4507816e4942a66caa4986c5e732386aea8679f9b5253a5e17959416825e6b08

Resubmissions

14/07/2026, 02:02

260714-cghlcaex4x8

14/07/2026, 00:57

260714-ba892sdz3v8

14/07/2026, 00:44

260714-a3z2eabw5n3

14/07/2026, 00:36

260714-ax3kcabv4l8

Analysis

user interaction
yes
max time kernel
899s
max time network
424s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/07/2026, 02:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Prestige-Client.exe
Size 749KB
Sample260714-cghlcaex4x
SHA256 4507816e4942a66caa4986c5e732386aea8679f9b5253a5e17959416825e6b08
MD5 d101c0eeb89ce736928a061f100337de
SHA1 feb0a5a4280eef41b7fa96be26e4698eb30804a2
SHA512 7fefc0edd645617c8062f4d1bc263c44d7f57d11c869f776cf54384eb735c1adf8db6ffa29a56cd8d436db3662cd3273d9e2f16de8fddf319e09a048fce3cda9
SSDEEP 12288:LghUjKHgMt5PsrSuf+v+4o0+W6YLqjlOHnfR7oBmTzipavj/FYi8l5FUnI:vjKHgkKWv+4o0j6YLqjlOHnfR7okTz48
TLSH
T1CFF48C6AABF801F9D0BBC138C5475617E7B2B415236097DB02A48AB92F236E51F3F351
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
3	1112	Prestige-Client.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5620	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134284682229752550"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{D82A4C21-9CF1-44EC-A103-E8FA5D78B73F}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1736	chrome.exe
1736	chrome.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1112	Prestige-Client.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe
Token: SeShutdownPrivilege	1736	chrome.exe
Token: SeCreatePagefilePrivilege	1736	chrome.exe

Suspicious use of FindShellTrayWindow 36 IoCs

pid	Process
1112	Prestige-Client.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe
1736	chrome.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1112	Prestige-Client.exe

Suspicious use of WriteProcessMemory 29 IoCs

description	pid	Process	procid_target
PID 1736 wrote to memory of 3792	1736	chrome.exe	98
PID 1736 wrote to memory of 5248	1736	chrome.exe	99
PID 1736 wrote to memory of 5248	1736	chrome.exe	99
PID 1736 wrote to memory of 5620	1736	chrome.exe	100
PID 1736 wrote to memory of 3604	1736	chrome.exe	101
PID 1736 wrote to memory of 3604	1736	chrome.exe	101
PID 1736 wrote to memory of 1972	1736	chrome.exe	102
PID 1736 wrote to memory of 1932	1736	chrome.exe	103
PID 1736 wrote to memory of 1972	1736	chrome.exe	102
PID 1736 wrote to memory of 1932	1736	chrome.exe	103
PID 1736 wrote to memory of 3872	1736	chrome.exe	104
PID 1736 wrote to memory of 3872	1736	chrome.exe	104
PID 1736 wrote to memory of 5556	1736	chrome.exe	106
PID 1736 wrote to memory of 5556	1736	chrome.exe	106
PID 1736 wrote to memory of 4828	1736	chrome.exe	107
PID 1736 wrote to memory of 4828	1736	chrome.exe	107
PID 1736 wrote to memory of 5944	1736	chrome.exe	108
PID 1736 wrote to memory of 5944	1736	chrome.exe	108
PID 1736 wrote to memory of 2688	1736	chrome.exe	109
PID 1736 wrote to memory of 1976	1736	chrome.exe	110
PID 1736 wrote to memory of 1976	1736	chrome.exe	110
PID 1736 wrote to memory of 3476	1736	chrome.exe	111
PID 1736 wrote to memory of 3476	1736	chrome.exe	111
PID 1736 wrote to memory of 5532	1736	chrome.exe	112
PID 1736 wrote to memory of 5724	1736	chrome.exe	115
PID 1736 wrote to memory of 5724	1736	chrome.exe	115
PID 1736 wrote to memory of 2824	1736	chrome.exe	118
PID 1736 wrote to memory of 5660	1736	chrome.exe	119
PID 1736 wrote to memory of 4308	1736	chrome.exe	120

C:\Users\Admin\AppData\Local\Temp\Prestige-Client.exe
"C:\Users\Admin\AppData\Local\Temp\Prestige-Client.exe"
1⤵
- Downloads MZ/PE file
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:1112

