008704370411774158,524288 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=3320 /prefetch:8
  2⤵
  PID:3184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5844,i,7934460851716748496,8667853029563112002,262144 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5868,i,4353406205201131102,7137158355952185557,524288 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=6228 /prefetch:8
  2⤵
  PID:2752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=5904,i,13418809400538508928,12781530328286766901,2097152 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=5968 /prefetch:1
  2⤵
  PID:3592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=5952,i,17273228042133561167,17889996976199171008,2097152 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:1020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6324,i,15984743492407930679,13447101363322877238,2097152 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=6340 /prefetch:1
  2⤵
  PID:5988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5768,i,7119089648054721035,7318623948937541315,524288 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  - Modifies registry class
  PID:5188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5860,i,9373668764622152814,12752872450974367822,524288 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:2228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=3352,i,6991430312831122319,6709861084517784403,2097152 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=4832 /prefetch:1
  2⤵
  PID:1352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3416,i,11333899430565126311,2132880899228106297,524288 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=6484 /prefetch:8
  2⤵
  PID:1720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=6288,i,8066570064529940410,4615936713989383139,2097152 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=6380 /prefetch:1
  2⤵
  PID:2676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6344,i,5487591695064323678,13280981615821886535,524288 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=6140 /prefetch:8
  2⤵
  PID:1832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=6800,i,17315775555121536727,7386958715284565730,2097152 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=6292 /prefetch:1
  2⤵
  PID:5468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=6304,i,10762329522293442360,6706904344736634446,2097152 --field-trial-handle=2060,i,10762580060917575126,12903017861178776283,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=6792 /prefetch:1
  2⤵
  PID:5300

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5244

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k UnistackSvcGroup
1⤵
PID:4332

C:\Windows\system32\CredentialEnrollmentManager.exe
C:\Windows\system32\CredentialEnrollmentManager.exe
1⤵
PID:2540

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5440

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k WbioSvcGroup -s WbioSrvc
1⤵
- Drops file in System32 directory
PID:3280

C:\Windows\System32\CredentialUIBroker.exe
"C:\Windows\System32\CredentialUIBroker.exe" NonAppContainer -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:5208

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
PID:2716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffe8025c728,0x7ffe8025c734,0x7ffe8025c740
  2⤵
  PID:1748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1836,i,16710686689525445562,8687169843749385846,524288 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=2120 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:4756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1660,i,1333558587878492281,14951200410440880073,262144 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=2088 /prefetch:2
  2⤵
  PID:4196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2364,i,13236479392816580089,10235955743751132324,524288 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=2392 /prefetch:8
  2⤵
  PID:376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3220,i,16366373644587946540,13552648188270162129,2097152 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:2156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3252,i,8131491670381866568,4992983259989598745,2097152 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:3148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4452,i,11383697775620844666,7344833546347597166,524288 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=3800 /prefetch:8
  2⤵
  PID:5196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4672,i,427721206039145263,16735623623701462367,2097152 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=4676 /prefetch:1
  2⤵
  PID:5156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4816,i,7036948929195585883,7545104072380897169,524288 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=4824 /prefetch:8
  2⤵
  PID:3264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5296,i,7517110551015689576,15005114571141651756,524288 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=5312 /prefetch:8
  2⤵
  PID:4812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5496,i,5810987456704340332,15750570436170640028,2097152 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=5672 /prefetch:1
  2⤵
  PID:1672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4684,i,8123896630812842,117736403667312096,2097152 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=5788 /prefetch:1
  2⤵
  PID:3688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3592,i,16721213329965550363,1652903577689497573,2097152 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=3576 /prefetch:1
  2⤵
  PID:1976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3936,i,4829448344579070165,6259302261725265462,524288 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=4676 /prefetch:8
  2⤵
  PID:5608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3236,i,745917339312011412,10444043605919538852,524288 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=3656 /prefetch:8
  2⤵
  PID:4100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4764,i,8444939926589386746,5314312926537609108,524288 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=3520 /prefetch:8
  2⤵
  PID:5896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3664,i,4090375379916178522,133454972271040403,524288 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=3084 /prefetch:8
  2⤵
  PID:3516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5788,i,10643813377612264970,1932712738632181768,2097152 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=5780 /prefetch:1
  2⤵
  PID:5320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3672,i,1295037803001978192,414004880051433942,2097152 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=4652 /prefetch:1
  2⤵
  PID:2012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5820,i,7277920032339885399,4754993302472187999,2097152 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=4688,i,701235330255595598,13545883101813908623,2097152 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=3084 /prefetch:1
  2⤵
  PID:3940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5968,i,1383105519672912922,7922229122764315975,2097152 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=5676 /prefetch:1
  2⤵
  PID:3172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4680,i,15326691104889982113,7292935309486372209,262144 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=4968 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3528,i,10574635684613010744,10735635417530619491,524288 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:2860
- C:\Users\Admin\Downloads\Minecraft Education Installer.exe
  "C:\Users\Admin\Downloads\Minecraft Education Installer.exe"
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  PID:2332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=3080,i,837265040762857650,17542517705271592735,2097152 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=4080 /prefetch:1
  2⤵
  PID:6084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=4692,i,8566450714140882179,9819740261752771005,2097152 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=5772 /prefetch:1
  2⤵
  PID:2928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=5664,i,10654149704554418761,9124960591674674824,2097152 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=5928 /prefetch:1
  2⤵
  PID:3492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6224,i,12549804091164849394,17343511087753533503,2097152 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=6252 /prefetch:1
  2⤵
  PID:4736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6152,i,11807374145136666902,6935422192762042910,2097152 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=6204 /prefetch:1
  2⤵
  PID:5636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=5944,i,9519667623580234050,10169812382642556086,2097152 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=6092 /prefetch:1
  2⤵
  PID:1716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=4692,i,11909721185894809853,15768050143764215553,2097152 --field-trial-handle=2092,i,584633336657110545,2153820333701816170,262144 --variations-seed-version=20260710-010030.065000-production --mojo-platform-channel-handle=6100 /prefetch:1
  2⤵
  PID:2680

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4688

C:\Program Files\WindowsApps\Microsoft.MinecraftEducationEdition_1.21.13302.0_x64__8wekyb3d8bbwe\minecraft.windows.exe
"C:\Program Files\WindowsApps\Microsoft.MinecraftEducationEdition_1.21.13302.0_x64__8wekyb3d8bbwe\minecraft.windows.exe"
1⤵
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx
PID:4008

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x500 0x4ac
1⤵
PID:4244

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

store.jfm

Path C:\Users\Admin\AppData\Local\Comms\UnistoreDB\store.jfm
Size 16KB
SHA256 666eec7a669715c2b172cad34917fdaccf5e08b3dc4159c43e6c3609b5e91a1c
MD5 a2d35e3b66ed5724494e5899b72c2069
SHA1 2cd7a76261de1ca43146d69c8180e8f969801d31
SHA512 f666de3d385e78af9f5220d076120394b0660efdcaa20c81daa2a83564efe4b2b60eb0a21b9776ccd6b0d8c3cd853c0f43b8c0f20b1b35c9b5bf5342d631a56c
SSDEEP 6:n2gMBiYEov4MA+KluW4zWdRQERfhF2yXD/aUElWWWwvl6vl+ekOi95D/rUATe/4F:nViiqv49uh8ySxT/5Cv8OT/rU
TLSH
T177724F5BF74D5F81C1A42F7CDAAD034A279ACD781B5505AFF8125900CFC214C9DD50D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\CrashpadMetrics-active.pma
Size 1024KB
SHA256 ae1bddb9e2cc97b0c9cd78ef3cd17553be6e5204677bd67e0b8f7fa27007f189
MD5 b0366599d64b0fc1adb2a712dcd02ee1
SHA1 b7a1c09ccd2846664cab5f76bd80b8e9f107acb0
SHA512 d7de6d48285018f8b709c81ca01688126db7893ce9f48829524ee3122aa6f2200c7f78186b5a558d0b1ecf8157ee78a20064b63b45ab89f7aa0835b8409435d0
SSDEEP 12:bHCsEXhVMMBKEKSCemJKlkQyYVhYJ0I+pPK6BsyW1inP6:biPROMMBS+MkIYWIE1BtXP
TLSH
T117252786A30815EFC54288B589AE03602374F9E55F52079B2E2DAA1F2E271D80F45164
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 f46e987b393cd6609db2cfb81579623e6c1ff06cd5d0bb36f4f71348130de12b
MD5 37aee978b623a4a7825596a618a1dfde
SHA1 d7fcbead61319a98385cd4a3418cdc496d781a38
SHA512 b612325b6d6695670405a660640e2eb9f75d9065559194886b0ca8b67700037a92093fff9fe8eae3977455db1ae834eaff016ea1090be69bb683328dd3352109
MD5 SHA1 SHA512

Submit Download

4cc0bb4b-d395-4348-9c3a-1f1eaf5b8b4f.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\4cc0bb4b-d395-4348-9c3a-1f1eaf5b8b4f.tmp
Size 14KB
SHA256 ae50706092d78903b482364786902d2e78de98c28213fa51760b7011cbc6c838
MD5 2a2e9c544434a643688dd5775ddaabc4
SHA1 c44d676fa2f31e29d77cefe230abb990ce051119
SHA512 6a151339211ad2fda5ac1bc0fbb4f035dd9f3bfba55da4036040387dd211394dd4508270f1415086cb6e6f9f3569386db80f1d321ed0d7d33b7dffc9b9a675ad
SSDEEP 192:aR3cBhjpjuK/v7spuPRpo2mzgD59wHsb+WNeqpcLuJ2oo8YpN2kwa4a8yIsnAUge:aR3mhjdXY6X15KwmtYYj2Be
TLSH
T1E962B72BF950297B6CDAD229F9227B57D7F5102126902E88EBFC8E1C14E7ACD3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 2dec8219d264a7823640a3d2327442f12511b18e743411e8319e0bd29574564e
MD5 be2d0eceb9f324347289b687c3c14b80
SHA1 72bb75d8b1f2f0432547c84881e391be13d3736e
SHA512 5562c8453aa96671d0e87ec50e7cf7094f482bc2c0ca659698e636057934db88511067e76ec919b333f9eaf2567d5c5381b8aae47ec3e7c91332e8a80d6624c1
TLSH
T1FAE0AB6AC825BC2318FD07486010078AE700134B2B80590F3B3C4108CFB062701C6CAC
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 980b22a6f112adf6d5abce4ed4a3f55e44ed721dbab23c8ab89a2f7a6394e218
MD5 65b33e565058c70101edc3e4d91da1f9
SHA1 ba29fde36c73b1856d3768560e6069c448996ad2
SHA512 62b2235114cf38bf4bab23da9a2e67a6d3b6b563a06d83635d69d9272b455397d7a4e4aa3a59966fcf705108da7fbfffec6bf0e025dfe8d2cab6ee79ba053c14
SSDEEP 96:1yzvzkRjtGshs+wsqpnfUNQjJT6dcg/RoU0Fwy18OF4r8gEbhugWh+kpLR3eP4Jy:1y7zkRj0GsD7XaYzKHr8gEb9epf3XBS
TLSH
T19B13D43D2A4E4F22EAEB1B7E235B7F7D8778C445D8C13917B17430D488A47824D9E169
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 ab1761ec45a517e20de07cbf956790f5fc0915aa383ca7a9455db0313c1fd1cb
MD5 1fd780fb4e4b61df848afba34faa10f6
SHA1 76e6587fef73f57f4f8422b9eb115a4d8b94439c
SHA512 f0fd384c3705267fc1fca5d91362bae379a8877fb471954bab41a275825587115215e392d68d6233e5795772d2ad4b61038615bd5af7b3adef0d8721a2a7c0b8
SSDEEP 1536:8WRY2pI8xIIrDDD5Es4eJR8wJ77opvSesE9DMiIxVdWkxOM:8N2pIGII6s4e/J72DMiIx
TLSH
T12F44B6F34305A859FB6A46F59309323CED7A413B2CDBDDCCE69178F10561B63A6608B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000046

