d311a4f486e2f81d1ffb11b37782d8bc1325b1df96ff21ab3b3de818ae3d5d84

Analysis

user interaction
yes
max time kernel
705s
max time network
706s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/07/2026, 13:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
cdN78r.html
Size 11KB
Sample260722-p96j4afa39
SHA256 d311a4f486e2f81d1ffb11b37782d8bc1325b1df96ff21ab3b3de818ae3d5d84
MD5 c229b9d23420402bdea979bae2d31dde
SHA1 cf5cb6cd0c16a3cd252c792a13907df48fa2f0d4
SHA512 bdabdc88c2c5f8c1b6e4730801ad263d8f0172f9cbc19d80de98acaec7d06218f830366b5c10a63cf589de17ed23dd3b84542ab2183f93fe383f9fa3bd6f6fb8
SSDEEP 192:zMilLhIJhKYX5kerCNRupjQ4vYJkTcOHsU:zNOJhda4s4vYJk4OF
TLSH
T1BF32764A1EF280E701E785A97DF2FD0DAD85864BD219FC4832BC80A90FD7D468DC7995
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery persistence

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 7 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
620	pastebin.com
621	pastebin.com
622	pastebin.com
623	pastebin.com
624	pastebin.com
128	api.gofile.io
130	api.gofile.io

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\Documents\desktop.ini	firefox.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4208	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe

Checks processor information in registry 2 TTPs 46 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134291989920388644"	chrome.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 020000000000000001000000ffffffff	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\LogicalViewMode = "3"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\IconSize = "48"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:PID = "0"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\MRUListEx = ffffffff	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\0\NodeSlot = "8"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\Shell	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\NodeSlot = "6"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\Shell	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\MRUListEx = 00000000ffffffff	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202020202020202	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\0\MRUListEx = ffffffff	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Mode = "4"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\Shell\SniffedFolderType = "Generic"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{58FB9EC9-FC4C-49A0-860D-63BB0C6BCEE1}	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02020202020202	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\IconSize = "16"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByDirection = "1"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 03000000000000000200000001000000ffffffff	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByDirection = "1"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1092616257"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1"	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\LogicalViewMode = "1"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1092616257"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupView = "0"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupByKey:PID = "0"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1092616257"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 000000000200000001000000ffffffff	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
2884	chrome.exe
2884	chrome.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1988	chrome.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
660	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 50 IoCs

pid	Process
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe
Token: SeShutdownPrivilege	392	chrome.exe
Token: SeCreatePagefilePrivilege	392	chrome.exe

Suspicious use of FindShellTrayWindow 53 IoCs

pid	Process
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe
392	chrome.exe

Suspicious use of SetWindowsHookEx 50 IoCs

pid	Process
1988	chrome.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe
1400	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 392 wrote to memory of 1576	392	chrome.exe	84
PID 392 wrote to memory of 4532	392	chrome.exe	85
PID 392 wrote to memory of 4532	392	chrome.exe	85
PID 392 wrote to memory of 4208	392	chrome.exe	86
PID 392 wrote to memory of 3732	392	chrome.exe	87
PID 392 wrote to memory of 3732	392	chrome.exe	87
PID 392 wrote to memory of 3148	392	chrome.exe	89
PID 392 wrote to memory of 2924	392	chrome.exe	90
PID 392 wrote to memory of 3148	392	chrome.exe	89
PID 392 wrote to memory of 2924	392	chrome.exe	90
PID 392 wrote to memory of 4880	392	chrome.exe	91
PID 392 wrote to memory of 3120	392	chrome.exe	106
PID 392 wrote to memory of 4188	392	chrome.exe	107
PID 392 wrote to memory of 3676	392	chrome.exe	108
PID 392 wrote to memory of 3096	392	chrome.exe	109
PID 392 wrote to memory of 3096	392	chrome.exe	109
PID 392 wrote to memory of 1092	392	chrome.exe	110
PID 392 wrote to memory of 1092	392	chrome.exe	110
PID 392 wrote to memory of 3536	392	chrome.exe	116
PID 392 wrote to memory of 3536	392	chrome.exe	116
PID 392 wrote to memory of 2680	392	chrome.exe	117
PID 392 wrote to memory of 4188	392	chrome.exe	118
PID 392 wrote to memory of 4188	392	chrome.exe	118
PID 392 wrote to memory of 1676	392	chrome.exe	122
PID 392 wrote to memory of 1676	392	chrome.exe	122
PID 392 wrote to memory of 2936	392	chrome.exe	123
PID 392 wrote to memory of 2936	392	chrome.exe	123
PID 392 wrote to memory of 3232	392	chrome.exe	124
PID 392 wrote to memory of 3232	392	chrome.exe	124
PID 392 wrote to memory of 4124	392	chrome.exe	125
PID 392 wrote to memory of 4124	392	chrome.exe	125
PID 392 wrote to memory of 2156	392	chrome.exe	126
PID 392 wrote to memory of 2156	392	chrome.exe	126
PID 392 wrote to memory of 4032	392	chrome.exe	127
PID 392 wrote to memory of 2884	392	chrome.exe	130
PID 392 wrote to memory of 4280	392	chrome.exe	131
PID 392 wrote to memory of 4280	392	chrome.exe	131
PID 392 wrote to memory of 1988	392	chrome.exe	132
PID 392 wrote to memory of 1988	392	chrome.exe	132
PID 392 wrote to memory of 180	392	chrome.exe	133
PID 392 wrote to memory of 180	392	chrome.exe	133
PID 392 wrote to memory of 4216	392	chrome.exe	134
PID 392 wrote to memory of 4216	392	chrome.exe	134
PID 392 wrote to memory of 2416	392	chrome.exe	135
PID 392 wrote to memory of 2416	392	chrome.exe	135
PID 392 wrote to memory of 1916	392	chrome.exe	136
PID 392 wrote to memory of 1916	392	chrome.exe	136
PID 392 wrote to memory of 4004	392	chrome.exe	137
PID 392 wrote to memory of 4004	392	chrome.exe	137
PID 392 wrote to memory of 2952	392	chrome.exe	138
PID 392 wrote to memory of 2952	392	chrome.exe	138
PID 392 wrote to memory of 1860	392	chrome.exe	139
PID 392 wrote to memory of 1860	392	chrome.exe	139
PID 392 wrote to memory of 2756	392	chrome.exe	140
PID 392 wrote to memory of 2756	392	chrome.exe	140
PID 392 wrote to memory of 4932	392	chrome.exe	141
PID 392 wrote to memory of 4932	392	chrome.exe	141
PID 392 wrote to memory of 312	392	chrome.exe	142
PID 392 wrote to memory of 312	392	chrome.exe	142
PID 392 wrote to memory of 2740	392	chrome.exe	143
PID 392 wrote to memory of 2740	392	chrome.exe	143
PID 392 wrote to memory of 4112	392	chrome.exe	144
PID 392 wrote to memory of 4112	392	chrome.exe	144
PID 392 wrote to memory of 4968	392	chrome.exe	145

