93a015e74c5724876ef5952251ca94034e2882952ebf3955d6fbd32df58e627a

Resubmissions

12/07/2026, 02:37

260712-c4nqwaet4t7

12/07/2026, 02:23

260712-cvkb4aes718

Analysis

user interaction
yes
max time kernel
428s
max time network
655s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/07/2026, 02:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
image (2).png
Size 107KB
Sample260712-cvkb4aes71
SHA256 93a015e74c5724876ef5952251ca94034e2882952ebf3955d6fbd32df58e627a
MD5 6223fd45653c664695673004f355f8fa
SHA1 dd3ba431c7f1d3eaea9fa8a0b9d1f5a0f10a1789
SHA512 d9e1e4bd5aa85538e8bc169a0b54f2feeabfc3b2d490a7aed14d96d0e70632ce51219e7a2545a968de84672e1f271b0bd4f986949e215b4a41516fe46fccc03c
SSDEEP 3072:EBpoWHpgsS9CRMQttYpmeoC1TFdZcSOVY2enk:VWJgL9g9ttYp1oA5cS2Ank
TLSH
T1CDB3128F51F42B06ED1B93C2E59E3C0F25755136E4290138B166B3E683A4FB3786AD1E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

adware discovery persistence ransomware spyware

Malware Config

Signatures

Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

persistence

Active Setup

T1547.014

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe

Executes dropped EXE 1 IoCs

pid	Process
4116	Sonicexe The Disaster 2D Remake.exe

Loads dropped DLL 1 IoCs

pid	Process
4116	Sonicexe The Disaster 2D Remake.exe

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
1	raw.githubusercontent.com
170	raw.githubusercontent.com

Enumerates connected drives 3 TTPs 2 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\E:	explorer.exe
File opened (read-only)	\??\F:	explorer.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3848	chrome.exe

Checks SCSI registry key(s) 3 TTPs 56 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000	svchost.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters	disasterlauncher.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters	disasterlauncher.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0009	svchost.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	disasterlauncher.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	disasterlauncher.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\FriendlyName	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\FriendlyName	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\FriendlyName	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	disasterlauncher.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	disasterlauncher.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004	explorer.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Internet Explorer\Main	explorer.exe

Modifies data under HKEY_USERS 9 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134282966631387503"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe

Modifies registry class 22 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{5A1B51F6-6C65-4141-9604-571E4B451DEE}	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}\Instance\	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	explorer.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{69C27D9C-49D5-468C-AB78-454ED43E5CED}	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{374DE290-123F-4565-9164-39C4925E467B}\Instance\	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\Instance\	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A0953C92-50DC-43bf-BE83-3742FED03C9C}\Instance\	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{55DC0E99-53F9-4F85-ADA3-6C3A7D66DFBC}	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 020000000100000000000000ffffffff	explorer.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2012	mspaint.exe
2012	mspaint.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
5780	chrome.exe
5780	chrome.exe
3464	explorer.exe
3464	explorer.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs

pid	Process
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe
Token: SeShutdownPrivilege	4536	chrome.exe
Token: SeCreatePagefilePrivilege	4536	chrome.exe

Suspicious use of FindShellTrayWindow 49 IoCs

pid	Process
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4916	sihost.exe
3464	explorer.exe
3464	explorer.exe
3464	explorer.exe
3464	explorer.exe
3464	explorer.exe
3464	explorer.exe
3464	explorer.exe

Suspicious use of SendNotifyMessage 18 IoCs

pid	Process
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
4536	chrome.exe
3464	explorer.exe
3464	explorer.exe

Suspicious use of SetWindowsHookEx 7 IoCs

pid	Process
2012	mspaint.exe
2012	mspaint.exe
2012	mspaint.exe
2012	mspaint.exe
3100	disasterlauncher.exe
4116	Sonicexe The Disaster 2D Remake.exe
4116	Sonicexe The Disaster 2D Remake.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4536 wrote to memory of 5984	4536	chrome.exe	92
PID 4536 wrote to memory of 3848	4536	chrome.exe	93
PID 4536 wrote to memory of 5796	4536	chrome.exe	94
PID 4536 wrote to memory of 5796	4536	chrome.exe	94
PID 4536 wrote to memory of 1592	4536	chrome.exe	96
PID 4536 wrote to memory of 1592	4536	chrome.exe	96
PID 4536 wrote to memory of 5872	4536	chrome.exe	97
PID 4536 wrote to memory of 2440	4536	chrome.exe	98
PID 4536 wrote to memory of 5872	4536	chrome.exe	97
PID 4536 wrote to memory of 2440	4536	chrome.exe	98
PID 4536 wrote to memory of 3520	4536	chrome.exe	99
PID 4536 wrote to memory of 3520	4536	chrome.exe	99
PID 4536 wrote to memory of 1252	4536	chrome.exe	100
PID 4536 wrote to memory of 1252	4536	chrome.exe	100
PID 4536 wrote to memory of 2524	4536	chrome.exe	101
PID 4536 wrote to memory of 2524	4536	chrome.exe	101
PID 4536 wrote to memory of 5008	4536	chrome.exe	102
PID 4536 wrote to memory of 5008	4536	chrome.exe	102
PID 4536 wrote to memory of 1000	4536	chrome.exe	103
PID 4536 wrote to memory of 5816	4536	chrome.exe	104
PID 4536 wrote to memory of 3100	4536	chrome.exe	105
PID 4536 wrote to memory of 5816	4536	chrome.exe	104
PID 4536 wrote to memory of 3100	4536	chrome.exe	105
PID 4536 wrote to memory of 4408	4536	chrome.exe	107
PID 4536 wrote to memory of 4408	4536	chrome.exe	107
PID 4536 wrote to memory of 4640	4536	chrome.exe	108
PID 4536 wrote to memory of 4640	4536	chrome.exe	108
PID 4536 wrote to memory of 5436	4536	chrome.exe	109
PID 4536 wrote to memory of 5436	4536	chrome.exe	109
PID 4536 wrote to memory of 1168	4536	chrome.exe	110
PID 4536 wrote to memory of 1168	4536	chrome.exe	110
PID 4536 wrote to memory of 5396	4536	chrome.exe	113
PID 4536 wrote to memory of 5396	4536	chrome.exe	113
PID 4536 wrote to memory of 1780	4536	chrome.exe	114
PID 4536 wrote to memory of 1780	4536	chrome.exe	114
PID 4536 wrote to memory of 5448	4536	chrome.exe	115
PID 4536 wrote to memory of 5448	4536	chrome.exe	115
PID 4536 wrote to memory of 6108	4536	chrome.exe	116
PID 4536 wrote to memory of 6108	4536	chrome.exe	116
PID 4536 wrote to memory of 4568	4536	chrome.exe	117
PID 4536 wrote to memory of 4568	4536	chrome.exe	117
PID 4536 wrote to memory of 1200	4536	chrome.exe	118
PID 4536 wrote to memory of 3368	4536	chrome.exe	119
PID 4536 wrote to memory of 1200	4536	chrome.exe	118
PID 4536 wrote to memory of 3368	4536	chrome.exe	119
PID 4536 wrote to memory of 2488	4536	chrome.exe	120
PID 4536 wrote to memory of 2488	4536	chrome.exe	120
PID 4536 wrote to memory of 4808	4536	chrome.exe	122
PID 4536 wrote to memory of 2188	4536	chrome.exe	123
PID 4536 wrote to memory of 5108	4536	chrome.exe	124
PID 4536 wrote to memory of 1888	4536	chrome.exe	125
PID 4536 wrote to memory of 1888	4536	chrome.exe	125
PID 4536 wrote to memory of 5396	4536	chrome.exe	126
PID 4536 wrote to memory of 5396	4536	chrome.exe	126
PID 4536 wrote to memory of 2516	4536	chrome.exe	127
PID 4536 wrote to memory of 2516	4536	chrome.exe	127
PID 4536 wrote to memory of 5936	4536	chrome.exe	128
PID 4536 wrote to memory of 5936	4536	chrome.exe	128
PID 4536 wrote to memory of 4548	4536	chrome.exe	129
PID 4536 wrote to memory of 3532	4536	chrome.exe	131
PID 4536 wrote to memory of 3532	4536	chrome.exe	131
PID 4536 wrote to memory of 5780	4536	chrome.exe	132
PID 4536 wrote to memory of 5844	4536	chrome.exe	133
PID 4536 wrote to memory of 5844	4536	chrome.exe	133

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Windows\system32\mspaint.exe
"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\image (2).png"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2012

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
- Checks SCSI registry key(s)
PID:3076