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000046
Size 61KB
SHA256 d3fa27d52238e554eb5cb3474f4da0626d48dd4a7b019f109a3d91ce78f22bc8
MD5 42a290392d1d0a03de091a8a756e518d
SHA1 140bb781c2bab285fdb624f24f46e3cdf226280e
SHA512 8da68f744568b86cb1f39296e825cbc5d4b5c60dc0b126e33a78b31dbc0aaf7e6a4f325bf5937d15893cf1b64b9ac926ba61174c844c5fd97eeedc4554e580d4
SSDEEP 1536:M8GIDNoyEzhK/3d5oHpd1E6B/Uw+Z8VVsaHZqe3Z:fWy93X+pdf/L+ZqhZqYZ
TLSH
T13553129CACBA3C1CC1B6EB0D3B7A52458759CDF15DB53BAA50584ED2DF2C196130BB02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000047

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000047
Size 69KB
SHA256 9b9f2a4fba3966565538bd73650fb1a6a5dffc756792883524c1029e91052e2f
MD5 e1c1f8d3a37948a93720dc766c8cf153
SHA1 02f2289abc5423b2b9e4e8172a5c553128403c4a
SHA512 e40c694e0217849c29fef3e9b3ca02fbf4fbef485587689f420a468372f7ab120f9080a0e4cebd09787156302916804bd196c67499dda10973c380f786cac62a
SSDEEP 1536:IyUDqU2YqSKE+8zAwuxmGI5j90rAuFlCRainqge/s9XGAZlX:te0EtgmGI5j9YASlSaOe/eXnX
TLSH
T195631205D6AD2893F296B434248695C187DAC572CDF1BC64FB2AC3FC247A160B3C5B2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d2

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d2
Size 473KB
SHA256 a7735709cbfaa014383be582f19b6afcec245f6287f71b930e561f96d6b1ec27
MD5 1d8034617a748bb8e8103c3b30a0f53f
SHA1 6c2a21daccf7ccb022ac8bb2d86d5b005ab6b12a
SHA512 cd5d52cf8f25a59ecd614adf8ba78bd68faaf4fbb68a65dd3c1aff3bb19fede1c0f392f0d90449af1205e1159296997aa39d393e60c01911156d6580441a5a5a
SSDEEP 384:W2Ib5Ba84ZV1CUjmT8XoUIGc6GTlmv1UfbBlKUaoe+TZ7QswYJRYrLsc2w6/4SDG:W265BajOQq6GU9UNlKU6aJCrLsw6/4iG
TLSH
T100A4E1F3D63C97D8E195407E95E6A3779A1E5A9E0B1318DEE084D4A6002EA61D30D0FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ea

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000ea
Size 398KB
SHA256 f95d6a95caebeb3a54c77a837c080adb709f5299b8f84312bc2be48d4b71ce7e
MD5 0ad6fb835c7f4914ca1c91a783205ae4
SHA1 f0edfed3ad260423058608877a173c00f82abfe4
SHA512 623c218b01ab2918ad87ccfef907d9ffdc2b108ccadafc7ce5614e67948f625651b9c200e9a582086c472e752ddf6c06da22899b8e3387a3c0d2e310d69d5514
SSDEEP 12288:8P+tu1swwVPwgmFrulCAEXACo05j6w2QQ7:8P+tFVdCZi0Sd
TLSH
T1E49423784C141CFFC951CB7847A280EB13D4F17B75A2CA6769692C9EF432D29E8134EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000f9

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000f9
Size 277KB
SHA256 fffdae14e4a2069965e70692b96604ad5d21538909385b2abe55c2a6974d3336
MD5 ce652fa0b4be29f35baffdbd972d282f
SHA1 0045f03a54529eb75ca1be477076f5613e7650e3
SHA512 1e7117e865e9d33bb0bad7c04bb009f5fa109a093d2df1d1dd969fb41a0e31514afb5c5e01bb679d71cc6cd426bacaa538cc081e9f544383ce807660bb4154d4
SSDEEP 6144:PvSlPvtEIJuopV9WzgP80d77NjIZ3IZt0wS+1TF8IZKF+Q9:PvSlPeIJuAG0d77NjIZ3IZt0Zce3F+I
TLSH
T15F546DBFF7C8306D02071347B945B739B62D0639B2A1D5C6A888E53E11D1FD5C42ABBA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ff

