hxxp://xeno[.]now/download/

Resubmissions

16/07/2026, 21:35

260716-1feeasew6r9

16/07/2026, 21:30

260716-1csgraev7j6

Analysis

user interaction
yes
max time kernel
125s
max time network
241s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-de
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-delocale:de-deos:windows11-ltsc_2024-x64systemwindows
submitted
16/07/2026, 21:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://xeno.now/download/
Sample260716-1csgraev7j

Score

6^/10

discovery persistence

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
351	discord.com
51	discord.com
350	discord.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4860	chrome.exe
3800	msedge.exe
6424	msedge.exe

Checks SCSI registry key(s) 3 TTPs 6 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 9 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134287110761914703"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{75848F5B-C5F3-4E4B-889E-01F7FACDFFDF}	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
2192	chrome.exe
2192	chrome.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
820	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 46 IoCs

pid	Process
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe
Token: SeShutdownPrivilege	1952	chrome.exe
Token: SeCreatePagefilePrivilege	1952	chrome.exe

Suspicious use of FindShellTrayWindow 41 IoCs

pid	Process
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe
1952	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1952 wrote to memory of 1240	1952	chrome.exe	88
PID 1952 wrote to memory of 4860	1952	chrome.exe	90
PID 1952 wrote to memory of 252	1952	chrome.exe	91
PID 1952 wrote to memory of 252	1952	chrome.exe	91
PID 1952 wrote to memory of 8	1952	chrome.exe	93
PID 1952 wrote to memory of 8	1952	chrome.exe	93
PID 1952 wrote to memory of 4668	1952	chrome.exe	94
PID 1952 wrote to memory of 3044	1952	chrome.exe	95
PID 1952 wrote to memory of 4668	1952	chrome.exe	94
PID 1952 wrote to memory of 3044	1952	chrome.exe	95
PID 1952 wrote to memory of 5880	1952	chrome.exe	96
PID 1952 wrote to memory of 5880	1952	chrome.exe	96
PID 1952 wrote to memory of 3056	1952	chrome.exe	97
PID 1952 wrote to memory of 5388	1952	chrome.exe	100
PID 1952 wrote to memory of 2680	1952	chrome.exe	99
PID 1952 wrote to memory of 5388	1952	chrome.exe	100
PID 1952 wrote to memory of 2680	1952	chrome.exe	99
PID 1952 wrote to memory of 3472	1952	chrome.exe	101
PID 1952 wrote to memory of 3472	1952	chrome.exe	101
PID 1952 wrote to memory of 4800	1952	chrome.exe	102
PID 1952 wrote to memory of 4800	1952	chrome.exe	102
PID 1952 wrote to memory of 3968	1952	chrome.exe	103
PID 1952 wrote to memory of 3968	1952	chrome.exe	103
PID 1952 wrote to memory of 4672	1952	chrome.exe	104
PID 1952 wrote to memory of 4672	1952	chrome.exe	104
PID 1952 wrote to memory of 1208	1952	chrome.exe	106
PID 1952 wrote to memory of 1208	1952	chrome.exe	106
PID 1952 wrote to memory of 5364	1952	chrome.exe	107
PID 1952 wrote to memory of 5364	1952	chrome.exe	107
PID 1952 wrote to memory of 4732	1952	chrome.exe	109
PID 1952 wrote to memory of 4732	1952	chrome.exe	109
PID 1952 wrote to memory of 3048	1952	chrome.exe	110
PID 1952 wrote to memory of 3048	1952	chrome.exe	110
PID 1952 wrote to memory of 5644	1952	chrome.exe	111
PID 1952 wrote to memory of 5644	1952	chrome.exe	111
PID 1952 wrote to memory of 1392	1952	chrome.exe	112
PID 1952 wrote to memory of 1392	1952	chrome.exe	112
PID 1952 wrote to memory of 2348	1952	chrome.exe	113
PID 1952 wrote to memory of 2348	1952	chrome.exe	113
PID 1952 wrote to memory of 6080	1952	chrome.exe	114
PID 1952 wrote to memory of 6080	1952	chrome.exe	114
PID 1952 wrote to memory of 5412	1952	chrome.exe	116
PID 1952 wrote to memory of 4164	1952	chrome.exe	117
PID 1952 wrote to memory of 4828	1952	chrome.exe	118
PID 1952 wrote to memory of 2444	1952	chrome.exe	119
PID 1952 wrote to memory of 2444	1952	chrome.exe	119
PID 1952 wrote to memory of 5756	1952	chrome.exe	120
PID 1952 wrote to memory of 5756	1952	chrome.exe	120
PID 1952 wrote to memory of 2644	1952	chrome.exe	121
PID 1952 wrote to memory of 2644	1952	chrome.exe	121
PID 1952 wrote to memory of 1028	1952	chrome.exe	122
PID 1952 wrote to memory of 1028	1952	chrome.exe	122
PID 1952 wrote to memory of 4704	1952	chrome.exe	124
PID 1952 wrote to memory of 4356	1952	chrome.exe	123
PID 1952 wrote to memory of 4356	1952	chrome.exe	123
PID 1952 wrote to memory of 4644	1952	chrome.exe	125
PID 1952 wrote to memory of 4644	1952	chrome.exe	125
PID 1952 wrote to memory of 2360	1952	chrome.exe	126
PID 1952 wrote to memory of 2360	1952	chrome.exe	126
PID 1952 wrote to memory of 3048	1952	chrome.exe	127
PID 1952 wrote to memory of 3048	1952	chrome.exe	127
PID 1952 wrote to memory of 1948	1952	chrome.exe	128
PID 1952 wrote to memory of 1948	1952	chrome.exe	128
PID 1952 wrote to memory of 2808	1952	chrome.exe	129

