98a1842154aeb01e14379ac955221fd5eee5b9bec1f27937a66638d772612bab

Analysis

user interaction
yes
max time kernel
149s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/07/2026, 12:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
skin-change-valorant-main.zip
Size 6KB
Sample260720-p71k3ac15w
SHA256 98a1842154aeb01e14379ac955221fd5eee5b9bec1f27937a66638d772612bab
MD5 500aa4827b79c8d6e045df648cd2b7d6
SHA1 353d22fa3a935b027d17dc8fa50b023b3c8752db
SHA512 c5b3cdd77484ebe2d79fac0393fcdfad54000dd2a13d1968651093b24e6c4d5b2d4a26bb448223932c9ebf4bd92c80d935cb6e662df6a39d32f1505044856c17
SSDEEP 192:F7zbsQOWAPPG1512JyFJw/83UzXUn4tLH15REPa8KUTlsG:FfQNBE2q+0GXUn4tD15RZssG
TLSH
T196E18EC46A070498F95D45F0325B1F6991C0ABC7BD34BE123A8AA984CF1E6E9D445A9C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1572	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}\Instance\	vlc.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\Instance\	vlc.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{374DE290-123F-4565-9164-39C4925E467B}\Instance\	vlc.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	vlc.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	vlc.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A0953C92-50DC-43bf-BE83-3742FED03C9C}\Instance\	vlc.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
1948	vlc.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5952	chrome.exe
5952	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe

Suspicious use of AdjustPrivilegeToken 8 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5952	chrome.exe
Token: SeCreatePagefilePrivilege	5952	chrome.exe
Token: SeShutdownPrivilege	5952	chrome.exe
Token: SeCreatePagefilePrivilege	5952	chrome.exe
Token: SeShutdownPrivilege	5952	chrome.exe
Token: SeCreatePagefilePrivilege	5952	chrome.exe
Token: SeShutdownPrivilege	5952	chrome.exe
Token: SeCreatePagefilePrivilege	5952	chrome.exe

Suspicious use of FindShellTrayWindow 37 IoCs

pid	Process
1948	vlc.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
1948	vlc.exe

Suspicious use of SendNotifyMessage 18 IoCs

pid	Process
1948	vlc.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
5952	chrome.exe
1948	vlc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1948	vlc.exe

Suspicious use of WriteProcessMemory 23 IoCs

description	pid	Process	procid_target
PID 5952 wrote to memory of 6008	5952	chrome.exe	95
PID 5952 wrote to memory of 1572	5952	chrome.exe	96
PID 5952 wrote to memory of 1840	5952	chrome.exe	97
PID 5952 wrote to memory of 1840	5952	chrome.exe	97
PID 5952 wrote to memory of 1404	5952	chrome.exe	99
PID 5952 wrote to memory of 1404	5952	chrome.exe	99
PID 5952 wrote to memory of 1092	5952	chrome.exe	100
PID 5952 wrote to memory of 1092	5952	chrome.exe	100
PID 5952 wrote to memory of 3492	5952	chrome.exe	101
PID 5952 wrote to memory of 3492	5952	chrome.exe	101
PID 5952 wrote to memory of 6016	5952	chrome.exe	102
PID 5952 wrote to memory of 6016	5952	chrome.exe	102
PID 5952 wrote to memory of 4316	5952	chrome.exe	103
PID 5952 wrote to memory of 4316	5952	chrome.exe	103
PID 5952 wrote to memory of 5780	5952	chrome.exe	104
PID 5952 wrote to memory of 3004	5952	chrome.exe	105
PID 5952 wrote to memory of 1452	5952	chrome.exe	106
PID 5952 wrote to memory of 3004	5952	chrome.exe	105
PID 5952 wrote to memory of 1452	5952	chrome.exe	106
PID 5952 wrote to memory of 4928	5952	chrome.exe	108
PID 5952 wrote to memory of 4928	5952	chrome.exe	108
PID 5952 wrote to memory of 1888	5952	chrome.exe	110
PID 5952 wrote to memory of 1888	5952	chrome.exe	110

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\skin-change-valorant-main.zip
1⤵
PID:3392

C:\Program Files\VideoLAN\VLC\vlc.exe
"C:\Program Files\VideoLAN\VLC\vlc.exe" -Iskins
1⤵
- Modifies registry class
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1948