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\cdN78r.html
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffd397ec728,0x7ffd397ec734,0x7ffd397ec740
  2⤵
  PID:1576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1688,i,5159624511440484073,6363309019154883646,262144 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2012 /prefetch:2
  2⤵
  PID:4532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,2806615326875360716,12793801763782384328,524288 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2092 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2376,i,16074093795238658910,10332660549924029715,524288 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2532 /prefetch:8
  2⤵
  PID:3732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3200,i,9383439026232437415,561982652460064859,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:3148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3212,i,8020790168540531001,5949433261783148977,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:2924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5124,i,17113549126103851061,16517809191476071885,524288 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:4880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5416,i,13989856605992294826,1343591152331719944,524288 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5292 /prefetch:8
  2⤵
  PID:3120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5404,i,14261214752953369372,10573704083643311970,524288 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5424 /prefetch:8
  2⤵
  PID:4188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5400,i,4585398325311340004,5582230921539538685,524288 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5468 /prefetch:8
  2⤵
  PID:3676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5564,i,1186322474711233111,2616796356026326014,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5144 /prefetch:1
  2⤵
  PID:3096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3444,i,14220244319861675640,8401531624512271089,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5544 /prefetch:1
  2⤵
  PID:1092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5500,i,5034717848642912222,9598513997603479156,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5456 /prefetch:1
  2⤵
  PID:3536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=732,i,8404733647712028352,14046637956282272649,524288 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5736 /prefetch:8
  2⤵
  - Modifies registry class
  PID:2680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5444,i,16646474282189777872,9831939900812453136,524288 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5716 /prefetch:8
  2⤵
  PID:4188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5696,i,17506815682771223522,10721602615128882620,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5612 /prefetch:1
  2⤵
  PID:1676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5684,i,3568613220171875052,2189665812784091915,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:2936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5452,i,11803688135816989997,10209901637165032636,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5640 /prefetch:1
  2⤵
  PID:3232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6012,i,9274941776291436586,3703079093306855812,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6020 /prefetch:1
  2⤵
  PID:4124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5680,i,8855970752351077224,740414893660305504,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6040 /prefetch:1
  2⤵
  PID:2156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6032,i,11168781278227796220,13058076249662753743,524288 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6068 /prefetch:8
  2⤵
  PID:4032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5996,i,7194033586143737864,11153639327404914799,262144 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6020 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6312,i,5237694618426737256,7386219874579366913,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2404 /prefetch:1
  2⤵
  PID:4280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6020,i,2694395559415391255,7677351073350690549,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5660 /prefetch:1
  2⤵
  PID:1988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6244,i,222960048157687750,13319193611954812790,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6232 /prefetch:1
  2⤵
  PID:180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=5648,i,15473197874121311564,18110239840010487698,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6724 /prefetch:1
  2⤵
  PID:4216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6216,i,2073531302697408259,65071974640706992,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6184 /prefetch:1
  2⤵
  PID:2416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6664,i,343789446026483479,13629815649956211118,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6676 /prefetch:1
  2⤵
  PID:1916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=6148,i,6448770869707481215,3448037779707197072,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6656 /prefetch:1
  2⤵
  PID:4004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6904,i,2410120175478766168,6035006121889792870,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6896 /prefetch:1
  2⤵
  PID:2952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=6192,i,7647346399281721626,14753132392689095678,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6928 /prefetch:1
  2⤵
  PID:1860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5660,i,2937917594848384001,9958379541366189739,524288 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4448 /prefetch:8
  2⤵
  PID:2756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=6244,i,725435765594204329,4762020436999510239,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6872 /prefetch:1
  2⤵
  PID:4932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=6956,i,11897108780731423337,11802086893096832120,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6848 /prefetch:1
  2⤵
  PID:312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=6740,i,2837582484869992187,10627044234191467575,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6788 /prefetch:1
  2⤵
  PID:2740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=6684,i,16479970920297474347,7974246354843683484,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5648 /prefetch:1
  2⤵
  PID:4112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=5528,i,10934133934051407620,13330430737949032015,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6600 /prefetch:1
  2⤵
  PID:4968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=7196,i,12009964488400836744,15947725019646852347,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6864 /prefetch:1
  2⤵
  PID:4704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=6872,i,9947778505341978653,1218975750587819223,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5156 /prefetch:1
  2⤵
  PID:4336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=7212,i,18349646245756797470,15390809894095394033,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7196 /prefetch:1
  2⤵
  PID:1636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=1488,i,11992406949463986511,12092787108613187791,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6960 /prefetch:1
  2⤵
  PID:2092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=6668,i,3295883323342366064,16591443583141203468,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6544 /prefetch:1
  2⤵
  PID:996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=5648,i,724205879806359093,10789263255997634632,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6760 /prefetch:1
  2⤵
  PID:2244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=6796,i,17038524265818828395,7260495303690431997,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6180 /prefetch:1
  2⤵
  PID:4484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=6636,i,4993263194704311766,13805014296600601362,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6232 /prefetch:1
  2⤵
  PID:2224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=7092,i,3916521489088894878,4396405339949077855,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7020 /prefetch:1
  2⤵
  PID:4656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=7184,i,15189757171365401773,15405453308440350217,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7460 /prefetch:1
  2⤵
  PID:3460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=7560,i,12204576252908786295,6852493558810028624,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7608 /prefetch:1
  2⤵
  PID:2316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=7556,i,5004277307987621139,9847300031671498951,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7600 /prefetch:1
  2⤵
  PID:2940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=6756,i,18440233081509658600,11782891019404442357,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6752 /prefetch:1
  2⤵
  PID:3484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=7724,i,4487092758343584529,15339094141635417718,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7732 /prefetch:1
  2⤵
  PID:1908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=7676,i,10529602566976360039,268144063947920892,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7804 /prefetch:1
  2⤵
  PID:3412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=7208,i,3524658197415168584,17347953409458503173,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7604 /prefetch:1
  2⤵
  PID:1344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=7868,i,10546443151074226366,6165624508256869618,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7920 /prefetch:1
  2⤵
  PID:1688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=6532,i,7415883111474525484,3430446552236807438,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7880 /prefetch:1
  2⤵
  PID:4412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=7944,i,154479196839838239,2399581668192361538,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7928 /prefetch:1
  2⤵
  PID:1856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=8160,i,15772764293005435707,10054677203715101083,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8124 /prefetch:1
  2⤵
  PID:4348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=8252,i,2900268187921449822,15319747883493621490,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8284 /prefetch:1
  2⤵
  PID:2588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=8204,i,381272549832323358,7646932738766391663,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8384 /prefetch:1
  2⤵
  PID:4588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=8396,i,7799679983705535903,4494397942197435571,524288 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8564 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of SetWindowsHookEx
  PID:1988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=8636,i,9778294929402480595,9046450233032699474,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8660 /prefetch:1
  2⤵
  PID:2872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=8424,i,14615278722434318024,10751866373466372537,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8240 /prefetch:1
  2⤵
  PID:3672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=8220,i,3906114308994580500,18029242675486247979,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8788 /prefetch:1
  2⤵
  PID:2076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=8816,i,14041810576798069433,2661671916168590289,2097152 --field-trial-handle=2016,i,14041553677271990359,9160894904580614929,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8808 /prefetch:1
  2⤵
  PID:1656