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7fff5e5dc728,0x7fff5e5dc734,0x7fff5e5dc740
  2⤵
  PID:5984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1804,i,12052703946530629840,18178596962840916871,524288 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=1976 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1624,i,6305281771840697482,13262552142061630230,262144 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=1940 /prefetch:2
  2⤵
  PID:5796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2344,i,1462799177178894020,14599378203583377604,524288 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:13
  2⤵
  PID:1592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3272,i,6288063630039038984,13287257289259733771,2097152 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:5872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3284,i,15952618300241073454,12471700556851308056,2097152 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:2440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4728,i,7977690987805167282,9474481046882867953,2097152 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:3520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4908,i,10958785487586026623,4004823042678027590,524288 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=4872 /prefetch:14
  2⤵
  PID:1252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5032,i,2295636996932103807,15518988905076621957,524288 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:14
  2⤵
  PID:2524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5196,i,9098285721707831350,15404135305222409833,524288 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:14
  2⤵
  PID:5008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5400,i,2615296943966185518,5905676406373796197,524288 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:1000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5516,i,16713439361973115075,16672048297465373434,2097152 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:1
  2⤵
  PID:5816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5496,i,6576949769242962555,17381917013011780623,2097152 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:1
  2⤵
  PID:3100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5480,i,6348697729054143947,10846433463630640772,2097152 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:1
  2⤵
  PID:4408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6000,i,17571479601879493218,8664297381511916937,2097152 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:1
  2⤵
  PID:4640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6108,i,6036230778841420806,15120642728918045546,2097152 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:1
  2⤵
  PID:5436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5816,i,4506221404428434808,12258850590483906080,524288 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  PID:1168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6400,i,3286288202860821293,1741672271402692930,2097152 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:1
  2⤵
  PID:5396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6560,i,9991676815587223329,7482050624611930519,2097152 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:1
  2⤵
  PID:1780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5796,i,2741068668150574102,17162081506974131675,2097152 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:1
  2⤵
  PID:5448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6616,i,3214830280166079043,1704173082801877969,524288 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:6108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5600,i,12497189091687840946,1460181985231485184,524288 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=6624 /prefetch:14
  2⤵
  PID:4568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6752,i,13442711290435864522,410789018774013329,2097152 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=6748 /prefetch:1
  2⤵
  PID:1200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6104,i,10487661147912466422,17001020111564280116,2097152 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=6772 /prefetch:9
  2⤵
  PID:3368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=5504,i,6532024834938516857,10832637915861206023,2097152 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:1
  2⤵
  PID:2488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6824,i,2065812886416417752,3218955034967831867,524288 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=6800 /prefetch:14
  2⤵
  PID:4808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6828,i,18090318988499638815,9128596783190229925,524288 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  PID:2188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6816,i,14613653456225451638,18102443569631760396,524288 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:14
  2⤵
  PID:5108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=3644,i,18016101685622682958,6769894977213959296,2097152 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:1888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=3676,i,2837861320787949679,13953283934008560900,2097152 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:5396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6852,i,12730758217696708487,2796390993261953183,524288 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:12
  2⤵
  PID:2516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6908,i,373840513813018574,12066755633527906652,524288 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=6920 /prefetch:14
  2⤵
  PID:5936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5488,i,8507081392269437791,6999507783499340778,524288 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=5564 /prefetch:14
  2⤵
  - Modifies registry class
  PID:4548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=6032,i,6153533652354570276,11916353234034729254,2097152 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:1
  2⤵
  PID:3532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=7112,i,14418714523309528124,11050757050340788053,262144 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=7016 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=7096,i,7189987792315711086,8035740921603795511,2097152 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=7088 /prefetch:1
  2⤵
  PID:5844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=4772,i,3288113222571412188,18339909191916548132,2097152 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:1
  2⤵
  PID:4752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6600,i,7093194940748996042,17565658460455553913,524288 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=4740 /prefetch:14
  2⤵
  PID:4452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6884,i,5368110594791615605,10477957482345728091,524288 --field-trial-handle=1944,i,1571058572461041247,13146304920018980213,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:14
  2⤵
  PID:2128

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5400

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2632

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:1772

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:4944

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:996

C:\Users\Admin\Downloads\disasterlauncherwindows\disasterlauncher.exe
"C:\Users\Admin\Downloads\disasterlauncherwindows\disasterlauncher.exe"
1⤵
- Checks SCSI registry key(s)
- Suspicious use of SetWindowsHookEx
PID:3100
- C:\Users\Admin\Downloads\disasterlauncherwindows\game\Sonicexe The Disaster 2D Remake.exe
  "game/Sonicexe The Disaster 2D Remake.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of SetWindowsHookEx
  PID:4116

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5456

C:\Windows\system32\sihost.exe
sihost.exe
1⤵
- Suspicious use of FindShellTrayWindow
PID:4916
- C:\Windows\explorer.exe
  explorer.exe /LOADSAVEDWINDOWS
  2⤵
  - Boot or Logon Autostart Execution: Active Setup
  - Enumerates connected drives
  - Checks SCSI registry key(s)
  - Modifies Internet Explorer settings
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  PID:3464

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
PID:848

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
1⤵
PID:2272

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:4560

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00001b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b
Size 57KB
SHA256 6303475cdd19a7c08d011c6c6862e3789b39f95797602963a78cac17ff73d1e5
MD5 73fe08c0771b0b44243114c8ea8b86bf
SHA1 03015c3d3ea5bb634dd29a50623a6147d206dc0c
SHA512 f4fe1b7b7562c4f1187ca0621ff4006be0fad055e41d772a1ff4a421eb0d18794e3c21dad72cc469b889c6ed9642616ab9c8b5bd27d87d8fb5b8f228c96407d6
SSDEEP 1536:5HBwP9e8JdgrDq3W2leMPq1AOFgHDU3kQj2W:5hc7grO47C9Du
TLSH
T1284302CFF0D8C6FE215052556E6E7628C261891FEB118DB2443F2FB2999D04172FBAE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c
Size 651KB
SHA256 186ffaa3cd8f6cb8ce8c879b98bb71675b06b9fd9769bc54c1d428cc34ec1465
MD5 41226a0b7b872372b7044296e4ca98f5
SHA1 dcbc6a01b55ece5aeec9cd544bc8dd2cc61148a1
SHA512 0c035e3221028535c80fb4a2cb2dec80124b85355cccf1d27ef2170bc82c4480e39b7461d6bb11a80cc494629115e5611fd57845568ec0d10cbead404274528b
SSDEEP 12288:qd6OTJLAHaRTxv66FgVfTn5KJmE73TeXEk/x8xgVnTJsfh3sayGWurMZQKDHQe:POdUHa3vRyVfT5AmE73U8xunTOJcayGE
TLSH
T137E4230D69A09175A35EE1E1F3C9D4220DBC3A36191AF68E0CFBC459947637FCB049AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d
Size 22KB
SHA256 375b8c6fc4a5d31a804ab0fba175fbc5a9d568dcf8c901397b4ed9b57e44ba23
MD5 0030b6b0ffa7bd14095f054607ccf71f
SHA1 1f100154e60e2227ea0e33ecf4f5fa7880a4823c
SHA512 3b053b231a3f3987f34b77f4ffe527150c447f06200c0887e9d027def878eb09432d057e8a4ed13166abc964e2dceeeb7fdd6ddc70dda2f57a6a4f8019b161f8
SSDEEP 384:2YepiBp/lCM6Mj24afaLTnr8o3U5YaEeaFFwaBAhir1ubvWq49S20HHQYfTM/gYE:pepiBp9L6Q24QB75Ya2wxhirU89SFHl3
TLSH
T1FEB2E0C32D9F03EAABC0D122E47CFE4964292D6FC62C9E1314F4D471E5D452216AFBA0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e
Size 34KB
SHA256 b06e9b1c574343a660c052bd4ead7cd86194e3ea4fca5f79c634a3ffcf2129f6
MD5 13e1cf5ec6812ab6ee4e6b5dc59fcf6d
SHA1 122bcbe74f5e99aa7d26dba45ecec7ac9c54bb10
SHA512 85b882037933c6e737142e342820d8c2d255191bf72fff6aa8dafb5115e0e5e68fd259a252d495ab0b87f7c5fe27e54f547545c679c6a1bb63a26f58819b60ff
SSDEEP 768:rUvWs+BekbGl1JB/NXlfmwqJ0ugJfAgYQeNykAHsfe:AOsl/DXlfmwqgJfAgPAy3HWe
TLSH
T12EF2F265B2DDA43570B77BFA9317ADA2CD70B8A640CF91887D170857A30BF73944D148
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000a1
Size 1024KB
SHA256 8313948884533b39f6a60ae078c47a91d6cc50db7c29054833ff4b54af9f01d3
MD5 057730c3ce31494a2bb2c98b344d871d
SHA1 8ec723b04b7650f14f051ac5958b4c3d7179ea2f
SHA512 f2fbdcb79e2886d644035fca5b71530852674a2540d29d163751b52d01c458604cb26d354e85033e4bf58f827d236fe1bedf5a50abc6197fb86bd4f392eb37d5
SSDEEP 24576:3h0MQODXtWPyZRqRJmXmpq3xNcfNRNlu2x+CsjbnIkaT8Qru:3h0MQO7oBRJmWpeNcntvb1Tfru
TLSH
T1B22533601CB5CAAA3D7DE0B09B4F6563DECC2BAB281A71877712281C24ED1691F70DDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 7cafa5ef9e12dc2ba60d757d52b491fae21ac115b7076c4de79828f3f3d04cc1
MD5 6b285be82993dd72335de219395c5abd
SHA1 3dae3d3ce5a55ed0a2135b9e7d1b9f97f66a919f
SHA512 f714dceb9d06ffa4374ff0ebecc9c82a2bcf909b0ddb4e05b699070646ce3259045bb424ce8fe24a7a36c6abd806adec792e9abbb2fdbeef24e7c455dee49bdc
TLSH
T16A21C0B4769D95EBDFA4AB30719FAF0226E12500C61377178D44C68C5F5F5FE00490AE
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 aeb74b091f91427fccb051551a5f3fc3d7fc6be40786765fe3bb08d94fabc4c2
MD5 5421feef7abf27c477f63080b0a3f7a6
SHA1 784cadf008f830738d3d27c13d3f2b36b80dba77
SHA512 d6b32a6489454678f63c5820c9f6e70ba1ca5171a3a98037db6822168dcb94dd252e385b3f377a996360d1c31479eb816ef7c48ce0e29e9a437bf700518bb03a
SSDEEP 96:i4Jm7n+MR3lQp/2aTEUN7qhjBTReONsi4f/kToH/Wd:i4Jmz+wQpuaTxNu1f/NsBMUU
TLSH
T141A18378E745CCE6CB3A167460EEAB8172F2142F411FAE164D08C57C27CB7AD408939D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
TLSH
T109F09C8CD050E86F02B2411AB1647314FB51037A0751A59F393CDC0D9FB6DA751C6F4D
MD5 SHA1 SHA512 TLSH