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://xeno.now/download/
1⤵
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ffa146fc728,0x7ffa146fc734,0x7ffa146fc740
  2⤵
  PID:1240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1472,i,7500716954000420855,327831155522802026,524288 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=2068 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=de --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2168,i,13448374921563221617,2116188529544698870,524288 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=2148 /prefetch:13
  2⤵
  PID:252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1580,i,10753912700045608663,15599253673107768195,262144 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=1868 /prefetch:2
  2⤵
  PID:8
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3132,i,719831415690287324,1445080564568073597,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=3164 /prefetch:1
  2⤵
  PID:4668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3140,i,12368055371525547270,3470381514681624768,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:3044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4652,i,13261637530139109176,15233433047940410869,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=4692 /prefetch:1
  2⤵
  PID:5880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5340,i,12214297191777056377,5093410507109785624,524288 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:14
  2⤵
  PID:3056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5608,i,9417414613864359638,4510021385204690527,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=5652 /prefetch:1
  2⤵
  PID:2680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5592,i,14930415600759873812,13967943494649303933,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=5632 /prefetch:1
  2⤵
  PID:5388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5936,i,16826755334419783991,13596051018487932745,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=5688 /prefetch:1
  2⤵
  PID:3472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5912,i,4350161368882055544,12488682307638713409,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=5608 /prefetch:1
  2⤵
  PID:4800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=6036,i,16266912496374279528,13077156213144821794,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:1
  2⤵
  PID:3968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5600,i,16265269767898306924,7781969117548431879,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:1
  2⤵
  PID:4672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6432,i,443384578155334959,13964310154056590303,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:1
  2⤵
  PID:1208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6540,i,10701706545247119330,4033798827917274236,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:1
  2⤵
  PID:5364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5536,i,2674732815508442897,16434867193463232834,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:1
  2⤵
  PID:4732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6672,i,1808085977453879394,4898987028398256610,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=5644 /prefetch:1
  2⤵
  PID:3048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6376,i,14351226086701376776,3075980397703945349,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:1
  2⤵
  PID:5644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5836,i,13889252343231440823,11312643810840227789,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:1
  2⤵
  PID:1392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5780,i,3635148376340245216,17787383836534799174,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:1
  2⤵
  PID:2348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5988,i,15077201010380814074,3905169682409868937,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:1
  2⤵
  PID:6080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5908,i,1472039881345243785,3598045870273621189,524288 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:14
  2⤵
  PID:5412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6376,i,2956532361349231289,9689065487295327499,524288 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:14
  2⤵
  PID:4164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6432,i,12293424495187813192,12821476816563979335,524288 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=256 /prefetch:14
  2⤵
  PID:4828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6332,i,9827014477515976414,8385775900292396551,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:1
  2⤵
  PID:2444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=4804,i,15690589411504962531,1884670751994614948,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:1
  2⤵
  PID:5756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6308,i,5185118995215592192,241073523063663164,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:1
  2⤵
  PID:2644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=5640,i,13419550056119934677,18342922500846326592,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=5652 /prefetch:1
  2⤵
  PID:1028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=de --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6344,i,11222253587883946696,7993078007791984721,524288 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:12
  2⤵
  PID:4356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4772,i,15701606682471986662,9578407360192834172,524288 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=4744 /prefetch:14
  2⤵
  - Modifies registry class
  PID:4704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=5940,i,17173361756608173625,7292853538035876870,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=6088 /prefetch:1
  2⤵
  PID:4644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=5444,i,9635377660912398103,17736373632072823876,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:1
  2⤵
  PID:2360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=5812,i,4182909523691562671,15496096331681190268,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:1
  2⤵
  PID:3048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=6052,i,15818243344897175704,10357254810457977010,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:1
  2⤵
  PID:1948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=5516,i,15546454114577286686,13579540760538884217,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=7044 /prefetch:1
  2⤵
  PID:2808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=7092,i,13082586478287592144,12793946301330295178,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=7132 /prefetch:1
  2⤵
  PID:3480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=5784,i,13496541637719018425,376431427403180606,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=6968 /prefetch:1
  2⤵
  PID:2392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=7052,i,15994816523772736282,663108366216917599,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:1
  2⤵
  PID:5804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=6088,i,17523759404831912627,16221565297129645466,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=6828 /prefetch:1
  2⤵
  PID:5324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=5820,i,7868902571044426741,13613427274397752149,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=7144 /prefetch:1
  2⤵
  PID:2616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=7264,i,13053542457366434807,18437099134407330771,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=6784 /prefetch:1
  2⤵
  PID:2704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=6744,i,13840335999096461523,10171235438369769699,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=7520 /prefetch:1
  2⤵
  PID:6076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=7708,i,8157875703939952318,9506954776523679973,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=7724 /prefetch:1
  2⤵
  PID:564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=7824,i,985874745876685411,17581332739868385326,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=7356 /prefetch:1
  2⤵
  PID:3636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=7648,i,1697186199166504853,6659503291971109987,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=7500 /prefetch:1
  2⤵
  PID:1356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=7316,i,12841128776994389442,4901001864354974474,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:1
  2⤵
  PID:264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=7748,i,15546436581332728792,17425789263118995667,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=7344 /prefetch:1
  2⤵
  PID:2784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=7832,i,13801359249636830274,15664827445884030313,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:1
  2⤵
  PID:3820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=7552,i,14270346048282225854,8705082845697664634,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=7272 /prefetch:1
  2⤵
  PID:4124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=7796,i,15731949306108104679,1700212755359753036,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=7512 /prefetch:1
  2⤵
  PID:3908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=7616,i,15644575505135735739,3555860279413993302,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=7824 /prefetch:1
  2⤵
  PID:3612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=7296,i,13259077303905227235,7664031411757943168,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=7872 /prefetch:1
  2⤵
  PID:2660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=7304,i,15766353864291147421,15582787317736066473,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=7928 /prefetch:1
  2⤵
  PID:4128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=7600,i,13251391905538621740,16696452198342445378,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=7868 /prefetch:1
  2⤵
  PID:3332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=7544,i,1704901716891205437,15911504767514729252,2097152 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=7828 /prefetch:1
  2⤵
  PID:4328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=7388,i,3320571958723529998,8242031263212183295,262144 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=7960 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=7328,i,181338320237058484,516738423562119572,524288 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=8088 /prefetch:14
  2⤵
  PID:3048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=de --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=7608,i,15576257123573148575,17452206676129721325,524288 --field-trial-handle=1872,i,12916511870597756573,4977832067444036066,262144 --variations-seed-version --mojo-platform-channel-handle=7740 /prefetch:14
  2⤵
  PID:2948