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4156

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1600

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3232

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
PID:180
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Drops desktop.ini file(s)
  - Checks processor information in registry
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  PID:1400
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2020 -prefsLen 27099 -prefMapHandle 2024 -prefMapSize 270279 -ipcHandle 2100 -initialChannelId {dd1ae264-2483-41bb-baec-572dff6722e6} -parentPid 1400 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1400" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:2040
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2412 -prefsLen 27135 -prefMapHandle 2416 -prefMapSize 270279 -ipcHandle 2488 -initialChannelId {9c49cc37-cf8a-4a0e-bbeb-c3e7871ad754} -parentPid 1400 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1400" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:4368
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2992 -prefsLen 27276 -prefMapHandle 3000 -prefMapSize 270279 -jsInitHandle 3004 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 1628 -initialChannelId {4338e2f5-9b1b-42d2-b02e-c53061eeed0a} -parentPid 1400 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1400" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:5024
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3688 -prefsLen 27276 -prefMapHandle 3692 -prefMapSize 270279 -ipcHandle 3716 -initialChannelId {57ca37bc-0962-455a-9c34-9edbf08e74a8} -parentPid 1400 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1400" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:692
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4344 -prefsLen 34775 -prefMapHandle 4348 -prefMapSize 270279 -jsInitHandle 4364 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4372 -initialChannelId {17c58233-f52f-4345-9a8e-25a6896357ad} -parentPid 1400 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1400" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:1376
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4928 -prefsLen 35012 -prefMapHandle 4924 -prefMapSize 270279 -ipcHandle 4944 -initialChannelId {9466f7b9-594e-42d1-b9d8-76610060e057} -parentPid 1400 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1400" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:4304
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5100 -prefsLen 32900 -prefMapHandle 5104 -prefMapSize 270279 -jsInitHandle 5108 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5116 -initialChannelId {d7836e54-c854-46eb-9167-572958e565b0} -parentPid 1400 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1400" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:700
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5240 -prefsLen 32952 -prefMapHandle 5236 -prefMapSize 270279 -jsInitHandle 5136 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4576 -initialChannelId {d93605b3-ed79-44bf-8db4-8b86541ae3c1} -parentPid 1400 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1400" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:2292
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5436 -prefsLen 32952 -prefMapHandle 5440 -prefMapSize 270279 -jsInitHandle 5444 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5452 -initialChannelId {6ac46c11-6ab4-40f4-ae5a-6ab675948eff} -parentPid 1400 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1400" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:1604
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6236 -prefsLen 33071 -prefMapHandle 6240 -prefMapSize 270279 -jsInitHandle 6244 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6252 -initialChannelId {f94c8ea3-1ef1-4783-b771-ab3970ab0a6e} -parentPid 1400 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1400" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:4144
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6476 -prefsLen 33071 -prefMapHandle 6152 -prefMapSize 270279 -jsInitHandle 6488 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6500 -initialChannelId {15299242-59ab-4998-8d9a-b54fb6f0ff24} -parentPid 1400 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1400" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:4932
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6240 -prefsLen 33071 -prefMapHandle 6408 -prefMapSize 270279 -jsInitHandle 6848 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4332 -initialChannelId {2d79c8cb-95bf-4b16-8ffd-a79e50e86192} -parentPid 1400 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1400" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    - Checks processor information in registry
    PID:1236
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6436 -prefsLen 33071 -prefMapHandle 6432 -prefMapSize 270279 -jsInitHandle 6188 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6372 -initialChannelId {7785a1db-27ec-4203-8602-8b61d135e9ed} -parentPid 1400 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1400" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
    3⤵
    - Checks processor information in registry
    PID:3856
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5368 -prefsLen 33071 -prefMapHandle 5372 -prefMapSize 270279 -jsInitHandle 5356 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5972 -initialChannelId {a6bbe608-8b1e-421d-8613-83af6a0fa44b} -parentPid 1400 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1400" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
    3⤵
    - Checks processor information in registry
    PID:2976
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6832 -prefsLen 33071 -prefMapHandle 6824 -prefMapSize 270279 -jsInitHandle 6408 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4240 -initialChannelId {44cec539-cb68-4b4b-a987-9565ee466822} -parentPid 1400 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1400" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
    3⤵
    - Checks processor information in registry
    PID:4424
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 6872 -prefsLen 35200 -prefMapHandle 6876 -prefMapSize 270279 -ipcHandle 6832 -initialChannelId {2699a5b0-3929-44ed-a106-2d322fad3f22} -parentPid 1400 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1400" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 16 utility
    3⤵
    - Checks processor information in registry
    PID:2724
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5500 -prefsLen 33071 -prefMapHandle 5484 -prefMapSize 270279 -jsInitHandle 5488 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5552 -initialChannelId {cb9cf88a-d425-4d64-abe7-270b344e1b24} -parentPid 1400 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1400" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 17 tab
    3⤵
    - Checks processor information in registry
    PID:3404
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7204 -prefsLen 33071 -prefMapHandle 7208 -prefMapSize 270279 -jsInitHandle 7212 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6436 -initialChannelId {7a0c3031-c6a2-4074-a603-8d4ae337912b} -parentPid 1400 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1400" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 18 tab
    3⤵
    - Checks processor information in registry
    PID:2736
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5672 -prefsLen 36758 -prefMapHandle 5276 -prefMapSize 270279 -jsInitHandle 5424 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5360 -initialChannelId {56cd63be-65d2-44c2-880d-1f9812f2a65c} -parentPid 1400 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1400" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 19 tab
    3⤵
    - Checks processor information in registry
    PID:3380
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4836 -prefsLen 36758 -prefMapHandle 1668 -prefMapSize 270279 -jsInitHandle 1672 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6420 -initialChannelId {cae1f9cf-9664-4cd4-a3c9-7168adb29bd1} -parentPid 1400 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1400" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 20 tab
    3⤵
    - Checks processor information in registry
    PID:2976
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5512 -prefsLen 36758 -prefMapHandle 5496 -prefMapSize 270279 -jsInitHandle 3064 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 7220 -initialChannelId {0a891f85-e05d-4909-9b68-1e0a93de0249} -parentPid 1400 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1400" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 21 tab
    3⤵
    - Checks processor information in registry
    PID:1656
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7548 -prefsLen 36758 -prefMapHandle 5804 -prefMapSize 270279 -jsInitHandle 6156 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6052 -initialChannelId {fddbfce5-040c-4605-bb97-7156f34a1c75} -parentPid 1400 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1400" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 22 tab
    3⤵
    - Checks processor information in registry
    PID:1760