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000ff
Size 24KB
SHA256 3096c47012a7255879304054c9d8d260fd67a0f4b3fdffae385fda6d519856e6
MD5 e8ff9d6fbd28ef9169d377c958235e8f
SHA1 40e43683f211f525348978e338f3d963649e6f55
SHA512 cdcba0c5532d7e53018569ad2c02326d92cb6ed58f38bd10cc94b8a848cbb6aa2e69a73862fb820ccfed233cf4144b4323c4cb2d352dd7249d66fa3cdc7b078e
SSDEEP 768:2YpFhYdDFIJXM6o7ybBcd99jYY/JRcwbU:phiDoXM97UoUaSwo
TLSH
T1EDB2E1A787D0E46D6E9F3BA3B1A4880CCA59760FD7E41C80503FC5167BE22D2058B76B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 edb7590503bf42d84f5eab50474bfa55f3a1263d839710e8e54b93b6f5180560
MD5 07f1df6c55dd006d83b60ce6b651bc99
SHA1 ea41ddb9e451fde20ac1dfbabbffb30f6b966ea2
SHA512 ea83b20d31c06d815476edaf9f691ad3307351321ff8e1734df44618cbc7edeae21b6634541745038de8282decabd9686c189c76faea7ba1bda3e8f43e3fa4c7
TLSH
T1DB514F2EEBC6FB89DFA16073C4A53E0DE83025970516534F2E48AAAF2753BF12173841
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f6b03fa1882e3fa5574bf1c7e6a7fd22af376b04db1f0ae2eedaddfb38e3484a
MD5 e9b294d7415949a23f591a1eb7c99d2d
SHA1 715466b9906e2d8024240266fbc89053c05b3b1a
SHA512 f629567984cb5bcde4a645a4a6969a38079c98a4b0e0111cc1345780d57d22b50ce1f60759c7cfef1e25837dbd83582aafad9d6f13d432f9c9688b290ee4e1f5
TLSH
T1A371331EABC1AB8DCF6520B3C0E83D0DB535125B156B935F3D48A92E17637E51272882
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 a6632c1630cd5615e883e530f5bc0b42fd9c2a20193b2779cd6f41b73e32f895
MD5 0888b791b3fda96b9ba6efadf1b99c13
SHA1 3ba522adbc1db17f0cf415a5245df6c70994462d
SHA512 de2abb61a5a64e429cea8a95694e9ea8aa18452c15c89ec81351103522d3003a488d06757793d6ef794fbc7e33d2fecd787854806d88a9ee7d3f9a8a9a4d63a4
SSDEEP 192:Y0dCD+dR3THu++2R+Gn3gHxJqLCgsNPOZW8yo1HxoYN/A2hisk/brXTDBIm9Bqfv:Y0dCD+ddTHu++SPn3gHxJyC5NPOW8yot
TLSH
T155E1B23877C2BBC9DFA450BBD0EA7E2C3437018B05636B5F2D091A7E1B433E5162995A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 a190500c945e18373f68a6e3276d8abce1078a012a3abcd03b4447648546fc9d
MD5 5f4785df1e4aa10952ce4cbc0dd5f159
SHA1 808304aef7c6acc40073d772550dc1fe9829e010
SHA512 08e1967c0caf8083e8f6c9006c6ab1bbf80c558d31e5af63a7e3f6e0da0893a118bc25f92db48c3786a1caf840841cf896d948616b3484aeeb23c767e29fedf6
SSDEEP 96:+Xo/bQus3pfMms1tcd28QFamb9g4uKxKBbKXKoBDNo:xnOpMxEkhjMBmxBBo
TLSH
T19DA11F2AB7C3AF8DDF6510B3C5E8BE2DA43411C70926535F2D08699F1B433F8223685A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 764f5f6713f8755e59e1947c6b3ce6b80d7dba3b2e706c827fa9880825e3ec94
MD5 c6445a19300767aa8f1dec626a1d4f1d
SHA1 58350909f06e68c32e13f1b1d0d31a711a439e71
SHA512 6125dd5c7928627fd31208f80a5b6c62ef9e51d8c31039626457d1e22144adfc218f093670426734852fc3a1c43b84c445aaf8d5fe01907582e5d0d88ccb0220
SSDEEP 48:2uS7VIRJaa2APn/b3t6iVMVF8aMdEz0fAERsnm5uPSFqJ34cWuRGKYqlV:2ucra2APn/b3t6mnEzo8mgPSFqJpPRx
TLSH
T174811C2DA7C3AF4DDF642073C0A87D1DA83812D70566535F2D086A6F13537F4123684A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
Size 317B
SHA256 1d1111d2175553cf0581c76361f41e99408b91e4d5b69010a33b8d39acc02cf9
MD5 d5d88fdb4c910347c2f4de4ab580aacd
SHA1 6a077bcf51273c301e3e3df563ec89afb568a13a
SHA512 48616b38c949430d20a34524f114c30686f10ae6a6f56ec429f29c2fae181581dcf7116c7662fddb19c2c70511cb09cd44f37b5e345a6ba6422eea471b9caf04
TLSH
T1B7E08685348AC66DD09CC4638275B34ECFE17444A6DC3D52174B94582281B056AD0361
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Favicons
Size 28KB
SHA256 2b5f4f1766803907c731d6e4201c1ddcde061e7101aaefdd023b4a7a517352b1
MD5 db812084d412bf3a7c5031897a01f48f
SHA1 785833eafeaf5c42fef9639ec47d57d3e999ed41
SHA512 d2fa2a3137b2120a89a13fa572b4679776ad1cc29d77eb4e2cf5cfddffdc153ace2cd4891ed4485f294f4bdf1a2d804c2524cc33c3cda0a06375831ce81aba8f
SSDEEP 192:ZcJ8nTnEonwnbQRAtQUAlOPA1q7KznrmyoaNWKmF4TRBH:mgjEcE+XUu8K1rAfF+X
TLSH
T1DED25BEB2F787863EF849DBEB1295464DC73C10E4F499CD4B81980321CF8992503A2E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History
Size 160KB
SHA256 b7e0562234a4cd84e2b2b2db187c546925ed3eae35173ecb49cc19e1823a5ee4
MD5 6d894c8d012288ef0bab52cff268961f
SHA1 1dad3b748f89f4e31aed33931d5c731865fe27a6
SHA512 a1669028bc599fe9afa9efe594c28ad01029c995797f77340a4cc1d3b11d49d363d6ef806aeb8a4213ca0528bb3d242d98faf3c09bb21841f9525135b97c9384
SSDEEP 192:1n5nJu/tH+bF+UI3iWGVYWNkqp3afg5lwn1nAnWnPnHnhnEny:RFQ/tIkUI3ijVYWNkqpqfgYRUGPHtIy
TLSH
T1C5F3746F2E647212DEBDD17A98E241A34C3DF02F875355C5EC6120B2CEE2652A02D4FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
Size 31KB
SHA256 5b9d4d2fbde95ea38a68094b57bbebd3fb3b7db3ba3d49cfb511c17315e75713
MD5 c34955cd2287efb1083ab1f97d1a7e4e
SHA1 d0b2f32fe25e748e40dc317e535061e0b5d6e3bf
SHA512 8cde6c73c317f839b2d568efa01b0df389d9f41f34008dac895bc2ed2ac1d6b63cf8bbe74964ec4ce78ef1726bd68fbac2b924190e936cef6fe0d9b883c220f5
SSDEEP 384:6paZPwEzsrcAn5Z6xui9AGclYBjnGJ8zFZ3GT8b6bOygv+hCCMer1n98y8HOPj9a:6gZPw0ui9nb6bzg+8y8uPj9a
TLSH
T14EE273CED6F8814DFAFB9F4BBEB7518644B5BC562C0CE86E01141E1E4E2364489A2737
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
Size 329B
SHA256 61592ebfde8fcf31584bb044d5ab54b52b25a0af3e952c0379d4f87f36338c28
MD5 be43646612786843b407daad5b7bfc62
SHA1 e9467fd1cc2adb43cc4b1f47d302174f3231c9a3
SHA512 d89c357efbf42fd2a93216d05078aa50058dbb36c2f8034296047e6c2e1e1681d186629cac9c6ccb51ef4a04214c9d01501fbd56fe34babab133f08fda3e4df3
TLSH
T12CE026E225EEC56E918D901B8275730DCFF03408E6CD2F820B0BA849B0C4608ABC03A5
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Size 20KB
SHA256 0cfd9bb4155c667d438fcdae61500b1dc2fd77f0240beb07fae31cb8c146112d
MD5 7f9bebe0bc81cf7d4083bc530491d2b0
SHA1 934fc2f7db5cf2492040205bd426357ae4701cd5
SHA512 d5747f0c179c41f4dd24caca9a16078b21425e8e9fd195b45aa0eb13e5038f1feb06d7317f58a2a825873d4030d0a71ca5f6f0f145a1fb28436f44a506ba2b74
SSDEEP 96:XPareMau4jGhPN6yAQ5m+AMY5VQAJy2DXq:XParLau4GnRm+A5CP
TLSH
T12792842F2F2C2511E4A9413BD8C54C2E5E69096DA322EAE6D608E4F38C95467B20F5F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 5c94ddff7be1017f8e916302ab0e2bd9863f7269f381e2dcac04d58b167e5f46
MD5 fe35fe0a648ad675b52269ad11cfca62
SHA1 be81e238568c0710f599b0e44fa00245383fe699
SHA512 f33dd28338233125ab92d6c2ca132c9cbe65c18294d9a108a5000f22bb957161f77f6fc6ab964226b4f91d631bdcb767b5d615fbd668ee33175c19bbedb21df5
SSDEEP 192:DxXxO1aa1vddcoQr7WmNPEaPm9fP3IPIC+vfNhGMuAugHf3Q1HA:DxXxO1aa1vddcoQr7WmNsaO9f/IPIC+N
TLSH
T1A9F19BF7C3E8C92D991156F4AB15AF1BCE291A24031C3C77C5D4BE1B93E28B1E20169E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 e0b4058982ea1f1c07b52ed12f897d6754e2fdd3f90c3d4c9a3508c455f7a1cc
MD5 dca5e6dd299da2c2b68bd6b83daf98c7
SHA1 767b6130efc121f1262ddba2b452f8d075b7d96b
SHA512 b2386262b035573abd6ad4ec622e18faf6466086acf0c4c11717d6192623b178d0b7558b777a36cfb425e8d2b2aee310a804d2ebe12196a38aceaafa388028fd
SSDEEP 384:D4tOlNJJyJ+BEGh1BbdMr9aa1etIPI/hGMuAugHf3cRPaYkUaq+uqVSfqNqmOkEw:vARgsWS2qLkR
TLSH
T19D62AAF783A4C92D991196F09B15AE1FCE290925032C3976C9D4BE17E3E3472E24275F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 d7e0364a6e6668863899643b1c546c5916ecc3ccb02eaa82481a1ab1a6196988
MD5 0b41ad1e389b1855f5e8be0ed42c04b9
SHA1 5ae334646d60941f40a67c16e119969c4c9bdc53
SHA512 5b3f5750f409d68b2ff86e5190d72298413381198ce18329e1a0a9ae6b6ae86b39e4bdb8ea0dfac4958b5bf717dfcb67e4e72018ae953392f0f54af606d8ff36
SSDEEP 192:DxXxOtxFo+gJi3JMwaa1etIPI/hGMuAugHf3Q1HIBYVaP05QofypCv+fPEJNPoNY:DxXxOtxFodJeJMwaa1etIPI/hGMuAugY
TLSH
T18E22AEF7C3E8CA2D891166F4AB15AF1FCE191924431C3C66C9D4BE5B93E24B1E21178E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 f3a1b14cd59f24cbe9b67f8a55ac5b4674f7ca0e7289204604276ac021c6c496
MD5 a34d5cfad1f36eb8a3bcd38fe4e1f7af
SHA1 310321a12e3793634d4639ce07c071542f3cedf1
SHA512 c8e3e5e843763343487dc678eb0ea79a0a919623cb7621ac8fbd54ae77cdbf901fb5ea5c2e271cf4bf453b5479b69e44879e045ec7a868852fbeb885aa208f32
SSDEEP 192:DUUvkDxFo+gJi3JMwaa1etIPI/hGMuAugHf3Q1HDaP05+fypCv+fPEJNPiPa4ITi:DUUvkDxFodJeJMwaa1etIPI/hGMuAugU
TLSH
T13122BEF7C3E8CA2D991166F49B25AF1FCE191924431C3C66C9D4BE1B93E24B1E21178E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 ae0948b71fc8edc414229340f8a6330b0c23c528cff6c224ab514690b88fe1c0
MD5 fdeca41152a7383a90780baf1c865799
SHA1 afacfc332cae605425ace4054c1a314ae4fa383e
SHA512 e07b492e6e37ff3ceaeceac539f684c291887bcdc1eb85570f177510651a15b155297dcd4c96f69ba3789b828c6aacdba5fb317edd09fe59d18c012bedfc5744
SSDEEP 192:D0UvkDxFo+gJi3JMEoPaa1etIPI/hGMuAugHf3Q1HxPaQpNLUaPp+MhVvGfP1NP5:D0UvkDxFodJeJMEoPaa1etIPI/hGMuAl
TLSH
T1DB22ACF7C3E8CA2D891166F49B25AF1FCE191A24431C3C66C9D4BE5B93E24B1E21174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 f4324e0d51194f69a74c155d3f7e17095a4bdf4403830787556a47f831badd87
MD5 23bf08e3a33e5a72407755d3e622269e
SHA1 d058b1df476e10d9037615d22ac6347844f1fe3c
SHA512 d4249e7e6003fe78b490873c8243bb1db0f3f6433437d4e7308fffb5ff142a418c8c49a5c0e9748f6e0848da2b10333331ef767c96db5cfe53acd996c23d6a78
SSDEEP 192:DUUvkDxFo+gJi3JMEoPaa1etIPI/hGMuAugHf3Q1HxPa4IvgYHpNLUaPp+MhVvGn:DUUvkDxFodJeJMEoPaa1etIPI/hGMuAi
TLSH
T18022ACF7C3E8CA2DC91166F49B25AE1FCE191A24431C3C66C9D4BE5B93E24B1E21174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 15KB
SHA256 9baace2bc675220378112e9cc251d18e1d7991de2a09f64401850697dd77718d
MD5 815111ee3af30a6467fed358bf6432e1
SHA1 67245e7d88d3d341b1f07a377227325a6f26f707
SHA512 78278fe711664a7ff60cd5dd03c866b29b2306b6425be3013135303f97ab36c69b086d01de7418a02788aafa053138845433cbc992054d4162c84ecf30dcebea
SSDEEP 384:D4tOlNJJyJ+BEKOTiefNaa1etIPI/hGMuAugHf3cRPaYkUaR+uqVSfqNqmOkao7r:vALgsW/2fJ9/
TLSH
T18862C9F783E4C92D8911A6F09B14AE1FCE180925032C3D66C9D4BE5BA3E34B2E20175F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 15KB
SHA256 3b32604b9aa604cff7862bc15db5a8cce6a50357a863ac515b82298ba1a3c408
MD5 865ed4f4ee4c894b9acfaa68c2bc1411
SHA1 76e4e912855cbeffa8a55abc099c4946f1b0ef5b
SHA512 10d972f3fe29dea09557b1712ec7d8dc4fce8552417d69d31826e352c30af99c042f2b48a751409b821749d987161f9af824a7fec581e4ecad1732e396287403
SSDEEP 384:D4tOlNJJyJ+BEGOTief1xwaa1etIPI/hGMuAugHf3cRPaYkUaq+uqVSfqNqmOkaK:vAOgsWS27J4I
TLSH
T13362BAF783E4C92D9911A6F0AB14AE1FCE191925032C3D66C9D4BE5BA3E3472E20175F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 26cb0a9f0e8ad9914c7e85343bc89c77e3fde3a95bac451e97b18713588c459f
MD5 067669237bb76f0a5196b5acf05c0cd5
SHA1 205b48daf7f088c5187ab218529f950a5b389e83