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:200

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2952

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:4592

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5400

C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe
"C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe"
1⤵
PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://aka.ms/dotnet-core-applaunch?framework=Microsoft.NETCore.App&framework_version=9.0.0&arch=x64&rid=win-x64&os=win10&gui=true
  2⤵
  PID:1248
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e8,0x2ec,0x2f0,0x2e4,0x404,0x7ff9f236c188,0x7ff9f236c194,0x7ff9f236c1a0
    3⤵
    PID:5576
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=de --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,1817716702290131741,8042323432692773437,524288 --field-trial-handle=2080,i,4890399941497587972,1549574994814128331,262144 --variations-seed-version --mojo-platform-channel-handle=2168 /prefetch:11
    3⤵
    - System Time Discovery
    PID:3800
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1540,i,1087017401707609457,5189364440216494907,262144 --field-trial-handle=2080,i,4890399941497587972,1549574994814128331,262144 --variations-seed-version --mojo-platform-channel-handle=2064 /prefetch:2
    3⤵
    PID:1968
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=de --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2696,i,6876668144846837411,11888832107480464146,524288 --field-trial-handle=2080,i,4890399941497587972,1549574994814128331,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:13
    3⤵
    PID:4896
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3652,i,17136646942648074491,16761375568966201234,2097152 --field-trial-handle=2080,i,4890399941497587972,1549574994814128331,262144 --variations-seed-version --mojo-platform-channel-handle=3880 /prefetch:1
    3⤵
    PID:2396
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3656,i,1916654424734691200,6733638902679200520,2097152 --field-trial-handle=2080,i,4890399941497587972,1549574994814128331,262144 --variations-seed-version --mojo-platform-channel-handle=3884 /prefetch:1
    3⤵
    PID:1252
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4400,i,946773060968464704,9487344611853668639,2097152 --field-trial-handle=2080,i,4890399941497587972,1549574994814128331,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:1
    3⤵
    PID:6264
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4432,i,1018454059917340453,17891319691094814300,2097152 --field-trial-handle=2080,i,4890399941497587972,1549574994814128331,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:9
    3⤵
    PID:6272
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,11555762235998169594,5154714353714957870,524288 --field-trial-handle=2080,i,4890399941497587972,1549574994814128331,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:11
    3⤵
    - System Time Discovery
    PID:6424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=de --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,11058696646389410962,8712363997455904794,524288 --field-trial-handle=2080,i,4890399941497587972,1549574994814128331,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:14
    3⤵
    PID:6436
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=de --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,16742609340597545944,7022992578480573088,524288 --field-trial-handle=2080,i,4890399941497587972,1549574994814128331,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
    3⤵
    PID:6444
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,7345548326487456113,16951377127181556283,524288 --field-trial-handle=2080,i,4890399941497587972,1549574994814128331,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:14
    3⤵
    PID:6572
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,6036658250855797630,1007681918690126590,524288 --field-trial-handle=2080,i,4890399941497587972,1549574994814128331,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:14
    3⤵
    PID:6580
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,14157025271189313943,1374652692413260740,524288 --field-trial-handle=2080,i,4890399941497587972,1549574994814128331,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:14
    3⤵
    PID:6588

C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe
"C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe"
1⤵
PID:6040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://aka.ms/dotnet-core-applaunch?framework=Microsoft.NETCore.App&framework_version=9.0.0&arch=x64&rid=win-x64&os=win10&gui=true
  2⤵
  PID:4984

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2352

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 23KB
SHA256 4d374f815118157d4ec62c285937df74fec28c75d9eec110f48d3e04cb321ba8
MD5 ce7b262351203b245322fe75044fb61e
SHA1 46fc201fa3a9a56cb91f3a08f4a380f6d2283e0a
SHA512 0af2f8fa0171107ca26b73d1eeed9599c0b67953e163441bf65dc3a5bae5c9aa82bdcc54255996e8d1d472db1b09ba3286859d595619f1706a8e61c464081dff
SSDEEP 384:zApz2RXdsOYVa2CE00K/4dJfoLdmiJo0zADElg9jIKauH6CwJ6k5zRv2LbFq:oamOTZE0hAdJfoxmiJ9zdC9SpCwJoFq
TLSH
T130B2E1833404A6947BFF27130CF66A08E6B2B67BF63273054465483E42B52FA5B5977C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000066