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 58f9da3543e08fa7a4481ac5a639171f948cc1076279d8b0594df07e87f2ac14
MD5 16a52bbbaa635f251aed41e161bbf061
SHA1 b5fb62836cbea216347100d79128cf2fd519c9c3
SHA512 4876bba26f3dcb8546f5fbeeace78cdbedf72b56111620256283cad6f7eec49d50b2b027ef0f3802c7a3267f48aaa6d2c84b8f4542b063780c6b241df96f1e86
TLSH
T110E02BBAC961DC3B28FE0718A061874AE651139B2B50894F7A3C850C8FF1A7A974585C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Size 38KB
SHA256 7165713d3e1a610399471a5e93d5677508f62ef072c1151e72273bf4bd54f916
MD5 9436affc97843765a966b3568fa7e5ec
SHA1 7bfda74bb30589c75d718fbc997f18c6d5cc4a0b
SHA512 473ec3a843c33e18d6d194651fe11353fcd03a7959225faeabf8c77484155ea6a7bccb72dbaf2093ed53c408faa3be9f6fc907f7a5ddf8223375f9d09b504456
SSDEEP 768:eUEh2+iKBVQbBhu8vjenqz2Ez6Y/AxHLEaP72sV9qKYbDblXqhP8qwFSE3uk:eUEEoBVQDjeQaLnP2pfZTqgSEB
TLSH
T11703F112148F7FA1C244F224A4EFE416ACC3F565ABA15E6980B8B7C7010E3C657A46FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 82KB
SHA256 33b18bd9890aa292639a21b718f476107646d533da26494506f77118e2bf72bb
MD5 8bae731acbdf4dab36b69ff3ff96627f
SHA1 55e90b5a171b290a8bbfe1fae73662ab4faa2a3c
SHA512 4051606131bacc30f1772d2daa0b15d3268c06988cdb0c4f641dadffb4d47331dfd85e7bec15cb1691e035776f1321ca4f83873a07b22b0013f29de90d72a0e9
SSDEEP 1536:TPhiFbiLcU6ABlYfHc302PiRb4Spx0bm5UuHKRf8N8KoNlYhgIw88m7JWVZw:zhJo5uYfq02PgbFa9kKiNvylYhgWTwjw
TLSH
T1F5831283A367BDCDEDC4262954854E8819498E7697CD8199A443D0E9CCC8DFA2235E3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000009

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009
Size 436KB
SHA256 0b320d2cf00e9215763a5377904e2301b2edb7a5d299bd319259714cf8bcd9a9
MD5 38e965609b7e0769e6754549cfa3c2fd
SHA1 8ef9e62fa3ae6d8b371f5a9e9344a6cdf31515fe
SHA512 18cff962b979abf3e3d06261422f35502463a0e196aa0cf801cadcff8833a83f20c9e9f22fb3133041e406fdf2304088a0a5eaa4bbb8aff07ab15a0c1b46b0e4
SSDEEP 6144:HT+7EhQjYpz+XUGr9+7Km54TxcjJJEWv6p0qOJ7kuKtAiDL6GnkES7+S8HBWzDi2:6vj0iUI9EKFEJdU0p7riDxw7L8oviJ3c
TLSH
T147942367DF08D99BDA158361EA30EBDD1158EB6EE00A3CC844BB462CE54C0F9F6913C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
Size 514KB
SHA256 966313b2f3a0cb5ca789f6cf55510d5d993973137724472e5ec8e39afc974492
MD5 599ab032272aa0de9f28392bed318fa8
SHA1 8d0c52814626713eb889bce7c8387b6d8e84592b
SHA512 51927c61dba32b77b43ad399011e23f551a6762ff6dcb37e6bfa1db58151f1c3cf40e8a4a4541974417e79f650e8dcde91d1d719d641506b18150356cd7acf53
SSDEEP 12288:GLGyLv7iudsZ5JCvc03FMMyICva6bA85spcNqyGj:sBLT7sZ5Av5VTyIWa6bA85s+Uj
TLSH
T144B423EF9D793F489CB5882392C9B37D8607A43847A1F95690DB2464FC3367011AB7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000013