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0xc8,0x134,0x7ffa77f9c728,0x7ffa77f9c734,0x7ffa77f9c740
  2⤵
  PID:6008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1880,i,9398952682755765027,17391033776224686694,524288 --field-trial-handle=2052,i,4664017298031877964,54099653348118169,262144 --variations-seed-version --mojo-platform-channel-handle=2080 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1696,i,10299153655672125971,11872148213593591156,262144 --field-trial-handle=2052,i,4664017298031877964,54099653348118169,262144 --variations-seed-version --mojo-platform-channel-handle=2044 /prefetch:2
  2⤵
  PID:1840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2320,i,5610031453703434491,13031180496083856015,524288 --field-trial-handle=2052,i,4664017298031877964,54099653348118169,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:13
  2⤵
  PID:1404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3352,i,879429010974588169,18036846311539989369,2097152 --field-trial-handle=2052,i,4664017298031877964,54099653348118169,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:1092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=2572,i,5271528664026589042,10905065380751515742,2097152 --field-trial-handle=2052,i,4664017298031877964,54099653348118169,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:3492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4388,i,9076247399073840710,16831928124947166124,2097152 --field-trial-handle=2052,i,4664017298031877964,54099653348118169,262144 --variations-seed-version --mojo-platform-channel-handle=4572 /prefetch:1
  2⤵
  PID:6016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4816,i,3054024374636164176,2553155438959740177,524288 --field-trial-handle=2052,i,4664017298031877964,54099653348118169,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:14
  2⤵
  PID:4316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5292,i,95467742824027647,7796009643385937228,524288 --field-trial-handle=2052,i,4664017298031877964,54099653348118169,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:14
  2⤵
  PID:5780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5396,i,18320408407135440989,15564048696796928237,2097152 --field-trial-handle=2052,i,4664017298031877964,54099653348118169,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:1
  2⤵
  PID:3004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5408,i,2104285595970426152,10297630900174789632,2097152 --field-trial-handle=2052,i,4664017298031877964,54099653348118169,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:1
  2⤵
  PID:1452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5496,i,2507549336821173226,1808607533168600375,2097152 --field-trial-handle=2052,i,4664017298031877964,54099653348118169,262144 --variations-seed-version --mojo-platform-channel-handle=5596 /prefetch:1
  2⤵
  PID:4928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5488,i,6530022189787906582,14596247455626744118,2097152 --field-trial-handle=2052,i,4664017298031877964,54099653348118169,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:1
  2⤵
  PID:1888

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:904

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

78d09f12-42fc-48c4-96be-89eeb8999909.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\78d09f12-42fc-48c4-96be-89eeb8999909.tmp
Size 10KB
SHA256 d8ada96d5e14f378afdaa5df9d1f1a5c219d9693f08f942faa69a3aeb776f233
MD5 5b6d7deb9c836a9292add40b973383b3
SHA1 496f8af92592fb9faa72c52a2e31ebca9ecf5b1e
SHA512 913bb747baad7b2dad82fe3f4eae0d52dfbeaf2f81957b8d6257acd973740fbffc88f46b39076dffaccfe1ddc0fdaf8d5018f112f5a2305de68c7fe192b65e86
SSDEEP 192:HR/Rb4lcv7sAPRp2X964Hsb+WNnzY0Kc3PyIsnAUgR:HR/paIBXUbws0ZzR
TLSH
T1EA22762EB964A97B5DCAC31AF9217B93E3F5102325902E84E7FC8A2C11E79CC3213417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

