hxxps://simfileshare[.]net/folder/146578/

Analysis

user interaction
yes
max time kernel
284s
max time network
282s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/07/2026, 23:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://simfileshare.net/folder/146578/
Sample260718-22nersez3r

Score

7^/10

discovery persistence privilege_escalation pyinstaller

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
3344	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe

Loads dropped DLL 34 IoCs

pid	Process
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe
5144	sims-4-updater-v1.4.7.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in System32 directory 9 IoCs

description	ioc	Process
File opened for modification	C:\Windows\system32\NDF\{65261024-30AA-4A94-BD69-D02D152FE43A}-temp-07192026-0007.etl	svchost.exe
File created	C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{6b33042d-c21e-473f-8d3b-3d7be1fc61a7}\snapshot.etl	svchost.exe
File opened for modification	C:\Windows\system32\WDI\BootPerformanceDiagnostics_SystemData.bin	svchost.exe
File opened for modification	C:\Windows\system32\SRU\SRU.chk	svchost.exe
File opened for modification	C:\Windows\system32\SRU\SRUDB.dat	svchost.exe
File opened for modification	C:\Windows\system32\SRU\SRUDB.jfm	svchost.exe
File created	C:\Windows\system32\NDF\{65261024-30AA-4A94-BD69-D02D152FE43A}-temp-07192026-0007.etl	svchost.exe
File opened for modification	C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{6b33042d-c21e-473f-8d3b-3d7be1fc61a7}\snapshot.etl	svchost.exe
File opened for modification	C:\Windows\system32\SRU\SRU.log	svchost.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Detects Pyinstaller 1 IoCs

pyinstaller

resource	yara_rule
behavioral1/files/0x00080000000246b7-1620.dat	pyinstaller

Event Triggered Execution: Netsh Helper DLL 1 TTPs 6 IoCs

Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

persistence privilege_escalation

Netsh Helper DLL

T1546.007

description	ioc	Process
Key value enumerated	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key opened	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key value enumerated	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key opened	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4604	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	svchost.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Gathers network information 2 TTPs 1 IoCs

Uses commandline utility to view network configuration.

System Information Discovery

T1082

Command and Scripting Interpreter

T1059

pid	Process
4584	ipconfig.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134288895103865743"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
6044	chrome.exe
6044	chrome.exe
4576	sdiagnhost.exe
4576	sdiagnhost.exe
2516	svchost.exe
2516	svchost.exe
2516	svchost.exe
2516	svchost.exe

Suspicious behavior: LoadsDriver 6 IoCs

pid	Process
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
664	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 30 IoCs

pid	Process
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe
Token: SeShutdownPrivilege	3460	chrome.exe
Token: SeCreatePagefilePrivilege	3460	chrome.exe

Suspicious use of FindShellTrayWindow 44 IoCs

pid	Process
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
1720	msdt.exe
3272	7zG.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe
3460	chrome.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5144	sims-4-updater-v1.4.7.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3460 wrote to memory of 3204	3460	chrome.exe	85
PID 3460 wrote to memory of 4156	3460	chrome.exe	86
PID 3460 wrote to memory of 4156	3460	chrome.exe	86
PID 3460 wrote to memory of 4604	3460	chrome.exe	87
PID 3460 wrote to memory of 3148	3460	chrome.exe	88
PID 3460 wrote to memory of 3148	3460	chrome.exe	88
PID 3460 wrote to memory of 4800	3460	chrome.exe	90
PID 3460 wrote to memory of 1216	3460	chrome.exe	91
PID 3460 wrote to memory of 4800	3460	chrome.exe	90
PID 3460 wrote to memory of 1216	3460	chrome.exe	91
PID 3460 wrote to memory of 4632	3460	chrome.exe	92
PID 3460 wrote to memory of 4632	3460	chrome.exe	92
PID 3460 wrote to memory of 3468	3460	chrome.exe	93
PID 3460 wrote to memory of 3468	3460	chrome.exe	93
PID 3460 wrote to memory of 4784	3460	chrome.exe	99
PID 3460 wrote to memory of 4784	3460	chrome.exe	99
PID 3460 wrote to memory of 4172	3460	chrome.exe	100
PID 3460 wrote to memory of 4172	3460	chrome.exe	100
PID 3460 wrote to memory of 4588	3460	chrome.exe	101
PID 3460 wrote to memory of 536	3460	chrome.exe	104
PID 3460 wrote to memory of 536	3460	chrome.exe	104
PID 3460 wrote to memory of 4368	3460	chrome.exe	105
PID 3460 wrote to memory of 4368	3460	chrome.exe	105
PID 3460 wrote to memory of 4152	3460	chrome.exe	106
PID 3460 wrote to memory of 4152	3460	chrome.exe	106
PID 3460 wrote to memory of 4844	3460	chrome.exe	107
PID 3460 wrote to memory of 4572	3460	chrome.exe	109
PID 3460 wrote to memory of 728	3460	chrome.exe	110
PID 3460 wrote to memory of 4360	3460	chrome.exe	111
PID 3460 wrote to memory of 1408	3460	chrome.exe	113
PID 3460 wrote to memory of 1408	3460	chrome.exe	113
PID 3460 wrote to memory of 3808	3460	chrome.exe	114
PID 3460 wrote to memory of 3808	3460	chrome.exe	114
PID 3460 wrote to memory of 2124	3460	chrome.exe	115
PID 3460 wrote to memory of 2124	3460	chrome.exe	115
PID 3460 wrote to memory of 1928	3460	chrome.exe	116
PID 3460 wrote to memory of 1928	3460	chrome.exe	116
PID 3460 wrote to memory of 4088	3460	chrome.exe	124
PID 3460 wrote to memory of 4088	3460	chrome.exe	124
PID 3460 wrote to memory of 3604	3460	chrome.exe	127
PID 3460 wrote to memory of 3604	3460	chrome.exe	127
PID 3460 wrote to memory of 3340	3460	chrome.exe	128
PID 3460 wrote to memory of 3340	3460	chrome.exe	128
PID 3460 wrote to memory of 5128	3460	chrome.exe	130
PID 3460 wrote to memory of 5128	3460	chrome.exe	130
PID 3460 wrote to memory of 5300	3460	chrome.exe	131
PID 3460 wrote to memory of 5300	3460	chrome.exe	131
PID 3460 wrote to memory of 5432	3460	chrome.exe	132
PID 3460 wrote to memory of 5432	3460	chrome.exe	132
PID 3460 wrote to memory of 5744	3460	chrome.exe	133
PID 3460 wrote to memory of 5744	3460	chrome.exe	133
PID 3460 wrote to memory of 5932	3460	chrome.exe	134
PID 3460 wrote to memory of 5932	3460	chrome.exe	134
PID 3460 wrote to memory of 5824	3460	chrome.exe	141
PID 3460 wrote to memory of 5824	3460	chrome.exe	141
PID 3460 wrote to memory of 5328	3460	chrome.exe	142
PID 3460 wrote to memory of 5328	3460	chrome.exe	142
PID 3460 wrote to memory of 1760	3460	chrome.exe	147
PID 3460 wrote to memory of 1760	3460	chrome.exe	147
PID 3460 wrote to memory of 5968	3460	chrome.exe	148
PID 3460 wrote to memory of 5968	3460	chrome.exe	148
PID 3460 wrote to memory of 6044	3460	chrome.exe	149
PID 3460 wrote to memory of 3784	3460	chrome.exe	150
PID 3460 wrote to memory of 3784	3460	chrome.exe	150