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013
Size 16KB
SHA256 e098eafd0d507968a0d0cd9058e6ba72a25c7c3bc35355f04d23e1f8d98adfda
MD5 8300cbb36f6017f8307c7938a40472d5
SHA1 b981189d49099e1c5c582c5a9ec366333a2dac62
SHA512 001dd7abf90ee89233eca4c7e46fd4a93f379a16ae29d8da77ea7f73bfd5497e98cee8cba49544fdf449edf3d02aafb85094d36f6733fc3da16ea4631bd15559
SSDEEP 384:gmQUE84kGOI5z+iFAEyUdr6BKQwQX/DRyOLKMEFSID77TZs2Z:gmQv84kXK/m0duo7c/DRNufJTFZ
TLSH
T1D472D0C084281DD7070073BD4528575C30FAEBAB8B0F2F6D5ED998509B83C2A2667CEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000017

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017
Size 21KB
SHA256 827c2a2effb07cc4b1c55258223ce5af3e42f35643f91893b49ef2d8e16bbddb
MD5 a862dcce22578fc885f0d8350012e9ad
SHA1 c4c70bf38b6b83ec579d61b5e36d739928b7d80c
SHA512 8639a7c6ba1a99f394a2d7f9f7f5144affac8047a34d8653a1d2e257415177828ed49b36b33d062edb7cb9e6ef89bfcbcbe717a69c3120744c2db719ba451df4
SSDEEP 384:ncS/kaADMv3H5OuPEjUAFH0cythGyUCS3OEigedJYCBObMrvoFGt4lVDotOqInx4:ncAn4O3HE8AFkddci5dJtMbuowt4l1o3
TLSH
T16AA2D07D3903F1609FF9906846FB9A2F437C7D1E07A0D9925C6B98234D3F2890D629E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000030

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000030
Size 68KB
SHA256 6a61b95e873e0f5505dd480208c00ac0e32a4d913209648a9825332eb8b9b6fd
MD5 7637378e46397a3f66a65894969d73e7
SHA1 cda8574cdb9a71fb96e173cfd0a1d9189604c08b
SHA512 fc3e5fbfdc0c873271c306c8fa75150d43366463cff354b2c146dfb3dbf195eda1d87077a90177ad5c2e6e993ae1f823bb1eb7535afa5c041c632d62fa67b971
SSDEEP 1536:ZEqcbzcJJpTE0N6EvOHns627rRH/WipIdENTEQVInkL/XKjaaZVjC:ZEq4zgTRN6IOHG7VfWipCE1BFjKhNC
TLSH
T1B063120A8BD6953ED5F73F867B38630D235A70DDC74288A7FB20A4A12356C2D916346D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000032

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000032
Size 60KB
SHA256 022cc065856d467cea511f86afa93e6499abf46917d986fff0ed39df4dff39bc
MD5 61c5003aba0c9e54aa8d4d00f8af1221
SHA1 126e3e6f6e93f7c19492327a4e287196e7402496
SHA512 07cc39af0cee07805d369a718a81b57956a3947cc9385751ef126af75ae9187553343860cc578f7b4dc6f06a830a294c54054793060d80cb03cc6e603ad249b7
SSDEEP 1536:INL6QtnlXAsLUSMZNuU9Jk90N6DRf4ZmbdjsJAeRnQr:INL5tnlXAJSMhanRfpbdUAcm
TLSH
T18253029C68FC66D1933E98E3970179F68996C460B616195B6447BEFDCCD79CC3322380
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000033

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000033
Size 44KB
SHA256 152a466a4c073d688dfbe0050a6e64ef605614a7a3706c91a35e740d5301a996
MD5 dbea86467d0d21aeb79b864bd7ba77fc
SHA1 5bac7bfc8fa99341349e215683160441d26c7bf1
SHA512 52c4a3df9b262416fb6c70dd90082a47edb1580cf2ee0398a7cf3937b1b7a45df633a9f5d99fca65ff3945e39990555564da7f7ebe412558a9a1a7defd342b85
SSDEEP 768:7Gf6gWeXDzrlg5T6OxfoxAFJcboOzC9/DO3NOZ/s0+WqLRZa737sQhU/rk6:Y6gXrSHxIAXGzYyOv8MrQQezk6
TLSH
T1DB23F2223C22AA1FF451F4EDA033C3D5399411DB15ADF57A299C82D9F69214E1A0EAAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000034