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ffa9fc9c728,0x7ffa9fc9c734,0x7ffa9fc9c740
  2⤵
  PID:3792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1692,i,13891240181707874625,17253690472418234700,262144 --field-trial-handle=2024,i,4873688597545255070,9181601789313452892,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2020 /prefetch:2
  2⤵
  PID:5248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1588,i,925334585960396250,8621116994526641209,524288 --field-trial-handle=2024,i,4873688597545255070,9181601789313452892,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2280 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2380,i,15726089540557025597,6365928519370851553,524288 --field-trial-handle=2024,i,4873688597545255070,9181601789313452892,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2388 /prefetch:8
  2⤵
  PID:3604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3232,i,17324479808659722242,9874181062698595733,2097152 --field-trial-handle=2024,i,4873688597545255070,9181601789313452892,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:1972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3244,i,14157808588509891403,11166439491306061750,2097152 --field-trial-handle=2024,i,4873688597545255070,9181601789313452892,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:1932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4456,i,6460041678064855509,5020836097723047752,2097152 --field-trial-handle=2024,i,4873688597545255070,9181601789313452892,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4408 /prefetch:2
  2⤵
  PID:3872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4640,i,4387026860928176551,12949686524250352629,2097152 --field-trial-handle=2024,i,4873688597545255070,9181601789313452892,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4600 /prefetch:1
  2⤵
  PID:5556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5468,i,2228000739066534914,1834020213166884175,2097152 --field-trial-handle=2024,i,4873688597545255070,9181601789313452892,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5448 /prefetch:1
  2⤵
  PID:4828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4744,i,56107516024155543,16194878387738246422,2097152 --field-trial-handle=2024,i,4873688597545255070,9181601789313452892,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5608 /prefetch:1
  2⤵
  PID:5944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4596,i,12267091890757759192,13147006186324135498,524288 --field-trial-handle=2024,i,4873688597545255070,9181601789313452892,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3948 /prefetch:8
  2⤵
  PID:2688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5440,i,14103223035510801733,7912304386442593379,2097152 --field-trial-handle=2024,i,4873688597545255070,9181601789313452892,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3920 /prefetch:1
  2⤵
  PID:1976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6028,i,7939353491015653227,16073556274971578665,524288 --field-trial-handle=2024,i,4873688597545255070,9181601789313452892,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6020 /prefetch:8
  2⤵
  PID:3476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6180,i,12090491241317390247,3740188751770120537,524288 --field-trial-handle=2024,i,4873688597545255070,9181601789313452892,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6184 /prefetch:8
  2⤵
  - Modifies registry class
  PID:5532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4696,i,5680761354276547091,15602680066864517589,524288 --field-trial-handle=2024,i,4873688597545255070,9181601789313452892,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4700 /prefetch:8
  2⤵
  PID:5724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3488,i,9721039840064479315,3808576609727596477,524288 --field-trial-handle=2024,i,4873688597545255070,9181601789313452892,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4716 /prefetch:8
  2⤵
  PID:2824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4680,i,10915736390308339712,802134115865666284,524288 --field-trial-handle=2024,i,4873688597545255070,9181601789313452892,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6412 /prefetch:8
  2⤵
  PID:5660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4668,i,17800657622619902887,17318852857997407651,524288 --field-trial-handle=2024,i,4873688597545255070,9181601789313452892,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6424 /prefetch:8
  2⤵
  PID:4308