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000066
Size 21KB
SHA256 7b2bfa35402596d2786e7e9e900887868c9b1549d8af44a285f41dc517723a4a
MD5 e968db8ed8cd7a2602b8f5a6024dc7dd
SHA1 dc2e15e161010e28a8cdd5e60618c340073dbbf3
SHA512 2b033b846430008961135d87a2bb5464411ce29ff5eb306135fd14d9b9359239c3876403b5289b14e9aada86af99eea2ef134bd1cf96fa1f95af0cc5564d0671
SSDEEP 384:X31dfL6MdvDoHZnu9brAsSiONAzZ8Si4wSO9RpsOwLrmT+hWeyyVyqPK9VB2JV4e:n1xL68vDarVNoJq99R9wmTR/CKXB2b4e
TLSH
T1CBA2E1D694009163A3798DE0CB9BD0DB7229188D8C569B48E8749EC2D71FD938B317FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007b
Size 429KB
SHA256 dc7b7f4b7f3714b560543a07dfe784a05672e147316e86d49f224e0fb0881e72
MD5 6c03e68993cdbb5acedb4c2d1cb00e40
SHA1 728e9d34137d91445eb521bfed6d03c2639d72ff
SHA512 43971de1e2f1cae2f47c9221b84891c97a8ac675abe3a3756f7eddb268add5f43f67e79d5bc8096469f4bed176e490030ef63001f72123bac5b4cdfc7c0c1274
SSDEEP 3072:zweE9O8TjldExEEOWK4KbBqCio0SPiIKOZdXA/rnI9W:zwr1d/W7aUCH9iIfdXATI8
TLSH
T18C94C0DC9719D428A4BACD3563C6A50C759BB48877CA7E3ED7009FB21DA344DB8322C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 168B
SHA256 39bbfa32f2de2fa4adf4b6b5c5e69912c765d42d2f364e5223a5598209cc7e13
MD5 f5b7191eadbbe5f05bfedd33ddd77527
SHA1 15279b0aac4a917eacd3335ad7840caf19ee087b
SHA512 9010bfa732fb0a9f769ab2ac4e48a63106c93952b146964eedc3f1f8240f24dda2f104b60d8c8a6d0f1ace3e8cc6edc88cb9ffb23412b536965f84174df0292b
TLSH
T1DCC09292A542B405DB70EA30A8B029807964B83D4536EA9379E590FCB8D0F6700423E2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 0764ea2f48e7622deab1223132599b6403f0c97d84c4f6226b2e72a877d1d663
MD5 2df2fca155f7f84320822cd08cde8e12
SHA1 1df7cb888147b0b8fa0be1201a35e170ab0c7773
SHA512 1ef6103055d059829a45a5002e69168e2df162100707793ee895415cbf61ffda36009020587b57520d75cb70ff682cdde4af63aaddc923d24db3ee3c7cbe08a1
TLSH
T1C651CAA152C1624BDFF986B02AE43D1037312577102BDFA736C1F2B8A5DBFE90436252
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 26KB
SHA256 23316d2c5f4f8012a4222f54d189ebb5cefb26e406f858ec87704d64d491f926
MD5 64fa1b63dbd1bae49a5b790e0b5909d6
SHA1 85d1aa0875477d15adeefed4d477c06f8ca973f8
SHA512 d37530639e27f3c09d0a59471f484b2cdbaea50fd23c426993ef19d4babe9c52f0cbfafe72d4367158c9e8165fa2de08cd66e84e3b956ef77005b6a04a9c0b7b
SSDEEP 384:Dz11ITUzOGMU7Js/JYQXWbth8tjt4tntutZx6tqetMtyf+aHRz6cv41wdL9NCtiH:PyQR+aWg/sGbmFQ2Xap1
TLSH
T1B4C2ABF7C3E8867D981166F0AA247F1BCF2A0954432C3D5AC9D4AF5BA3E1871E24194F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 ef955b4fc4b87a6cc456b7329fd826e32711996f15a27f5886776bb3e8cae723
MD5 34b6649d74b12babc7bb6cc9007d0b65
SHA1 0ec0a6aaa84187a78ff31c0d9fa66ff346fe3944
SHA512 f7d0f0c898210c4c84979bbb9150e6ce1eafbf7b1eacbdf1a8e7160efd90e652d5232cb186efb00bfb44a242d6c38982295fb6ad443ad5d18df456f9101c2fc1
SSDEEP 192:ZRGdoOq7v7uvAPRp26p9UHEsb+WNnw2bdF2M5e82yPGVyIsnAUg5b:ZRGdDqDK6XHGbHv262z5b
TLSH
T11332966AEE14697B6DCBD22AFD627793D2F6002531D02E84E7FC8A2C10E79CC6217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a129531f4d3bb814204684aa8202f5fde242efe34d64262b839a022f965902d4