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000034
Size 75KB
SHA256 0a934baf48946dd89b14694d31b559bf58380458182973309facf54c0dbc1304
MD5 00df45274baa59e422141af0f860f19e
SHA1 1311156e5e7ebe7a2cdc324c4692b30f5a230667
SHA512 aa25ad0ca7dde587f12e49e8bb28e27b85b6ee548b16d09e3b4ee8022fe684cd9808505fb87090ccf79bdd683105f3e9828ca2219d308cd0e1c7dc030e9e04fb
SSDEEP 1536:jv7gCXAEfJ/SN05qpYDGbEAqdt7S6WmksbqvZBc9qVWdi+FqyCdgX:b7gUxo05Y2AEAqdt7S63PWcg0dJFqwX
TLSH
T12B7312BD2D53DAC5871A0DDDAB410D1C8E390B8C9B1C7EEB97590C1B7BD86D36390016
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 26479652877d7a591d1af3902b42bc668cc7ed78a3905d28d703f70cfe8e6695
MD5 3dda572c751b895bacf57d9c47897430
SHA1 c6d6b4041b2769db619975929d1bc4a3ea22ac2d
SHA512 715957a66e7abfa599a51af24cd070cd3282e301d9a690e1a64ed473426676c67fb758859fd70a5ee42a0cfe02f87776d5378597ad7b8aea79b63002634ea895
TLSH
T10D4186A49F96EA52D793353391E0242931F22B3C43C3CE7585054BF869857BC12C5EDE
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 128fd90be8f31164684b9e37fc3569bc95e5f5ab01bb9eae9578356a6178c590
MD5 02a265d552718ee23df644f89642d664
SHA1 c573e4dedbd99f89a0a91cadfc1ce0ee13f3d0d7
SHA512 16990e61ec54fdea2dc21bb372bd1e3f81b790e3d9dd8f1c523688b9556b0ed3f04a94a7a17bfb21123a069a2309c97972e6cb63eb7660ce710023d342005c4b
TLSH
T11841DAA4DF53AA21D793353B40E0141930B23BBC47C7CEB1C51A4AFA29843BC1385E9E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2c36670731730328411fc91559af506c9e21bd37f703a4e0bf4028367c4ca539
MD5 f8b367b14e4d194ab63b391d472a03b9
SHA1 b6379e9575da97b7d4dd0a86bc4dbf962b6cc482
SHA512 39e23d585a2dba80e8da505a3441d9124dcd22350316fff5bfd2cf5596a54123e1f067b43273088aacab5c0f3eed173fb0f00a1c90d5df5b0df57b5e030d1343
TLSH
T19E6150688EA2EA51D7D7747704D04478B0BA23784BC3CEB5A1164EF934C1BFC4284A8F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 8ae0921b1acaf27dc92cf7d779b343c7fbf3ec8f31d1bbe0a5562e842425ee83
MD5 01acd1f26ecbd6227839da4d1edea613
SHA1 0c8a6e40cbfc6683145890897e1b2ee5584606c7
SHA512 078567e9fc00bd097151c6a7affb1fcb215bb66031128c02c7706e9050e1bc3149f245b14129d5862dd68e46727c57bc957ba88c17e9b062aaa8c120a4cbab3b
TLSH
T1B151FD689E62AB22D7D7753709D4945430B727788BC3CF7685164AFA34853FC0284D8E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 7f184702bc42a021994b38ceb63e52bfee2668c50e12b0f80a2cae97a08189d1
MD5 d8a5cc203c6c3a29bc1a56239ccc4094
SHA1 5942ee5496f3015ea1dcc93932069b385cc83ec1
SHA512 54b385049e97453a916e98bef6fafd24662699396ba0002a164c2717d861a07e18d9e35f38d8b456756d3d1661cc4d90c65629b8ae578a2f81a168eae1ee5611
SSDEEP 96:uX0S7zNw4ehJ8BNzUGZcFAX81QqUtYXINMMTKDM6Gv5xSXU/QE853UtBH:e0Gw4ehqBG4LX8wYXIMMTpZvOE/QJEH
TLSH
T180A1FB68BAFDD651D782253704D04428B07622F84FF3FEB5AD960EB524B1BE802845BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 53326bdec4b7a52dbac791aa73fa8604f0da607f1a7fe5e246f1816033820de8
MD5 2ec300d6df671880cc3b29aafd36560b
SHA1 3be05c07d0ac8c103f51115c844d24153bcbb8d6
SHA512 51c81894396e9f3aeaf00e25864913870d5dd1290a49850d3df3ddf696280bd456f5f8dd0b21110d9bc820d77d44296de3eeffb865d2fe3e076a04ad121b32ec
TLSH
T11241DCA4DF53A921D793353B40E0141530B23BBC47C3CEB5C5195AFA29843BC0385E9E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0933ac48837603e5cf998d8466f6c51d14fe57ce4ac9b5744cab376b0b241c73
MD5 e43420e6e960bc74aae184dac14d4035
SHA1 6f381759beabcd11048ebf41ccfa5a117dd7dfd8
SHA512 ebb9f17d7d26ece101e171dead6e7db475be28ed4dde3e53777d22ee4994401f174b54ad6b3441094d84fd80164037da589b58405a280a47b4b099d15c5f6b89
TLSH
T100510B689E62EA51D7D7757704D484B870B623788BC3DEB5A1064EF93481BFC0289A8F
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_limewire.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 0796ecdb15745307a199780fd9a4c97ea2ef926adced253e5e433334170d3110
MD5 ca44633878553bd5c590cefa18aaa77a
SHA1 c2b9d6e8c74e07e55bb78984105c5a5a1093ffb7
SHA512 ff2dafb1b611fe9976d40a9998998b3cef5c242cf8d62960071f2c6e48d9a22158b0bc12917dc1fd567cdd1cf33bb540e3146abd90c73e1ea7d687c723b32855
SSDEEP 192:DlWitreJvJPHZdIaEaTe7aP4RuCyIEIyIRIlvvfPPjNP1rHSPAWpz8+uaW:DlWitreJvJPHZdIaEaTe7aQRuCyIEIyz
TLSH
T1C802BDF7C3D8C62D891156F89B156F1FCE1A1928432C3D26C9D8BE1BA3E2871D25534E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 64e49cc5a9d2b35f4aca5cc3dff35ec6b120ce129477e0b7589c91c698654a9e
MD5 fc658df191a392224e676c869193094e