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5132

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2120

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 052f4b19d171261249d1b11411009316a00547d654269e3981661396a0cfa7c1
MD5 e4fd2e9a7a4db29ba5a34bca36a5eeb5
SHA1 619c6d68b126296f35719b7a73ffd2e9f4036efc
SHA512 fb91697dbe7964a4e2584bf4c35d11137c9400d00f7a228d72860f5a1c0777bdeec1f4dfa90479c8829861ab89b4416fb337b04060bcc532c729d49e6b408368
TLSH
T1EEE02BAEC965DC3719FD071C60500745EA5913173740948F3A3C89184FB463E4246C9C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c
Size 57KB
SHA256 6303475cdd19a7c08d011c6c6862e3789b39f95797602963a78cac17ff73d1e5
MD5 73fe08c0771b0b44243114c8ea8b86bf
SHA1 03015c3d3ea5bb634dd29a50623a6147d206dc0c
SHA512 f4fe1b7b7562c4f1187ca0621ff4006be0fad055e41d772a1ff4a421eb0d18794e3c21dad72cc469b889c6ed9642616ab9c8b5bd27d87d8fb5b8f228c96407d6
SSDEEP 1536:5HBwP9e8JdgrDq3W2leMPq1AOFgHDU3kQj2W:5hc7grO47C9Du
TLSH
T1284302CFF0D8C6FE215052556E6E7628C261891FEB118DB2443F2FB2999D04172FBAE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d
Size 658KB
SHA256 a4c35a01ca88f29b2dfc8bf365666412369fe08c7aa232f734e4cf0ee9bd2a13
MD5 4139fa3e56df7621a82c7f0ec1cebb81
SHA1 ab150c76d48b93ee1c634be29229b5a30191f401
SHA512 a9770e042d6114c43ebec5d1fec982a01420d3fc941339deb450da115a8237597806e698ade2b9259aef84b24160a77fc46ce0a5bdc7f701c9185005a2ce6d9a
SSDEEP 12288:cBATq+i4iOXhlwpz24or3YMcDzCgfYXZ5SH9OvPWujSOUX5/k:cZ+XZRrIMICgElPWeo5/k
TLSH
T119E433CDCA0A5CDE9C2CF184F3075F8DD9B52C2C2EDAF44F3269DA6152964D9BE1060A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e
Size 22KB
SHA256 023cf4c76975455a71a8ca461cd0c3a32dda6e150021e17faca32f46ccddaa5b
MD5 e35fa96f8131c8fa3ab5c11e9d7d65c9
SHA1 1b01d6b6f0130d378ea1d63f4ea5255316df0095
SHA512 6b568eb7873034bdb25875223822b52078ec89510d2f0dd79840e50e60a5bded8e6f282c393794c540345a21eef4d6eed838aaa248395c81993762c3f392ec27
SSDEEP 384:mtUqDRYH9h+FRhyPHxF91Cf6AePqVSAHkeRPBqlk3IWbYdr3xa8amL9gyUaavH5Y:mZDSTw+91Cf6FPVxeG0IWcdr3UxSlavq
TLSH
T1C2B2D1EB506BC4B6513C761329A2452E6553178B97C2DB89208031785D67F7389D733F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f
Size 34KB
SHA256 40fb786c1af8a660264fe983488f50a844f758c09bdd8b1c838ee920002e9537
MD5 eba24c0ee32e17adeaee0488d4148d65
SHA1 e5b8ae71c6ff66089e115df6ae2cd89a01fe24cf
SHA512 b445a6d893ab3b83cdf753b57ed6b59b68cb443ffb09e39f5eac1364757f0c86f9454a382f576f8bab6960f74a908781fd8a94ac05be7891909cf9ce393b0cc7
SSDEEP 768:JcSDvlJNNLklZBM5Rbxa6gtz9CmpefTbRKmwGzJXqZskaUtYEF:dpPNL6BM59xa/tz9Jw9Nw4IskaUFF
TLSH
T131F2F1B87F42307EA4F2C46F07A99698B310908BD8F52B3390532475F3095BA76287B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000010

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010
Size 275KB
SHA256 c46d09315d5c79d8ba1111c59c80be26d05ef11cb9d4c479ee13d6a922848187
MD5 06ff9e8adbc11e5b716384dcdeb9ee4e
SHA1 0c7c5ce9f94e8967594743a7f8a198badfcfdd75
SHA512 ac2da307634cffe683e8f10164ced296cf65d7a602d3f1b6c8981f8e8a427bac16abda7d9c3821711ca1b6f1d17e6c2981af358ecdb2c8f5cef0a5283d1611cd
SSDEEP 6144:0Og/DUFt8qHI5MczSCP1GVD7C93/3UjIxvamEvlsV4h/:dHHI5Mcz163I3/3U6vamle/
TLSH
T13654225F0D782407D830020F599EABEA9C7642AF6FE6F90346D776687BC4B298CE7111
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 816B
SHA256 47dc3afce4007e1d2bfb62c29c939ffe18b1d4d99d404da9d09dc121b5d5b7cd
MD5 735cb8c20675afde41720f69a5012c96
SHA1 1d3f518a315b9c97595981df95157e4cc03da0f9
SHA512 4036ba396aef4e68cbd858a5ea2768f9cbb10ed900eea758871130f7dbf95a78edebed3bd5217483a8f3f3fdf1d21f3708cd7b0294f2c8ecf2e57821bbd5f3c5
TLSH
T15101D3B3A2C21047EF007EB850C7B616FC69817440713DE2E0CCCD8C2956DD31441685
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
Size 225KB
SHA256 7228591f6cee3df30a4335725e0a399e48ceb3e40864735dc6985ed11cc2c34f
MD5 3f98c616bdf6b4659e1f14accc7f5765
SHA1 8c30c5946bf1d893fa9ae7ce678414f869d05578
SHA512 a0fe62f197e5b7f3ce927511037cd66b45bbc8541bfd3d91dfbcf339ee50f065a6f3810450f89abcd75c70c151e40646fbed54e1ca2d25aab9b93d018c5f7be6
SSDEEP 3072:7nVtUJU2deRGEFhwita8QM5JVili1F5F5IrD3hl5fpx4W/Bi3hue:WeoijiliCxkSI
TLSH
T1A8341A1462B162C5E12E83370A725E56E3759FC8594C319ABCE1BE0C26FBB443B7472E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000008.ldb