SHA512 eb2673f470d4d6a736043aae8ce7ce0fb8f750186058f957009df699b412f36d3532265ab28e837b16804c89df6e5539bc401c7b911d552297981f8e3885b3e8
SSDEEP 192:D4tOlNJJyJ+B1KOTaaa1etIPI/hGMuAugHf3Q1HxPa+bkUaPp+uqVvqfPiNPimIQ:D4tOlNJJyJ+B1KOTaaa1etIPI/hGMuAK
TLSH
T13F42BAF783E4C92D891192F4AB15AE1FCE191924032C3976C9D4BE5B93E34B2E24175F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 0bfca1bc9a70cf3322de1fa05ffbf0cf0197dabd919b4074a57f571777c1b114
MD5 be7051d46fc059638b3369ca983eaaad
SHA1 80cf46772e68bbdd6459a1283d6a8cc959e058e1
SHA512 2e4c3cc81acc313240445fb72b9bd43e6775df249cd8d4aa6cbfc42b3cee215b19b9d363783d76ea16a66a4a332ac6415e4e40dc823beedf6e8c3c89a0b895fa
SSDEEP 384:D4tOlNJJyJ+BEGOTibdMr9aa1etIPI/hGMuAugHf3cRPaYkUaq+uqVSfqNqmOkaZ:vA/gsWS27LkF
TLSH
T1B562A9F783E4CA2D991196F09B15AE1FCE190925032C3876C9D4BE5BA3E3472E24175F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 6cc174221d5c2d3775f6f04a23a67f0bac2964b4939a8b72183fd6f01a9c2a63
MD5 dc5885effba91eead41d08ccfb7de4e0
SHA1 c0561eaa81a6a91418f7a8e90d6612378dc0a3c0
SHA512 7d79825d7d11dcc30dddd5afda75f673a853a9bde279b5ba41e4aebff35c1e913557edb1756847a763dcdb979eda3166d8999e1461007cf85fa73e7e2cb56dea
SSDEEP 192:eIEumQv8m1ccnvS6A2iCAViN5LN03gEsWqmfUJtrtaUjZY:XpXA2JAVivLQZspqUJtrt3j6
TLSH
T1A0F26EF72261D509E58405B0D10AA90EEF420534067AA1FDE792BDF3A2C31E2F75DBA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 2KB
SHA256 10f8bfce62b1502af4eb234928b1d3dce77d198c4fda47aa54fbfac2bfa32001
MD5 34ac30a6a707a0f97415942512ab5ce3
SHA1 4569315d9622846b5470244e1c15c15ce6018e31
SHA512 1d5c3c40a3a528d5752487f2f0f45428ba3ce2257ebcadfabd47dc783dbdf16aae0307eedc79cd5b38e0d2988d286faa16e15100ccb8f6af46fee97777781649
TLSH
T1D5419A57C17FB817207CE87E1E98780A19A6F83712516CF4DB9A826DB48E5FF0B06427
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 2KB
SHA256 19e3ec8e28ba1448979ff1ca1f5b0c7fa5c5a6fe0fe9596957b07399a7a4f354
MD5 dde1e39aac7b698d778b4eae47539b3c
SHA1 e23bf6e490e9b944f450bcb81d955dd48f61f18b
SHA512 30ef4a35e766506dedb264f1dc0b798fbd910ae144c452d0d698d9c6a28b032fac4fce5d7e82db3f625689217aa2d0450114bf1c3f63f41f99c6828354be919b
TLSH
T149419C57C17FB817203CA97E1E88780A1DB6F83702517CF4DB96826DB48A9FF0B06066
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 4KB
SHA256 6069ed0422722f6bc5e877fd6e95d2cef6f792f3a327dcaf180e3c437ec22e1f
MD5 5fcc9abaab29be19b1846f8f8d39152c
SHA1 d91afd3347afda16f93c08461292997c9b1f392c
SHA512 685a66eb7ebe36c66ab5c9b803f1ac8402773bffde629a6d09e7805917a6da83e143a0317417f7d2cc5aa6e11db13347520441a59259d50b4d4d3bf7c22a2ed0
SSDEEP 96:SgUpUFvUcHMIUYieUqWjJUY/UuoUPUe/UIUfhUyxUY+Us1GUMhowUyeAUTNYUyVB:PUpU5UfIUAUVJUY/UuoUPUKUIUpUmUYR
TLSH
T11091A057C17FB417103C997F1E947C092DBAB8361251A8F5DB9B82ACB08A4FF0B15066
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 6cffa643e8e743599fd69f52bebcca6ef3380908d823ada051bff38f1f9354b7
MD5 3ada3d53ded1e5648ffa00d2f087e59c
SHA1 ab80df9c8dd4e6425a9dd6c220e397a42e7d487d
SHA512 240312c2c99dda180e9b437ce02441546b169bfc9fdb0fc2fb22005bdfc3ed30b83b823543d1d0837e9e035186c749e7194fb4a5946f272168f60b8aabe6ece8
SSDEEP 192:yR3cBzjpjuwov7spAPRp22mKfd9wHsb+WNaBpFhBxW2jN2kwa4YVyIsnAUgtaJ:yR3mzjT0YUX/LKwc62J248
TLSH
T1BD52B72EF950693B6CDBD22AF9227B57D7F5102122942D84EBFC8E1C14E79CD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 f24f81bf51c6c27f3c391189ebad2988f4426f447bf9c92c18ffa954a0b59370
MD5 233f3a8d9c0830e12bfd00ef7bf3fd5b
SHA1 0f892110f39fe7ddd9038d447bb59aa4c10946c6
SHA512 fa99b845025f26d690aeb8510ea57615b157eb9959057e2fb7a5e34ce124b0cea211df685297fb25f5911a0c3748ee905ba6cbcf3b920775041bfae4179807f0
SSDEEP 192:FRLjpjuhzyv7spAPRp22F9wHsb+WNnyB04N2kwa4TVyIsnAUgtaJ:FRLj+eYUX/FKw80I2J8
TLSH
T19742D72EFA54693B5CDAD22AFD227B57D7F5103122902D84EBFC8A2C14EB5CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 8a590a63a848a171d1d24197d6b68a4ce8e704b27085aa91386d895a4069b4a6
MD5 8e556dfb2373a5d57de02e25f36550a1
SHA1 af8bc88a66fce1ac5e41c439e779966f8d147e53
SHA512 36c9d3842ef47e6dab406838eeb88f3abbdb2310a6b9c6d6ea9367ba23676e5ba6fd66047dcdb60549cc4ed140750ceeefd58a03ecc5099aa4debf6611b9b10b
SSDEEP 192:FR3cBzjpjuhzyv7spAPRp22mKfd9wHsb+WNaBpyB4xW2wN2kwa43PyIsnAUgtaJ:FR3mzj+eYUX/LKw7f2Q238
TLSH
T19152C82FFA54693B5CDAD229F9227B5BD7F5102122902D84EBFC8E2C14D79CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 cad819937abd8b34445790307224ce07487fbd89c9a7fbde5ad14fd71228e4bc
MD5 a5315d73218ecad1abd3aac5c0ef64e5
SHA1 2bfc1d21c5af7a8f0cc7b93066eeb70c32456340
SHA512 f882666ce4ca6a6758f5afe355422eedbd457506b8043a4e0dbed3df58d7985c9fedd0e878cde6ab003d03fb8b85cd8195cfee10fba251b191b924c549344647
SSDEEP 192:ZR3cBhjpjuhHv7tpuPRpo2mxTuD69wHsb+WNMFfpHk5XkorIoFKEIN2kwa468yI6:ZR3mhjWPx6X1YKw5+bbE425e
TLSH
T10562D82BF910697B6CDAD229F912BB5BD7F4202152902E88EBFC8E1C14D7ACD3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 4b08af0689a90cf01cf6982d3d98cfc0c2c1b8043b2bbf8e16a1da22bb986761
MD5 6b24378c72f68d9b26c54c4a19a0e7fa
SHA1 887321e7db18650e42eec37f6f802db631cf1cbe
SHA512 95c5380029b2dce8528a13fa09a36703c8927d727215d01f94e9bc85033f9e5285d5312f665c6bdc87f480e91ea122ae1afd3595080ad01600b0b841a9763c23
SSDEEP 192:ZR3cBhjpjuluv7tpuPRpo2mxMD69wHsb+WNMFfpHk5XkorIeuN2kwa468yIsnAUp:ZR3mhjKKx6X1MKw5+beC25e
TLSH
T1ED62D82BF910297B6CDAD229F912BB5BD7F4203122902D88EBFC8E1C14D7ACD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 7c12fc54edeb3f610c9e18147de0acdff07d2a4376f7b9a34c425a68227e745b
MD5 a1e2cf101a52550b6fe57a65651ed2fc
SHA1 d4355344d75b99bcc4bbc512f99243afca7bf221
SHA512 a7e4d22cf52e560eba9727405fa517271897da7db18086ae3883c12b95ab97170e8d303e2364e9f83c9c2afcb6a67930e96d41fb5088a6e0805aef296baef82c
SSDEEP 192:aR3cBhjpjun/v7spuPRpo2mzgD59wHsb+WNeqpcLuKhGo8YTN2kwa4a8yIsnAUge:aR3mhj4XY6X15KwmNSYZ2Be
TLSH
T1F062B82BF950297B6CDAD229F9127B57D7F5102126902E88EBFC8E1C14E7ACD3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 b11904237623c3938abd13f59be04de57b3aa77685d0d1d182bb9a79a08bb8a4
MD5 d3dc4d8dad18786cf141e9be840396ee
SHA1 08378dea5caa89fc5449b18b2742c3b065be2e3c
SHA512 451b20227fdde720aae172cbc19dfe087468d790747d86fb8c2cadfc2bd90efa1632734f7a71dcb3750c00081220524974202304198e29cbfed6073599feb2e8
SSDEEP 192:wR3cBhjpjuoev7tpuPRpo2mxMD69wHsb+WN+MqpYXYXkorIeGN2kwa4a8yIsnAUp:wR3mhjXax6X1MKwrrbeK2Be
TLSH
T1AB62C96BF910297B5CDBD229F912BB5BD7F5112122902D84EBFC8E1C14D7ACD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 4ebc64e0836edc6224128d660c11a5d3b70dfb1ce5c62d151046bbcd44ec77e5
MD5 93866aa538634a7a791b0e572431e328
SHA1 b8769e87810ca43d5f6dc634be7400159af4f6dc
SHA512 3e6d46c0f01b113888ec769876aa1ead7055170341afb63d1e1fa7df5ba55ffcf97cbf714a6a50403da79b7007fdd8b3188f4bafb7c28ae8dfe822b269c40213
SSDEEP 192:yR3cBhjpjuK/v7spAPRp22mzgD59wHsb+WNeqpUAWo8YpN2kwa4+VyIsnAUgraJ:yR3mhjdXYUX/5KwRiYj2qe
TLSH
T1E952B72FF910697B6CDAD22AF9227B57D7F5102162902E84EBFC8E1C14E7ACD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 8c880eb25fab68e7a6bcfc84801cb3e96fa1d7416586b14a65dd605403ca0bcc
MD5 00f3f67f9993ece380e4092bff313088
SHA1 0596afecb9d9a1a7ce7deba30f54563848ffcd0c
SHA512 c6d3f4d1c0ee03b9a201bf2996e692e87094a54c498cbccfd08535412d17cb055c02b7afe3c55fce7f24916df480e3c579b0b3f80e8ce3795717922239e14e37
SSDEEP 192:aR3cBhjpju0/v7spuPRpo2mzgD59wHsb+WNeqpcLuKhGo8YTN2kwa4a8yIsnAUge:aR3mhjTXY6X15KwmNSYZ2Be
TLSH
T13362C82BF950297B6CDAD229F9127B57D7F5102122902E88EBFC8E1C14E7ACD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 f64bd61b3265fa1f6bbd0285aca118fb5cb308490d6cd358f0ac1df5389c2af2
MD5 d2af68d038a8e99cb9983a4f59676849
SHA1 9ec88a049aa703f1ea50c47c2a2dfb90992395d7
SHA512 5863e8a7c9a13b7b3bb942c4972fdf0444e65656f911d8c175c618203c00cd3b0857369050f1fd6fd70d7de9a5bfd27e0a9fe8dbaade36313e1e2d3f7745a7cc
SSDEEP 192:aR3cBhjpjuMvv7spuPRpo2m7fD59wHsb+WN+MqpcLuKhGXkYWN2kwa4a8yIsnAUp:aR3mhjrnY6X1SKwTNBY62Be
TLSH
T1A662C72BF950297B5CDAD229F952BB5BD7F5103122902E88EBFC8E1C14E7ACD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 748c4809531493ce3c6eac8fdb5d5254fefd8f83f6df3982820cba565229d026
MD5 d3d7f45cee9021bd9d660d33313d946d
SHA1 589b9901d3e107733c118c5c4c2d99f2408f9b68
SHA512 74371e5c4c74756cd295572c8082a44c3e1b5c00452638e6637a470cfca6a51dd014ada06546e24e687a320d0bf6ab444bbe60fa508dbb05f1e19a22b2c11048
SSDEEP 192:aR3cBhjpjuMev7spuPRpo2m7fD59wHsb+WN+MqpcLuKhGrIe2N2kwa4a8yIsnAUp:aR3mhjraY6X1SKwTNZea2Be
TLSH
T1A162C82BF950297B6CDAD229F912BB5BD7F5103126902E88EBFC8E1C14D7ACD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 decc30a25482b49a08d7fc9a43682d53beaaeb8d751d0b5704588a636351d037
MD5 3d28afc629270b714f67eaf6ca7dd158
SHA1 6fa47de5a422fa1bfa5cbc25c95351f8da7d05e7
SHA512 15456ae464f51a8bd8a072cf5b1824f3105e87588aba40da58beaccdde93223dfa53b1e73e1691fb720d9b2c0d9bb7101d77b4652f67f6f7c0209ca78e6c1ea5
SSDEEP 192:ZR3cBhLpjuhHv7tpuPRpo2mxC23D69wHsb+WN0oFukpHkV0TxXkorIol6EtN2kwk:ZR3mhLWPx6X1BKwUy2bnEH25e
TLSH
T1FE72C85BE9105A7B6CDAD229F912BB5BD3F5202252901D88EFFC8E1C14D7ACD3213417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 9ccb9719e897e0e5920a5cd038abccd02c31b956c48949a3b2148b0d2f204412
MD5 8e1493ca1c99697f93fc6db72341468c
SHA1 69b23c9274a2f09f1a828bb691b3d77fb5fe5a7f
SHA512 547e46c61cf230edfcb7f3bf38d0c29a052f1b5783e11547e9da5811aba9305179402a26b5f44d28f15f5c100ea348602f371b7378e4205c54bd4dde1ee4f8eb
SSDEEP 192:aR3cBhjpjuv/v7spuPRpo2mzgD59wHsb+WNeqpcLuKhGo8YTN2kwa4a8yIsnAUge:aR3mhjcXY6X15KwmNSYZ2Be
TLSH
T1B762B82BF950297B6CDAD229F912BB57D7F5103126902E88EBFC8E1C14E7ACD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 f971cc66443ee61840a7f5c2cd0d24d06ab5af5037363abc39c61e3b2e6fba52
MD5 1810614475bc1ad922f14a188765eb06
SHA1 761c9c84c7f69ebc2d12fcb16a2e24775d5b8e80
SHA512 23e088441902bf78e93afc0f972bb7a225bedaa5009a3975a7f6337713b5d633e1c8ad86e7f7f01634f2fe11a9169f2a1d804ff6ee2b36ff0845c82eaaaef47b
SSDEEP 192:aR3cBhjpjuMev7tpuPRpo2mxMD59wHsb+WN+MqpcLuKhGrIe2N2kwa4a8yIsnAUp:aR3mhjrax6X1HKwTNZea2Be
TLSH
T11862C82BF950297B6CDAD229F912BB5BD7F5103126902E88EBFC8E1C14D7ACD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 b80e6adb2bdd2ce63596572a54b9031761e7bfa9e139088f8ab66804f2c8c25b
MD5 efe7fa94203365e67e31d70af753a213
SHA1 62623b4684b2491f7c9b2583c733999ac867f9ac
SHA512 8b3c0af94e366b6cfc7fcc173595e94329a1ebd4fcd12dadc2765470f4a544d61e29b3ef608f5e3fb978251d922e05690dd122497025e5367c30d48f9874ccf9
SSDEEP 192:ZR3cBhjpjuhPv7tpuPRpo2mxTuD69wHsb+WNMFfpHk5XkorIoGF2XN2kwa468yI6:ZR3mhjWHx6X1YKw5+bv2d25e
TLSH