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://simfileshare.net/folder/146578/
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffecbbec728,0x7ffecbbec734,0x7ffecbbec740
  2⤵
  PID:3204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1672,i,11906236718821163637,1121744014168023,262144 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1980 /prefetch:2
  2⤵
  PID:4156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2108,i,13672607665002260364,10602367826086775103,524288 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2260 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2380,i,7452204632307322179,2243877780179632621,524288 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2540 /prefetch:8
  2⤵
  PID:3148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3216,i,13204328594180249711,18230291244697254414,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:4800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3232,i,10235135819958122480,8363927000583310930,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:1216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3912,i,9391885834592016675,9436335605044457725,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4412 /prefetch:2
  2⤵
  PID:4632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4684,i,10862867749118481362,5238440678701041139,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:3468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3236,i,10802038451456622107,18259582156867327679,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:4784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4864,i,9975294446879524180,12775203245205046156,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4560 /prefetch:1
  2⤵
  PID:4172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6028,i,10127711917214504467,1796098429416902113,524288 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6036 /prefetch:8
  2⤵
  PID:4588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5156,i,9447998155776336022,5255175371816242663,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5248 /prefetch:1
  2⤵
  PID:536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4792,i,7283890646977190202,5664049461092446844,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4764 /prefetch:1
  2⤵
  PID:4368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5148,i,4542090457995836912,15845517922395338178,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5152 /prefetch:1
  2⤵
  PID:4152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5028,i,4252355258502070104,10232281580051338501,524288 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5064 /prefetch:8
  2⤵
  PID:4844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4744,i,4993784545999610907,13583806956229668329,524288 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5388 /prefetch:8
  2⤵
  PID:4572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6236,i,313359292312072124,5290446349660087478,524288 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3432 /prefetch:8
  2⤵
  PID:728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6244,i,16594471099074025008,11462909104876023879,524288 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3236 /prefetch:8
  2⤵
  PID:4360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=4492,i,11481910246002642487,7960618336868502522,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4536 /prefetch:1
  2⤵
  PID:1408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5364,i,5105582557445707024,7175948856352221697,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4744 /prefetch:1
  2⤵
  PID:3808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4400,i,11607824452889509664,6339574895569325087,524288 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4532 /prefetch:8
  2⤵
  PID:2124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6736,i,13502067198651698197,4728772416696262089,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6772 /prefetch:1
  2⤵
  PID:1928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6884,i,8129667768482950236,13547142153144883933,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6504 /prefetch:1
  2⤵
  PID:4088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4972,i,13212483300379472102,16749846014205978545,524288 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4944 /prefetch:8
  2⤵
  PID:3604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=4948,i,14465184926240746308,12142485073859158502,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4988 /prefetch:1
  2⤵
  PID:3340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6072,i,6399009512018217521,6596072471796770386,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4744 /prefetch:1
  2⤵
  PID:5128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=5008,i,5638091197875628522,6496744432998734819,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7004 /prefetch:1
  2⤵
  PID:5300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6976,i,3517373136164267637,516869248456533530,524288 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6996 /prefetch:8
  2⤵
  PID:5432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=4976,i,2255146137604533222,4620249372028331742,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7624 /prefetch:1
  2⤵
  PID:5744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=6920,i,11554623895279304148,1032107389512858732,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5000 /prefetch:1
  2⤵
  PID:5932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=5392,i,17037597105368014855,16845615223611153901,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4964 /prefetch:1
  2⤵
  PID:5824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --instant-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=6452,i,6270301417346620845,15084212870261699183,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4852 /prefetch:1
  2⤵
  PID:5328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=7792,i,11865292354894962366,6568540571342644285,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6564 /prefetch:1
  2⤵
  PID:1760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7752,i,4953980656876824480,5981314302592757529,524288 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7736 /prefetch:8
  2⤵
  PID:5968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=7768,i,3434638395196664651,13451298933006851325,262144 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7724 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=7876,i,6150674808317989378,7657498357262023342,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7688 /prefetch:1
  2⤵
  PID:3784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=7860,i,13404519245829094558,8411594317118108474,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7992 /prefetch:1
  2⤵
  PID:5752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=7868,i,9728075934767904973,5335534599722488068,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7752 /prefetch:1
  2⤵
  PID:2036
- C:\Windows\system32\msdt.exe
  -modal "1310786" -skip TRUE -path "C:\Windows\diagnostics\system\networking" -af "C:\Users\Admin\AppData\Local\Temp\NDF711A.tmp" -ep "NetworkDiagnosticsWeb"
  2⤵
  - Suspicious use of FindShellTrayWindow
  PID:1720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=7848,i,2207667150171841982,15438931326942970825,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7900 /prefetch:1
  2⤵
  PID:908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=8056,i,11715203617097412443,3465087065791295809,524288 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7708 /prefetch:8
  2⤵
  PID:3024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=7732,i,10744692479511798774,10814345597273762842,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8032 /prefetch:1
  2⤵
  PID:888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=4084,i,12981243275174799717,1946008833369248604,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1008 /prefetch:1
  2⤵
  PID:5632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=6268,i,4462451702507273937,13049005232585970354,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7896 /prefetch:1
  2⤵
  PID:4504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=3476,i,16239690330533792293,5163897569051019476,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5004 /prefetch:1
  2⤵
  PID:4880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=5132,i,15161022722986609683,18059192923095789392,2097152 --field-trial-handle=1984,i,7346938450851124999,9387768188633141296,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5148 /prefetch:1
  2⤵
  PID:2204

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1044

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3012

C:\Windows\System32\sdiagnhost.exe
C:\Windows\System32\sdiagnhost.exe -Embedding
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4576
- C:\Windows\system32\netsh.exe
  "C:\Windows\system32\netsh.exe" trace diagnose Scenario=NetworkSnapshot Mode=NetTroubleshooter
  2⤵
  - Event Triggered Execution: Netsh Helper DLL
  PID:5932
- C:\Windows\system32\netsh.exe
  "C:\Windows\system32\netsh.exe" trace diagnose Scenario=NetworkSnapshot Mode=NetTroubleshooter
  2⤵
  - Event Triggered Execution: Netsh Helper DLL
  PID:768
- C:\Windows\system32\ipconfig.exe
  "C:\Windows\system32\ipconfig.exe" /all
  2⤵
  - Gathers network information
  PID:4584
- C:\Windows\system32\ROUTE.EXE
  "C:\Windows\system32\ROUTE.EXE" print
  2⤵
  PID:5732
- C:\Windows\system32\makecab.exe
  "C:\Windows\system32\makecab.exe" /f NetworkConfiguration.ddf
  2⤵
  PID:808

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork -p -s DPS
1⤵
- Drops file in System32 directory
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
PID:2516

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k LocalService -p -s WdiServiceHost
1⤵
- Drops file in System32 directory
PID:2956
- C:\Windows\System32\rundll32.exe
  "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\winethc.dll",ForceProxyDetectionOnNextRun
  2⤵
  PID:3272

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s WdiSystemHost
1⤵
PID:1980

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5768

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\sims-4-updater-v1.4.7\" -ad -an -ai#7zMap6470:104:7zEvent1284
1⤵
- Suspicious use of FindShellTrayWindow
PID:3272

C:\Users\Admin\Downloads\sims-4-updater-v1.4.7\Sims 4 Updater\sims-4-updater-v1.4.7.exe
"C:\Users\Admin\Downloads\sims-4-updater-v1.4.7\Sims 4 Updater\sims-4-updater-v1.4.7.exe"
1⤵
- Executes dropped EXE
PID:3344
- C:\Users\Admin\Downloads\sims-4-updater-v1.4.7\Sims 4 Updater\sims-4-updater-v1.4.7.exe
  "C:\Users\Admin\Downloads\sims-4-updater-v1.4.7\Sims 4 Updater\sims-4-updater-v1.4.7.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of SetWindowsHookEx
  PID:5144

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Persistence

Event Triggered Execution

T1546

Netsh Helper DLL

T1546.007

Privilege Escalation

Event Triggered Execution

T1546

Netsh Helper DLL

T1546.007

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

NetworkDiagnostics.debugreport.xml

Path C:\Users\Admin\AppData\Local\ElevatedDiagnostics\460911090\2026071823.000\NetworkDiagnostics.debugreport.xml
Size 137KB
SHA256 b307e24b16783d66e24c6ddb092b01a99f7aef09c04d31fb9cd7229ad50e30e4
MD5 7ee480aae4c8bcd21a12bfaa500ef282
SHA1 0936af1f6754f697ef943167a6f5e8c9c096353a
SHA512 dd5b04b3de3a611f4caa24d919d39dba4af2c18850892c5b27eb85c779efc2863eb01d1aef93c0d24fc760a5070bcf410c6f5eb5b3c71491f0f02f225c79307b
SSDEEP 768:s78H/8xU8/jPQDPhcq3IsBjPQDPhcq3Is1:s78f8C8cPhcqWPhcqN
TLSH
T1AFD30382B94A7BD05517AF53A4BDB1C60A74F50F1196B2E949BF23D421CBB90EFD3220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResultReport.xml

Path C:\Users\Admin\AppData\Local\ElevatedDiagnostics\460911090\2026071823.000\ResultReport.xml
Size 37KB
SHA256 556388340b85c1917196b3ff27ffeea415c28500ad6c5b4cf5f800c66024e1c8
MD5 74eb7f19c1e6dc40a457545b3d57c2be
SHA1 53e0a7b033fa84f75c22e1a4d33634249fbc6314
SHA512 0c8eab3023d0af5244c99476879767298ab2ec1d519f2bac44314f3df8d25d60f85d4fb1dd240ab794118f7ccb655643dbd4785726b64038ad6db9de2d025d59
SSDEEP 384:suwJiVHnVHnrVH0bapkVXNapkVoNapkVlNapkVLVH8hx1kVfhx1kVshx1kVdhx1o:sRt73yxoGyro13UIPGY
TLSH
T14803E111E57A1A40C85F13AB496CFA417E78677E12DAE18E3DEC9110658EF84FF2B342
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

results.xsl

Path C:\Users\Admin\AppData\Local\ElevatedDiagnostics\460911090\2026071823.000\results.xsl
Size 47KB
SHA256 67401342192babc27e62d4c1e0940409cc3f2bd28f77399e71d245eae8d3f63c
MD5 310e1da2344ba6ca96666fb639840ea9
SHA1 e8694edf9ee68782aa1de05470b884cc1a0e1ded
SHA512 62ab361ffea1f0b6ff1cc76c74b8e20c2499d72f3eb0c010d47dba7e6d723f9948dba3397ea26241a1a995cffce2a68cd0aaa1bb8d917dd8f4c8f3729fa6d244
SSDEEP 768:hUeTHmb0+tk+Ci10ycNV6OW9a+KDoVxrVF+bBH0t9mYNJ7u2+d:hUcHXDY10tNV6OW9abDoVxrVF+bBH0tO
TLSH
T16723CCA4B09CDF394BB5716BD8F2A582F61BCC366B356091F0FDB233029DD245622627
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 ab1904594e6031bff92d4d6b5e850e121f9abcd2605ec0fbb5c59e2fd0f2896f
MD5 2bf9b000b168355dc6a7ff3727ea1c1e
SHA1 0cccdd73f9594e3622015e34e264645b1aab622e
SHA512 cce2135d3926379e8a395459fa91e5c0d5271a74b9231f916c8183e9828c7140c7e19b5a1c8a819de86170ba762cbc5d95585491d4bec17c781c11f1916aa445
TLSH
T108E02B6ACC25EC3718FF471864544A85E751135F2F91554F7A3D910CCFB066A52C6C6C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000013