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000008.ldb
Size 17KB
SHA256 d13d56a21b25fca6b17961255e65270bb04a00fb8ed8eb7a200f3e88a957b71a
MD5 e8784c0c8be80dc3c2b03ab185e7f421
SHA1 b904533438abd97e89b91ab3bc6030a6e97f9e2f
SHA512 e7a4ac8233d88ca5448dca31b4448b6f7031d745797f15be56dab844c7ded3ee7dfbfe7b23b5fc59aa61ee257495594add8fdef8fde4e503119d347b098591b9
SSDEEP 192:y25qpw+JHjHqU1uqUHdUo/wXd1s7Qegdnu5okQtVC2lssYvZFgfsuYGy6U99vOQp:n56WU1Q/wX4ou5Bld1cOXuJeqeIe+HqD
TLSH
T1AC82BFA75DD880D6C176E277A0FD51896E31AD0631D9E0ECA3C3324C2467AEA245DE1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000009.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000009.log
Size 230KB
SHA256 be43789327cca2539edcac8ff8fc341f419598264bd17ecb505a815cdfd58ae6
MD5 7da2db13e589d52952b4a13f34e914a7
SHA1 3a39421aa7433a73bee5f23a507dc143390ba875
SHA512 dff9dd6a8faf0eec7278d79474c0a434fd87ac664aeb8e0a6a7261cd69581c6d82952205ee593105c4fbabdc78b6bdc89abcc0ae78997b12b57df15f293365ed
SSDEEP 3072:22fbV73c3zLSTxya9Ac7hWkZr4D3CkYhpnv9SFIaT4bhC1NFU+lDGH61F3aT4bYp:z0xgboD/GHe/bvTrZr/6L
TLSH
T153342A182276A2CAF529433B0A155E07E339DAC496AC7171F9527E0D72FBB443E6533C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000011.ldb