T12762C82BF910697B6CDAD229F912BB5BD7F5202152901D88EBFC8E1C14D7ACD3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 ec5d1640fc634991f99759204b5049f08466206a4ea409464c36c8e01c387d3f
MD5 18727b6aeacdae7b60647bcdba76d72b
SHA1 6d7ed05f2a3a38199086a9594012410d2ff1a158
SHA512 710e39cc0fdbcda1f49634904457d739fe15b64d9445d9bad7c7782294ff2beb7328ab4e633e471796bf4bbebd8e200741960a8700dc367555c9271cf799f531
SSDEEP 192:aR3cBhjpjuH/v7spuPRpo2mzgD59wHsb+WNeqpcLuKhGo8YTN2kwa4a8yIsnAUge:aR3mhjMXY6X15KwmNSYZ2Be
TLSH
T18462B82BF950297B6CDAD229F9127B57D7F5102126902E88EBFC8E1C14E7ACD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 b1db8fa1249eddda395ca633697a398ea40399e9abd69220bac80062c53e9d89
MD5 a9d758f46ced83c93a6f5e4c73b554be
SHA1 d0b9292215a6765c57c75e60b0c1156cc9517189
SHA512 53232243a5ec5db57b14f0e482f6f8612b7a6b73f8f9ac43540bfeae5ddc62dd283a1190927ea7f1bd5e66db4f8d38202c5d6e8d0af490b66a69c45dd6ca2844
SSDEEP 192:aR3cBhjpjuL/v7spuPRpo2mzgD59wHsb+WNeqpcLuKhGo8YTN2kwa4a8yIsnAUge:aR3mhjkXY6X15KwmNSYZ2Be
TLSH
T1A962C82BF950297B6CDAD229F9127B57D7F5102122902E88EBFC8E1C14E7ACD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 2e186d5b05aa8eb442f084c5a4c147b33cfe893c54bdb90e9a9e2f4383e4c57b
MD5 1be026178d74324be3242b5b44a7d591
SHA1 4e35892aeec83942ff202f66b723bf4e591d2ed8
SHA512 184a2ce9d5913806c8ac4f6fd856bc23f3d7ce0ada062348927f7253d8db880273fa61da5541ce602ec5a4d6887071108a897146db80e726320629eec85f4d15
SSDEEP 192:ZR3cBhjpjuhuv7tpuPRpo2mxMD69wHsb+WNMFfpHk5XkorIeuN2kwa468yIsnAUp:ZR3mhjWKx6X1MKw5+beC25e
TLSH
T18B62C82BF950697B6CDAD229F912BB5BD7F4212122902D88EBFC8E1C14D7ACD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 b753ab819aa82f145fbf570ba99b52f6eca9d3168cc55a647b10112695867757
MD5 a4bda355f916093e40fad259c524fa97
SHA1 307a89e5a38808cc33e43437cb4c8252dd6a1b32
SHA512 68604a30097ce8585c3a768777e9f4b7e006d0b506948f0b77dcea66266281251772e97d04f0400a88f1d366e0317427e9789feb3d324a886d77bf1c3c1db77a
SSDEEP 192:yR3cBhjpjuihv7spAPRp22mlad9wHsb+WNaBpUAW/fW1N2kwa4YVyIsnAUgtaJ:yR3mhjNxYUX/tKwEqWf248
TLSH
T17E52C72AF950693B6CDAD22AF9227B57D7F5102122902E84EBFC8E1C14E79CD321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 e17ceff7c607f41cf6f6ba42efa5205aa9b75871e59059f7c90864abb96acb81
MD5 0426f3feea87dddffbfb5b27d1471c12
SHA1 530dde3daa90bf5a7e78d92bd920fd20e6c443f2
SHA512 1ae1bb955c1b9064ac039342b3ff10865bbfa88fe78feb2695e65e12381460c3c7cf59f80044745de27467be7bd64edda3d008008780d84cc73c7d71f8755f7b
SSDEEP 192:ZRucBhLFjuhHv7twuPRpo2mxC23D69wHsb+WN0oFukpHkselr0TxXkorIol6EiNP:ZRumhLyPxzX1BKwUDQ2bnEm25e
TLSH
T12872C85BE9205A7BACEAD129F912BB5BD3F5212216C01D88EBFC8E1C14D7ACD3213457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 3dda780caba983ff1dfe46df22d4def7a02ac17755d33505df65e782eef0666f
MD5 dbf56c24dcc75e2650f713d1f9cbbb63
SHA1 9b433fc421e95fac28de8b5159b39f5cdc08555b
SHA512 7d002487e5c9ad030023f948d1813d91f4a9788308d6223a445bc62f503290b84be4856bbe8fa6aee64f89f7d67c4445cc3ae2a1c6d784f9dd7f75e750175d44
SSDEEP 192:ZRucBhLpjuhHv7tpuPRpo2mxC23D69wHsb+WN0oFukpHkscLd0TxXkorIol6ENNP:ZRumhLWPx6X1BKwUDa2bnEn25e
TLSH
T16E72C86BE9205A7B6CDAD129F912BB5BD3F5102256801E88EFFC8E1C14D7ACD3213457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 379d96542283773f422c052abe7293924621df1604b63c9a59676e1514d2db6c
MD5 d066f854d368cbebca026e5da297c2c3
SHA1 4f2f84d54b0a8dfd273bbdb70bcde51ad5e2f12f
SHA512 613285c6b38983d33fb336394c5eff7edb692f60dfa433defdbf45524dd1c84cadfc8cba744a39b1c75482b318f7db6eaaae9842cfa8649a9ad00cece8442e41
SSDEEP 384:gCjUH7KxkXqKf/pUZNCgVLH2HfgslsZ7pLuLcSjCDXODUr+ErU3/NHGcmyqOqjmo:gCUH7KxkXqKf/pUZNCgVLH2Hfgs+Z7pF
TLSH
T15A7209676C4C9E370F94C6CCD8267F4F9DB5024B65E9886483FA9C2903D5ACB114A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\6a075dd9-bde7-460a-b7d1-362550a40ed6\index-dir\the-real-index
Size 72B
SHA256 925f9fa3f17fcaddf6b748f4c0c82127e9ea447cdf2d54ba0b6654078b575005
MD5 fd7fdfe60076ed59e9a487758d5d4433
SHA1 087294cf7d978cdc63e39c14a6b7c2906d94694e
SHA512 c6b98aa96b644bfa3fcd972cbbf24f90870fdb97db288df3d897096d85d8f781044534ffb303aa8e203bf3d26335e33234ef7f5b654075c5203ea16785ed3aef
TLSH
T14FA00250CD479039E802C6755075018F33525C9B0302071670E5408488525438211031
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe612c20.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\6a075dd9-bde7-460a-b7d1-362550a40ed6\index-dir\the-real-index~RFe612c20.TMP
Size 48B
SHA256 caf443a2f44884d9f563fcf99d6928c5f322bd94ba0189b4cc3fc9d14fbd1738
MD5 8e054aee41e93bdffde28c3ae78661aa
SHA1 0e9bd99e8c7baba404fddcb595f86a20a9f9d139
SHA512 e6e496f5f5c640d72165441ce2e1a062f4c309fc4fc9083d0bf48788e3108e61194770e5ca93ae77406d3ea7e32a05d31feccd36a53cfc62b0b1a49a4e540a86
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\9db1b4d3-0525-4303-826a-eabb95cb4ace\index-dir\the-real-index
Size 3KB
SHA256 107de1f9d2801bc32d1107c2cc4dbb850d7783ade67258dc25dd86661c073898
MD5 f402a6ba7b969a8e70977fdc0c571533
SHA1 5353e0d62f849dbaa3074011921fa1a0d5ef4d08
SHA512 38de2dac0bbc397743f29f9eaa8084ebb46c758ac816395abf025f153cf46ab7cdcb8d5cb89a40034f9a66866593cc035e495b9f9b2238ad68e4629b8ee33dd3
TLSH
T16E71E8899D51E631C27C0B7680F8DC1EE73837CD1B8B3B1A117D86A4568623C5F822E6
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe613f98.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\9db1b4d3-0525-4303-826a-eabb95cb4ace\index-dir\the-real-index~RFe613f98.TMP
Size 48B
SHA256 02d1ec2140a510f83b5e9a76de601b843b5b7f233b663520d3f1c13f06bc9feb
MD5 f99d895e98e89293fe237793be0f6517
SHA1 7269811c319152d13bf6490ac0c1213b49e3eaab
SHA512 743322adb9cf15a9ea601d1068ca5d6469d7ea08c52805108beb937da588268bbb089d3c557512f553876531d63b5807876952c2048818ce77fcd0c09a2053b3
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt
Size 386B
SHA256 cda8e2db32c0c085aa35e6d84126302759208082f13e39cac2eb72323539401c
MD5 fce348a3129551132157c263da41f68f
SHA1 65fb65288ed18d9ed8e3fe04bd8b1859852f26ed
SHA512 a394dd6f3fcb7f266829459161b5ed4208d5d7ee9eea4b8eea27dce2924a87c4cf0430b2ee2f0810f819a0e14997810299947a9f66348ec90a76f8e31cbab4ed
TLSH
T1FDE0681233328022DBA10DE91D94FA9CD43F2A839E58DFAC9088B0010CBA7669553F13
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt
Size 383B
SHA256 f5c94b2804bffda14acb0fcbc1f0f4379024bef2e63c0366cd282ed04951e8a4
MD5 836d2add909e52038b0eecdb13749205
SHA1 73d1cfc471f57e04ac7182502a2b9f20d845a6e7
SHA512 766ec889e92d9ee72cd20e9dc11fd5a73bdc5b1198e1c542cdee78fc9c0663b79dad764d2f1b470d149c1bf6c4f8b231913921ee8034640312dd8b772e88576b
TLSH
T120E0681323328023DBA109ED1D98FA6CC43F22839E04DEAC908490020CAAB669553F53
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe60dde1.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt~RFe60dde1.TMP
Size 195B
SHA256 85d2476c3574bf152ae0d828c8b4dfb7eccc028525999a370780ff5143a7ccf3
MD5 ab3ed08ada93a9bff30622d1004207ed
SHA1 7ba8557a5dbf967fff60e3bd31a52dbb8f1a25b2
SHA512 092ad857961541d61b65bac2bd3a4f83ad4e37b4885c7955b39b7e65ce98675111d9cb762048205550401d677b0bf9365f6d479e8d1bc2b3e4f813af4ff3113c
TLSH
T1E7D0C0476232C002CFA001F20E62FACCC42F1EC38DCACCF89088B0400C753869283F62
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\000003.log
Size 4KB
SHA256 53bb72c8cc1457fb7c00b64ffa09f1b525ef5d88660091ca11767dcd84dc2a81
MD5 63cfb19d63d043814b836ef7aa6c7f33
SHA1 1422a44d6bc698c29bb2ff1166dc6c649a99730c
SHA512 e8913bce7b27b5da8f8add0293f4de059c0702339d8f02ba52e28d38dac9b7879b827defd111eaf45b1b71e04dee1d2ae4a9a6630d3bfe11572376ee07325461
SSDEEP 96:F1mKAMiRwcnDh1Jk7ZQLXbXFXKXTrFXSXTnYXFXKXTCxhXsXU0XbXNXKXTquZXIN:F139dmDhc76L1ajZCjY1ajE8rL9ajt4N
TLSH
T12BA16D6EB50A184EE4AD4936CD78571B5FA9CF0C2BFE3767A9DF8A0405B0A5701086F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG
Size 333B
SHA256 4ac9bcbdf60cb4d0083901c95d87ab7a94ed809efcb6fafc202ba350a516a0ff
MD5 72f5e78ae1df4661becbbc40104c9275
SHA1 ffb89564d7914cedefe3926e8bad53ae2b824047
SHA512 32ea1b9953db6a20ffc07b0e8626f2e5194434cba5448afff81f54a6ae65d1cb006440033e62198c11da3f2f51f20f987f6896fdb4d008f8144acd6af6891f3d
TLSH
T1FDE0268925CAC6BDD09AC007022EA74CCBF8B41AD3CC3DAA3F83C44411C9A08B291361
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 da22757cdb7fd4c07450fab930d92708534d8cbe38b0c172a4c84e0e3ee280f9
MD5 64023ec1c4fb86e237fd0b408642046b
SHA1 3915c387d2ceec8eaf5f9116ba7d22bfdc09745a
SHA512 144c4e626fb32afe3c0156bd5c2c9a0f2e1f8df638f0bca73ea1e0ae15bb71e4837b8389d5bb9ec2b0a1f2f9629bf3bc82437c738fa06d84979c7d54fda981b5
TLSH
T111C01242C482F153C01603F4105BF4EC7174DF60CB0B134C53F01D2798342118325261
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 7c164b05096689c4dfc766382e1abd9c5100ef9773a14d7eb93650a0a0c01674
MD5 6b53eca80453fa656382f121ba1c846d
SHA1 5f9a4c0e40ad78bb8d0d41a63c297fdad05a21f7
SHA512 3fd75f1dba23d201667abd1bc96453a5791bf040f33943f59cdc01681cb321ab294ec97830dcc28c0e65b163f488ee5ef4a77c1056e34f9471b24fea2ae12d92
TLSH
T19BB0120180129541C49303B01143148C71546F11970A170583E17967C82E1728014051
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591822.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe591822.TMP
Size 96B
SHA256 a1a944623edba4b551cfd65c8c9e2666ae555c0062bfcf20d975c60d08c8b781
MD5 b4dbc123440108bf57a7a9013a2fff58
SHA1 be2ce956f66efb84111995cf76a6c5467d8674ad
SHA512 59a5ed568bdf5f0605fc64f2150caf21870dad0a6266c9287b64c05b0e97052949cf3c18df66be9a86309533d5f3a48053b2fb77d089dbd653ea5bf72d3aa35c
TLSH
T143B0220EC203A282C08303B0328080C8B0A0CF33C303020AC2E02AB2CC22A320822020
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
Size 1KB
SHA256 90c9fe362b97ced150a7ea99197025eea00c6182b26c3d1dfb6ddff981357f20
MD5 ef852599fa8b71109bd45a4e1e67d05d
SHA1 6ac554c7c98db7eaf3e70e178f9823d118d01bc7
SHA512 62f196bbc261ea6df0ddaa71491843413f74e545b00e3290febb66fa17b55a36f7afc662b07e33a0bdfb96a0752590c185d187db35cd4f484cbc655167bd7e84
TLSH
T1BD41AFFB1998B027FDF685B17CE31264C63271655D50CD86C3852BEC080663679B097B
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
Size 317B
SHA256 5a9bedb715586cfad6098be672881b8eca5f26248766f8f377c7d33fd8c8de00
MD5 161faa52130f1daf73e73f5da66e8f46
SHA1 4da451da51eb4ef0be7a132b305095e0c9665fe8
SHA512 6992fea5278601213cdfc3b05bab8cedafb74259d4809d23cbb4f070c31a0747b3ea44f6580d7f63c38d98f37958474e45f13ec8fe8a6850c79552a94072c5e0
TLSH
T101E07DA524DAC5BDC0ADC0670271734DCBF23400F3DC2E420707C444228570477C03B0
MD5 SHA1 SHA512 TLSH