SHA1 83937907f38fa5087121e875402bcdf1aac13c1d
SHA512 d63e78dbeb9f18fcd200f4a626931db3a01395bef31c2e850a05bdc7677526807d5db76826a4ffadd66ef47603640c4401617341720d3156fbe5e8f9a2b1dcb9
SSDEEP 192:DlWitreJvJPHZFvA9IayWmIEIyIRIxtSPAWpz8+6NHTf621aPbvPfPqMY3NPYE:DlWitreJvJPHZFvA9IayWmIEIyIRIxtl
TLSH
T1F8229CF7C3D8C62D891166F89B256F1FCE1E1928432C3D2689D8BE0B93E2871D25534E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 9f123814691ccbc2fbc0d0919daab4cbd62afc58b30f8737ebf876bddac57458
MD5 ff1fd8452b284da79fa987ead86bda67
SHA1 2bd76fbc8c6c97c322c58a8a2f240d56efad114c
SHA512 a148840292a509528fb4e6f5fdd2afd1bcf7b0176c268b0ce9b38658f1b3b8137d90a6b30865c86f02ff6ca70e846fa70bbac637c00898e0cee22f5bed3789f3
SSDEEP 192:DwitqJJ5JENuuvAlN/TeIayWtIhIxtSPAWpz8+daPbvqfPijzuZSnkmikwl+TD+K:DwitqJJ5JENuuvAlN/TeIayWtIhIxtSQ
TLSH
T19A429DF7C3E8862DC81152F8AB156F1FCE291928532C3D7689D4AE4B93E2472E24175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 19KB
SHA256 d397372ad58dda895bdeb82fff2b32b96041aa89af3362dc8f6530363cd16307
MD5 39e8e901d2768bc609cc2d252340f6b0
SHA1 218d0ea4530094b790d66cc4fb8ebaa7a7c0744c
SHA512 433e55b02319b3731b3e8beda00e7f6d48ec0fe97cdb0df23146d4c3251db26325307f14052c355fb17c0cba34d6386f79969aecd95b66197c730a6c86ead922
SSDEEP 384:DwtJJ5JENuu0uEN/TW1FD0XRXSzvtwIayW2IMSPAWpz8+yikwl+TD+/Lz/9iYHyM:cDz6TOh4ZFtvpm
TLSH
T1B4927BF7C7E8862DC91152F4AB156F1FCE2E0918532C3C2AC9D4AE5BA3E2471E34165E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 df0ef78ac074c8bc0284ef68498946ada3ef9a3d18fe45162fcce8fd6b76c67f
MD5 4ae800f05ddd20e27b28384aa6440de3
SHA1 55b79e3b34aedd98da25b1bec86f6df728212c71
SHA512 93e6d293247d736940162d8ffe3a4c0ae706ebc7706284807b7ca907bf260218496a941da6b1d280e2b0a46e51c714945978dd26b5c02d0cd9f5d58c6f50c2d1
SSDEEP 192:DlWitreJvJzIaEa4/e7aPbvXfP4RuCyIEIYNPHI7hI3E:DlWitreJvJzIaEa4/e7aTPfQRuCyIEIF
TLSH
T18FD19FF7C3D8C62D891156F89B256F1FCE1A1928432C3C27C8D8BE1B93E2871E25565E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 014646969927e67c9e09b4dbb8145a99cff2b61906a360839653c0f52b907bbe
MD5 dc02e3d303fb31ffd99ee090f98e244e
SHA1 580b584087aecdaef6dd349e727639e24278ab8b
SHA512 ccf1b4eb78897a37d021da97d3c61511f9f5073931e7b90a08689bef7fe976e83f12363a5b625ba982a03a8624e6ac2d95b82fd16bda885a93c35cb639cbe0a7
SSDEEP 384:DwtJJ5JENuuvAlN/TW1FD0XpIayW2IMSPAWpz8+yikwl+TD+/Lz/9iY8bysu9f4o:cDl6TO24ZFtT
TLSH
T18D62AFF7C3E8862DC91156F8AB156F1FCE2D1928532C3D67C9D4AE4B93E2472D24064E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 3KB
SHA256 e21567ee5977d9c10a684e5c2079af14fccbf17597b840fb27b1ab1a176d054a
MD5 b6ad14bbebee0a02104cb573c7bcd74b
SHA1 a9042a9ffc8bfb4688c83d95e0fe8e2ef4537249
SHA512 4d1e3e74050ab401bc2ae4556fca239b0ec1b8b64d97dad9d9f5f9656fb46018d734195a41278c14c96d22cbd2529aecda52bf557c19c7e03ae2b12d63ed84f9
TLSH
T19381AEA7C67EF49710395C6B1D487C0A3DBDF8354752D8F4DA9AA06DB084CF30B06466
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 e7f6a45c2fb7f33beb0274f435fd1215c1de856a088981f4dd23066ac0bd788d
MD5 ca8a1d804f2db194d45fa35ce2cc5f95
SHA1 fa4993baefcd26defb2837e68861682763e78e78
SHA512 b14357a2e5ebf7ca2be7f6f2f7137bc7017f0fc82aa9071aebcd71e22dd80b3490f3fa4103f872e6e0acebf21bf17650233d80e56377293d6cf27dc752598cb6
SSDEEP 192:6R+wHt+v72vAPRp2Zx9THsb+WNn0dPwXe52yqwiVyIsnAUge:6R+wN6C6XQFweP52yUe
TLSH
T17942B62EAA10297B6CDBD21AF9617727D7F6103176D42E84EAFC892C14E75CC222701F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 82b26eaba306116bcd342e3b3e17eed65d443bfeadba38d9b1b58f5872a3565a
MD5 52e6d63facd91b9c74bc341c7301ada5
SHA1 ef7dcfe1a3a0adc77667e410047f34203b7e9d73
SHA512 f208bbd5d9888bc4ebc54d7d307c5fd8b6122fe9193b9a961f3d03d8a4a750a09733e73899867874a60704e72b1bfce1b56c06b48750115a059b19d690c76feb
SSDEEP 192:YRNcBzEHA5v7Y5s4PRpy+y0VyqlA69THsb+WNfLydX3WkARsVWp1EsXe52yqwEVo:YRNmzEgZU5NXDFwKWqqEF2yiE
TLSH
T15052965FA9201A777CDBD21AF961772AE6F21071A6D42E84F6FC8A2C18D75CC221701F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 9aa07e4eea0e8c962b40f7b30c9561082fbb5105bc4d7055386d353dc1cf031b
MD5 9795cb0ba0f5be8cd334e49f01a330bc
SHA1 c6db7f7e91522f2f870468dc7cc4dd8ef4044cdb
SHA512 b7d3c3dbc7179ef226f84432646efaa9899362789642f84f509d289e6cfe0ae8225ffbd28f5238fc1a1ac0cb9a0772016ef290d84f695a7ad4574b3071c51777
SSDEEP 192:6RNcBhEHD5v7Y5v4PRpy+v0tlAD9THPYb+WNAW0dfkARsVWdLeBXe52yqwEVyIsv:6RNmhEjZU5iXtFMebqMeO2yiE
TLSH