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013
Size 140KB
SHA256 364a48f6cd327f4d4b26af2d0d63ccc57a3e5c733cb89cb010212c10318e545a
MD5 109a43991ecd4992ecdcbd30139e591b
SHA1 78d02a69574ed9f01ab48b8f6cf66df6bdbe2760
SHA512 2a9551b73a5c133cec87f8b96503982312b9421233bf1a436e5c1a72babe1e52aef8b44527ebcdd2732584143aa8c6b376ea44d5d37ae0554739b1c4342c0cfb
SSDEEP 3072:5EDkbxPcCmLUIoweO7Jbg6qRfKGEWrNKmLgxT5c9eHrg9EUlHZgSHXzs5:5EDk+NZeO1bgMHWrNVgxT5tLg9XltQ5
TLSH
T140E313D6F305EB86B97EC624BCED06EFB6023DC1E92C16A3395509870DB812EDC44B15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000023

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000023
Size 273KB
SHA256 37d45177c82c1ec13dbcbe9fe2a1e6d4d51f0e9a74d1d44819c75af124de3c6d
MD5 973fa6355a854d01866e7f8a3a50a364
SHA1 144e2c2d73de27f662cfd62d7f9dae2ba13bfbb5
SHA512 61c24b1f90d4905b50238f219312f7425b3ff75b3331c2bef22ba87540dffd156da6d160cc8061b6988a454cee672ca81f56173e36ca00469e978ffacefc012e
SSDEEP 6144:iP/6kG2FSXpyqsRr0fQ9gRC1MzWsbUjR15lF8OGNy:iPCwMyqQB9gOF/H8HQ
TLSH
T1CD54235EB923E5E5258D3C5383178B109DB4A0AACFFA9019B81E538753F2C8CCACD761
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000026

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000026
Size 34KB
SHA256 32a9b1cbae366c282b1421dbe83205d5badf7bfb0c5fea477ecf8732b74b072a
MD5 b7ad464788c281853b59e40c67f790f5
SHA1 67a2145bf2d280511310ffbedaa7ec1be81c830e
SHA512 01a323413604e315dc9b19d16ec42cce0a8c2687663db4492f434c2c32fb3d185477fb814b1176f798e855cc77b856435ddc52db00e1e2fdfb737638d7a317fd
SSDEEP 768:MV/02YcJupObl3yPkY1U2CzMl9Pkq4SC3rLqtrY8vGCJP1Z6hu:mcHuupeGBZvPMS2r6VxJ1co
TLSH
T13AF2F29A1192EDDF5F7008064AC9245F504CD9D3AAF8F45C863AA340499CB7BCDFA90B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000029

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000029
Size 106KB
SHA256 f289656b6676bf04a90ec103e61dbfb2a0b49ec2a766600f3f1ebdd52941484c
MD5 475609491dd0f72683ff3dcb0578db75
SHA1 a8dae38763b287c24ee5bafd941e33fae4a0d32f
SHA512 3355230010502ebabf84e413fbf3835b1662a76c1c9a614dea0608593af103c7cc6d8019a13b7776531589ad6a7e620daea382ab85bfd50e1437a2f5b222a490
SSDEEP 3072:9NRyeOIZDWjSizc5VuFV/lah/Xy+UP1kZZ8:A2DNiYjuv/0f/ymq
TLSH
T1D0B312F5F30E26518EAD6E452653ADF9CDAF03B3F1614E4D164A126C012CBE23D9E872
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002a
Size 107KB
SHA256 10a99aa97e4bc2d778d20d06723e28a09b588a2e199846ce5be4aaf292ff0aea
MD5 dc7e0f38d94094e836c3c056904fb605
SHA1 d4800b858c93664d5ec213918880aa161cba9f65
SHA512 433c41c7dc4dd7a7508feb2525d8fd524da0d509f43a29f265c7aaf614c09c49fd4fb6ec5abe952ac64c2f42ca9ee34bde6b1f58c73a0b92213b4347e5bd02a0
SSDEEP 1536:39jE2aZMU2Y90e2DJdMZ2IgWOJZTD1VNViWstpvsL+Cb3bKJK1X8N4HQRXvVPLfe:Np4MNHH3WO3+WYpvm+CrbKJK1MNVz6j
TLSH
T1D9B31236A6F1FC685E30E896EDC177755C76CF66FE6740A0B342D3D1B1A88802A85D8C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002b
Size 107KB
SHA256 4444a301b14cd15a82ef180021a76adf7f42b1716d1a82b1e67797535cb38866
MD5 04b1fb28f6b20c45743702eef0b68217
SHA1 ce7c9e21d86666b63d3a4c86bde9cc7445eb7a17
SHA512 3434c904c3eb7a4ce90edc81728bbabfcbc2f87d276877eca7fe480dcf08c3ca2099958d9c7162fef5da2e906092529e3e685f4a84e827c5ea25a767111f857c
SSDEEP 1536:89V7g68EwIBFfy7FlzC8Q++nLvGnqY4GtBl8n3ha8DBz21X8VOCcQairIz5+Ae/3:2Vc68EwIbbroqY4WBr8/YQRUz5+ZnWGR
TLSH
T164B312FBDE7158A1BB0880F15EE2A12247D471657184B782F17B90E890F42927EEDF8D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002c
Size 44KB
SHA256 f77ae5fb7ea69deacf5cf7d97ee72465ac7f500e0f48e2d195afd6b8a70f181b
MD5 46da9ba281c0254fb31eb210121c8273
SHA1 1247ba8b6255431d073f2cb9824bb8503a20959f
SHA512 d306ab69a563082a288b361e5fc344112f01b56e1d9185afd66be45b61694b8e21dad4afca26a0b2bf4764933f24c56eb7cf308fd9564bfb74e4bea4347e4f23
SSDEEP 768:jjsSiS5uymDbYulea4nFbvouGXTxZxaYgxPeIHmq5dEs/XU/YTMJibmXrvcw:hPmIagFpSxZxgZLf/XU/Y+ywb9
TLSH
T1B223023DA56A08167E5773E1F77A5B9F0B1AB8D80A3E0E0582A42755DDD130C46ED23C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002d
Size 54KB
SHA256 f4bd4c1e8a3aa5df49643aaa4a2aa7ea537a8b9f0d6ba67074d9151bbf1b891a
MD5 ac3f20836df40959b941c9122e613b55
SHA1 132ef4f626e5cfc19af6e2259619eddb415d8f6f
SHA512 ca13b8ca3e31e49f230bd67dc633886d9e0f0cd9d607210892bdfa0d028be01b74c5d8edf8883443bdd9a340b85c2e21931e685865486d98161313c7086d4f3d
SSDEEP 1536:YB2JMkNHwdUJQhCb6SOIw7sv9wZPMcXa2mxcCJFh0:YgSOJQOmIw7sv9Aa2mh/0
TLSH
T1D8430254D2E9B8D7466CC9D2A84F55E07424BAFDC27B20B0932B89C7A1EF04F24A24F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002e
Size 38KB
SHA256 09b9cbfd25bb873eb245a96cd716811438d9044eff7739b68c27678d878ba11d
MD5 54d38c41a96b8fa48d40b3d9c42dfd3e
SHA1 f3353f913157bdc58797223b9072b3c0ad7cc298
SHA512 f72b40b4ffde64ed7e98c5640d3d026985e286f199ea79a8b2fbf179fb572a0262b51c6b4210afaeafdc0c01fa4328380aaa9145266c0d186a961e3269d110e8
SSDEEP 768:poN76RpFZ0aMhl0LwYIPaYfPGrYQ2ln7S5/2VVE9GuL7T9vKD26K7:kqpIuLwYISYXaYQ2mIK9/9vm4
TLSH
T16103E1CD435C2821E0F2E7DA4184C5CDD4CE8581668D926E44E88FFA1BFEF443554AAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002f
Size 91KB
SHA256 27c3533dbdc06bed12e6a93f2626a8ca6d1c87170620e2fa52a6341521d3f78c
MD5 7701ea7e6720ef05995798d4a74d043c
SHA1 2bf01e1c82abb612d733894fcb6b731f9323e499
SHA512 dd5211cb0be55158f867b3fbba21e0dc884aac3e68ac6c6f35b188bcac7a303a022d9b15e2912dc3359d28cffb25c83a5b3ab2aa1511139a8e1dc25ffa9e0ea2
SSDEEP 1536:3kOKqMgkAxEdJ8VOPDHhQUCOzZGYwn71JH11Ib292t3idNOQr4Fr33HPO:0QM3AxEsQP1TCOzUTT199F3mrPO
TLSH
T1179312722CC9A944EF326AF7F61827727B1343698E7AEF1469733C2286A81D40B34C54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000033