184f8fd7-efcb-4683-8da5-71d3d2b74dc1.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\184f8fd7-efcb-4683-8da5-71d3d2b74dc1.tmp
Size 523B
SHA256 436de97c77807c6e5fa51f4c8e296d2f8bf21c0769d6bb6c90d0528851359d16
MD5 060fcf8bebb4c6a61e15aa8432b299c9
SHA1 8fdafc648e1cd841b852ce3aea1916f32ad19a1b
SHA512 167f4153e2fa14b594204eb09890903ef8bcb5078e8db694c6ba33be77d981584475390cd78ec60a7ee3f15d401464313d1363379ae4a14fff7c2d32a6afa1ea
TLSH
T183F059A7A73A7563117D84BB1E04784E69B6A832028178F0CF6A826DA0D69E30F0A453
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 1b567dcaa12a33d3b57ea4f31256c09a6b514428f4d8164f6ea11b3f9fbeda73
MD5 1cb44f1cc578591f41d6ab8d5078ad63
SHA1 4b43ae15b5c9685b4d035ac44f7a8156e9edf778
SHA512 718c1192fc0de7e3124e6fd2b34773912b60db96ded0a215c74c818ba451d9b2bf105a1c0cae39aff16564f0a7f4563cd3199f28843d94ac92648979fcff0a9d
TLSH
T16741ADF7C3D89A7D890152F8AB216F1ACE690E14531C3D53C8D4AE1F53E29B2D20024E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 11KB
SHA256 1dba88e1f8087e14f878ee1ab29aca80739a23b7b34e9dbf0458f8a266f617e8
MD5 be46f767f8257b532597d177e328e02d
SHA1 61d57ac278e35594f6b68ddf10979f5a21592d54
SHA512 c9c659e0d124e947510578e967a3a81cfae1d45893af45bd7ba25f12bac4d05f03d9cace84812c5f91fa3fa16efcea3aa8e16567e0aa9852bd1ec0f009ddcb8f
SSDEEP 192:esz4K6mQ7KxkXqK4I40pUZNCgVLHrKHfFKslEZESXzKD/pQ+ErUkKN9gdjCxBRqD:lzjxQ7KxkXqKf/pUZNCgVLH2HfgslzSb
TLSH
T19B32D827A48E9E3F4FD8D51CD8136F8BADF5025272680D2496FB9D0803E87CA115A5F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 4KB
SHA256 aa56d7dde7f21f363b1356ffca6bae205d702914bc5c1473e818649f152fd90e
MD5 96baede77f147379b33bcb34bd84bc18
SHA1 e41311e9294baf8730f31a907aecd312a522cead
SHA512 4f8c368b393e68424f95a330458e156640c1a803ccbd0ec957b328e49ce389bd5d71558df80f8dfb3bcd178745aa4a66d68a9a461c013959aad80ca0b8df17c7
SSDEEP 96:gC0d+cAOIt5aDVmufj7jcbRDotok5nJCDnW5B6/dGyv95SQhbb2Jv4a:gC0LA/TE57cDUD2KUweSQhbKl
TLSH
T163A10975B4695EB75D79C685F4827E83CF68A117EA216F84D8DC1F0C10EB0EC1382A27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 fa3085d2c825f2006bcc147251d20dc82157d20de7bdd1a3efdf27d801622428
MD5 da27e19b9c9fa756ec63f54767411186
SHA1 b1753d2f205487d8f6ff0f37c75bc6aca671f292
SHA512 f80a31cef1e7872bef386cd5039ba3f766dbd972f5d7c26d279bfad6f20253a1d32a24ec32b439e47a60d45964d2dde38a23fe10ce4ecd09cc7c5d72deb8300c
SSDEEP 96:CC6Lvd+cAOIt5aDVmufj7S+c/Sl8h4otok5nJrDnW5B6zXGyv9JtFiO0AuSwKYS6:CCULA/TE57KiUDlKX+tFGSwhSDz3UZvb
TLSH
T1B7C13A70B87D6D731DF69695F5027E87CEB4A157AA22AE848AEC0F0C01DB4DC1342A13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/1948-54-0x00007FFA9C050000-0x00007FFA9C084000-memory.dmp