Submit Download

craw_background.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
Size 531KB
SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
MD5 6eebed29e6a6301e92a9b8b347807f5f
SHA1 65dfb69b650560551110b33dcba50b25e5b876de
SHA512 fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2
SSDEEP 6144:abyfBNC2FRdjiRXqbe5Dq31IVlMqX+wd5/CcMMJcRULt0NjyTOEzZQ+h72W3GB0n:Ft/g
TLSH
T1B5C4F74C34C2E8CD6A623DA5247B9085A2319266F4479ED9F0EDECF21AF44641937F3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
Size 259KB
SHA256 58fa02a45aed2ff33ac80347f41a5a7baf81a55bd8c233eb22cd9c39d1dd669f
MD5 2cee391a31fc92867f3274915427e534
SHA1 5c2bb5cc02ba3a6580c0300430328bbe327437f6
SHA512 d45a030ea38bf882ec884ed5351bd933fcc847788dd51cfa0e4c97bfb11f579fb8a945f03e66d08f087bd00ed3cbc19d0a63703c24699761a346b3c0aa0eaa83
SSDEEP 6144:mQoL6h3U1tbfqptZBuZww84C1V0679eyj6My2ZCFIPjbfYXDzB8YXDuYXDr2gXa9:pzc2
TLSH
T1D8443B0C32A673C9E91E433B15228D16D335FDC4969D3069B961BE0C76FBB843764B2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000014.ldb

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000014.ldb
Size 17KB
SHA256 d8fe1264f9c55d09c4d7163411ecc2c8c524b7a7e3c26c59d13f92966f9a59d5
MD5 a2379431462df4a55a878dbf58bdadd3
SHA1 2e898f6a04a9ba8a61757d67c23a7417d8005f1e
SHA512 4fd43b91adf3fd081ac47dcb2298299f786c7a4edb4aaad2a9e7888bbe2f8aa0170e12596f5cf38f64c362b1416f3b36b0714529d1fe03314df07edb74df5ae4
SSDEEP 384:9yBlSoniSmUUNSvQY/7QUTSkIha3KzuJeqeIf0iI:sBHitSvP7+kImSuJehSI
TLSH
T13572AE271AD844CAC175F276E4FD038D6F267C0B31A5E0EC9382321C55667A729ADE26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000015.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000015.log
Size 44KB
SHA256 fd9e193b7426c03e7316b7b217c3ec6de3328df82a927ba817f36aa7d41db767
MD5 cf843eafcb5e8fa274221ad138758412
SHA1 f2687359bc78dafe640a76293079cf4a377a9433
SHA512 bb990148b6907773270ed76416dbbbb75021eed9e65571c41661dcbe9f6a14e3602e00a19174c7017fbc341ae795ef8f485fc597b8687a1da7e9026817a3ad96
SSDEEP 768:W9HRtBJfGX5u3G32/a848nKJf2f7wMaH+cbpiUo9qbI839nCz8a89:qHRtBhGY3G3ga848nKhA7baH+cnbI83R
TLSH
T1E513432F85D58AD7CB00C5F18D6D0B995F3A2D0528E960EEF08A3B1EF5362605F71E1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000016.ldb

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000016.ldb
Size 1KB
SHA256 85ed3f5cebff5f4badf2031b63273c5703949abc9839c2545cc2dc450ce0005b
MD5 88799e9d81f5ee8601536b2de7245108
SHA1 e6b57b0d559ee132d91767a8cfb1ee29b1bf3d3b
SHA512 9343903119ea357248d3786a6dafeed005a80fdcb228e8c4d773010adad8c3f392ecd06d32a0eeda6de607fb9c1e6a870e67b5094b9d2b1145e6e30a56ab19ea
TLSH
T1D221860A99DE5426C4750E7288FB12DCFA22B4830D727D2D770C94230CAE442DCC7A35
MD5 SHA1 SHA512 TLSH

Submit Download

000017.ldb

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000017.ldb
Size 12KB
SHA256 26346121bf3e9f798ae30f4ee98e9ddd80fff2f61a0020358183851beacc13da
MD5 3d8540b81cf06a910f48589a7ac404f8
SHA1 0168392651d37bbc7b2ad76b5bcdacd5dc7873f5
SHA512 3fbc3cb2c3c7dde6fddcf3c98dc999e8efa03559abf0385f0e38411f8d942c7c7c8791b0e7459e7099eab45f7e86eef83d5acb186eb7074a667fe41d7fc99191
SSDEEP 192:WEeGBTyTIklxs1DjG1xSt7QU6a5/ejSnS6Pk7VC2Ss4YvdFXCa68o8iyq09Bv9Yy:WENys0sI1Q7QUTSkIha3KzuJeqeIfK3
TLSH
T19B42B0173AD484CBC5B17237E8F962896E213D0E3295D18DA683121C5576BEB387EF42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 5KB
SHA256 7d6f9e424ca5fd41cc8bff5d07a28de3972d418f80d8377e1ddd01768895e3be
MD5 bf687b4b2c659b024cc1a0a4826ae0c5
SHA1 5940e80a1ad89e66ad0b72dd40e7720cd81cdd55
SHA512 c682a7d939a31f719915b8a508e03f736a2e4cb9c2a5f5e09762803fcbd3bbb1a648d1c204795a067ce1ae172ec6b878f9da1dc186674fbf68dd2c4fb2969ad7
SSDEEP 96:9/Jv/JCfMvRo1qxJdFihHKlcIBHXM1gr9Yp6ghUxvR5r/:g0IqPdqKtggSpIxvH/
TLSH
T15DC178E727D8889C00C2D327C12CE16DCD59A063578E1FD4B9CAA2AF07E4D1BD6571E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 918B
SHA256 dd3024cf2f17bd3e527def8a90f65dff782339cff44cb588bd1322eba14171ed
MD5 791615b2127a2b2d3300a09a0c5cfb27
SHA1 e302ba0604f0247d50a9c6bc6f450ee11615a9c2
SHA512 829798f915b0272b7716712372d75f4100077743bd4cfc106ec4394e7c30291cf2d5ff0d7c53c1efc13d66844c0600f1b0573732754dd3c8bb8a032407bdf9ab
TLSH
T186112541FFD408C1FDBA0D72297FB685BB2234CE1C22D61F121D511A62E2B459D3122D
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 d469b6126d204d97962c9738c6341a5f4e94ac07edc4942288322dfc23128f82
MD5 66935190f0f19a413e446dff4ce7530f
SHA1 29cd856d2f7e25fd6f7af170840cfa02ec7c1898
SHA512 548da4fadfcdf12ec630433b235ad63f99be9e2e014d5f98ae0a0171b4c604ba41ac1f98ff00f9da00a989c2f02990e7500ff8626bf1f0359e46f3e8c4c18a34
SSDEEP 384:D287oexjyJemxTGwuiLZ/i/be/A/J/iLRlBjBd1fnLDkoNyaLyfXZW3mgKcGB/8J:gjhaBT9Zkt
TLSH
T11B42ACF7C3D8C62DC85556F89B247E1ACE2D1E2883283C76D9D9BE4B93E1471E20064E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 19KB
SHA256 da43bcadedc571338892d5cdef319940860d33a1a998f0970b02deb98962b8b3
MD5 9e041200d39716e7ecd2791a7fbd819e
SHA1 3064c733720f6327c622f3395f625ddbeed919ed
SHA512 c7f63474702eface9d387c39f86a8e8e5c298042636d592e1ecba5ea273741e63bc77337333c607c1dddbef545d041231c0c96efe5b29f22959e3a50fa393dde
SSDEEP 384:DT0umitxJJFH3vXd2eJqj+dpC0V+QHURgqewDS0h6Y3pLRlEdJ1fSZqkoNyaLSfJ:dIyhKx19DLgw
TLSH
T14992ADF7C3E4972DDC2166F49B197E1ECE290D2493283C76C9D5AE1B93E1432E241A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 21KB
SHA256 14fd63d0c9f8bd79b40fd9941fba63244d9e2c18c864ea4a65ea07f220626fb2
MD5 e991354362877da597ce0bfe72f9664e
SHA1 57bfbc55e2cf2f1ea6968f6304d032a49278242a
SHA512 6f34c47720c60a412838cc38df8f227a17d02ea6da17868365611f6c7b22b57fe4d4839e655668f6668d2d7d09a925bb7c7eb7c4f8e05cfa8578c3050b1df7ce
SSDEEP 384:DT0umitxJJFH3vXd2eJqj+dpC0dMDdUQDU6EsEg6IedrDr6wDxh6YQLRlEdJ1fSw:dTvhKx19Dhfw
TLSH
T16FA29DF7C3E8972DDC2166F49B197E1ECE290D2493283C66C9D5AF0B93E1471E241A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 4343007f83999f91c1d59433031c6caa692218e8fb474c126ef74a8c0f1f79f0
MD5 194f7afe2b2a4b558f6bfe3feec1bf6f
SHA1 ee1b0afa9051a502f960f3448ccda38a42acffb8
SHA512 d3e63799c5d1a15b7d640f5b01514faca160e01cdcb292f68e39a260a6cd3395059d8a2aa1a379a4011e73c657c1d0f06f6ad507486c629f72839c171fc51dc5
TLSH
T130214BD7877EB52B243958AB0D08F8061DB77436019069F5EBA7927CB0839FB2712866
MD5 SHA1 SHA512 TLSH