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000033
Size 16KB
SHA256 11f7a0b2f9f2ba9a530d861444b469c27c925e524fecab238f5b31753b620ec0
MD5 455429f06958c6c3d33c482a1267de46
SHA1 6ec6fa08b24d1ad353b0d2b4ce834b987a258004
SHA512 92ec627742d1162a1c1bb479a2d5d2ad808ef976f82f1571fa761460989505208983ed923c6ce1b986ab4227cd6bf732bf097fd600b3ca4e333a9eb5f4df1c5a
SSDEEP 384:hs4s26vUAhQpuDxEhbnmY30vEwBNEwJxt5Gv9/SfrEtG40:hs4aSpUEV30UuDi9/SotG40
TLSH
T17172D0A1D6D44A134A1B9858F9B7A237F3A57D01E89C49DDB2F09B6F0F24C84941FC8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004d
Size 1024KB
SHA256 b053c6f70dee662711f86e7fcca7955d04efd834b92b4497dec3a8db9d1d4987
MD5 35084ee5757f7ba11f3077c8aa3b1d53
SHA1 1e0a0e6abe21e073b97d4b56c3bd28b07c45a2bb
SHA512 501e47515587c23432627fefd785805dba9c7e8435b69325bf5bf4e35618b7406c639918db151e1436bc699464df35f84ca0fad9deedbff0fa5f6c4b55aff7e2
SSDEEP 24576:al6l2NxMlQ0ZyokuTtkLh3S2pILjavNmcEDqEQ4eV5BSqw2:U6lLlHZyokuTk3ijavNmc8Q95BSqx
TLSH
T19B2533B66AE60694CE01F578114A6A3F9CF61A7EE540D1F3539731A2EE0E121EBD1C3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000051

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000051
Size 1024KB
SHA256 1c2e0385b3dd1911fcde1d4452f2ed638b25da26457eef876498b93976e3e1fe
MD5 260ad10c6cec93677c0adeec43ef720a
SHA1 a43578fffddae3d5a0c396f70b6ee179271d35b1
SHA512 03b7e7856d13b8c699e13570dfee6522f98eeed3760f8bb1894bdb6076f5b7e9f31a29c30b86867d3bad4bf240005402da9c91858fb3283c18537b6f192657e9
SSDEEP 24576:4wjDQNZ8QcdrZZafezVm5Im6H/iv9IYKHwfBIaRGwgMJk96b8M9oY:4wv4nxfezav6H/8tOpCGwgMwZKoY
TLSH
T18D253370A0313291700F5BD86BC1ABD5B321EFC2A953466CF24D8F7E4A666B065539EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007e
Size 1024KB
SHA256 4c61c0bbcec93415a51c38cff8b6059e4bc0a9561f3e18f4c8a986611e004db4
MD5 197a08164385cf4d5c8e8582e25b80ab
SHA1 2303b1750c29ff26b06fa8357a6aa0a6bb7b2cc7
SHA512 711275285c24081d0fd2cb438f2d81eae20c5958ab31499d447343a3d9f6d8d6a1b018bd81113f2645e68d3872a23f13aeb32631d0a499c4550e41b39a4218de
SSDEEP 24576:Df8g1jpuqY0umdspM11H7NpaDu+5r7wnDXn:JjpQudz117Gu8rknDXn
TLSH
T15D25330FEA0CF75FD7235D25695E809BB2B4556841A0520BC27B619EC80B4CDBCE2E9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007f
Size 1019KB
SHA256 4f0aa2c1cff492044794006989386f8d61a7762c4ea61eaf4c73f653ad7abf84
MD5 350a94d4f1ae9c76b0a3391d19a1fb45
SHA1 50a4911aafcef8ab896bf3b7461226245b29bef1
SHA512 1ba876e4d87e4dc0f464c7db24e4a123ac0d22ec5cad4083f77c812ad83955c189281d4111a8d00a8285df80e98c5c7f9d1c3433c9dff2440b7c4dd2c6881cb0
SSDEEP 384:iALXzmtu7RO790SO32ZOdyTBJ2L4nbcXZ5NhySe4yw:iAnm89m90SO3pwz2L4ncthpZP
TLSH
T155253B477B68572BC1256738C8F70389B332D2AABB475B67860567802DDB3D12F4A4E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000081

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000081
Size 1024KB
SHA256 4c77edf37537cf3040f1dc0dc315af6506ff7f8080a1cdd2faf371c94a8c518b
MD5 6fbe1fe506d8ed443e94931568ad1e88
SHA1 84cf4209f7696a60d5e887d043246587b39c3c1c
SHA512 a78828fbffd79884b8cdc4f2ba03adc19d69165883dddeeef098ba0d9d89eced8e5eb6002163bb848f2ce62f8333cea1e7554cc15a3d4ba92c4383dd5fc7cf03
SSDEEP 24576:KpMjdynjV1K0lAMh5T2tY4Wl3+UkmRQhW9lY2n455Qom6uMDaL:DjKVXnzqtY4WF+fmChWXp455Qo79o
TLSH
T195253350C474CC671B8722B07F5BE93F89B64BBF5622EC992C1726729902408F9F95BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000082