Download

memory/1948-60-0x00007FFA84F90000-0x00007FFA85320000-memory.dmp

Download

memory/1948-7-0x00007FFA85570000-0x00007FFA85826000-memory.dmp

Download

memory/1948-9-0x00007FFA85570000-0x00007FFA85826000-memory.dmp

Download

memory/1948-8-0x00007FFA85570000-0x00007FFA85826000-memory.dmp

Download

memory/1948-11-0x00007FFA85570000-0x00007FFA85826000-memory.dmp

Download

memory/1948-12-0x00007FFA85570000-0x00007FFA85826000-memory.dmp

Download

memory/1948-14-0x00007FFA85570000-0x00007FFA85826000-memory.dmp

Download

memory/1948-16-0x00007FFA85570000-0x00007FFA85826000-memory.dmp

Download

memory/1948-17-0x00007FFA85570000-0x00007FFA85826000-memory.dmp

Download

memory/1948-15-0x00007FFA85570000-0x00007FFA85826000-memory.dmp

Download

memory/1948-13-0x00007FFA85570000-0x00007FFA85826000-memory.dmp

Download

memory/1948-10-0x00007FFA85570000-0x00007FFA85826000-memory.dmp

Download

memory/1948-18-0x00007FFA85570000-0x00007FFA85826000-memory.dmp

Download

memory/1948-19-0x00007FFA85570000-0x00007FFA85826000-memory.dmp

Download

memory/1948-40-0x00007FFA85570000-0x00007FFA85826000-memory.dmp

Download

memory/1948-39-0x00007FFA85570000-0x00007FFA85826000-memory.dmp

Download

memory/1948-52-0x00007FFA85570000-0x00007FFA85826000-memory.dmp

Download

memory/1948-53-0x00007FF74BDB0000-0x00007FF74BEA8000-memory.dmp

Download

memory/1948-59-0x00007FFA91220000-0x00007FFA9124B000-memory.dmp

Download

memory/1948-58-0x00007FFA985E0000-0x00007FFA98602000-memory.dmp

Download

memory/1948-57-0x00007FFA9D750000-0x00007FFA9D769000-memory.dmp

Download

memory/1948-5-0x00007FFA85570000-0x00007FFA85826000-memory.dmp

Download

memory/1948-56-0x00007FFA9D7F0000-0x00007FFA9D801000-memory.dmp

Download

memory/1948-61-0x00007FFA98000000-0x00007FFA98014000-memory.dmp

Download

memory/1948-62-0x00007FFA96C20000-0x00007FFA96C31000-memory.dmp

Download

memory/1948-63-0x00007FFA90550000-0x00007FFA90622000-memory.dmp

Download

memory/1948-6-0x00007FFA85570000-0x00007FFA85826000-memory.dmp

Download

memory/1948-64-0x00007FFA84CF0000-0x00007FFA84F86000-memory.dmp

Download

memory/1948-65-0x00007FFA84C00000-0x00007FFA84CE8000-memory.dmp

Download

memory/1948-66-0x00007FFA84B10000-0x00007FFA84BF3000-memory.dmp

Download

memory/1948-73-0x00007FFA8E1F0000-0x00007FFA8E201000-memory.dmp

Download

memory/1948-74-0x00007FFA8CF00000-0x00007FFA8CF11000-memory.dmp

Download

memory/1948-78-0x00007FFA86680000-0x00007FFA866A5000-memory.dmp

Download

memory/1948-81-0x000001B2A5A30000-0x000001B2A5B0F000-memory.dmp

Download

memory/1948-76-0x00007FFA8CB80000-0x00007FFA8CC18000-memory.dmp

Download

memory/1948-82-0x000001B2A3AF0000-0x000001B2A3B01000-memory.dmp

Download

memory/1948-75-0x00007FFA84900000-0x00007FFA84B0B000-memory.dmp

Download

memory/1948-83-0x00007FFA7E7E0000-0x00007FFA7EA25000-memory.dmp

Download

memory/1948-80-0x00007FFA8CD10000-0x00007FFA8CD2B000-memory.dmp

Download

memory/1948-79-0x00007FFA84800000-0x00007FFA848AB000-memory.dmp

Download

memory/1948-77-0x00007FFA848B0000-0x00007FFA848FF000-memory.dmp

Download

memory/1948-72-0x00007FFA8E870000-0x00007FFA8E88A000-memory.dmp

Download

memory/1948-4-0x00007FFA85570000-0x00007FFA85826000-memory.dmp

Download

memory/1948-3-0x00007FFA85570000-0x00007FFA85826000-memory.dmp

Download

memory/1948-2-0x00007FFA85570000-0x00007FFA85826000-memory.dmp

Download

memory/1948-1-0x00007FFA85570000-0x00007FFA85826000-memory.dmp

Download

memory/1948-0-0x00007FFA8581D000-0x00007FFA8581F000-memory.dmp

Download

memory/1948-70-0x00007FFA904D0000-0x00007FFA904F6000-memory.dmp

Download

memory/1948-68-0x00007FFA911F0000-0x00007FFA9121F000-memory.dmp

Download

memory/1948-67-0x00007FFA90500000-0x00007FFA90541000-memory.dmp

Download

memory/1948-71-0x00007FFA8E210000-0x00007FFA8E23D000-memory.dmp

Download

memory/1948-69-0x00007FFA926C0000-0x00007FFA926D8000-memory.dmp

Download

memory/1948-287-0x00007FFA9C050000-0x00007FFA9C084000-memory.dmp

Download

memory/1948-289-0x00007FFA85570000-0x00007FFA85826000-memory.dmp

Download

memory/1948-286-0x00007FF74BDB0000-0x00007FF74BEA8000-memory.dmp

Download