Submit Download

aa8929b0-ab78-4f08-b818-ffddfc87680a.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\aa8929b0-ab78-4f08-b818-ffddfc87680a.tmp
Size 21KB
SHA256 8a8046fc9b488fcbc8b510e22b651a3cf6e1c276719e0d57d24de2783685490d
MD5 914a95d68fdc878f3a87182eec295567
SHA1 bc09c4407c6b1d9b8a764a94430d83440d3e4e6b
SHA512 2d01bab0c299bc4ea526b89da1d23199897e9d340e93e764f6d9e14888e2465710483e1a8c90b527346b10a9de195d01f6be012c49d8b0ce6c3bc90b9ee5807a
SSDEEP 384:D287oexjyJemxTGwuiLZ/i/be/A/J/J/5GIoSMQ/+dMDdUQDU6EsEg6IedrDkLRt:gzKhaS19ZOE1
TLSH
T1F0A29FF7C3D8872DCC2566F4AB193A1ECE1D0E2493183C6AC9D5AF0B93E1471E251A5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 3f27bddd03faa933407f5efd2f609175b75176fa90cbe75450084cc561459361
MD5 946c6f57937582e32b85508d1ba1be52
SHA1 85e7a865dc3f5b960e322a76b67224e46f852a38
SHA512 d41b99054634e4c761f5b2b7560d4abd262c06fa1c8811cc9bc0ec27a4961a0ea0e0e769ccd54903c24981dea1d4cd30be7d741e28f6445bff9a91b2483b7167
SSDEEP 192:mBR/TCc/Aov7dAPRp2l98Hsb+WNnnGE06TJ1eG2VyIsnAUge:mBR/Tr/A0sXauwn906TDOe
TLSH
T14C32C92EBA14A97B6CCBD219F9317793E7F5102161D42E40E7FC9A6C11E79CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 2d8e15a38aa28a90efa44f8669b42ae9e51b3da1e8e4e23a352689bbbfdc0ad5
MD5 ccd76b07b2392263686db1754b923db2
SHA1 593fc23c3d06e34be19dd17598a52ac31cd18a78
SHA512 72195debbd72342425446c0d4712b74b86f2a85a1bf34ddfc888e0c5cb492c41482c4b578576d8fb5cdd300fa06135bcd772acadd95fd31cd40f4bfc11e07689
SSDEEP 192:mBRDcBzTCUS/1v7MAPRp2N4m54l98Hsb+WN+NnGE4mc2p1eV2VyIsnAUgE:mBRDmzT+/FZXDuwM9e2AOE
TLSH
T1E742E86BB910A9BB6DCBD229F931B796E7F1102161D42E80E7FC9A1C11E7ACC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f891710ebc2bda23576a5735f43cd889df432576fe68e01b2ba0cfa0b8286096
MD5 a9360a32f8b8bde4d59fee50c9a6d8a1
SHA1 a08081541034fa7a013dbc7d00a7ddc666eacf9d
SHA512 fdaf8ae0119bf74158dd589681c741d899dcbdc3ce0b5e90194ebe1d2f353aa66a2c610b7d99b592d377633bd222aee7c879364f523761c94d82bfd53722ce17
SSDEEP 192:mBRDcBzbCUS/1v7MgPRpmNSv4mNF84A98Hsb+WN+NnGEh4e+mcUm88Y1eZ2VyIsv:mBRDmzb+/F1X4AwuwM938a8LOE
TLSH
T1E252DB5BB9109A7B6DDBD129F931BB9AE7F1202165D02E80E7FC8A1C11E7ACC3117417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 43de233ef176df8644fcce642f8bc0350fa63d9aafd2dbe9e063852c56fbf24e
MD5 922f8aa687ba1cb719ebb862251069ed
SHA1 ff638529a0a688a8f467b936a95dbd5c57314ad4
SHA512 76f1874ce9653b3cd380b218628a1479dea16cf6455878c0d6b45dc02fced33edb1301cda95d7d8086c02e33c3322ec9353979aad75e6236e7eb1e2214ecd8b3
SSDEEP 192:mBRDcBzb9US/1v7MgPRpmNSv4mNF84A98Hsb+WN+NnGEh40MZgmcUm88lz1eZ2VC:mBRDmzbv/F1X4AwuwM9elZGa8lIO2
TLSH
T10C52FA5BB910997BADDBD129F931BB9AE7F1202165D02E80E7FC8A1C11E79CC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 ae2e5bec8d71803d24edf728770d417d578e423b72b2ae2bff71048a3d4e2cb4
MD5 798e9a0c5b0ce9e7600b29a8a4a0e842
SHA1 cd9a52b8a59748393e98a37305be98ba129babfe
SHA512 1330f4bd2b145cd885d032efe75d1016023d6772f49772c80bffb66e738a8aa02c5cc306895f09f32918dda575a7cdb409212f0119e6006034753220a74c9c0b
SSDEEP 192:mBRDcBzTCUS/1v7MgPRpmN4m64A98Hsb+WN+NnGE4mcURP2R1eZ2VyIsnAUgE:mBRDmzT+/F1XhuwM9ee2eOE
TLSH
T1A152D95BB9109A7B6DDBD229F931BB96E7F1102165D02E80E7FC8A2C11E7ACC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 13KB
SHA256 935085c25055d6acf8e33e6bea701960f0fca7b668219be027c33cbccdc207e0
MD5 1183f13e4025892ea9940ee1eec0ae1e
SHA1 00aed7a67de8effb8c6f8f7bbacfb282a3f4a02a
SHA512 12b629d30a975ee949d55546556cc1832e67759e8ea2e183463d4e518c3c20c9f684d6d35613109ea1eaaf580943050769831ddd3dc0786b4592cdc40b8d4f8e
SSDEEP 384:Majm97KxkXqKf/pUZNCgVLH2HfgslN1XODmd+ErU3arHG8t2rUgJ:MKm97KxkXqKf/pUZNCgVLH2HfgsLROqg
TLSH
T12152E867684D9A7B0FD8C98CDC276F8BACB6015762780D2456FB5D0803A5BCF114A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\509c805c-a305-41fa-8b2b-94cb4fd2af19\index-dir\the-real-index
Size 2KB
SHA256 0296fcd167fe6e3502d0ef7aa1dea6976c7d5b4caf0a550e05376435f03ce213
MD5 ccd253bb1d4f22cb6f5b5b41ea5f02f9
SHA1 33cff6db5d53cc9fe16863a4ad5b40e7ce468d03
SHA512 8d3f45445af2b47632f1b12cce9f768b7df11077d5e4a2fdbf6d863bfb013e928214d717a1cfd8a433861315209b69dd3ae6a53ee1b618da29b9b66634f85b1a
TLSH
T16641744CCC80ABADDC7491FA299815F297752D38FC58C29241A4B1B13403AA81B4B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a4b43.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\509c805c-a305-41fa-8b2b-94cb4fd2af19\index-dir\the-real-index~RFe5a4b43.TMP
Size 48B
SHA256 9bf7e89dddcd3b907277fe0d8724c710339a3d76eaef47b0cec8b055b35d3ff7
MD5 bbf0be8c423740c17d2fbe102938a10a
SHA1 1cf10b4642a7530e22b841a096f9efff1bc9fd94
SHA512 039300df46d23c62358f681141c9b20191f9520adf5bd9ae633240d56327d3815bea7b42edb8cb42dfbb957fc9edba806df4e8ac23adf9ce0f4c24b6fb7e85c4
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\52ac8f4f-5aeb-490c-bec5-ace0d66a2e78\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\5f122000-d523-44ed-9a24-ca02ee4feede\index-dir\the-real-index
Size 576B
SHA256 40ebb3e68c49f65aca2559fbb1b0296e18e05dc9ccceae634d3fbc81c13bdab6
MD5 709635f37d7a5de3429137da14d50b97
SHA1 6ce28b607fa7aba4b321a89434bed78320bfa4f1
SHA512 32482a103148de9f73ad427a9c32ccb6b39af1fc9feb155468326501cf9363e87aa3673f1eaa85027f2577b933cbc69f23d0a4ca04120f679300d3dd2f99418e
TLSH
T151F0F1527EFA5A2FDD8499B422F5FD013A69C06F2992870F3110B33B995F5034A45208
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5aa7ab.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\5f122000-d523-44ed-9a24-ca02ee4feede\index-dir\the-real-index~RFe5aa7ab.TMP
Size 48B
SHA256 b8c817fa372c1ccd13e35b978dd1d4577a99a1f1eb8e6f3d16ae1dab8cec7797
MD5 0bea4a90c4cc0de8bc35d62756b7bd23
SHA1 ab28058d7206bcd494cdee8b141c66074b435162
SHA512 c8bbf8d38ba67505a310962fb8fd1e14e774128b0bae193c24a554a07230ca69d45f0b61d8ff38dba24bd3a54572c966328f57455c3a525560691aa10c2c9175
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\9e7e8eee-23e4-4230-9987-b8fe1f48c047\index-dir\the-real-index
Size 2KB
SHA256 2ecdf2b30ac7fc4d4c467e1f53828e9044535096dc9d067a3665635364226991
MD5 5d8ec0f41e274f9401b735955bd0e026
SHA1 41ed77691ce3d7aadede4391dd45b1ca4d224f94
SHA512 ecb1015d573d5b62711921f965f9f5dcf115e3e0a6a7073fb36bdb9f0eb73e851e1e23358fca9a0dd8dd740b9d6ce32d965a538b2b80c41a49dfed9a4cec901e
TLSH
T15941754CCC90AB9DEC7551BE2DD415F257752D28FC18C29241A4B1B134033B45B479FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\9e7e8eee-23e4-4230-9987-b8fe1f48c047\index-dir\the-real-index