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000011.ldb
Size 12KB
SHA256 292ac1512a4fc18d23c7fdb669f874c7d11c583216971a1151938554b321b575
MD5 633c1ed99f8ce0013bba9661154292be
SHA1 3d50f78c45be09958ddd8eee93337e0bf0bb189e
SHA512 bac4c45f963e20c52db475652eb9e375734b69a9f013a7b2f53aa9895a4548cd649f1250075a0b37ac73936787e94bbfcfa8f474607ae5d9dd7da21f84cc321e
SSDEEP 192:n2wSaftrGVNPwXd1s7QegSnu5okQtVC2EsMYvdFXCastSGy6U99vOQ9kTpJeqsJd:2wSa1E9wX49u5Bu9afnOXuJeqeIe+H4
TLSH
T10E42AFCB7EE8C4E7D472A23AB4FA218D2E26BC0B3184C09ED787111C157769F2469F56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 351B
SHA256 f5bc90d5b185800ac7c286c404021e468df991bc5cda8e206eefd601bbdf07c5
MD5 6ba6f8da9f36610433e025924b6af29d
SHA1 24ad0f6427076a5fc3d7f28506b5a95da6daa162
SHA512 a1d10043581ba3dd3b022fa904214ef1ab1785236b19dc2c87daa46cc2397feb3168ee9c611e6442d66e042347879a062f484cde26adc48d9e3c9f8d5e37d45a
TLSH
T179E0DF2C98E9D6AF10A480AB25B0770FDAEA660E96DDEE460F81D82470CA40894BC260
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 3KB
SHA256 0c553c364b257ecf363bd720314991cb7a384db422702dd56e9ea237d41efbe7
MD5 63646aa0f3241a562f3abf3867eb5346
SHA1 caccb07f1ad151e0bb76ff7bc417d01ccc5908aa
SHA512 9056360400fc0b99564936b0546a724bdbc5a66d187063e86be304bd07355fdcd0ef08f78e3f1965f66c1dabe74137a8f90de46633f8415c4d404880cda8f6a6
TLSH
T142715ECF5618C99800D3D2A3C178B2AFC85CB24B57CC9F5465C8A3FF07F251A93960A6
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 575B
SHA256 104e46537f42c07aac2e5d743fa13563c133357dd9bf8d7895abd40e412b4e7a
MD5 3d9f98f0752e01c3156b44e6db1bac8b
SHA1 f1e0422909a86ecad9a237ba1422beedfbbf9e80
SHA512 26ae34426065f14f3fb76e33bddeadabf59b58253bccf3eef86fa72135cdb9fdfb4fae9cbbcf607b0cff53bd81f8913f031b69aeaec508db2ffaa53b99de3dc9
TLSH
T1C0F03610EFF4F9D2F2655074047E793E2F4971CE0109CD1F659970AF7E236129C54929
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 a47df08dbfd259eb50fcc1f055df34d358943f0e21280272f142fc172da87ac2
MD5 dabc2233eedd64c711e79d78681bc687
SHA1 85150cfc69cf16bd9bd35c5ab851145450b5d227
SHA512 17832fd8283d171ba0cbcc6079454d1101f8e12cc787e8db7fa983f1d4bfd77fefd9d40aef6efc1850429a53b6156d007a998edae16f1969856ba90f67abba3b
SSDEEP 192:DfXfOn+3FhHlF8mrJWmgmMeFzF2aaav0bKdQh7uI3nGJ2rqi+N4toCo:DfXf4+3FhHlF8mrJWmgmMeFzF2aaav08
TLSH
T15EF199F3C3E4872DE82266F89B143D1ADE6D0E6843283C2AD9D5AF4B53E6471D21064E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 33996314e5547047df49218bc962c346f7b897b50ed250384a1b7dba81299077
MD5 a60e9120669ffa0dd1ddff2eabeb00fd
SHA1 a582db1919b03233a65c01808d199ee2a4ff2da4
SHA512 cf54d30ab9c97417fe8dd6cc99e8811500169aaf01669ad72e470ab9493a291a13f682936116e1b646bf5887abc69224b88fb4e9b2faa54dae4c6233719938ee
TLSH
T1211189E7867AB527207D58AF0D007D0A29B2743605906CF1DE96C26CF0426F71F12417
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 2403cd9bd395991ecb9e985834cc18190d116d6609e150b7f753a6f34ab676db
MD5 ce07f3ca42c2cf47aecd2e6f03e3e929
SHA1 112c9de72fc29bd28aeb7185d0a96ce7dab6929c
SHA512 ee4742a564c6104a362a2d918940ac90f0b8ddf0ade6898215b84ea1cefa48015bc41b283438667824775dc404504a5b6ced2f620c33cfeb78a2ed35f32e295c
SSDEEP 192:lRKpUxFh9Pvv7YhpAPRp2qBec992Hsb+WNnzYi8L2sbE2IkSUsOa+VyIsnAUgraJ:lRKpYnEhUXrQwsR2sg2IkRG2e
TLSH
T11652D66BA910697B7CDBD229F9117757E7F1102526E11EC0EBFC8A2C14E76CD222780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 7a137be7e683fc98df197b81ef855532ead0d484bcdadb6c6ac11f4c053961d6