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000082
Size 545KB
SHA256 67263b839faddc6c161c0b93568e68c32890c6d51fa2df63193359a4bb189bdc
MD5 14d631361bfe6d5c582bdf0cc7c18959
SHA1 ce4c697fa4659b687b1afd75e7b98bc3cf198571
SHA512 2d632d256bd06cacfb49798ec876564dbb9ba2587ea9510e80fb1eb8fb130fcfe35d36a3e9067a06c5458135d3dba040243ab7440bdad040e58a28bae94bfe3d
SSDEEP 12288:ePMatRBWyDbbch4g/BK/OwBhTAO6BIUhRKaJyR:YM68G0mkY/jwBHpQR
TLSH
T17BC42310DB6A88FEB31048A9545F1910B47864EBB7FFD043B3EF2640A5DE2F816AE355
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00008d
Size 1024KB
SHA256 ce25caadda85424f9f703892dfa45c639662b4d8a9d19eca129829c34aca5ab8
MD5 56e094b406ecb0f231063ea3e5876eaa
SHA1 c3e539a3f8aaa445c8f8af811daaf5d326aeeaba
SHA512 7a021a3a2e4e2d7dbd4ad7c5882e58723de0d58740ccb1e522bba70fd053388f6b7ebe11bd495320aa8e9e5e89d95c91aa0a8ad6c35cac996d57de99f30cf443
SSDEEP 24576:j2pMmMYjWIGbBs+6xeqKjHzUZVIFIjFplGBRTs+SdZJ7ItAfh2:TnYjWIGbBs+GgHtFYeTSfJ7Iufh2
TLSH
T1AB253340EA9A653E1F877C3E6AB9B05D444132643146BBAD45FCC9310F72EB5EE2A138
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 e2feefb990078968f240d88987fc5b1a7739cfd7e5a7bbff4b07efcf49e8aa37
MD5 de26bb15a49f88ab747f7af84c907187
SHA1 1c94e242ccd8059ed6b2c27680c520cd0b7592ab
SHA512 1e5b2280909529be66edf2d8d09c3bf4a04b8de9a2c1b6819bb0858fef11497c3cbe632356539f41581f43f03098c271eaba61bd00c208cdb65df328c4f643d4
TLSH
T15031C840AEA00663E70424760BEB5C68B470A3BA89437E4D5324B0B6FB4A7C39627CD3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 9aeb9f18d9dacea3e34084cd354de77480ad05f4a31b4a636bd196c4c470cffb
MD5 c184763ab3299db481119b5c7f6554ab
SHA1 9c00bfe1950de1d2162dd629f59bf495aed3d7fc
SHA512 db2903f2dc95a9873b02411feb56a9a3b50db7b848ae9c9adff54b484e6c704656999ad2ade6c456693d93be3d5e7e9eec1a1645c0ffb4a416c35cf7cebd7fa6
TLSH
T11351FB80DE9066AFD71017329AAB28567CB0A3BC46C37E0D1B58F071FB463D382A7C95
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 89cbcceda84b71b8971d09a23ad8d1312bfab7442d1475a4d2244ce297f4aedb
MD5 4b18790a46eea27580055d9bc1a7684c
SHA1 6515d495e7a1b5d9442c6df0c6cd5a5ffe07fce5
SHA512 2a73bee93664805d58208c2cd482769f7bf874556709aeccbdc3ceb2199c9221424a3f35598fd847b6b6928f4def5e1883cff0cd3e4b363a816943588720def0
TLSH
T1C2410080AE915623D7102B720BEB285474B0E3BD46437E4C1F5970B2FB077938267C82
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 20KB
SHA256 31da8c252ef352ae1b778d6c4c4a716b5a5a7a5f84144b45c60efa8e8d428e5b
MD5 e59ffa9b5b065c51941b28f01f00a42e
SHA1 dda407e1f83741128444e068588ec69d0af8dccc
SHA512 93c8e76f864acdcebfcfbc230180e816db4dbea1053834f18cfc6083263d4b3528150e906179a7f870a6d2aea90c7eba1d7b18fd422d6b4370ca87474e1dd8d7
SSDEEP 384:DnAZd/kRe/uK9oe5uY3Y+x+aaT112jo26SF29XY6Upr6hwFrlr6+0Vm6W6ZNV9de:55jbrz8
TLSH
T12D928AF386E8CE2ECA1155F49B182E3BCE580E29432C385AD9D5FE6B93D2471D20165F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 20KB
SHA256 ecd789eefff5defee04c2cd5c7f70dd11a005ed47bf190c9db460c4b2317c0f5
MD5 677f8fe2af4c87eae48be4e3a4362182
SHA1 0b29c256ef60690410fe5da9c61540d10740192e
SHA512 5b74c6100c822d57e1546c04f116b8dc0b856f1abb8a1d66431cfbe8b5415c5c374f8b9b0ae51406f59f2fc8ccb7c2871022a12956e8294b0efb9dc6119dda92
SSDEEP 384:DnAZd/kRe/uK9oe5uY3YWaaT112jo26SF29XY6Upr6hwFrlr6+0Vm6W6ZNV9dHox:i5jbrzY
TLSH
T102928BF386E8CE2ECA1155F49B182E3BCE580D29432C785AD9D5FE6B93E2470D20165F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 17KB
SHA256 f0740c3bc9d7c50a43bb33a65cfbd065515f80a105d55b9137faa83db8407592
MD5 39d3cbcedb88e9acd9f7ad0a53b67cc4
SHA1 354922bc25bf8e3f0bdf05dac9bf9ab662bc48b1
SHA512 da4eb286dc2318929a03af84594f6a8c37de12b20549d2b64841e5f9405d57dac86317c56c655c746e3a01046a1f3dcd8d894f9eb46aedde159598b5a56e77e8
SSDEEP 384:DnAZd/kRe/uK9oeBaaT112jo26SF29XY6Upr6hwFrlr6+0Vmp6W6ZNV9dHoIOgPL:C5jbFz7
TLSH
T186827BF382E8CE2DCA1155F49B182E3BCE580E1A432C785AD9D5FE6B93E2471D20165F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 9f1c806b75440de3d4c616bcddf2494489ce517114a746d98f8b1b30a69ff53d
MD5 80d8d474c7315f63e8948ff6bb5b91f8
SHA1 40c0198b4197bd0e4abd50e96b58f52bac6cb141
SHA512 ead46a5ce1cb983fbd34f4a797a77cafa06c7ca86a761bdd0d48c6a5414d5aee7ca264ee8f30c8a5ab3a8eb74946ce81aa93ea650624f86a96b1482082e5d172
SSDEEP 192:/RAfu+YfuBsqv7spAPRp22C/9wHsb+WNn/Eu7w2l9Y2/epKba+VyIsnAUge:/RAfamYUX/8KwMB27Y2UKa2e
TLSH
T1C942A62EA9146D7B6CCAD219FD267B97D7F5002522C42E94EBFC8A2C45DB9CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 17KB
SHA256 436ce3db468c02e0c85552cba2ae92881789347e580bea24933e44aad853111b
MD5 ccf1051552bb1ca99098672df0b2ac56
SHA1 23f2ecb69e2f1b3f1ce56ea78b6cba9f0b4065b5
SHA512 0a8471c9ec0dbab494ea8482d1bf12f88f3d5fce9dbafc803e20cb16dec80398f89fc97e3a60bf332ae8e3a8fe90afa06525bf1b6a5a42e85a34e88b475b0c75
SSDEEP 384:/RommwaTDB6DNYYsXa77gSquKwtuAi4z9b2TWY2UKaiE:SmmryNtsuKwsTl2uR
TLSH
T12382C52BA9245E7B6DDAD219FD25BB9AD7F1202563C41E84EBFC8E0C01D7ACD2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 98cd1bb1eabaeed30ce80a8b8e340ed33b6afabc08eab59144c98ca9b9aa9a1b
MD5 0b73b94d449a46738672e31a30391adf
SHA1 ac4e069f7430246681a3de8bd378d0ad619b96a6
SHA512 f0077023153f091ea2575e428ce82a1e037f968ebfc2c554e92d72eee2d5de54e322ef314cc584ead9a9daf0a723513c0571526828f28ec79e3c1df176172110
SSDEEP 192:/RAfu+YfuUqv7spAPRp22mqT/9wHsb+WNn/Eu7w+gv2k9Y2/epKba+VyIsnAUge:/RAfawYUX/JKwMB928Y2UKa2e
TLSH
T16452B63EA9146D7B6CCAD219FD267B5BD7F5002562C41E84EBFC8A1C44EB9CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 17KB
SHA256 3a93e0515d29fd8331c15bf8634ec29469a180080a114363fd4403d361c79877
MD5 5baaaa412e0097ea5f64c87b002ed45a
SHA1 b4880701cd2be96f4ef6784b6faa425e403c97d0
SHA512 9be4408b7ebe00185a7ffe9a88ce28bcf090df79233615d645b439a628f0c138378ad3d3f0ee87dceb39a34371ad6a8e55e8f7e3dd84e0dc31efc46a301155b6
SSDEEP 384:/RommwaTDB6D+yYsXa77gSqcKwtLdi4G3b2pWY2UKaiE:Smmry+/scKwlpl2uR
TLSH
T12182C52BA9245E7B6DDAD219FD25BB9AD7F1112563C01E84EBFC8E0C00D7ACD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 793ce307beec4c10bc3fce3deb82f6909b135aa527fac80f23c1212475e4d224
MD5 052271b91acf4b5d9c29c755d5c2f676
SHA1 e74c719953b4efecc346099f5f2f71bcfc434967
SHA512 4024409bc83124b3e64369a77e517892010cbfc6bc51fe9c229a1984c801aeabe2d147d9a34bf05bed4235713f78f4af9f5bf44dc1bed1e34053042f6fa85cf0
SSDEEP 192:/RAPu+YfuUqv7spAPRp22mqTi9wHsb+WNn/Eu7w+gv2Z9Y2/epKbaPVyIsnAUgE:/RAPawYUX/MKwMB92/Y2UKapE
TLSH
T12952B53EA9146D7B6CCAD219F9267B5BD7F5002562C41E84EBFCCA1C15EB9CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 583092acc7caaa49e229de6e3d21908eef328155290fdf2f93eefc75a064cbdd