Size 2KB
SHA256 4b73059d9dd8fc42fc8ae639a5bc48f7bd33369f73a2f5daa6e58407c9f008ed
MD5 de1e5b3a3b235a79518130bfa4bb4658
SHA1 8cedbe5f578aae8e7894a6430b0f56d296d33579
SHA512 77669b93a5db4480d1dbfed960de9d342ec93cdeec1dbbcf413ff3be21eeaeeedca727bb63534a30ed9d6d433698c4eae98727c08dc6109cdd6a67e4526867f5
TLSH
T15551534CCC84A7AED8B1A0BA289414B157752D34FC68C392C1A4B2B134532B95F479FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5aceab.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\9e7e8eee-23e4-4230-9987-b8fe1f48c047\index-dir\the-real-index~RFe5aceab.TMP
Size 48B
SHA256 bb814a901251967e881b9a9f2de86154df526bda975d05977f4e0f4cdb53cdd3
MD5 379480f40eb12765ba036cea79a4b54c
SHA1 d11976e7649f7ae737c3832a6cd271e04a1e853d
SHA512 9e598ae78e050cca050af61e7adbd557b327cd991837ff99b9f5e567c41768d9e75fbfe28d45b158609b40b33354b1e8b0a2f62cd451355418113e849f8e744c
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 383B
SHA256 f6d5c332a3d3b44934b960dec4192d4d9ca5bbfb9e2472180903b3bd6992b4b9
MD5 5c3dfa14d094e5f95ac1cba7c22dc7a3
SHA1 2213cd2a9c9b619e128baa2df42bd8c4f774a9e0
SHA512 d7841af19234563bd74744ee72e558868fac60745f1264144f5d70e0a199335e38a8be18487d8415d237ae33b1163b4c71e5d741970945cd8de6f6362e391e59
TLSH
T196E0688EBAB60859B9725FE83836709BCB2AA01D4C52CCEC458040093475A0BD912D7E
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 62cfd11e99fd51f98141c34f7ad0d79450e3a789b91087b56638f8b576a45e17
MD5 b365a9e77527969972abfef38779367c
SHA1 d0bfdac0ed82eec023abd63d113c7f9568fe5baf
SHA512 0d49480f03d2aae51acf0236cf08364a8ecfb7d4e27a41be7cab4788e5aabda17b2fd92644b1de2a9091f62a2c0d7279033c8be8b2504fb61cdaef5a7506b81b
TLSH
T192D022D1A03186935638EFCC513A29FE827A9D09D9C4C8E86AC8701B34F8602E4438B9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 9bd7c4beab8da9aee63b6c228b0d776549f2bf2abb19553d450b0874b51fbdfa
MD5 a0d5312f13782f541ed4b7b646d4c4e5
SHA1 7caff00a2b3820420d58d7742a1ec52e5382130d
SHA512 a03dcc8fca4171da1fbda25a369ef5f34373be06706bea3822adde4b7b4cbcff24c2ee5507098d28e3a7d93761873da881d8e1e9decc55ac00da3ef9041a5f49
TLSH
T1A2C09BE254708557867CDEC811397B3D961F554CC4D0CCF8754C600574746135453D75
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 390B
SHA256 711250435108ecdc5e7bf35a67bf26e2216d22230439982cd25a88e7ace69f9f
MD5 34cb2c10159afc572eb47ac660d30cd3
SHA1 808266baf2f5152b81c039aaf96cb4024821dfae
SHA512 c4bc1e675f30f7c75d46ee68df830d2f7e941ed34c3fe717d761f90c4d025a822f405a5f482e4d5d79681c7353d0f87f76fd62fed1ec0096d8d0cfacbafa426f
TLSH
T118E0688EAAB60849A9721BE8383A30CB8B3EA4198D93DCAC19406009347590BD812D7E
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 140B
SHA256 480400cf51f00c6ad5b5ab97fb9170c5ecb6fe245bb0e28353c8c81c6faed8ff
MD5 c12c0f86a8cc4933bfaa25fcad56c57a
SHA1 4317099c9d0768cbb7c73bde29a467d8662c5ba4
SHA512 bc963c2f1b4202db0fc1106d25a9b751fe8a4d697761d1a141319861f98270b7ad6946147f3d30bebe8360ceecf56a9fb8f0faf1713f9ea225b928621230b66a
TLSH
T17FC09BD7467145562B10EBC45434614CD41BDECD9DC5C8F8C608F04634B8712C6116F5
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 cffe785f4ce9e37bb670f3b82f2dfa14a6e78cdc4dd07f4ab95fa4c3dfe0960f
MD5 104bb7f1f24f175f613067a5e7fce1ea
SHA1 cc9ad94889adc5e6978ea3e0c7692ae2de93b5ad
SHA512 f20631eaa90825944417855ffef03a8310504250f039f616eb886dae7ca05f59ec5f021a8ea12b6f90bf2f7857744136a98f41826096babbc5db55d213358c8e
TLSH
T1E5C092EB9520C6CB0AB4BBCC3039665EDB1B816DD8D1DCFCA418A006353E9278C03DB6
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 242B
SHA256 4c8a4cba552a6c3c24f95a2e77ed35ea027dd68ffa3f76d9b817badd4a555c87
MD5 1238defbc2cb4521968fdf044e4fe77c
SHA1 c3ee15eb885742574e0a37590dfd105f80de7d43
SHA512 369fefc168b30f5b29997eebb2eff11a6779dcb228f3b4251f4e42b4ead0a333f37ea8936531d0294bfcf5935a1cfe32e0f9a5f0189311be9b6d10ceec9ab841
TLSH
T107D0A7DE7535454A16305BE83034A1DE821FAC5E8CC3DCBC5560B0057179417C822D7D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 56B
SHA256 c58cb79fa4a9ade48ed821dd9f98957b0adfda7c2d267e3d07951c2d371aa968
MD5 94275bde03760c160b707ba8806ef545
SHA1 aad8d87b0796de7baca00ab000b2b12a26427859
SHA512 2aabd49bc9f0ed3a5c690773f48a92dbbbd60264090a0db2fe0f166f8c20c767a74d1e1d7cc6a46c34cfbd1587ddb565e791d494cd0d2ca375ab8cc11cd8f930
TLSH
T1069002F74800819A0E20A9C82038A35DE40F818CD8C0CCF0900890423028A234002851
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 239B
SHA256 825d20b79cfb79702e26ac9d900fb5973a216c0a3964b64ea63ce918861810b9
MD5 824c075fd2a8d7990236c2f065e1ee95
SHA1 6ad8cef5bc1ef3d7b231d4dfcecd301c3b731cd4
SHA512 75e259b172359d475303bb9ec9f4eed1ea7f2346ff03b3f3a269e1f757332c940d3aefa21b8ba5ddf085a3fa3276e5423fb787c894be9ce348010bd2ccdae529
TLSH
T1A2D0A79EBA32454A15305BD83038B1DE821F905E9CD3DCFC561081057269817C812EBD
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 a2ec8ca9db3c46b153c9a030786aed6c71ed6eb57052f4e909068adb47978ad7
MD5 568c598d3b5a9fbdfef3faff9e4fb889
SHA1 931f46d15f8923e0b494f9b94a9a7cb6e735d2a9
SHA512 a759597a340345b51b001dd44794cc3fca0af8c0953c5e5ee608a6e946a33e9a12ee5da40468080ed0fe87d73ce7eaa9e5035b1c83e24e94cb658bff7e7dbb36
TLSH
T130D023DA023085471760BBC43034214CC527CD9D9CC1C8ECC2047006347C203C801AF5
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5a3db6.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5a3db6.TMP
Size 137B
SHA256 f6569cb72d61cd561bc05983901b15cfad2d5721bfe286fe5288c730d113fcb0
MD5 ec3593ad80e6a662d3706fdb424f2715
SHA1 a0615d4e116189405e32809f54d55aa3bf948337
SHA512 2b7dbfc63eccc05f0850b556396ad97ffceea51c726ec0bebda406e06154d2fdbeebffedf7b1b3455d8b397cd3237024f1670421ec24abcd4062008ad929471d
TLSH
T172C09BE254704557873899C451397A7D961B5C5CC8C0CCF8754D710570746139446D75
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 bd7aff2232e986960a1babe2e078f83c45672fb951b4bff4782fd616bd1b5ed0
MD5 8329fe3da9def14a9ecfc1b3ec37403d
SHA1 8d8ce555c1eeef26784d6e7bef51e1ac734d9e34
SHA512 3ddf2316219306027a7405928a55c16b8dc2fef119dbafde9418465333299507934d2461ad10c5f494bcebfb4a7b250dbae1350364377c6069eeb1d8e044d057
TLSH
T1B8C012C5C495A280C81C82B8B502208E305D9E308A096247C2F40FE39D67CA0412546D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 120B
SHA256 70416bec67cac6b1501ddbb33f17d70ba5ecb524080ec0273733ebccf7f3e974
MD5 fb02bfc9ad2aba42a3dbd1220e21b9a3
SHA1 043092bf0dd38031110975aea72c3a9575489d2a