MD5 716df8a7f9fd7785d345fc93b88eab30
SHA1 01174763eabfc0163feb108165525203680b2e4d
SHA512 96a1f25227489027aa7e5908a2e93f46e3fc672febfd81ec5a1898fcb7e6af0d1a05476b37259f328e6650085aa8f97dabdb39c4e0f61771390af9d0ffd48e5b
SSDEEP 192:wRecBzdoO67v7uvAPRp2HXCp9UHEsb+WN3iL/LBdVM80eqr5e82ybGVyIsnAUgvU:wRemzdD6DK6X7GbyPhoeQ2LvU
TLSH
T12C42A56AED2429BB6DCBD229F96177A7D2F6102561D02F84E7FCCA2C10E79CC2207417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a9cdc2e6be8af22f27871a2a6264fdc5574c1585cf595bf61eb4eaa8d78c48e2
MD5 91db503288ea4022ea85c6f1f6bf0445
SHA1 835f1310fe4fc5e24f9effe77683d41665781f2f
SHA512 d7b5a104d22e5f8c72448291c1d2a5384d3a8a530499c5a432183236af95414beb0ba1fbb1ff25007229cd666b9c27cb83de0acfa9775e6714b79f418734982d
SSDEEP 192:wRecBzdoO67v7HvAPRp2HXCp9UHEsb+WN3iL/LBdVM80eqr5e82ybGVyIsnAUgvf:wRemzdD6DD6X7GbyPhoeQ2Lvf
TLSH
T1D642A66AEE1429BB6DCBD229F9657797D2F6002561D02E84E7FCCA2C10E79CC6207417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 1c0d23bac6bd0a3f570181e4bc9b289f31bbf9b0e45680033928b77770e43f60
MD5 17229ab153dcfe2e3072230bdeace2e0
SHA1 500574899905e2b7c85102d33477324fefbf6517
SHA512 61cd73d6d8257d8b17538cdc770338d6c5d710f5d2e75b6f38e2f1cedb6fcc10aa4da82224b9b6cd4ef3972dfe4e9aa0dfc9d3be8fbb94bc954a3f5764ff5f31
SSDEEP 192:wRecBzdoOd7v7HvAPRp2gMxScEPpb5p9UHEsb+WNvyBpau/LBdVM80eqr5e82ybq:wRemzdDdDD6XkErGbvgIOhoeQ2Lvf
TLSH
T1C952855BED2429BB6DC7C229F96177ABD2F5102561D02E44EBFCCA2C10E79DC6207417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 6b264b5958de9053f18f0a6e4a6571794e55b41d925d03a17f2e1e1bfade072d
MD5 82814fd0767fc3923d4cd5537590c227
SHA1 f6437809cc2ddab69cde8091691732ac0bd91f96
SHA512 7805787abdb40f2324583cc7ac43ba78bc96283c1b1fded3daf76bce37e626240d6d3ab90902a5801a4ee745b226d5259e0239ef758715b61c867619a0a070f1
SSDEEP 192:wRecBzdoOd7v7HvHPRpngMxNcEiXp0lOfp9UHEsb+WNvMzul9OFpau/Lj5R+dVMw:wRemzdDdDDXX3PYGbvMUkIOH2oeY2hvf
TLSH
T13A62A65BED242ABB6DC7C229F861B7ABD2B5142561D01E44FBFC8A2C10E7ADC2207417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 a052c6d11cae55b94ad029cea4f3bb6135cb08ba9fa4298833e077c02d509f5e
MD5 c8d4875d9878f50ba2ff15b56a679e20
SHA1 651948185a5fa53f693e7b8dbf512f176cbf7ada
SHA512 5c3fb9ddbf70aaf2796da7776ad0f119f253b177daefa568bf272e08a830f5c76a702b594e284257a4a18d97aad40c22a09d9f6be1396cff315c9067d4500f1c
SSDEEP 192:wRecBzdoOYuv7HvHPRpngMxpcW1YswRWslb0lOYpp9UHEsb+WNZjz8GGhFnl9OFL:wRemzdDYKDXX3LQ0GbJakIO8woeV2hvq
TLSH
T11D72A85BE9242ABBA9D6C229F861B79FD2F5242561D01F44FBFCCE2C10D7ADC2207452
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 225fc04f16f2015016a088d23128b52a01442bb026731c485e669cefa41f18cf
MD5 7562becbe3dcdacbe8cf43fa64588022
SHA1 c3b693656d83ecabd1df52cfcd0f0d4fa332985e
SHA512 3975a7ba4b8152ba0094d7f48e0a96e067cb9380f19077519f58b4b888e796fe9c24b3f9f6f7503b295106413493fb8a9a567e97b6760d41d16e71352ec34b63
SSDEEP 192:qRGdoOq7v7uvAPRp26p9UHEsb+WNnQoS80eL5e82yPGVyIsnAUg5U:qRGdDqDK6XHGbTCeX2z5U
TLSH
T14F42A66AEE1479BB6CCBC229F9667793D6F5002531D42E84E7FC8A2C10E79CC6217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 11KB