MD5 be7f46c7ca556d060d79e3ec10ebf114
SHA1 7f427701fcb5f5e0766093a25d90594147c4cb35
SHA512 279f6936b6d06392117a44090d01b756c5f594a8574270bb1b6fb6215090e61cfed113436161c4618f67a2d654c59f2a60da7fdddc86685d031643a05d7276ad
SSDEEP 384:/RommwaTDB6DwwYUXe77gSUKwlAi4z92XjY2UKaUE:SmmrywleKwPX82u7
TLSH
T18172D52AA9145D7B6CDAE21AF9267B9AD7F1112563C41E84EBFCCE1C01E7ACD2217007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 18KB
SHA256 0893e2e8ffe4abc643b24a992b9a645dddddf97f5e049dbbc3883121c957e320
MD5 1c968b7dfa0b266c6de0af60de8258e8
SHA1 13892acc7eea11a222ab2129030727113bf2ab0a
SHA512 9b95fbfedd4c2d41d989bc5656cd44ad18f0ced3b518abc6b5173959e336991fecb6679cb90137d17a0a541d72ba4f6fbea6bf7163fc3a53b02e09d48eff2fe4
SSDEEP 384:ZaTDB67CjUH7KxkXqKf/pUZNCgVLH2HfgslsZ7pLuLcSjCDXODUr+ErU3/NHGaqt:gKCUH7KxkXqKf/pUZNCgVLH2Hfgs+Z7p
TLSH
T199820967684CCE370F94D6C8D8267F4F9DB5024B25D9986493FA9C2903D5FCB020A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 379d96542283773f422c052abe7293924621df1604b63c9a59676e1514d2db6c
MD5 d066f854d368cbebca026e5da297c2c3
SHA1 4f2f84d54b0a8dfd273bbdb70bcde51ad5e2f12f
SHA512 613285c6b38983d33fb336394c5eff7edb692f60dfa433defdbf45524dd1c84cadfc8cba744a39b1c75482b318f7db6eaaae9842cfa8649a9ad00cece8442e41
SSDEEP 384:gCjUH7KxkXqKf/pUZNCgVLH2HfgslsZ7pLuLcSjCDXODUr+ErU3/NHGcmyqOqjmo:gCUH7KxkXqKf/pUZNCgVLH2Hfgs+Z7pF
TLSH
T15A7209676C4C9E370F94C6CCD8267F4F9DB5024B65E9886483FA9C2903D5ACB114A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 20e82c3eadb1e15fdb53a9f013c4388da8baafd2ae0070de9453c1884a71369d
MD5 0af7e8f8b00576c70f2f644c79ffb201
SHA1 7cfde3af5c096d16b222cd4ad2db7dee45de3079
SHA512 016e4f69f47a26f9f400fb4f6ede27f89628bb5a00fd297a40d3d5e221416c8a94c3c8a0b6868e4bb2a1a16bfbfd772f7379e11e7e84e567a64308bd1d9cdc81
TLSH
T13EB0124081026111C02602F42957248C71249F10DB4E270393E4692388251518817095
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587c20.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe587c20.TMP
Size 96B
SHA256 6c9fb604d99c81fb73374e5aa615de90b51bf1432481b17f4f5fd09e40ddaa94
MD5 6cc0df000fbc4da68a97286592f027cd
SHA1 5749dfe857fe71120ecccceb4ab6730d53855ed5
SHA512 925ee900cd6a85366af50ea5c2d0dbc139f64c73ee2d31f636d70b7c8873092564041a68216996baea936488ae62fb32d795f25c7a91d6656be41404eaad7518
TLSH
T1B4B02202CC032302C00203B038F8A8C8B220CF3FC2032203C3E03E22CC3023000220A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 1c1f2b006242ee583690adc831e0027cfee86afc21767c792d4bf2f93d41e1c2
MD5 8377cb25a8923dccf4e41a819c6ae466
SHA1 56a741b33d2e5af2303e22999f886d3fdcb9df96
SHA512 a18442dd796c7ace0731b477d66e8e79f0bafaa964915b4d4299a303bfd2cd40bc5dd84262e5a92f78484dcd4ca35d44a0302e33ea0b471f167fa261f18dd601
TLSH
T1E0A0021161490411E480827020CAD5453738EC111742135AE0D45996D9A1251D242A0C
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 a4156c61d61d313ae07b0f315bd3443a139142d6d88cb6ebb2b5e508c1e7c367
MD5 1c8e5b93f2d67caff6bd9743909cc670
SHA1 77516ac6d8aa2a56cff7c796c6f40a294791702a
SHA512 8ec123f80f4726710b02c7a1b56420791418246562fd4d8a6a4ac32c50388428abccda75e630f37c1bfc8d984c078e9f81092ea3905328cc01fdeb1fb16f1d22
SSDEEP 3072:JdGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Om7Rkm1tYpBeh2BAoK
TLSH
T17BC3023B5D65AC7799B9BB0EB04E0A1F1EF149A6C920DE46C8D85E0833FA6CC0A45D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 527a9d75707d3cc0301c13bd115c3aae76d739f37fea19d3653c55bc90087995
MD5 95192268c2e3c01a94571d411fcc6a79
SHA1 5adc4ba34f2cfdf1a1b752519d082e2b4d35a567
SHA512 f95c739ecf7dbefb99ac92f35c1ac337cd3f97994322db151794292cfe865c192cf635eae9c5b7d47da2be6ed274953a943715b7db2da43868eb9445e45870e9
SSDEEP 3072:MGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:/m7Rkm1tYpBeh2BAoK
TLSH
T1B7C3123B5D65EC7B9979A70EB48E0B1F1EF149A2C920DE92C8D86B0437E97CD0A04D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 ad3042f040f5cf981cf00bf4c05d22ca4ff5fd7a93df735c7617e1faef210d68
MD5 a3470dd2d9a280ea758edbe39a0d472f
SHA1 a442787557473b36a55551578ba7cff9c296173e
SHA512 057ad43d4f36da9ea2b8bdf07fa6eeafeeee18b06027a0a4e4659ddfd77a5cd8a1f3d0ca2a7d6d8c0befc3901b035721616d78cff2ec13ce8a6afb9bd1ec8158
SSDEEP 3072:7Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:im7Rkm1tYpBeh2BAoK
TLSH
T17BC3123B5D65EC7759B5BB5EB04E0A1F1EF149A7C920DE52C8D89B0823EA7CC0A05E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 30ec417c534878b69310da9537831e4de337283df929bc01f3b6d2abe95094c7
MD5 609e6e433d3f35401412c8a9432d2905
SHA1 1888f9e84d16eaf184793d8953177d33e03b469a
SHA512 a1d3a546f0150bebe4ddaa324f2ac2932477a30f4fa7900f55163ded4f5be8a1cf0b0ca3014708dab6d73b4bafd74b0c36d6b03c831e5d528d6f7510145c31ba
SSDEEP 3072:TGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:qm7Rkm1tYpBeh2BAoK
TLSH
T1C8C3123B5D65EC775DB5BB5EB08E0A1F1EF149A6C920DE52C8D89B0823E97CC0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 57a05bd780a4a2809b63bd11196b4881249b86c3aced1161855e7b187b7899a0
MD5 15ed48d2c884deac6be27e6449313a20
SHA1 c06a42da99587393c788d2baf4088700386286c5
SHA512 c7f982cf287671b14a64f7a972eb074b1f825e12fde1a976a18e51a398b388d08aa2db3fe32cf78dbcecde59fdf77c1071d7520335605540e0747063162ad682
SSDEEP 3072:VdGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:am7Rkm1tYpBeh2BAoK
TLSH
T13FC3023B5D75AC7759A9BB0EB04E0A2F1EF149A7C920DE46C8D85E0833FA6CC1A45D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 91733800efcf41988f0fe73d0418576d65717f207d721d574abd67d8e2ec7bcf
MD5 ba6ab9c4ff38e553b64401023b3ac0bb
SHA1 cf7473402446c8581f69166f25fae9d29198903f
SHA512 c61599f49d1a9d0a6843425cedeeb0f3d1ea419385d2aef31dac4cfa2841e28b2fac2ac9971ee6cd85e6090cb2de6d51b69b6aca82cd5f97323adbcb539ee612
SSDEEP 3072:2Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Bm7Rkm1tYpBeh2BAoK
TLSH
T1AEC3123B5D65EC775DB5BB5EB08E0A1F1EF149A6C920DE52C8D89B0423E97CC0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 c7f0b622939a8c31c854cbb1d7c63e66f3bb179eacae6f26491c654b1509721c
MD5 704f5f649d8c12ae4b9a028a2072e47c
SHA1 d44997fa934afb9b7a09943a9259c22b909524e5
SHA512 61d82f3b31b91c8a92ce55a727b01944aaafd81bb0e72362d388ac3fb4b0256fc9886c7be463615416c7e78e17ff70d5ed9a9b9444b498d48a45c7c725512fcd
SSDEEP 3072:cdGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Xm7Rkm1tYpBeh2BAoK
TLSH
T129C3023B5D65AC7759A9BB0EB04E0A1F1EF149A7C920DE46C8D85E0833FA6CC1A45D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NdfSession-07192026-0007.etl