Submit Download

Tabs_13428174074253806

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Tabs_13428174074253806
Size 6KB
SHA256 37d4561c88ceadf9d4036966bcad7d8ace2c4bd93d8e8a96358192a6903fa0e3
MD5 8dd4eb5ad4e27879c767f37b956365d5
SHA1 c7ea4d6c63e6f3c933131d1b063bf100176455d7
SHA512 557a5310a045d61a55c61d6d6ba806329320efb882fa0a175f3ab7c87ffb78495cc1cc3b72c89be37fdb2b672cb176ed631060cea23c4ce2738589db43f4d20f
SSDEEP 96:3DRFgTXCq63nSdqUeJdqUeF363n1WquF63nQ63nQw8MU78TzCT:3D7+XCrnSjeJjeGn11xn9nAOzo
TLSH
T116D12222AEF4413EF17EC839D9B921F1BF76F50364C14D9E90A122110863A52AB71FD7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

00da55fb78939317_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\00da55fb78939317_0
Size 194KB
SHA256 be2683135cfe4d76577807a047036a8ed524176351e42b938eb0709c8e9a6dbd
MD5 96d8d2b372158743bb814574d50a711f
SHA1 9d4a570b11f7a87987b852e5e3904396b3caa67c
SHA512 9305265092be0afc5e8e93427df50f347558cec92f71f12ec685aedb5009499dc0ec0d32aafcf4ad9afdfa48558898423684b5c7a772f8d7e76fd02c61014bf6
SSDEEP 3072:vegF1cJu9zByRIZa8vj0QbJI1lXrZ1lThh:vegF1cc9zByRIZa8HlI93h
TLSH
T145146B316300F43BA9139E61A27F7F4E3C35A16BDD0686FCA1E4E870AEE6CB60515758
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 eaf74ac7a824f8559c159a3e17d09fb2d6f10343fabd31bc33e113f4d9f33a00
MD5 e4c5002d6fd6161c00c8446164190dbb
SHA1 9eae7e5d2b5dc1c6588b42383d8f79beb79c951c
SHA512 fecc3bc2e748f5dd7473891f6b35c78119365045df20aa12a4c03874de2b782115a82f4e85505333c153a257b34d8bdf311f254fe10a4aca6587dd0affaa4ad9
TLSH
T19EB02238008CA2B3C82B8B3033FA32802F000E20230AA00A08CB000083A33830023308
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 120B
SHA256 c1e61cb64253ba4286839898337e30571892600ecef24bc3bdfc0c17049b944a
MD5 d2e32f00a56502ee0689b27dd4624c2e
SHA1 7036b4e09606a5f5530fc0b74d5371f3585a86cd
SHA512 0babe5e22fd22b8e2b5214cc7c9dde761e721f6a0bbf3c4eea5bce8d26c3725cdc09bb324436b3dec6127c3d450daec4db2ce3dc61b4a0769bf316db0c7c5b63
TLSH
T138B012A040C54F33CC030730F7F904802B000D9023099A071C9E0014C4930824063354
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\db
Size 44KB
SHA256 875b959371a0c199e7e0978f0fd9b4dde5a180ebb4ef0d8024190441041983ec
MD5 7c7c0acf053f5d81637069c1e11a56b8
SHA1 d3e827a9f5956767d9d7a116526d6940b3bf2df1
SHA512 08f6a760da855a9b81388f0612e2fa7cd92bd2ef156b267170a0f617fa47f3ef5a800768be83e8c5a12d43fb21e51696c6c0422954ceb43e1aeff5134d2cd2b7
SSDEEP 48:TVOIy4m1b3fbUC+q0BE4IDlGMcwOIcn+HgfTfq3:0LuPE+RdfLE
TLSH
T1B1130DEF3D14B046D2F88171E49AAF6E9D3F210C9EC368D59DE016B34CC1829581F0BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000003.log
Size 100B
SHA256 187be752d4a4220c80d2285e9f3fb1f2d929b933fef923d2a16fdd56c43c0b97
MD5 00d480ede2c82eef46679c181cdbd009
SHA1 7f1dd2364319daa44841c98a7c79bf18cad7140c
SHA512 1d63ba6b8b99a359f908efc7879eb40f28d2d06c66e4449ac1928631d4a702be5079f1a42396996f07d8d7d9d205dfa699ac55aef0f63c4b247348515b8eae9e
TLSH
T1F8B012C83720D006F4442530048197041F40F06010414173EC50AB204D856652DD14C0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
Size 345B
SHA256 8ee6a3ae3924770b3c91533088922463174771bb05e6dce891420599d4b665ed
MD5 8502266d423fff12e3cd0afc1a9f8b74
SHA1 deff6022dd8f04b2190ebe7e582e44cd687c4818
SHA512 b9560f34766c2cfa694e803cad148cd890e0a646e1bb112a6642089a84907db270201ea7747e3599aae94c1b64dcbdb7ec941e5a6b28bbaed4662a83d48bf0c6
TLSH
T109E0D86525CACE6E908A815B5211F34CCBF67801DADD5D652B07B0545289504B282350
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
Size 321B
SHA256 232e105a5d9635954c3e5d760973a95ff03bac0dd9e45ac7d61292c3b4df53c3
MD5 f53b87caf79c8b0d254267ee0ea4d7d0
SHA1 8e30e708789f8525a2d397d1c00efe91e7d3c367
SHA512 6bc0181965a6e6ac32fd32a629cadf0e10ac0496d5272cbd486ebfd81ad9afed7823afec11fb0b93539a78e0257b48eb88ab53617a9ea382f84f9f5e10d9db88
TLSH
T19DE026F526CACBBD9088C0174261B70CCBF87805D3C93A92670764446184204BAF93A0
MD5 SHA1 SHA512 TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Data
Size 138KB
SHA256 42c51a095f486c36cfcda009b7d30853dc9ded66a9386c39d72d694b59de878e
MD5 c248e3ea4997b01a9625b9aa3a229e5c
SHA1 9e822f333427e41f77728b3c6c9b98f425a11169
SHA512 3f0f70aae584ca5f9993420a00b23856a3e3512c665bdd4426e54f2922ca18b7585041bf291b146dde8636e3574e2105d9724aa5553b6fb50e832c5844c7b7a1
SSDEEP 192:tB+XuvBnl3JsueMEGvIW1/rcP2wj96WEikqOsVumc1w9f:jeuvBnhJsueMEGvIW1DcP24REiVumsmf
TLSH
T1EFD3864B3A747102EDE58A721CE051BB5E3CB16D8F5191D438B620688EF2963B23D4BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager
Size 40KB
SHA256 0731e4c8fad0b722f7578d6f22a48741cdaa62f1e8006002beae181140da0528
MD5 4ce1639c7ae3036dddc3d3b39ecc6b72
SHA1 51177e7dedcbabc32226478a7b8304f389a25695
SHA512 9a66dd3aab17f3d3bb5c60eb2da96e2f36ff55cec13ec9ab4a2c7d7974fb3cd4e179a14b4db0f1967140ff8050bd9be37157b3ac75807da04502f4866cc8fdef
SSDEEP 96:f7doKsKuKZKlZNmu46yjUAXXwX4m+XSXLqgw:7ZT0nzXAXgCibqf
TLSH
T1F403618F662C80F3D0B6C13EEA9645D6FC7C150CA723B9E211F94B754EAC037A1085AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager-journal