SHA256 93785f5a55dd4064becb4f1cff2db93ee5c453069390cd1f175b14efbc7c3712
MD5 3f745d2e721c8e8653083d0942fd1e3b
SHA1 65c5deb319ad77fa2904b9e80a68747d89661424
SHA512 1054802f590f58b87fcf7dd07e0c496be092915ce6b1963537363cc344b69aa858c5224a631afcd5370a01ccfdb24fd88e105054f3077d30b55a845f9d252488
SSDEEP 192:etK4K6nP7KxkXqK4I40pUZNCgVLHrKHfFKslEOlbXzKD/0T+ErUkKN9mO5a1AfTH:oKj8P7KxkXqKf/pUZNCgVLH2Hfgslxbg
TLSH
T10132EA67948D9E3B4FD8D518CC176B8B6CB4019673780824A6FF9D0403A67CE114A6BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\a566779293633a3ea3f8a3ec5ffff2d59df0622b\ac2744ce-ff70-42d4-b621-485929e49129\index-dir\the-real-index
Size 120B
SHA256 4c5743cb7220edd0841861d7d71ca676f353a4b2b1a0346b0d7c2d14fb59aa08
MD5 bc3125dd9b0889f6287fa6ad807ea4e0
SHA1 126a0f88cbd2f1ab4eb566dca8ec5f00e3d155c8
SHA512 79dae195e367d5f8452113c63c663f163485d8574569906874a7527388fec498455bdf77763fa0e63877028de5b7d6962b60c04ef5097d0f5e503024fcc75173
TLSH
T12BB012F151F00D02CC144770618C30B533815CD00B088703648006166953E953430C14
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5aa7ea.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\a566779293633a3ea3f8a3ec5ffff2d59df0622b\ac2744ce-ff70-42d4-b621-485929e49129\index-dir\the-real-index~RFe5aa7ea.TMP
Size 48B
SHA256 459e6847f49a399ca24e1e672b8ae6ce6d1d411c60af88599c0778abfb31e58a
MD5 68027e907fcfb374dcbbed8027266add
SHA1 8b7a2c6d66778a3b12a9e3da735dd29a2192c552
SHA512 a0516914cd04e0f8e5cccf925c6e7d85b9b8ca1318b6ee5e0045ea18e3b669fbe2ac8f69e3b16b5381856325e5c3424e861cebb843ba8c0b916d2e718e67f49b
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\a566779293633a3ea3f8a3ec5ffff2d59df0622b\index.txt
Size 112B
SHA256 eafd6aac170418bfee480af560be0a6dafbf2693a48cb5332b5d843044b5ced2
MD5 257f0128ebac9e8beba5e60bbafc9755
SHA1 989ed67dd7ff18b7074beacf9e9c07d3c970b83b
SHA512 78a3f444e9efcb25da2d359346e667eff2eced535f345e90efa9ee5db2368aee932c3ce0351a93ef39dc6ff37981ddf51d3a682c79c6aae96c8f8759149a4da2
TLSH
T191B012F321B9EC277E204BC17014289C9707035D15648A048C04CC01E3010F68D8F7F9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5aa818.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\a566779293633a3ea3f8a3ec5ffff2d59df0622b\index.txt~RFe5aa818.TMP
Size 117B
SHA256 8227d88ed135352d527f811fcee03195844fc526ee12e715ae754f3877ea6f60
MD5 51b04ec605c5f49df49408bda74559f1
SHA1 6178b793cf4fe8fee1c2a4aec7104ffc423b76cf
SHA512 f071f62d5c8131dc8471439edbf3740a595cb53ecdf4e45d74b42424f4177533ef977a4e4db683a970f438bafa394aa140e7b60c276f834d06b69d4e8fc71f23
TLSH
T156B092B321B8A9266A000A82A028208D97160F5C095486048805FD00A1310E28E8F6F9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 cb4715d31f37dbc480fd38499bf8e85e628b9a1d9477bcd793a8b2e7e42419fc
MD5 39ec05607a3b97d0413573c6529f0aeb
SHA1 e657cc000d46a532bcc299821dc7af2532d94dec
SHA512 c8d2d38149cd86a3efb82564815e0b585405db18e916c3055de2869c8a201f01ba72a8fd53a71becd2345728d971817eb1e455b10aff444687d4136b47351a5f
TLSH
T1C0B01202C08B6712C90082B01115104431815E66C4609B46A2F095CE9C870E101B9171
MD5 SHA1 SHA512 TLSH