MD5 3c44c05f3930fa5848023b7b143fc2e5
SHA1 ea360e5b3efaac82abc3ec8371cd7bd02841a598
SHA512 ca448c2d9643378938963abf7e8dd71f6862e3d53ef53484b09da2c17e6b3f045b859a40c27a3b75d0167d22e157f89f8b33fc84d95aab525b1de3bfc651d1e2
SSDEEP 192:lRKpUxFh9PVv71hpAPRp2t2cG92Hsb+WNnzYi8L2QE2IkSUsOY+VyIsnAUgtaJ:lRKpYlBhUXdQwsR2Z2IkRE28
TLSH
T1F052E76BA910697B6CCBD22AFD117757E7F1102526E51EC0EBFC8A2C14E76CD212780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 ac3cce83401e97f9673c6e70ec219bc46d6e02fcfb8d9deb6d49f777d0643e64
MD5 408eecfcad3ae8e54d851aa50b2b409e
SHA1 2d2617446b479daa64107dad904735b463c4646c
SHA512 54c909524970cf821abee0c771aee80d0c6b4bed27149a4f5783c4cfa1d3c00c6174dcb73458d587b1fad82c94e62c909163726642ea0c2b551a3a9694a4ba4b
SSDEEP 192:lRKpUxFh9PVv7YhpAPRp2tec992Hsb+WNnzYi8L2QE2IkSUsOY+VyIsnAUgtaJ:lRKpYlEhUXWQwsR2Z2IkRE28
TLSH
T14A52F76BA920697B6CCBD22AFD117757E7F1102526E51EC0E7FC8A2C14E76CD212780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 16KB
SHA256 2f12577ef4789b6e741a7c3c90c10a24c8afb98be994fe8b7666866dc7655df7
MD5 f8a6920253d411ec30a20d6782607331
SHA1 aec4679f9db015859538c6ff1c623b2d4cfa7cbf
SHA512 aaaae550c1169824ebd99871846425e1af09470d8211b71eb9a9c2f6a810b271a2bbe9c1b0e63c91ba79e6e2f7f67d30a31089073e57f1c4141a219ade2d5ff4
SSDEEP 384:+wjKJ7KxkXqKf/pUZNCgVLH2HfgslU697pLuLcMwxXODKh+ErU3wZJHG/A1ZTPwV:+0KJ7KxkXqKf/pUZNCgVLH2HfgsG6976
TLSH
T19A720A676C4C9E770F94C6CCE8177F4F9DB5024B65EA886443FA982903D5BCB01462EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\291c1d0b-bd49-4340-bb23-e9db7bc11330\index-dir\the-real-index
Size 2KB
SHA256 4f1980d93c7d9f2ba4e152fe55d226866c8f79555a9139e03fa98dc599b83aa0
MD5 a2b4f1d65de7d60c694a249cbd98d0f6
SHA1 068520c66f2aa9847fbe3d0016f0d4b36b5df446
SHA512 087a8f0db597227d018d5fe1dacfb7d8dbc6155ef711cf7683587ecea484c5c520b75e14fdf23b00c26dd4207da4459db20fe90bf063cbfef9a49b3abf8d4a3f
TLSH
T13941914CC880A7ADECB561FA289415B553FA2824FC48C752D0A4F2E23407A582B4B5FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\291c1d0b-bd49-4340-bb23-e9db7bc11330\index-dir\the-real-index
Size 2KB
SHA256 75a86eac803907d05f6338c2f4cd89e1965e22d40c0109e2051dad4f23f71899
MD5 933b3dd2e97a7f731015f8078e287dda
SHA1 fb2221c8665b6e3259c917bf683c974e58745cd8
SHA512 850fe1a7e775bc7e99d999ec5e4bdf454bedc8e919ba5a1047ba48f7d211353807df60bc3d2f1165aa2cf0e4bc5e285631c2d158a174e82249f821a144c15edf
TLSH
T17F51828CC88067ADECB611B6389415B157F92934FC5CC75290A4F2E23453A6D2B47AFC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58cdab.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\291c1d0b-bd49-4340-bb23-e9db7bc11330\index-dir\the-real-index~RFe58cdab.TMP
Size 48B
SHA256 d972622bc13e27419094c7271f056f1e30a233ab6d62f92506aac0ffa19cd200
MD5 a13e7ba3d5335b3c4f31556f57e8caba
SHA1 22e6cccf30c67314db8c74a64ba62db862ff55fd
SHA512 a124f8ba032a71fbaa712b77e50281e0480897d6fc1a218e7d61d0a674a8cdf030749f4a20495c594650f5de9b082f418abbb991626bb286a1677e55e6649c66
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\efcc21a9-eaaf-4ad6-81a8-f150a965923f\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\efcc21a9-eaaf-4ad6-81a8-f150a965923f\index-dir\the-real-index
Size 576B
SHA256 95fdae9b5f61b609a665fdf9a295abb16a166acdfe6aeeb23092a164489032fd
MD5 500832f4c2af2aaaabf193ef4a3bbce3
SHA1 420992ff4566b19d012109214f0d185b9709d6b1
SHA512 f664036842af514d28c0ec7c79e97a408728db54a76361d1e0399afcb257d1d4931e034a7434dc6efc38b0815a30e2cc0097fdc74e1be82d9b2b1f9ecf89a7ab