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager-journal
Size 8KB
SHA256 716aecfbc63aea739b2c543cedf748e576ddb9c258cc0b2da69bdfd83970d622
MD5 71d0ed9f639841dcae88415f09cdbbad
SHA1 591d6771e9ef077fdbffa9c2e657eda1326f3279
SHA512 131cac6a07ba4cab114a1febfa7a035264f615ad46288ad5377174e8c5d970369a5297d858c5f1648a2c7fa91a6dbc5a729b5854859ee093c317676a758a24ad
SSDEEP 12:qikON790Gtuz9tJgtaA/XXwX4ZvmLULIeI:rN7BudIXXwX4FmLULg
TLSH
T11C02559FB80DC409EC60013CC2AC9855392A0C6C3E86F9A225E48B0A55B8823900C6D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000003.log
Size 26KB
SHA256 8b75d80d9b495dd475883009531b165d9cd5f3b860730d95aa053f7f20da198d
MD5 55a74d6622429882d5f4bb8c92f510c6
SHA1 0df3a89625da297c50377a1f01a9757dcac939bf
SHA512 6e1350ad7ca2532eec18c8455862fced6169c3b1990ba69ac0079f4c078c457be655d613556123fcb76ba4b10d5d96b4fb9286de147a7f252920da7f89f827bc
SSDEEP 384:fXDlsdGa+71Q2IIIBb5MIMIBnCfnsdGuZ0O0sdGXHE8GsdG9dGHpE2l1sdG9dGiy:q+71QVKxpy
TLSH
T1A4C2D99693701B45DDCF97FBBC558C2F2772EC8A4C5A0082A5925EFA2833D17498A34E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG
Size 317B
SHA256 e99142e16912fc4d1288014d6b394525172e37a49a32810f90f82f8d74b598ba
MD5 3c2940169203ccf2313f0c20a27617c2
SHA1 40521d508403e291c00245f386bbcbd1bf6c7538
SHA512 0c5fc24e0519fea2a1855b711c47eb6eb2f1639d620288080594e99ef3771901f25da2c7af4e6dbdafea6c7237122f619c0383f8438a7f27831525e4534c3f84
TLSH
T198E086957ACAC6AEF09D805B1179774CCBE27849EBE819DA3F03C8585185704E694361
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 d31bd4492d61570aae70a2b350139809b5ff04f0fea7e81a181010b664dae868
MD5 d313a37a8ef200f0bf9cd6424c0893d0
SHA1 3742ba7fc29a6d3794ff4fb7938f00e61a64ac9a
SHA512 0d10b73291addc8a1e9f54172d717c85c3a51fc0cd5fe5a80b7d5d4485539d4f9beb3a87c34cdf4c420a59d5f9015f5f497b081c220dae0bbd536bff7e989975
TLSH
T1F7212896F732C308D54A563EA43E9B251338D4569FF8ED0F44B530786E76E000E4B2E6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
Size 335B
SHA256 4000f08b7c785eeb3fcf728e63a3963bf518e2c6e5ba694f1e5b968a76afc020
MD5 a414b494b41e3b066f6f4b88b475c75d
SHA1 e7d5ff1f58636db1d218c0cac60c4c15805cc1c2
SHA512 04e34248ede8e4560e7249e7f64bc358a904740edad9801eb337cb289817143511fe4c3f0041dbafbc8f7d90e18769490d4cf72a191689995e0f2a08b83afdfc
TLSH
T16BE02685788AC6AFD09980170279F74CCBE63848EBD82F8A2F03CC885180304B681361
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
Size 13B
SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
MD5 43ef949d3c6e9956545979ace65d0085
SHA1 63f2b2de8727854597e49a1216e8e74c68117c07
SHA512 313a5ab7ac9b5efd955beba4615784bdc2a9058ddaa804d85fb2d0c651dd3de07e382d61a1bb482499520a80e0b64c004ff2af03459cbc1daef47f540f0a6905
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 238KB
SHA256 c12585f01c77e16e391523891ebe142a5f4f4fa2fe9132b45daca56e621af76c
MD5 12723cc2a70505b0fd6d74f28d3f1770
SHA1 c3a0bd0bd6440abe0c561336d6476336384f1422
SHA512 be4ed65d583a41ab3a31a27a59f5117724014abe3a4c8b51ac0175eb5e85bb803fb8b4169a74fa5cb0d6ebd1ef0e418cf9bf9988480d8b047418f5a5dbd61c1f
SSDEEP 6144:ztQLTZBv4gGBXuiaFieb5OdWMk/mwLw4STC7i77yOQ:eSVurmwwF+7iXyOQ
TLSH
T145341278FC6394ABA5FE4D059077232BAFF9ABC28804D0F8B2799528275702E1756D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 232KB
SHA256 7759b1a2510fab977109936faa8bd9d17717d248f6c5c46782306ac63b938766
MD5 93ca5e96a882a9ce23b09e4f07c0eeb0
SHA1 9f9eddf32055a2cd4db08e0dfeae0a9cbef4e544
SHA512 4125ee163bfa4858a107e3023ba1568265ecb037253b09e343ae8711de1992d7ee368d63d7502f1fc5e3ec9ef47d71d3b3fb3ef2e0ea802aefd4fe15db5bbb58
SSDEEP 6144:wRmdX7ch1UDDV4IaVq+zTWNVXqm7Rkm1tYpBeh2BAof:wwwCVraI+WD19oBGcAof
TLSH
T1BA3423371D648ABA957EA712FCCE172F3DF26AD3DD228D96C8D04E480BDA6810705DB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 285KB
SHA256 94778474b448b7b35047babcf32b56c8a6dc9f4eb5acabcf7c0d99c9a2c88f8b
MD5 6ec58329bcff761e57df2ba68690cbd6
SHA1 437ec634fb0dda916f69e61222d676924244f217
SHA512 50208613db0efd4ac6668562279e23437dfb9499c77c726cac60545fd20a02feb0e23f36d14dee04431094752f0d6e18800977a1cce10956b71e139dc9e39afc
SSDEEP 6144:t9F1VQLTZBv4gGBXuiaFieb5OdWMk/mwLw4STC7i77yOQ:nF4SVurmwwF+7iXyOQ
TLSH
T1795423A9BD67945B31ED4911E0B7031FEFFA6BC38408D0F876B5957A2B4306E2345C25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 237KB
SHA256 465ed882693dae8b5622194d1a03beedcee664f3574da793ea7f6b943e3108b5
MD5 76dfc76109113d95f9401e60f25d2231
SHA1 ac772ff9443d3321a720edb8e36c0d6cb26384d0
SHA512 ed1cf7a2c77654c5a8ffe94836955f1c2abe996fd09008d6d89fc862bf245a7af22be69fd424c258ba765f4286fe551f219ca193593a124330673c4b1b2ac82a
SSDEEP 6144:EWMk/mwLw4STC7i77yOORmdX7ch1UDDV4IaVq+zTWNVX+:xmwwF+7iXyOOwwCVraI+WDu
TLSH
T1523412653D66879BE2BE8641F8A2371E3ED7FBC2490994DEE12149F70B4B049031397A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 238KB
SHA256 4a4f7018257f0417658acafc3985db4cae19b503411e861ffb75657cc6356927
MD5 f084aa4b94b579ca4996472829e333f6
SHA1 54534a78243d12463c5f9e6263b9eb0b1965d79e
SHA512 8b5c2edc08d54de5b36b337d42ee5cb1f704567236f618d467a002b488fd23ef03b21b471afb096ebf3562803dea89f1d901f84a6fb3ab3b7b7581c5d576032d
SSDEEP 6144:HKWMk/mwLw4STC7i77yOORmdX7ch1UDDV4IaVq+zTWNVX+:XmwwF+7iXyOOwwCVraI+WDu
TLSH
T1373412767D12869BE2BE8A01F8A2331E3DD7FBC28909D4DEF12149E71B5B0490713979
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 238KB
SHA256 9746518bb45ea9b55c89982228d239da7ad0dc6804b7516efaf3ee3f8b4b0238
MD5 4c09f4ceebc809ad1cb9ac914bb081d0
SHA1 df330ce64e938141127543d3353b53ade8748544
SHA512 0abb5ba966f9883e0f0ee806519c3e7c874ad6d68684c5b4515ee66128911b4ee50ac3be7da22b7435ad4f6b2eecbc563c5d228f6014d515a92b13203f0aa268
SSDEEP 6144:NmWMk/mwLw4STC7i77yOORmdX7ch1UDDV4IaVq+zTWNVX+:VmwwF+7iXyOOwwCVraI+WDu
TLSH
T1733412767D12869BE2BE8A01F8A2331E3DD6FBC38909D4DEF12149E71B5B0490713979
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 232KB
SHA256 32b3691906f850bd53a31bdad961af8cbaf0c4d5b42154c1996e1d3e22bc3780
MD5 1963b1ba0ce974be98d10389166e7ffd
SHA1 5a5ae885abf272440465994e9ac36d516f291e39
SHA512 ae23bbef48535b75fe8401d66b19919f43e40ab7271cb51b07ab3ba5946df2815a5d06eb33b5bb58f680977e84573990a724df89f5722eef121079ad820f167d
SSDEEP 6144:HRmdX7ch1UDDV4IaVq+zTWNVXqm7Rkm1tYpBeh2BAof:HwwCVraI+WD19oBGcAof
TLSH
T1D83423371D648ABA957EA712FCCE172F3DF26AD39D228D96C8D04E480BDA6810705DB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 238KB
SHA256 a00fd3fb500177c20b8f85fd147f06693b830b55cb03cb4d871f7419587e9845
MD5 ce9eb3d0f401cc9154da8eec81b07b81
SHA1 e2e06d8a39f75d1d2a5570dfddb29857db3ac6a6
SHA512 1d53171082deb1bd2b877de78a7c0f6f1a13a1fd6500e1b5876d75844033155b6c95cef165be11fabcdcf83df563277bf1b59d55729c0adf9a3e114dfeaaebd1
SSDEEP 6144:JgWMk/mwLw4STC7i77yOORmdX7ch1UDDV4IaVq+zTWNVX+:TmwwF+7iXyOOwwCVraI+WDu
TLSH
T1D73412767D12869BE2BE8A01F8A2331E3DD6FBC38909D4DEF12149E71B5B0490713979
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 238KB
SHA256 f5c403f5c6953f276b4ab1243122864cae3bdfcb474b5be5af70b639ed6f52ad
MD5 ebe1cbf37bac4f9a714b0f3b6bb40b8d
SHA1 204950926ac9f174f1f9262486a11b80f7c8ea73
SHA512 55a68e70acb9cad517408c5a2900e4c8868553ff41ced6176980f9523ab1b98178e18d7a3cbed29c80b8df443021c199255b196ab1ee882867db0a0ffe10306a
SSDEEP 6144:RgWMk/mwLw4STC7i77yOORmdX7ch1UDDV4IaVq+zTWNVX+:rmwwF+7iXyOOwwCVraI+WDu
TLSH
T1903412767D12869BE2BE8A01F8A2331E3DD6FBC38909D4DEF12149E71B5B0490713979
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 238KB
SHA256 180b8f4fb8cc9688c094614715869bd968389dcc87f1b57bae20887d47b4b9ca
MD5 9c252cac2fd62f59f53e5992b2cb4e4f
SHA1 bcf05dee800ee1601dbf5570050977d5e2fe6372
SHA512 d56de1ad23d4ac1179214f70373f6308f1b2a6eb0372b7269cca53d9f1e7e367a0b5467b1568f02f57ee815431a83cc9ca561f626f044ede0333e20822699574
SSDEEP 6144:2gWMk/mwLw4STC7i77yOORmdX7ch1UDDV4IaVq+zTWNVX+:WmwwF+7iXyOOwwCVraI+WDu
TLSH
T1013412767D12869BE2BE8A01F8A2331E3DD6FBC38909D4DEF12149E71B5B0490713979
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
Size 85B
SHA256 b26da4f8c7e283aa74386da0229d66af14a37986b8ca828e054fc932f68dd557
MD5 bc6142469cd7dadf107be9ad87ea4753
SHA1 72a9aa05003fab742b0e4dc4c5d9eda6b9f7565c
SHA512 47d1a67a16f5dc6d50556c5296e65918f0a2fcad0e8cee5795b100fe8cd89eaf5e1fd67691e8a57af3677883a5d8f104723b1901d11845b286474c8ac56f6182
TLSH
T1F2A0120384738407E4144051C45C1341287C84570119C0012068931304240CB039643A
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\component_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