SHA512 f2057381e978b1808a8757fe405274d1d8ff33a780e498f49f25197ef153810b2f2297388225614219c7ee42f7e5eaad1dfa0c6d6d62e27bde0feca04ca54ee2
TLSH
T163B0121210090B83D805113507F034402325AC058604460FA1C70261E0813B34541509
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 e019c6bde5531eaf0de26774de879593bf66aee4e5530c2391ef658fb7026b0e
MD5 ba148d11c6f8a2063990d1021e42c78f
SHA1 e96d0bda886f08421a4b60b614d5fcd01db2098b
SHA512 008ba319eed33c579300f94dddf8d65637573ce260e2e665c71c764e77af39d76e31be86eb74b1f1cb91b71bfeaf5d3f777107d0228d5e60f4a5e3746f4a3532
TLSH
T1C3B0220A020C2283C82F2B303FC0B00033380C020302020F03832230E002302880E22C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 71b08fa45d2a58a8e9862e047b290b0e696870d839e37edf8dcf4385ba173aac
MD5 01394a5944ccd8e6f86456ac1b0f1ab8
SHA1 7b1bd55bfb33b9079b19f3ef7ed60f2d0bf29b7c
SHA512 376a49edf2272251f20aaaaad2a85ce553aa4322ecdca6a4b7b16b2e75383e5128c466ada9543a46e89e3fc60d599276cdecb68d08eed778c27a1e88e4901640
TLSH
T117A002B082C50E16CD0282747575864122624F2416D58B0B98D19C888ADB3D48131105
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a09b6.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index~RFe5a09b6.TMP
Size 48B
SHA256 0a224c58777cd9db383b469ff924bb9126b00b2117fc62f8a3db8e9df817193c
MD5 a0a4ef9e877ec7c8f82c7525c51bebcf
SHA1 eb9bf205e2f73a924de7115c71f5300bac27b0cc
SHA512 ebb97b31d7956508e8a618ab8421af1e0dde38943eda2a84a41be7fd1d9032fd7875e076723db8a9f524a6d19c3413406b80cca5dfd4ea77cde8a4614be6d932
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir4536_292892245\Shortcuts Menu Icons\0\512.png
Size 4KB
SHA256 d345d2dbe2efd56ff9494cb31cae0e28cde5bdf176a22bca9aee27465b117c88
MD5 97193e4d969021cb6e6ad1b25bb7499a
SHA1 69cb3acd8bc0b31b63791efc9dc47d5657bbf40b
SHA512 1df06713846ea152089ea40434f3fcff250ba2d2c0b5afcbc546b82a65b68f3ad1cf503dbc4e8246765c01f191b4f8389c4c55efb7da507f443d858a8dfd704b
SSDEEP 96:TTcYKfambSQTNpzzBOWUjfRVS/TFm9BfyKhnaBS8ZP9jeLWfbOGp:SbSQTNh9gD+mLfB49ZILWfCW
TLSH
T1B0A1968E8CB5488E66658747D48538A2C5B030A7A7BFC3BE719D174851E32C6FF29B06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir4536_292892245\Shortcuts Menu Icons\1\512.png
Size 7KB
SHA256 1e0b1b2e4dac49da1e2ce91a72e01f77fdb3bbb26ed3422e5d4037745cc307a4
MD5 cc525d60c0dc9696ddfe9524dc9abe82
SHA1 fc94cbd2a45bf2ff0fbe411f57a7cafa31126bfd
SHA512 09ab42f7dc3d6a08b9635ef229539a5c4c240506378a9de4eccf1f69d52b266222cdf084e9a567c6d21f19e61c4da7ccd98928870d6f10cd74e9158c64a4142e
SSDEEP 192:U3/tgbWgm8Xl2X+xqWwB3kUXPmv9rCywxAQU:2/rgXXExWKdXPa+txrU
TLSH
T159F1AF6F639B59EA3AF8493D4BD7A21FD62E108A2F275B71C5101045628A1C1FC69F0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir4536_292892245\Shortcuts Menu Icons\2\512.png
Size 9KB
SHA256 ad08077126e7106674e4219f5f9cfac2305e8b3f627247c1d3e72136399e6fd2
MD5 660ae59d489be5b5e1e9036b88b4a033
SHA1 b1ebdb9421bf14b5c43a399b4dbd92288d91a604
SHA512 3bf52f4d1e92ececb7691bedf1f53dea75041615447eac2c1ec9f99d07417a571e08fbd2db58896506350e8af831e8fc943d35e35747a8cb6db9a03d880331f9
SSDEEP 192:uJTyU9sUZdxl59pfNK8EliT9Tjx/t0xM6LwZx4nwBmJH/Rr6O:g9sUxXM8iiJKMfcTJIO
TLSH
T1F022BE9744E4E7A3427CAEBF4684D914DF4E1B7384366E10020B199F0D7AA8268E8B93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 122KB
SHA256 cf1f05cbc479010e39bfeebd7770b05d96f64d6e98ca28739bc61ddc2ccbf2e6
MD5 1fc43854d9bd628ea5d0596ba0d7c1b9
SHA1 b26d36e5948c064a3869503bc148db0621551d50
SHA512 fd2d3bc1a17ab2625fee1872ed0f494cb2ccf83061dcf90bcdefedfaab38235fde488a343918a0bcb6e031c83b393afdea8b118c95e0137b7addab5598469870
SSDEEP 3072:D2VLZKc2P7Wmxbd0+91k3WDAMhLONNd1cyYrye5e3:X7WmVGS2WkNRdYA3
TLSH
T1A9C31237BDB10EEB1F3A506D764B2B173F72AD4F9344594CAB9C2E4A44022EC26159BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 121KB
SHA256 60137b7f9f88cdb49086a9acd64b687d4671ec0a3f72afa2b8b3b825cd6e1546
MD5 ff67f347e83d87c0b9e1ace3e1a9cb60
SHA1 a8d1b0c0d8892e3abe44715e642e3dba7c3371c4
SHA512 cc89d61a65e1db0ca8868cad5957213cad633ef7444923dfff3652d55d5ab7a59ac059e1532083091ea3e59e2d13ce0f1edf5ca7f85cc48ec14d3c84846a7c3a
SSDEEP 3072:DVLZKc2P7Wmxbd0+91k3WDAMhLONNd1cyYrye5e3:G7WmVGS2WkNRdYA3
TLSH
T1C2C31206BDB10FE71F7D913D774F2B273B72AD4992844948AB9C1E9E84026E837185BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 121KB
SHA256 63d79400f0d4e9e7ae58399932f361a935108c364dc64ceafadd8518cc055543
MD5 cb1b19c9d4d157a463ba12a6f5c80a8b
SHA1 95cc4ca3fe11290191391df55b2020fec1ae9121
SHA512 ffb49173656d68ecfb8d83baed8e09adb291907de39d3c75f780d8ed01e31d7e8f1eaec24a45c8fc0c4291a975665e1c2e4e48623055c4e399df911e08f6f38b
SSDEEP 3072:UVLZKc2P7Wmxbd0+91k3WDAMhLONNd1cyYrye5e3:h7WmVGS2WkNRdYA3
TLSH
T1D0C31206BDB10FE71F7D913D774F2B273B72AD4992844948AB9C1E9E84026E837185BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 122KB
SHA256 b5e6590cafe2cee100ec3a543949f52d747c60e8feaf32f7152e45c4b2e4f3bd
MD5 c981105088082c4f649cbf0c591ef55b
SHA1 a219c6d33acdf770d3368c52ae1e45091c109565
SHA512 53cc0865361b6f1af504604d70c31c1e14d5431e025fbedb30e7be6b392c073cc7bb8a50254886bded7b41310cb28479e8c640c14407def118f5f2cdbb9ddaa2
SSDEEP 3072:/2VLZKc2P7Wmxbd0+91k3WDAMhLONNd1cyYrye5e3:L7WmVGS2WkNRdYA3
TLSH
T1DDC31237BDB10EEB1F3A506D764B2B173F72AD4F9344594CAB9C2E4A44022EC26159BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 4KB
SHA256 b104efde531d384b284f2e73893f47e8c90ecd0eb9b1fbfb5670b3616cb5c404
MD5 157ec7b27429d84c1039c11b86245f1a
SHA1 fb9fa3da8d22a5f6c68bda6a211b88129df4427e
SHA512 17351460c8870fab3dfbb19f00e4595a62d7989b54022e8ca5ab1c6fef4f3afd68ca389e3ee54406eb9ce8a7db0d62418972d4f858da7bb130a5a6c1b2afcdaa
SSDEEP 96:5KC6jd+oJm4V0FH+pqf+HBKyoytsRDotok5KHDdNB6eGyvkonSob1v4a:MCIHJm5FHuPgXDUDIdTW8nSobZ
TLSH
T1F6A14BB178B98CB769B7C288F9933A83DEA4A2276991EF84D9DD1F0C01F31D81301527
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 122KB
SHA256 de817f673b968b429ab8b754eec08f6cbdf81d2ad59cdb11e06ed8de2b5a68f5
MD5 aaab7780b24db68b82d1ffda37e6a772
SHA1 52254aee57dd882cfaeacc3334215a77a903e4c2
SHA512 001d38b19ce297c3de006cbd45266fa656b3fd265e03b53c1669a20577cc50d014f6c41b8d6a4a6082933a7104b697305a721d3dcf78a8d9fac730dd42137964
SSDEEP 3072:22VLZKc2P7Wmxbd0+91k3WDAMhLONNd1cyYrye5e3:k7WmVGS2WkNRdYA3
TLSH
T1E5C31237BDB10EDB1F3A502D764B2B173F72AD4F9344594CAB9C2E4A44022EC26159BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prep_Activatable Class_Hermes_perf.cache