Path C:\Users\Admin\AppData\Local\Microsoft\NetTraces\NdfSession-07192026-0007.etl
Size 192KB
SHA256 7cac2fa2c148b90f7c512fd723df6e2e99d3271e85980353d1bb57f1c87330ee
MD5 0309b061e715ffc4f0d79b6d990f054c
SHA1 47eb98e47807613e8b7cb6ab0c4efc5d5da1066b
SHA512 2f9d0adb221dc97213188471bb7fb097a3e5e104b5ba34b99191f1206d2b2cd69342d545725c6fce5a3033b77c8702f5dd44ee37c6ac9a0cd54837a893011bf9
SSDEEP 384:AaxprRkFm5p0haOehP+oHv+KwuRl3j5Zt2R1dEFocwtYdVFoMFlkcYrm2aBEn+9U:bp0haOehP+oHv+KccN+THtsw
TLSH
T1D5140C80E7F6010AF7B76BB2AEFA23115A737D4126359A2E0548B7181873E55CD23F63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NDF711A.tmp

Path C:\Users\Admin\AppData\Local\Temp\NDF711A.tmp
Size 3KB
SHA256 c0ca0df8e77c5fdfae51e57985f2157a2eea77f506bcb674e432772fa8ede089
MD5 a9cd4fc5b429ccee8a352347125c71a6
SHA1 379779d464c0d6c7776e8e98173cd901e2507dc0
SHA512 13ab3d960d1b2b7dcf0e63f1183a280be9f22d53b654228bd2891fd198992e958ff798cbe88d420bc988f14cbba88af0f70ac5fc4d5f20703368494f99fb5000
TLSH
T10261093733FA3D2BE1B6C7C89EF15A1BB00AF8767641E58CD4DA075D42A0D30689122E
MD5 SHA1 SHA512 TLSH

Submit Download

python310.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI33442\python310.dll
Size 4.3MB
SHA256 14b06796f288bc6599e458fb23a944ab0c843e9868058f02a91d4606533505ed
MD5 63a1fa9259a35eaeac04174cecb90048
SHA1 0dc0c91bcd6f69b80dcdd7e4020365dd7853885a
SHA512 896caa053f48b1e4102e0f41a7d13d932a746eea69a894ae564ef5a84ef50890514deca6496e915aae40a500955220dbc1b1016fe0b8bcdde0ad81b2917dea8b
SSDEEP 49152:myrXfGIy+Bqk5c5Ad2nwZT3Q6wsV136cR2DZvbK30xLNZcAgVBvcpYcvl1IDWbH3:Uw5tVBlicWdvoDkHUMF7Ph/qe
TLSH
T102267C26A36401A4D9B79477C523864BCBF1FC442F24D34A41A4BAD92F73BA317EE706
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ucrtbase.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI33442\ucrtbase.dll
Size 1.3MB
SHA256 2e5fb14b7bf8540278f3614a12f0226e56a7cc9e64b81cbd976c6fcf2f71cbfb
MD5 286b308df8012a5dfc4276fb16dd9ccc
SHA1 8ae9df813b281c2bd7a81de1e4e9cef8934a9120
SHA512 24166cc1477cde129a9ab5b71075a6d935eb6eebcae9b39c0a106c5394ded31af3d93f6dea147120243f7790d0a0c625a690fd76177dddab2d2685105c3eb7b2
SSDEEP 24576:cQPuhXCFmugCw3wUAZMMNX6smpRrgTuJi+1Sats7F9qmxvSZX0ypKpIPng:cQWhXCFm7Cw3w3ZXX6DYaY9lpUg
TLSH
T1BE55AE2266AD01E9C5BFD13DC65B4906E9B2781503709ACB03E94E792E3BBF5077B321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__PSScriptPolicyTest_jn5l2hka.un3.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_jn5l2hka.un3.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

NetworkConfiguration.cab

Path C:\Users\Admin\AppData\Local\Temp\tmpCE6D.tmp\NetworkConfiguration.cab
Size 1KB
SHA256 11bbba3aff8c5303d7ac0606d83a2105a385302891e935db9c3cd9e1a74c24c0
MD5 48a7acdae13ba9d33b2c618baff81e51
SHA1 0974dd3353744957e16f145cb12179c68b2537c2
SHA512 6a18debd8ae88b70dd73a1d03327ccf6cf35c0e3eb1dbbab1a76aa04fdfe68f83de2accc317f4da0ba7515d63c12cf25b1fcc83dfe3f8aea737ceadc5fe6e125
TLSH
T12B11B904CCD82657D0E1B43AD702D417C8E33113B679574F1014D88CE51DA5874A8335
MD5 SHA1 SHA512 TLSH

Submit Download

NetworkConfiguration.ddf

Path C:\Users\Admin\AppData\Local\Temp\tmpCE6D.tmp\NetworkConfiguration.ddf
Size 231B
SHA256 ffeafbb8e7163fd7ec9abc029076796c73cd7b4eddaeeda9ba394c547419769e
MD5 00848049d4218c485d9e9d7a54aa3b5f
SHA1 d1d5f388221417985c365e8acaec127b971c40d0
SHA512 3a4874a5289682e2b32108740feea586cb9ccdad9ca08bf30f67c9742370c081ad943ea714f08dbf722f9f98f3b0bb307619a8ba47f96b24301c68b0fd1086d9
TLSH
T154D0A9A238AC9A9126A53E8AD7600546B0A040D760CA428E8EABE2C60C280406B8923B
MD5 SHA1 SHA512 TLSH

Submit Download

ipconfig.all.txt

Path C:\Users\Admin\AppData\Local\Temp\tmpCE6D.tmp\ipconfig.all.txt
Size 1KB
SHA256 7478fb048838fee364f96e85c63b2dea2a55996be547d9636c764b5a4d20c930
MD5 ea793ce8ff49af2a25cfa325e716ce37
SHA1 743773014be097f0c543d335d6ed886c820afc7a
SHA512 503689e654663a77ca4edd48029a6e56b797d2e38b5d233817a4cd378c5aa4d3556ff19aa2e129ea34cfd7db2a2cfd1da9396de3390473c26a1d0b81a0ae3db6
TLSH
T1A241E61E52E9030472B2071E5AF780256B77781DD9F88F0D31C9931A0FE3A01895CFAB
MD5 SHA1 SHA512 TLSH

Submit Download

route.print.txt

Path C:\Users\Admin\AppData\Local\Temp\tmpCE6D.tmp\route.print.txt
Size 4KB
SHA256 6439a893a8f2d7912d44de0fad644dadb5cf67cfa4f68fd638355c45bd3a93c1
MD5 f232bcebe518d989f325024221bf697b
SHA1 7804b6d93b5e0747c5aebf7152aeef95cefedb45
SHA512 cac0ee4efb7e492a16b8573de10082e4d8626914d836d01095f8c094971149a5d3d51d3954cbc8db14ca893d87cfb0c11d2347c846bd4b1922201bdda7ee7f68
SSDEEP 48:R/G9wO+50sti5cDbhZ5tau6NkFtXOXeAJrRf2S:RunG0Bc/hZ5tau6NkFtX2JZ
TLSH
T12991F71E149913405165D70AD4E6402BFA3738A2ECB84B9920CF2BEA1BE744179D7FEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setup.inf

Path C:\Users\Admin\AppData\Local\Temp\tmpCE6D.tmp\setup.inf
Size 978B
SHA256 aa99c5ebb6631ec0816984c43c2fe52cbafdba95691afc9f772b8e06f0fb8813
MD5 045df4b6ef292f3ccbe26c7452909f46
SHA1 246a99c2cd7c7f77ea4aa2b6a817f91110317689
SHA512 e9b8f93404c1a9f2d10c55479a70e5905445f02a0c2e68e03409807064b69d70a34bc65e74641ab1eb23e8b58c991e54ea365f15af8637df461c6f9a635dc88e
TLSH
T15711E51605E34D0F203312C28AA4C2C1F460C142915EBDCC740DF5B89F0FFDAC518026
MD5 SHA1 SHA512 TLSH

Submit Download

setup.rpt

Path C:\Users\Admin\AppData\Local\Temp\tmpCE6D.tmp\setup.rpt
Size 283B
SHA256 8b770fbf3c29af4ddfe00a59974f2869b83bd4d613dff29e525ee01812649cb3
MD5 911c787408b30d0c9de3aa9b0e2b95e6
SHA1 ef4866d3d10dc047926cd08237e41a2b40966be7
SHA512 d0da8b039be3e7a96ffe634a72895d21990484e9162ddf5659a518a6e9b161617170ff5ac6a557062952d73285a99c6c2feb522676934a50abe04b856a4c01a0
TLSH
T16ED0224B088A8554AE3481C24E8CC3423242A03F2A2DCC36F08F5AD043233B8CDDA4CD
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

sims-4-updater-v1.4.7.rar.crdownload

Path C:\Users\Admin\Downloads\sims-4-updater-v1.4.7.rar.crdownload
Size 19.8MB
SHA256 0e7062b0a9cfd1cb13658e05ad11884ebce7f5fffe98eea5bf91f938ad10bfce
MD5 c71b935d6d702f0ee3b265bc8c3862db
SHA1 316f780ac39ebe842911f1e995c01f98cdaf24f4
SHA512 1c7271996251593b677dfdbc7cd48ee4d35d4593edcfcfccf937d600bd8d14582affc87cf835ce6dedd7254ba1046a76efd89c0609c503b17c0b9b2dd6aa451b
SSDEEP 393216:wyjZXhRLViLQFbnMCQMgZVKWFUmSjAvIHN2ixzGhv3G/2gbEiFOXeT9tSg:wytXhRRNxMCQMcKgfS0MN2ixCt3G/2Zq
TLSH
T1682733E11DEDC3EA6DB80BB479D02B8E47814024998A7F5448A0D52F69CB1431BBEFD7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sims-4-updater-v1.4.7.exe