d65984ef-6bf6-4702-9a12-e0cf584da28f.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\d65984ef-6bf6-4702-9a12-e0cf584da28f.tmp
Size 115KB
SHA256 80f9fa982be0a6095b60a4607904917ff747c557c1ba47ceabaeceead38385db
MD5 b9309deb228792b99c62a4a95b8567e2
SHA1 2265bc5d1aebadbaf0590ca7ac9dc4e8a7cf2f74
SHA512 95a13c96585deda086f0fccdb6391fab34703155553a7f96bad238dc7f1fe631c12b1b60e18f15c0907015df8babdfcbf57367e7111963f870028c41c02381c4
SSDEEP 3072:8Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Pm7Rkm1tYpBeh2BAoK
TLSH
T116C3123B5D65E87B9979B70EB08E0B1F1EF149A2D920DE92C8D85B0477EA7CD0A04D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ukm_db

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\segmentation_platform\ukm_db
Size 48KB
SHA256 293c00b0a4e4c56b37b06ca86b0c4fec5533621a3c15c7fa3f270fe261e0d58f
MD5 97e675b96215b23323e4e88fda11b8c2
SHA1 3fb943e84e2b3c27f90e59dc76e1862cd11dada8
SHA512 0e225547956234d055d111c179c7831396f11dfa17e555b4df9f913527c1306f4f1190640e06315eec79a6ad9cde8218485c3739aeb232c030564708cff7b4f2
SSDEEP 24:T66Qcn/CVdn+xxnFn6ZOTs0n/YSRltqtD9ijuoxAYGduhr2fk05b53HxOSRtK0Jq:TkkhCU2QB2zbBxxND+63AAChf863AAJf
TLSH
T11E23CD8F2B5861D9E191883EFEE28D617C7E0F49CA2F68D254E008734CE14AA513F1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

options.txt

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MinecraftEducationEdition_8wekyb3d8bbwe\LocalState\games\com.mojang\minecraftpe\options.txt
Size 13KB
SHA256 58662b295317f0e53752da0d2398ce6340404c31a1b2b89406daca2255fdb05b
MD5 aa2d8428f35cc6bca4d8449b995ce4f0
SHA1 60b472b8595d69d2eff0e430e07ccac0da53cfef
SHA512 6b20677b28efedc7d247190fcf08edb037995b4cffa4e9689a0cb80e1b2eddafecc0779e850e73eb1e1f8906031e57896dd35a4a267094aa9c2851437ecdb78b
SSDEEP 192:QvWDrgEdcU3h++MY0hqdthKuQ7glv0Np59fIE6hYobuG8S/SQwJ1nwpy3IgGi4GU:QeIEdP3hrSNuO/9i2fkJDksnSm
TLSH
T157520C010F8DEDAAC9C668662454212573F104444E44FEDDFA7C76FC008E766A1FBBAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Tmp1BB5.tmp

Path C:\Users\Admin\AppData\Local\Temp\Tmp1BB5.tmp
Size 1KB
SHA256 28c871238311d40287c51dc09aee6510cac5306329981777071600b1112286c6
MD5 a10f31fa140f2608ff150125f3687920
SHA1 ec411cc7005aaa8e3775cf105fcd4e1239f8ed4b
SHA512 cf915fb34cd5ecfbd6b25171d6e0d3d09af2597edf29f9f24fa474685d4c5ec9bc742ade9f29abac457dd645ee955b1914a635c90af77c519d2ada895e7ecf12
TLSH
T10F21CA2FA1324D9E49BDF27D4C0B0CFE85260FB792F4960217541E12B04DD548AF8C4D
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

Minecraft Education Installer.exe

Path C:\Users\Admin\Downloads\Minecraft Education Installer.exe
Size 1.4MB
SHA256 6405ebf7b49c19ef029bd0fdc3164dd142be8b884c89837d3757dd2c77a0b15f
MD5 2187a0f26cc4602a3d39dac835353bd2
SHA1 c884f5aa249e2e613b64bffd93a6c5f5f3a46d60
SHA512 96f4efa8b54d8a04a0e7b149f2b3e10c0cafc622cf96fef4963672a6934d6c06737866cbbea9be404df38db9799c51f06a17221ed29809f77cab5f68e1778e6b
SSDEEP 24576:yjFohds+2DR7BWYpSwo44AsW4z3EBWapTv:yaHm7VjLsWAUhD
TLSH
T198655B8127F80439F7BB0B79BD7A18220A35BC396912E65D068D552D18F2F56CDE233B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2332-2326-0x000001A948890000-0x000001A948A16000-memory.dmp

Download

memory/2332-2304-0x000001A929A20000-0x000001A929B7C000-memory.dmp

Download

memory/2332-2327-0x000001A9487F0000-0x000001A9487F8000-memory.dmp

Download

memory/2332-2325-0x000001A9451E0000-0x000001A9451E8000-memory.dmp

Download

memory/2332-2323-0x000001A945220000-0x000001A945258000-memory.dmp

Download

memory/2332-2324-0x000001A945260000-0x000001A94526E000-memory.dmp

Download

memory/2332-2322-0x000001A945460000-0x000001A945988000-memory.dmp

Download

memory/2332-2321-0x000001A9444D0000-0x000001A9444F6000-memory.dmp

Download

memory/2332-2320-0x000001A9440C0000-0x000001A9440FC000-memory.dmp

Download

memory/2332-2319-0x000001A944060000-0x000001A944072000-memory.dmp

Download

memory/2332-2306-0x000001A92A150000-0x000001A92A15A000-memory.dmp

Download

memory/2332-2305-0x000001A944410000-0x000001A9444CA000-memory.dmp

Download

memory/4008-2465-0x000002758CD90000-0x000002758CD91000-memory.dmp

Download

memory/4008-2464-0x000002758CD90000-0x000002758CD91000-memory.dmp

Download

memory/4008-2469-0x000002758CD90000-0x000002758CD91000-memory.dmp

Download

memory/4008-2471-0x000002758CD90000-0x000002758CD91000-memory.dmp

Download

memory/4008-2472-0x000002758CD90000-0x000002758CD91000-memory.dmp

Download

memory/4008-2473-0x000002758CD90000-0x000002758CD91000-memory.dmp

Download

memory/4008-2474-0x000002758CD90000-0x000002758CD91000-memory.dmp

Download

memory/4008-2475-0x000002758CD90000-0x000002758CD91000-memory.dmp

Download

memory/4008-2470-0x000002758CD90000-0x000002758CD91000-memory.dmp

Download

memory/4008-2463-0x000002758CD90000-0x000002758CD91000-memory.dmp

Download

memory/4332-1290-0x000001C964A50000-0x000001C964A51000-memory.dmp

Download

memory/4332-1246-0x000001C954740000-0x000001C954750000-memory.dmp

Download

memory/4332-1285-0x000001C964E40000-0x000001C964E41000-memory.dmp

Download

memory/4332-1292-0x000001C964A60000-0x000001C964A61000-memory.dmp

Download

memory/4332-1295-0x000001C964A50000-0x000001C964A51000-memory.dmp

Download

memory/4332-1298-0x000001C964990000-0x000001C964991000-memory.dmp

Download

memory/4332-1310-0x000001C964B90000-0x000001C964B91000-memory.dmp

Download

memory/4332-1312-0x000001C964BA0000-0x000001C964BA1000-memory.dmp

Download

memory/4332-1280-0x000001C964E40000-0x000001C964E41000-memory.dmp

Download

memory/4332-1314-0x000001C964CB0000-0x000001C964CB1000-memory.dmp

Download

memory/4332-1279-0x000001C964E40000-0x000001C964E41000-memory.dmp

Download

memory/4332-1288-0x000001C964E40000-0x000001C964E41000-memory.dmp

Download

memory/4332-1284-0x000001C964E40000-0x000001C964E41000-memory.dmp

Download

memory/4332-1283-0x000001C964E40000-0x000001C964E41000-memory.dmp

Download

memory/4332-1282-0x000001C964E40000-0x000001C964E41000-memory.dmp

Download

memory/4332-1278-0x000001C964E10000-0x000001C964E11000-memory.dmp

Download

memory/4332-1286-0x000001C964E40000-0x000001C964E41000-memory.dmp

Download

memory/4332-1289-0x000001C964A60000-0x000001C964A61000-memory.dmp

Download

memory/4332-1287-0x000001C964E40000-0x000001C964E41000-memory.dmp

Download

memory/4332-1262-0x000001C954840000-0x000001C954850000-memory.dmp

Download

memory/4332-1281-0x000001C964E40000-0x000001C964E41000-memory.dmp

Download

memory/4332-1313-0x000001C964BA0000-0x000001C964BA1000-memory.dmp

Download

memory/4472-0-0x00007FFE5E5F0000-0x00007FFE5E600000-memory.dmp

Download

memory/4472-3-0x00007FFE9E60D000-0x00007FFE9E60E000-memory.dmp

Download

memory/4472-9-0x00007FFE9E570000-0x00007FFE9E765000-memory.dmp

Download

memory/4472-11-0x00007FFE5E5F0000-0x00007FFE5E600000-memory.dmp

Download

memory/4472-8-0x00007FFE9E570000-0x00007FFE9E765000-memory.dmp

Download

memory/4472-7-0x00007FFE9E570000-0x00007FFE9E765000-memory.dmp

Download

memory/4472-10-0x00007FFE5E5F0000-0x00007FFE5E600000-memory.dmp

Download

memory/4472-1-0x00007FFE5E5F0000-0x00007FFE5E600000-memory.dmp

Download

memory/4472-12-0x00007FFE9E570000-0x00007FFE9E765000-memory.dmp

Download

memory/4472-2-0x00007FFE5E5F0000-0x00007FFE5E600000-memory.dmp

Download

memory/4472-6-0x00007FFE5E5F0000-0x00007FFE5E600000-memory.dmp

Download

memory/4472-5-0x00007FFE9E570000-0x00007FFE9E765000-memory.dmp

Download

memory/4472-4-0x00007FFE5E5F0000-0x00007FFE5E600000-memory.dmp

Download