TLSH
T133F0AB5035AD25B1DF81A8B42E2386B9757081B0265D96676059EF1B340F223CCC5768
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590dc2.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\efcc21a9-eaaf-4ad6-81a8-f150a965923f\index-dir\the-real-index~RFe590dc2.TMP
Size 48B
SHA256 680f67f751a6709675eddaf12dcc258b70a4609453a1d4ba1bc872b5e014b48d
MD5 fdce52449941b2595eed71a7dd101766
SHA1 6483aab0076a79ebf00b3c480f3abaf7d8b0baa0
SHA512 efc37b8b0d827091aed4810452afc6292338b93eeb43b0951d76f9df38296145e0470ad8b443a1aec481e53265ec7765c9da8dc32bd9498b1daa47c9a69812c1
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 23c129ba35fce6ae0d22c9a0835acbd1e48554a6a27bae8e81d5bee44291aec0
MD5 29e676ac040861be6b92b695e7bdf5e3
SHA1 52862851448c258007d505a63a40246f91f6f409
SHA512 1f7bddc9936230ba427ab5d1405ab1b947796dcee6322e43c0bf6756d6b443716d05456418922c50a09146796f176a2ce5742139987dd4aa63d265b6cdb9353f
TLSH
T18DD0A7CA937098062B20DE9520341B5CA1178D08C8C588D48404704224B8913C00557D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 912ffedcd29473938efd93ad336eaf78fbc7080dff023803a7cabd0dee5f35e5
MD5 587140a4818f0aba8a5011b205707f54
SHA1 5ed5c23dfa487cd6c5fbd8701f298cc15f81053c
SHA512 24aee05945d0ebe3a7e19073073690c95283808fc9d5e68b6bdff5c3ff2cc0619522e5b7300fd50375e352031f6448bca76855c1edea0bfd43b785e15421145a
TLSH
T186D022DE9E311CC21B30EA8470387A8DE627CE09C8C1DCD4DD44F08236F8A03D025ABA
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 718afc04c703114ab2ea42913cfcbe7f68880148de5e47fd92571336dd72dc45
MD5 cc2e5bbf375eb0748405653ae09bd007
SHA1 ab965263074d280c1958b4dda5ddae265dd301b4
SHA512 920fbd534cfeebf49d54534ae9f751cc31a5d919ba0f841408e91326fd452f56023a642ded41271a19b7d667abe11375325b817fbe53a47c9eb37fa3a21c3e91
TLSH
T199C04C9B5D1059860B30E6D930346B5D971B814884C1C8E4D404504226659538405569
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 243B
SHA256 5a1cb2c4c7486d7677aa4d832158336c49fee63fb8a5be02fe8a01973788984c
MD5 d90a1a6906dd04b8afed438b6cf4d333
SHA1 4f8cf70b04840de55c597c0a2ce1368d15820735
SHA512 c4fc7a982375783481b54ed6d537e96386069bec2957cfb2905a542b3e879344cab29a5d15d138c9a1bd527707a0b7a78f76d03e6711f65c69f502d9e5383fce
TLSH
T148D0A78B7E9114461B38BEE83074B69D830BCEC8CCC2CCE89554710133B5923C415A68
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 239B
SHA256 0ba94ce4562c3ccc6eecd722b00eba5d779dc7173947b45c65281ecd6e911174
MD5 90b799221e87066059e60bc109e9146d
SHA1 a3c34e3a0801a519a028120b0b27751fee754372
SHA512 33b19d9238ff34d6fc1aba163157e6eb55a79dcd6cd7eb2dde33d5e7a4c4884f3bce661ec80ee30fe757496be4f8ecc2dac6aa60f9a0bd626f34f1b8bae785ae
TLSH
T112D0A787BF9104461B35BFE43074F66D830FC2CCCCC6CCF8865411003271923D011A68
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 1548de725fd8c84376efb4f85bcef05c9f55e2ae51ff6102c09e71f2b48ac77c
MD5 4189718dabb0fe8c8e992aafc98b8c4e
SHA1 7698e16965b17c92da7988208c0fadd8f02812d8
SHA512 30528299211dc3767934247a38066b4525950f6b02cc517484088af5a19eff49894a3521c5139dbf534bc693ccac7519632ff6d2cb156c5ce51799ab27cac133
TLSH
T117C09BDB55108D4B0F30EBD930746F5DD71BC24C84C1CCE4D00450413435953C40557D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58b2ff.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe58b2ff.TMP
Size 137B
SHA256 2e1c68e8e272ad877086893da64ae9a1219c2b8829efd4003e3cf2debcf12446
MD5 9a855a252ecc509a315f0a3a01662140
SHA1 00ee3e08a0f0be5f5a831bcfe503014eba9a1b26