Submit Download

Session_13428711188132515

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Session_13428711188132515
Size 83KB
SHA256 098188ff2c70f6804c4853508acde31513a49705f8f0915bafa95c6d36ae56e2
MD5 eff00a9dadfcf581f81e5b80e32400fd
SHA1 ae8ccb155f5b36f2dcd54b3887c5744726f4933b
SHA512 7f50238be1949c1006b9eb9a6e30117890f3a21b0d3e0696afb20f52810403df7105da0cca3cfd0d17e58877cfcdce4cd3d358b211e783f0ac6ebc06316f261a
SSDEEP 1536:4oSE1V31VdNOjsZ0RKWXjjsZ0sKWXleeX:4oSMV31VdNOjsZ0QCjsZ0hReX
TLSH
T1CE83E13D29F5023AF3BBCA78DBE565EFA836B65375418E1D00D143050912B42BE62F6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 0d2d78b66d4e8c423bfbf3f1e533013cb7d26681c259c573448ea915f32c2dda
MD5 01a3fc45b7fb51244bf1a3e0bc84be70
SHA1 ebfdc6ab8fc5b10526c23100a5d89c4fd1692807
SHA512 76a4f34a119a6f3b73c021374c09803f52f4763b52d4ed5a4f7dce1c765badd36f86427c59bd176271fd25928743b51eac0ad64273dd462eb78ab36d19c94fe5
TLSH
T1D5B001144198A516C5AC62BDE2E564843669582553AA9AAA50A3469C9862A83A362B00
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\FileSystem\t\Paths\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 05eb47cee25d6dfd61d2a49d2771249b28d2de211788c416efb884ad8a0fdca6
MD5 363c2ee0018fe027bb5bdfff9feba8e4
SHA1 2ca0943b97d927af3c6965b7aa2d7415419d08fd
SHA512 992fdb29a42707adc60f109bf15d58b428c657b98c54aba1d4f0222676c87a24f092332922ef65f15eef59ca5bcabfb48b97048c29dfb7c6a548f801b7fa7f71
SSDEEP 96:CbJ0d+qKJku7fby2f2eaPph2n5Sl8h4otop5v+DuB6vnGovODcyXxwzjQ4z1aEQc:Ct0AJr7fbyVlGiU2wOcGHcmxoQ4z1aEP
TLSH
T17BC12B72F86E6C775DF79595B4033A43CFB465BB9A016E64DAEA0F0C00E75EC1382122
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 6KB
SHA256 d4597e03781768fd22c218e28ed5f398a8e2b146d38abd45eb7301bfe9c69996
MD5 4b3ad197a73af3995cdaddab114d0301
SHA1 6f8ce5c17d60fd129a18de2d85a19626669ad07a
SHA512 687af764295702a5175efbeec42a192ea0cbaf66851633b53434d2ba5063649130bf943b59c0f4561925ff649247e956caba1541738ea50c53fafcd08b0d9f70
SSDEEP 192:Ct0AJr7fbyVlGiU2GOcNGcmxoQ4s8aEduCON:CtttMG0cfmxp4SEduCON
TLSH
T195D11C71F46E6C7B5DF7A440B1032D43CEA865AB6A54BE68E9EA5F0C00E75DD1382133
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 b543bc769cfff4f6e70984dc71751de190ef3cb19156986e230c984ffb9e906e
MD5 15eb937caa95f7c353f4e41ebb6c2a0b
SHA1 7ce276486ad739e79b4f4945e2cbcff220b56fa4
SHA512 abd0c4e0e631fb520173784410dbacb052693d7fb7738851e656f06cb47024ab4c87a0e16aa0442c78b0872563e6bbb529adcd5f5fcaaeb1b72ab9a4b4cc4e12
SSDEEP 96:CbJ0d+qKJku7fby2f2eaPph2n5Sl8h4otop5vsDuB6vgGtvODcyXxwzjQ4z1aEQc:Ct0AJr7fbyVlGiU2iOcNGcmxoQ4z1aEP
TLSH
T1FCC11A72F86E6C775DF79595B5032A43CEB465AB9A016E64DAEA0F0C00E75EC1382122
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 7f4f118801a03e8472c6711edb18b800e08e1caa8771dda883db35e6a59d402b
MD5 31adf8b5993ffd40765b85aa3a31609c
SHA1 7dd3d0aa4df214296f9d7c06edea63f759e77105
SHA512 437007b7aa55bac0f44f2d98479870323587cd8c158325446a4ee1f1d8c68041b021ea195e1d0676fd641073c224f53dbee89b2169f7a08f7485fccb50964e60
SSDEEP 96:CbJ0d+qKJku7fby2f2eaPph2n5Sl8h4otop5vjDuB6vgGtvODc5TaEdRNC39ISyN:Ct0AJr7fbyVlGiU2/OcNGc5TaEduCOW
TLSH
T183C10A71E46E5C7B5DF6A444B1032D43CEA4656F7915BA28EAEA0F0C01E75DC0382137
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 127df2e59dfc6b8cd13043583e99dfaeadba2b7593a1737a913fc7565f97bcca
MD5 952329ce40a70617b4a8b7ba04b3ef79
SHA1 20d4e62233e6999596cf3f8214c4f00e576c8333
SHA512 d28c767b8642c9d1adb7c34d3b035b4d952f01f2a4cfc367905c213567f32affdd8eed1dfc58f8e051aea74ec4047349398f26a690b8e13fd1f727cf84438017
SSDEEP 96:CC0d+qKJku7fby2f2eaPph2n5Sl8h4otop5vItDuB6vdGyvODcyXxwzjQ4r1aEQc:CC0AJr7fbyVlGiU2eOcwFcmxoQ4r1aEP
TLSH
T11EC11B72F86D6C7759F39555B4032A43CFB466BB9A016E64DAEA0F0C00EB5EC1382126
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 e63b7b0363e6c46260e9fbc33d4645884c654cf092c90d117fc438ff486cdc40
MD5 0da10e838df2335d9edc0b98e2068759
SHA1 6d0e52033dc3537fc2236a3fe440397a37cf7703
SHA512 b3793403749e440f28a893679f91f678474e409401e40b150ab1e419ab1e3cedce0a55009a748468a2487687ca4717db96148b5df861563a5471208e642ec25f
SSDEEP 96:CbJ0d+qKJku7fby2f2eaPph2n5Sl8h4otop5vFDuB6vgGtvODc5TaEdRNC39ISyN:Ct0AJr7fbyVlGiU2FOcNGc5TaEduCOW
TLSH
T197C109B1E46E5C7B5DF6A444B1032E43CEA4666F7915BA28EAEA0F0C01E75EC1382137
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 18ffc2e75e591e26c82dbb086dd08956ecabe39efbaec33c648cfb07e053bc13
MD5 6be93c24d463cb1dd372beb35b53daec
SHA1 f017aea8e36736caddfdfe39384e18b806a31686