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
Size 595B
SHA256 d4e60617c2afab8263febabe7f14f18595715078d71307a8cefe0707dae76dee
MD5 4454c8e578515db43fadd90604ae7675
SHA1 3912ffa00c3a5c86fae6500a0074284d9f668976
SHA512 b17559d466cb6954554c4f879b396ff8431c730f837205547ab46329c6517cd35a719378efa55d78c01b739414dd320157f120feb12e28e1ae90ce7c53a0c75c
TLSH
T117F0DC47E7B15216C926123CC89724E1B730F5917DD1162341056F5D2C373101F17CB8
MD5 SHA1 SHA512 TLSH

Submit Download

1.bson

Path C:\Users\Admin\AppData\Local\Sonicexe_The_Disaster_2D_Remake\1.bson
Size 2KB
SHA256 4e604bef980590feaa510d406c273f108d978e78ea6d6d52630270b16b447b3d
MD5 c8777e0e1c425142dc32700eb880d99a
SHA1 375fe82235faa74cc64e473be1ff32f202f75aec
SHA512 132c21ae62224b76869d400c51d38c90c33563b6d964d5468c6a8967a7e898e59fb846c0ef2649e4f864dbb3192b9a2b4ad3283028e5b8545f2d71d919d69054
TLSH
T1E741811F5A7035953B4871F1A490BB3CDE29542B23978EA37A7A0154F423BD6887373E
MD5 SHA1 SHA512 TLSH

Submit Download

1.bson

Path C:\Users\Admin\AppData\Local\Sonicexe_The_Disaster_2D_Remake\1.bson
Size 2KB
SHA256 e5a0c70e04029e3e442b2097e30b1c9d12bda964feb13cb6d1e991139c0e74f0
MD5 84ff607b117df4176317021597e798c4
SHA1 5e995f29c97efcf034442825b995d95af5a369a7
SHA512 8a4652c06579da565593c6631136a976933071a615f2124e7701aa2284be8bb48c6f34a2f7775cb07d64acf5c5ed06cf803a4fad82bbf7851dab3d5f065564fc
TLSH
T10F41811F5A6035953B4871F1E490BB3CDE29542B23978EA37A7A0154F423BD68873B3E
MD5 SHA1 SHA512 TLSH

Submit Download

1.bson

Path C:\Users\Admin\AppData\Local\Sonicexe_The_Disaster_2D_Remake\1.bson
Size 2KB
SHA256 c9da41a0953108106a1536141cbc1202e2fd9dd49f9bf75a8c6d09925d16d48e
MD5 1337436c1306b0643f8e386ed4217023
SHA1 8e13a1d15a5fd39f507324d8e0411d32e65576d7
SHA512 5e8f55904bd5192bb297a55cddf5a7424f2b5178842535d91f1f4ee7c3de28a3a3c97a4d2a73af61e2a8882bb0b2415d57c6023800795c6c5aec9837bffe9980
TLSH
T1B441811F9A6035953B4871F1E490BB3CDE29542B23978EA3767A0154F423BD6887373E
MD5 SHA1 SHA512 TLSH

Submit Download

1.bson

Path C:\Users\Admin\AppData\Local\Sonicexe_The_Disaster_2D_Remake\1.bson
Size 2KB
SHA256 72e1415b7b8774ff885899f1ac3d1327a85a906e87361a66c3a12db48945f438
MD5 a4e3a99988c6b1ffe518b9431ec36a5a
SHA1 b53a159678b46e44357d3c004d759809df471038
SHA512 34c70d549cb08e1f82485a13135bf313bbf78652e34f9f4771e46d3076fb35039e9769c03f4516cf4a5b61e6aa12087f120d02fdd3d09f415bd15db57c3339ea
TLSH
T15E417F1F9A6035953B4871F1E490BB3CDE29582B23968EA3767A0154F423BD6887373E
MD5 SHA1 SHA512 TLSH

Submit Download

1.bson

Path C:\Users\Admin\AppData\Local\Sonicexe_The_Disaster_2D_Remake\1.bson
Size 2KB
SHA256 3659f1bd1bea1abcbd130a149b5726f24a169808f238bfbd473e90a29ca2d163
MD5 65f3010f169bf1dbbb302ef900bda734
SHA1 01916dc44f0eaa5984097ea50e6a68642f4b0991
SHA512 fa5cbc2a721dfa81f6871e6bea9a318fc98eea9185ca0b482999fb7d4c23ed56128cf93519d17d2824e6f114bf2a004362fb573b88e0644ca77fb8b62698fb97
TLSH
T171419F1F9A6035953B0871F1E490BB3CDE29182B23968EA3767A0154F423BD6887373E
MD5 SHA1 SHA512 TLSH

Submit Download

1.bson

Path C:\Users\Admin\AppData\Local\Sonicexe_The_Disaster_2D_Remake\1.bson
Size 2KB
SHA256 879301f0c9180ae7975375bb941702ab98ea5f9d6ad971d1d0b97beafb850cee
MD5 c8535bd90f9945da3f30f213495b0295
SHA1 3664c10b2433a59a7a6fdbafb21699780620ad0a
SHA512 835675d02684933824e1557e2c44c0ac0b5277c9790823c01b8e08b337936dacaf0bd9e1ae36d0de22728ee9d7812bb74567b0dc205a8c702484025929bee833
TLSH
T1D9419F1F9A6035953B0871F1E490BB3CDE29582B23978EA3767A0154F423BD6887373E
MD5 SHA1 SHA512 TLSH

Submit Download

2.bson

Path C:\Users\Admin\AppData\Local\Sonicexe_The_Disaster_2D_Remake\2.bson
Size 4KB
SHA256 f421c510e86a9a93112b7c76c3df96a8f1f46f31b4956f6dbf380417ccb67aab
MD5 bc9db954de0952dff1634b8940516e7e
SHA1 7f1336c4672d461abb81e4214eec459605baebe4
SHA512 cf50aefbe735e119a3e28a825be6f471f2b002632fd57f63f6bee63063c08bd20aaab9c0e1013b38a77f891f5cd2ba43be3c4cb8f81de9eb7a2b31a4ccf3863a
TLSH
T1E881C7F727776E03A9C15BC9C9403391C91E208575A081EBEF375011B4893FBC8EBA66
MD5 SHA1 SHA512 TLSH

Submit Download

2.bson

Path C:\Users\Admin\AppData\Local\Sonicexe_The_Disaster_2D_Remake\2.bson
Size 4KB
SHA256 d08342bd094fe10741aeb70f83cad73ec8b1365ad306ef5225b41cd791367a21
MD5 8f47dead5935d2585d8b8ec718df8549
SHA1 0bd9531b0128960c29da3ac898f331b6984b7825
SHA512 01e5a771e69d98f0c9e9f2dbaef2ff40871c30e6894831713f864bcfe4b78760d2eaf9a624dfae630fa74252277407fd15aef9b408cd6316556587535c677ff9
TLSH
T13481B4F31BB7AE07A9C15BC9C9403391C91A2085759486EBEF379405B4883FAC4D7E66
MD5 SHA1 SHA512 TLSH