Path C:\Users\Admin\Downloads\sims-4-updater-v1.4.7\Sims 4 Updater\sims-4-updater-v1.4.7.exe
Size 20.4MB
SHA256 d261d8e19a2165642060a815b8b482b1b56190109cae0c693ef5be82e4df733e
MD5 7a321e375c18a0bfdc4316adf0e58899
SHA1 6a9ff8abd74d8aff739b81de791cfa8ea3203592
SHA512 5a0cab16c93e00e63f6123f8ddfa0e5ad02cc8f3b56374d0641445a6402c9f459e12caadf545a4d5a4f1ec2eaaa7e4cdd2dc2404b08d3ccadbe07870671b801b
SSDEEP 393216:isFl7dCR1C99OVLa3UvdADfDgrc6w+q3+d9tJ7Rx/6RdznIGkaxiGW8oR:hFlUR1OOVW3UlAb0InBOd9tYRdThkax4
TLSH
T1FE2733CA72860CC5D9AE5737AF81532664A2B07A47C693C3DBBD8BA10F472B4BC75344
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NetworkDiagnosticsTroubleshoot.ps1

Path C:\Windows\TEMP\SDIAG_0289f9d1-1ac5-41dd-a34b-19512bf0e1b0\NetworkDiagnosticsTroubleshoot.ps1
Size 25KB
SHA256 e3940266b4368c04333db89804246cb89bf2073626f22b8de72bea27c522282a
MD5 d0cfc204ca3968b891f7ce0dccfb2eda
SHA1 56dad1716554d8dc573d0ea391f808e7857b2206
SHA512 4d2225b599ad8af8ba8516f12cfddca5ec0ce69c5c80b133a6a323e9aaf5e0312efbcfa54d2e4462a5095f9a7c42b9d5b39f3204e0be72c3b1992cf33b22087c
SSDEEP 384:UlSoNnCiXTShob5bbVbgWT6rZTvxlBNexTKmh+xdxBUNQGJ:GSo3h8Jq
TLSH
T129C295F16D46C29518F71179DE52E018FB26026F229EB7763DBC83851FB0210E666F8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartDPSService.ps1

Path C:\Windows\TEMP\SDIAG_0289f9d1-1ac5-41dd-a34b-19512bf0e1b0\StartDPSService.ps1
Size 567B
SHA256 d19677234127c38a52aec23686775a8eb3f4e3a406f4a11804d97602d6c31813
MD5 a660422059d953c6d681b53a6977100e
SHA1 0c95dd05514d062354c0eecc9ae8d437123305bb
SHA512 26f8cf9ac95ff649ecc2ed349bc6c7c3a04b188594d5c3289af8f2768ab59672bc95ffefcc83ed3ffa44edd0afeb16a4c2490e633a89fce7965843674d94b523
TLSH
T1C2F0F673E05785359E679CBB0D00C0544928A1CF727A1DEAB1658AA0B30A78EABB7F51
MD5 SHA1 SHA512 TLSH

Submit Download

UtilityFunctions.ps1

Path C:\Windows\TEMP\SDIAG_0289f9d1-1ac5-41dd-a34b-19512bf0e1b0\UtilityFunctions.ps1
Size 53KB
SHA256 3891846307aa9e83bca66b13198455af72af45bf721a2fbd41840d47e2a91201
MD5 c912faa190464ce7dec867464c35a8dc
SHA1 d1c6482dad37720db6bdc594c4757914d1b1dd70
SHA512 5c34352d36459fd8fcda5b459a2e48601a033af31d802a90ed82c443a5a346b9480880d30c64db7ad0e4a8c35b98c98f69eceedad72f2a70d9c6cca74dce826a
SSDEEP 768:AaDgc60FE2UMeV6HQEqEVBWMBaRNdKdNh5BIW6Mk7svkxtFJuAQQW:j0a4bKcW6MkcSuj
TLSH
T1A733A4B57883967255B316749F47A008FE79031F0AE84168FDEC86C62FB4514C3BAF9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UtilitySetConstants.ps1

Path C:\Windows\TEMP\SDIAG_0289f9d1-1ac5-41dd-a34b-19512bf0e1b0\UtilitySetConstants.ps1
Size 2KB
SHA256 de5c231c645d3ae1e13694284997721509f5de64ee5c96c966cdfda9e294db3f
MD5 0c75ae5e75c3e181d13768909c8240ba
SHA1 288403fc4bedaacebccf4f74d3073f082ef70eb9
SHA512 8fc944515f41a837c61a6c4e5181ca273607a89e48fbf86cf8eb8db837aed095aa04fc3043029c3b5cb3710d59abfd86f086ac198200f634bfb1a5dd0823406b
TLSH
T1DC51BE03DF8D5744BC9E6ABA60E133646598F92771C4618CA93CED50B89D13F92953C3
MD5 SHA1 SHA512 TLSH

Submit Download

LocalizationData.psd1

Path C:\Windows\TEMP\SDIAG_0289f9d1-1ac5-41dd-a34b-19512bf0e1b0\en-US\LocalizationData.psd1
Size 5KB
SHA256 0637af30fc3b3544b1f516f6196a8f821ffbfa5d36d65a8798aeeadbf2e8a7c2
MD5 380768979618b7097b0476179ec494ed
SHA1 af2a03a17c546e4eeb896b230e4f2a52720545ab
SHA512 b9ef59e9bfdbd49052a4e754ead8cd54b77e79cc428e7aee2b80055ff5f0b038584af519bd2d66258cf3c01f8cc71384f6959ee32111eac4399c47e1c2352302
SSDEEP 96:iLsmw/9nwbgDwlwn0iYveuQzRkkwj0pD+Eij4FvJG5B9c1rO4L:iLsZklGeKxGfw
TLSH
T15CB17C4263FE2658F2F36F44AEFA15615E36BCA9BC38D25C1150050E0AB2E40DDA1BB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DiagPackage.dll

Path C:\Windows\Temp\SDIAG_0289f9d1-1ac5-41dd-a34b-19512bf0e1b0\DiagPackage.dll
Size 478KB
SHA256 5b7aa413e4a64679c550c77e6599a1c940ee947cbdf77d310e142a07a237aad2
MD5 580dc3658fa3fe42c41c99c52a9ce6b0
SHA1 3c4be12c6e3679a6c2267f88363bbd0e6e00cac5
SHA512 68c52cd7b762b8f5d2f546092ed9c4316924fa04bd3ab748ab99541a8b4e7d9aec70acf5c9594d1457ad3a2f207d0c189ec58421d4352ddbc7eae453324d13f2
SSDEEP 6144:0ZC0lEOC2Us6eEyAc0jbJYOjlCLHUZQsxjuaJ7oSEvcdfSc0jbJYOjlCLHUZQ:0ZFLUe6vJ/wLIvavyfEvJ/wLI
TLSH
T189A49E8BA6848DF0C72A0674C42BCDF04E267C76DC11772E6B99F66F4CB2291644B71E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DiagPackage.dll.mui

Path C:\Windows\Temp\SDIAG_0289f9d1-1ac5-41dd-a34b-19512bf0e1b0\en-US\DiagPackage.dll.mui
Size 17KB
SHA256 8be175e8fbdae0dade54830fece6c6980d1345dbeb4a06c07f7efdb1152743f4
MD5 44c4385447d4fa46b407fc47c8a467d0
SHA1 41e4e0e83b74943f5c41648f263b832419c05256
SHA512 191cd534e85323a4cd9649a1fc372312ed4a600f6252dffc4435793650f9dd40d0c0e615ba5eb9aa437a58af334146aac7c0ba08e0a1bf24ec4837a40f966005
SSDEEP 96:+mbJmdYVotzW1xcFjPe/dQTVOd5RLQ9/5HgVqz+4MLRvTLGlyQzwv7KCbVeog3+S:+mx1xyexdXeoR4gsgKvHWlTWn
TLSH
T1AF727901A3F90618F2FB7FB46DBA56654D3ABCA6AD38D28D0504005E59B2E90CDB1B73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2516-2668-0x0000023B62A80000-0x0000023B62A81000-memory.dmp

Download

memory/2516-1177-0x0000023B61DB0000-0x0000023B61DC0000-memory.dmp

Download

memory/2516-1173-0x0000023B61D70000-0x0000023B61D80000-memory.dmp

Download

memory/2516-2667-0x0000023B62A90000-0x0000023B62A91000-memory.dmp

Download

memory/2516-1181-0x0000023B62970000-0x0000023B62971000-memory.dmp

Download

memory/2516-2670-0x0000023B62980000-0x0000023B62981000-memory.dmp

Download

memory/2516-2671-0x0000023B62970000-0x0000023B62971000-memory.dmp

Download

memory/2516-2673-0x0000023B62970000-0x0000023B62971000-memory.dmp

Download

memory/2516-2676-0x0000023B628C0000-0x0000023B628C1000-memory.dmp

Download

memory/4576-1172-0x0000017D7C630000-0x0000017D7C640000-memory.dmp

Download

memory/4576-1158-0x0000017D7EA50000-0x0000017D7EA72000-memory.dmp

Download

memory/4576-1150-0x0000017D7C630000-0x0000017D7C640000-memory.dmp

Download