SHA512 c4117f500ee5a88842b41f01600c8754c2d389f7c20306df2254880ed529186583f1fd2350876a9e22206ed0efb59ef10e03c26889be07c9a267d54cb7bbb21d
SSDEEP 96:CbJ0d+qKJku7fby2f2eaPph2n5Sl8h4otop5vXDuB6vgGtvODc5TaEdRNC39ISyN:Ct0AJr7fbyVlGiU27OcNGc5TaEduCOW
TLSH
T179C109B1E46E5C7B5DF6A444B1032E43CEA4666F7915BA28EAEA1F0C01E75EC1382137
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 4KB
SHA256 5c978a4c069ccfd07754a631b83d45bb64dda7104edcaf256bd7ec3dcbd79d0b
MD5 9df0c4b2db54bdb649bc871100e09b63
SHA1 f5bb11a581828b87e5ac534ad0702953b5b725c4
SHA512 ef6d839a274c8a7de0c2fb7f4ec7c1ec7ab1268309647d0f4df211093ee9e7d6c0a8649b0f2e1cb8a789c83cc203e92ae2c25244f8300078d30ba2d132d47cb0
SSDEEP 96:gC0d+qKJku7fby2f2eaPphrn3RDotok5v3DuB6AGyvODqLE/bjv4a:gC0AJr7fbyVlFDUDLOkFqLE/bH
TLSH
T108A11972F4665C3B5DB7D444B5122A03CFB4A2ABB961ABA4DADD0F0C00EB1E81741127
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f4eafb28-db9e-4cff-9375-dc3c4503a704.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\f4eafb28-db9e-4cff-9375-dc3c4503a704.tmp
Size 5KB
SHA256 d4f719dff4b3ced885f87cefcf89baed1a8ac18f456aba9615e9bd0b9ff1b761
MD5 8a79b7e4f783c36b1670298f635394a6
SHA1 1bfa8b18616f0188f53f9e738f1c15c056518db9
SHA512 fad1ec06c1ba35f6a7c640a5726f06d61fa7c336234a9519db7071b607e63ce095a5316efb1d25a9cda67ab7685ff68196b45f25f6c4385251abc7939a32d4c8
SSDEEP 96:CbJod+qKJku7fby2f2eaPph2n5Sl8h4otop5vjDuB6vgGtvODc5TaEdRNC39ISyN:CtoAJr7fbyVlGiU2/OcNGc5TaEduCOW
TLSH
T172C1FA71E45E5C7B5DF6A445B1032D43CEA4666F6915BE28EAEA1F0C01E75DC0382137
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7add6572365d752d8c3a090b9a256c43e3c5ff716f29ed7aa3c53dc57a08ba60
MD5 0da70f521ac5aee3489abf6e3eb4e375
SHA1 0f3cd9919820116ecc86bab93f4712c08485dc56
SHA512 a9cddd04863b2ac842fe4f91265c19a41d8b7442be8f07a91747705beca52c1e1d563e3c46cf68e1b73606695624f13ca69a8246653c2535d0684ced42c37d33
TLSH
T182D09BD479045D78C4C1353231A673155A616435DA5C46481051F3AACD65141667F5AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ffe13798c5910685872d371e84c30baa9eefaaa5db1419603eb30d473d7b2e37
MD5 03c111f9396889c77f6d9883c5df333f
SHA1 be65300843096dba92c5695fd35e2dffcbb7eb0a
SHA512 a77dfe3b48fcb72648f1adfafbf0d0fcd4d88690dcf41609a03e1d6b645d1336b6e322931b2205673283b920d20ed0225c6aa320a83a2d3a410771f18d120c19
TLSH
T1B1D09BD079145D78C4C1353231A773155A516435865C46481151F3BACD65141667E59D
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 558604554a4ab6538ec02cfd2ba5eee39c3ce020a6d647ddc0714947c79ec75f
MD5 fe8efbc7ec10c1259f5c2e11f2d14bb3
SHA1 9e64e82ea4fb38b3c781f056174954102f7248e7
SHA512 a5e6a3b0c039ab359481f1e980e55073ff08d4bd9798c53eaa92d97ee36f7231051185f7b6983a9d09bcc47a8dcd854ad7fb2daa11568573e3932aa9684a23d0
SSDEEP 192:sxRzmCs/fPsi8bNJHzoA8pi/g6+WNIYl+LoG98IgQJ:sxRzBs/fPsi8Jui/5IlRg0
TLSH
T16032A6166968A93B9CCBE21DBB55BF53D6F9503261942A58F7FC8A0C00E76DE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 6a5e785b3a4e6e6f6015c153a043c7d8052e39f6a36e40e91547facaa1e04768
MD5 2399c9861e239f3271bc1e87f21cbf57
SHA1 d7f3f7dcab9f5923871487232ee8f994abfc877a
SHA512 64096a930e33170cfbd87ac40af0afd98551750e1ec82d6e24665553f1ea445200cd41301940a6d54d3f9c0778c293da543d078020ce0a651627f1a8b6c7052f
SSDEEP 768:dofA3j7pLkdL7AxWgg+fJJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OV/13LYCrojS:dofA3VkJ7AxWgg+fJJu1jaulLYZjS
TLSH
T145C2DA7B640CCF7E4F804ADDEC19BA9B6D6802CB96D8CD4047FE991C02C6BEA51164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 d1046fa39cdd0b1b4f05a34967d93a37da054a8488e4aa6f1dbd1143d53adc4a
MD5 b9c8c4b3558f2fc1da8b66d0c1ca829a
SHA1 4516d7f43f857b0e18d56d5fd99ceee0ae27e01f
SHA512 b1148597499875720ea96982a8931b3862d1f5660500d3cc3771ef371bf6ec60ddc9ca2462e2e2e0f806a869752bde9611569e4c6d9f617653a195f78240378d
SSDEEP 768:arv+4UNbdM3poUiJwquNHXmTWTbc+/geVH1SvyZ:absb+3dDeWn1YEH1dZ
TLSH
T16703C0319CA98E37ADE69B88B44BB6577EF8116385C40A84C9D97F4E428748D070BD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 daaf561fc17111544fb172710c2ef1677bbecf14fff76bd960ee368b0a7e3382
MD5 55d98b40d46493434070f1d75a5ecd94
SHA1 5c6f274542e71e6e84a412bd7389debf08769efe
SHA512 7abc70d57a4c79e118d0a2a1c33fdcb03f1ffbb681923692683d88e6c8b1d949c993efb5b821b989936e76b27264947204904dd97c33f85b3036f4d015c199a6
SSDEEP 768:Grv+4UNbdM3/a65iJwquNHXmTWTbc+HleVH1Svyy:Gbsb+3DzeWn1FEH1dy
TLSH
T1F313BF31ACB99A37AEF75B89B40B7A577FB8116385C40AD4CDD92B4E018B48D030B937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download