Submit Download

3.bin

Path C:\Users\Admin\AppData\Local\Sonicexe_The_Disaster_2D_Remake\3.bin
Size 86B
SHA256 36e85b8ca5cc07b01ad98462a7f8afd1794a65455dc33ea47adcb9f50dfe5207
MD5 bb1ef3ddda35b590d4aa204d0493e921
SHA1 6798e187e97f92a05cd826ea8d8666030424e977
SHA512 6a9746bef52dcd5cbe2e455c808ed0025187e60ba58e2ab901ee5443323b652b45262ac7dfc37d0d21b81c15dfc5fa98f1c43bdc05f6affe70ceff01effcfba6
MD5 SHA1 SHA512

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4536_994971665\CRX_INSTALL\_locales\en\messages.json
Size 450B
SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
MD5 dbedf86fa9afb3a23dbb126674f166d2
SHA1 5628affbcf6f897b9d7fd9c17deb9aa75036f1cc
SHA512 931d7ba6da84d4bb073815540f35126f2f035a71bfe460f3ccaed25ad7c1b1792ab36cd7207b99fddf5eaf8872250b54a8958cf5827608f0640e8aafe11e0071
TLSH
T1D3F055CB9000FC5E538BC00EB10072282BA603E01AD1726724EC1C0E67DFDAEB143F9A
MD5 SHA1 SHA512 TLSH

Submit Download

disasterlauncherwindows.zip.crdownload

Path C:\Users\Admin\Downloads\disasterlauncherwindows.zip.crdownload
Size 1.1MB
SHA256 ed1388f6c859cd81be0713934f549c7aaf9ae3210ea4d8203235de709dd1aa12
MD5 e32e2b46a2588574d83422788de44937
SHA1 9c0bf3cf21ed4749aa3937207736e31cbbd659ff
SHA512 518b0178e2c2e72b5f6bf2e4810d43e775dd57daa5518a5b2cf5441122b5a11667b92bb60546f1bcd04efc5ebe98b0393c525a1b9d587bdea722fee5808bbe1e
SSDEEP 24576:z4NOmA5pNmE0L3hGzkEUiL4mlFK/XsyB2SJT5OFUOO/Fr:z775pgXLRhE0mlFqcyXT51h
TLSH
T1D23533E9A858A384FC414B787D5AFDBD3324B6A053FE75443EF0331C6B5254AA2AC742
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Sonicexe The Disaster 2D Remake.exe

Path C:\Users\Admin\Downloads\disasterlauncherwindows\game\Sonicexe The Disaster 2D Remake.exe
Size 11.6MB
SHA256 0c3cf5a5b27b029bfe12953fe3bcca29981ce9be34d8a3e208a3865106c7c067
MD5 86fc882cdf153981c7ee71fc59874d27
SHA1 d898f8ae82da6694f7aef970dec65fadb8f8c80e
SHA512 af4d9c31f16c59ac7ec6acf619c99e676a2c13100d3e7238283e1f6d68dc4789437cf661571595c3cc56ccec1d7134266ea0aba8510813a9710ed417995e5265
SSDEEP 196608:8dqneGdaDYg6IgCYJselLYsuIEA0Ua1sAodLOAvS0uoN3TxuTH3SNDOo3A1mY2N6:8dAeGdaDYg6IgCYJFlQI30SO+acr
TLSH
T1A0C629103966C1CDC076D07CC5A6AAB6FE313C94CB244BFB9A603E5E3FB66D05936612
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

disnet.dll

Path C:\Users\Admin\Downloads\disasterlauncherwindows\game\disnet.dll
Size 35KB
SHA256 bf96633a717d980d744eb5cf151566ccd5e3a940eb9817d58cd81a87f2096a61
MD5 43e6b797d495feecd1878494fc68af05
SHA1 6728d23ca1062f4b00b993dfa3ad85e8ae6f9162
SHA512 ea525b6be5dd5d07b6bbcf2dc8dec655362c2c22ff8e32d5f73a6d17646201f7ebd5b07ed0d0d98d765e2d02f84db4f9edc93a4aa58c52e45f1fa808fbda5d23
SSDEEP 384:+EHwwuinPWlsG7yPsk6H5edj3Ccc8K31vpHAF2KlHrx7wunDkxsaYDLqE+N9TwH+:+YDlGe6ZM3CccJFBAF24rxaY63V
TLSH
T172F25A88E3A411E5E4678578C6536B4BE7B6301413202BEF53F086672F63BF1A73A302
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mus_logo.ogg

Path C:\Users\Admin\Downloads\disasterlauncherwindows\game\mus_logo.ogg
Size 139KB
SHA256 c37582ddba7910661e990c4de0f2bf2b954afe803eb9ed674b865beeb2dbc840
MD5 df8cc6150fac7bc739712289ffeaa8a9
SHA1 ebf7454356301ced2d0673d3c8ca283edfa1ea03
SHA512 9f489bbb026d782b698eddb5bbbc93ae62e042a78a3bae894de23d408f4f1db6011ab7e9c32d382537a0a07323883f483d83024880989dcc881848205febf2cb
SSDEEP 3072:oI/VTcQ8lHd6VreHqgM4HCFP4frr3HMHXpq7:oocQMI9et9HCFwffZ7
TLSH
T100D3125794642FE8F4B42974191D2D023B3A8AD83F9B76EACF9C026D4974BA09E3540F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mus_menu.ogg

Path C:\Users\Admin\Downloads\disasterlauncherwindows\game\mus_menu.ogg
Size 1.3MB
SHA256 e6115c9f1d3dc88ba12ecf90a5cc40aa8dede106b1c79c81b444028ef615066b
MD5 975a3403ed9ab420029edd6c62e35a63
SHA1 ff7ff701811f21bdd4bf56a5c0ecad7d9fbfa890
SHA512 aff48f982bd19151d07e301d8840801057175dfc0911f330062631a07c20f79cf07ebc4f1b9218a9a479837dec4e24727ded30bc02bf2ed3a3e8693be9b2a4d3
SSDEEP 24576:q5JUxJAXoP05SQmiCGgXVpc/+kTLc6q3JBcGvDE0CQhMPEaHdA:q8JA4PfQmiUXVcTLcd3J2GvDSKH8dA
TLSH
T12E55339E8E440EECC0B876B60CC784A3BE8C61A94FA48673B57551FC1BBEBD4541325B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mus_youcantrun.ogg

Path C:\Users\Admin\Downloads\disasterlauncherwindows\game\mus_youcantrun.ogg
Size 721KB
SHA256 dbbca526b06941723f86c90dfd225b13cbac0affb09ac3b606c8546820f620ee
MD5 5dd296263e06293abe4ec0410d3a454b
SHA1 ce18660711c7b53f0ecde3e35241bf133edacc9c
SHA512 5117d911c7c4284d2a9025e41ef9766673db870e44ae128094cbeaf27d65181ad45fcd477eeb409bc9ceb5c68fa88121c8d710cf40dd277832b0fd61bbea00b9
SSDEEP 12288:eZjfQzb0L2yPH0KLI3UJU40wgC7ZMVqTuut4k8E4Fxj9fCLyBJXVGgKm:Sy0CysMJv5g4MwT5t4RE/CBKm
TLSH
T1E4F4238DDE43484AFCB8A1F532205D55B902F69B77383A022C83F35D9CE993ED25586B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

options.ini

Path C:\Users\Admin\Downloads\disasterlauncherwindows\game\options.ini
Size 181B
SHA256 a51f9fee1c6a57ddca60c8be51d3fad282ee4aada42a62c6c3137192a2044ab7
MD5 752e4c0c04cd29b2cfd2df8afad68a84
SHA1 cc5af552cfc4c84d27e13fe5ca579a0b6a2b99a2
SHA512 a084c23977e917e7890e26b891e9c53522b45963e4f82b65fa27810361b601287af87c4ef107b0f1fed80f1b8c7a33513fb3a4237be041282e57c157538c6115
TLSH
T19DC0C04CB324C4C54050F0CCB18107800AD66F240FB03BF35000A6461788F07D5ADCF7
MD5 SHA1 SHA512 TLSH

Submit Download

memory/2272-2146-0x00000241941F0000-0x0000024194210000-memory.dmp

Download

memory/2272-2100-0x00000241801E0000-0x00000241802E0000-memory.dmp

Download

memory/2272-2114-0x0000024182A50000-0x0000024182A70000-memory.dmp

Download

memory/2272-2132-0x0000024182C70000-0x0000024182C90000-memory.dmp

Download

memory/2272-2101-0x00000241801E0000-0x00000241802E0000-memory.dmp

Download

memory/2272-2116-0x0000024182E70000-0x0000024182F70000-memory.dmp

Download

memory/2272-2102-0x00000241801E0000-0x00000241802E0000-memory.dmp

Download