SHA512 b70a5540ffb7ceed007c243f72491f8823ef45a5fe4ddcd8b5a3218e2e2f673aa007078da6ae7bd10992e0673604f67351b56a6d171db1e4cf3b90d0ac61a16a
TLSH
T149C09BDB56104D470B30E6D530346B5DD71B8D4D88C1CCE4D40570453435953C6055BD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 168B
SHA256 268e45720c6dd765b2b72009c64f721c3c5405418006a1f9559be97854f4f0dc
MD5 587ecbc94b6f5f61b02fac8362d9dc78
SHA1 2f49e2e8c72814750132de1c2dc376d420649a7a
SHA512 b2f8920e215bfb2e7075636f6911abcefb3c49ec830e3ee31aaa66293cbc40ad9ea83e6e956942fe902149ea6da634c898848e8b42f082ec20fc9858f6d48452
TLSH
T11BC09B5488019601C45515B4555334DD7628AF55DA0D270142A87A5B587A533D098255
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590dc2.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe590dc2.TMP
Size 96B
SHA256 4f465fce5da01ed51081859396b2095a3c5f6247ace259f11dfe9fffd9895f90
MD5 1001c9847a9cd8bc9a377c73a8e3d35b
SHA1 cdbce99f803ee8eb7a8612c9b005257c385d1a0d
SHA512 ed629b74690f30d70669cd31e48b4da007b08192f690b92bc0efae83642c2104148a8ac444cca276849f15fb1b2242856da261ab4a210e75f362d93498e81eba
TLSH
T1F2B00295C1067612C04203B425E9D6D871A1DF79C6435616D2E49E66EC356715E26160
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 4bd62b538c24f54a58274b0add0c8e59c9396a02945614d3254dbef40563f019
MD5 41f8f0bd5d9fc8bd02a856d597a40e4e
SHA1 4f25a3d8d3d6d59f3168a4b82422d97b8b89ef0a
SHA512 1a548108e51fa4d55673836fc9c0fc0a0227fef8dcab8c3d59379f0a67134800f01f72942c633d5fff3f0003fbe80e9af0d1a1ce974f7d1cdfac68fd2a80d339
SSDEEP 3072:NGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:Em7Rkm1tYpBeh2BAo3
TLSH
T139C312275E71A9375D79AB4EB08E0B1F1EF14AA6C930DE92C8D85B0437E97CC1A05E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 1ccd48020916097b64fe20e2ed3ebcce6c80409fec6158f73097f569c602444e
MD5 c17b60054839c7126726c1eee1fb1cf9
SHA1 be8c836a3629c4cad71ebdc3738094b6f4330ef7
SHA512 42c0865b84b555843c88914ebdd0d9a2261ea5a2d78798b6acfba8d653f85f796c617a46d751b165e653f9eaf38ba99802a5e4ecf042b11c817e5f90c6bd9d89
SSDEEP 3072:hGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM+:wm7Rkm1tYpBeh2BAo+
TLSH
T13EC312275DB5A9375CB9BB1EB04E0B1F1EF14AA6CD20CE92C8D85B0427E97CC0A45D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 232KB
SHA256 9153c612c0e795b726ec6facb1fffa0266853d5c44f594ac79abd0cece2e3f28
MD5 955e9adc39ed5b1b4c952b285f3f2b35
SHA1 afbf9c01976d8f67110fea424a5a6f52a17ef7ab
SHA512 bd053170abb82b54480e02c4f0373391b0c5540aa67ac5888a73f5e20d61e524b931e58a34e2fa45a3ddafe100e42234556207df4e7f742170760d368d5e58a5
SSDEEP 3072:EoHmnfG1f6z2z5yCqEymzrOFYq1/s9qSysizNZOGm7D5Lk17ox1tIpud63U8Behl:EWm521Jz7OeVBkJm7Rkm1tYpBeh2BAoE
TLSH
T1BF341231CE359A37DCADF307B08E0B2E6DF095A6E650DDDA99C14E081399BDD2D85838
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 88f983934dc2ae9fc94ec4a34e3f135f7d0da2eaff505c2fc5367a10d009c695
MD5 dd397266eb5df64ce9684699f9b68f93
SHA1 779f281e4551a1da42bc9316a3702baadf38466b
SHA512 bc282039f0f451f56a4035fa5dcf09279183505b4d7e7830edf093cf7e53e52cb05344f61ae9d4486d964e9b604d55c6d62c8e9ce86625235298928cfd5f554d
SSDEEP 3:MsEllllkEthXllkl2zEklnnQ+X:/M/xT02znnd
TLSH
T1824404077FC10547C50010344053C3D01371D4100511774374F54C137CC55410C00001
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1112-0-0x0000000180000000-0x00000001804A0000-memory.dmp

Download

memory/1112-9-0x0000000180000000-0x00000001804A0000-memory.dmp

Download

memory/1112-8-0x0000000180000000-0x00000001804A0000-memory.dmp

Download