T1F252A75FA9101A777CDBD21AF961772AE7F21031A6D42E84F6FC8A2C18E75CD221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 30d5be0dce74550f055a085330fa094cda5bbcdf32fdb6a0317b12ea7ba97483
MD5 a72aba8080816670eab4cf3d54697455
SHA1 6d6e0e41847dec4e5d82238f2e2e30b27efe2aed
SHA512 15d8d67b0572e27fc695fe2fe60591b0052d38adc87be4eaa4bedd6a7220b3411dbfdf3040daa8c88f44969fdc6de07db5e4b021fd7659b19841cd701cb713cd
SSDEEP 192:6RmcBhEHBev7Y5v4PRpy+vZlAD9THsb+WNAW0dQi3+dLeDXe52yqwEVyIsnAUgE:6RmmhEhaU5iXeFweR0ew2yiE
TLSH
T13A52B75FA9102A7B6CDBD21AF961772AE7F6103166D42E84F6FC892C18E75CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 711c893bce1f9562459da177dbe469dc08c5085729057e0f1c86d5c7db29a372
MD5 b26b879ac9b83e6c0e6c0dcf6cdbc449
SHA1 72502cfb5584c1134721760075a63abdc41ef7ef
SHA512 9d96769235bb7207698e2553b6d776476aaca7f7b6a3f22c6afa2151bf1cb96a2896750f650c5dca9ea5761fb968740bebfcfd2cbe2e89e54f2717d35ef8495d
SSDEEP 192:6RNcBhEHBov7Y5v4PRpy+vZlAD9THsb+WNAW0dQsVWdLeBXe52yqwEVyIsnAUgE:6RNmhEh0U5iXeFwe5MeO2yiE
TLSH
T1B652B75FA9102A7B7CDBD21AF961772AE7F51031A6D42E84F6FC892C18E75CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 c5353ad1b73b97719939c39f756b178a02c0bf8d7d1191bb00dab57a793a4996
MD5 2d830312f24c5641006f3189f522d44a
SHA1 4a2759e77b77ff92d5679a090a033c1d3613ed7c
SHA512 c83ec2a743787897c97e85ceca764e98b238ff24290868771a599b82a69548ca16d1ea8eae006799891ad0af045515d0705bd4bbe21f06677a9b43297d208116
SSDEEP 192:2RCcBhEHPrv7Y5s4PRpy+U0VdxlAV9THsb+WN0Ht6aHkARsVksmQZ+5heEXe52yR:2RCmhEvTU5NXyFw0zqjOe92yiE
TLSH
T15462975FA5201A7B7CDAD21AF925B72BE6F21031A6D41E80F6FC8A2C18D75CD321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 29cd2a43bc4eaa8b7f65ff645de16f539da68e2bda6bdb4d4b3bf21a1f1e94dc
MD5 34aec3773a4aa57e4b0b8e02548ee707
SHA1 f398401b08475a6e9cc0b4aa24a885aa7d202d88
SHA512 bb4db791fd667124d17cb525f6c07db0675f7e520f8f79e6aa106036565330250f96054c234e5919efbba0197a7ee06847d58b342d2bc31e111ac3d7b1a061d8
SSDEEP 192:6RNcBhEHt5v7Y5v4PRpy+vZlAD9THPIb+WNAW0dQsVWdLeBXe52yqwEVyIsnAUgE:6RNmhENZU5iXeFce5MeO2yiE
TLSH
T1B852A75FA9101A777CDBD21AF961772AE7F61031A6D42E84F6FC892C18E75CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 1e4e8ab118188901d62842c0267da4e4ea8033410a71ae7f0e32f6f5482c478d
MD5 53cdbc8e4362ab8477939c495e47c35f
SHA1 df536fbe831d1e7590bd0b53883f6893daffe079
SHA512 cce7536346e02d3e92c6fadf7695a024f448228bef277281244970bb0fcba58c7d4373a83c0eca86ea4c2f4198bb4f82e58d482f7a9f17611ee5ae859557c8f7
SSDEEP 192:YRCcBzEH5sv7Y5s4PRpy+y0V/lA19THsb+WN0+TX3WkARsVksmQZ+O7katXe52yR:YRCmzEZ4U5NXkFwRWqjjkd2yiE
TLSH
T14862B75FA9201A777CEBD21AF925772AE7F21031A6D01E84F6FC8A2C18D75CD221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 518b9bcc194292f12c3771305c855fb3c81b0befd509a51d2a0013ce360fd489
MD5 a7097db3f7675e07c68e8d635b3f61c5
SHA1 440c446e4c08d32bd6ac389a6b296b9ed45a039b
SHA512 bf6792a7f2692ae1e36282f01bce4db0c5e9eb9372a4c4a746a5da6b2b043937797fd87f6e8deb3dd393450e08a1ab910f830b25876c46214d4dbe5b92ea738c
SSDEEP 192:YRCcBzEH5DXv7Y5s4PRpy+y0VhlA19THsb+WN0+TX3WkARsVksmQZ+O7katXe52A:YRCmzEZTU5NXOFwRWqjjkd2yiE
TLSH
T1B962A65FA9201A777CEBD21AF925772AE7F21071A6D01E84F6FC8A2C18D75CD221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 ea4f4982b63765b8a7df42c65a3dde0ba0a6ec854097953e949e7666fbb48a94
MD5 42ab629a8fdb3c8d38627e9a7a3d7ffb
SHA1 60641ab840faef0848e402008f440fcc5116e832
SHA512 7971a57c67d35f664281f740b46b31dea3688b817573abf0e3e8597b5258350e336f177d62f5bdd4270823f5a23fe6d85380092d3e3ea510bd4c23d3b010ad8f
SSDEEP 192:YRCcBzEHAIv7Y5s4PRpy+y0V/lA19THsb+WN0MLydX3WkARsVWO7kLXe52yqwEVo:YRCmzEgUU5NXkFwKWqLk42yiE
TLSH
T19752A85FA9201A777CEBD21AF961772AE7F21031A6D01E84F6FC8A2C18D75CD221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 e8edebe3b3642a5d6b46fc0c7858fe07cdb7f2cafe7691cc46c005af445272fa
MD5 5632997d82d0eedb7d3a30d8153d35c0
SHA1 7d98bf4862bf8679121ea21b4761311f6fbc844d
SHA512 1090f57d1706fbf01f5bc171819741b01a478b09119d209e1e4c5b14d2b4d846e8db70fc3aa092f09674ebaeb828052534fe4c591057a455c3b0a557e4560f8d
SSDEEP 192:2RCcBhEHPDXv7Y5s4PRpy+U0Vd0lAV9THsb+WN0Ht6aHkARsVksmQZ+5heEXe52A:2RCmhEvTU5NXXFw0zqjOe92yiE
TLSH
T11562A75FA5201A7B7CDAD21AF925B72BE6F11032A6D41E80F6FC8A2C18D75CD221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 37e5462aaf62180d4e57b95397f795730bb93a4970253185317efdb631b9dfb2
MD5 002d3c09b7bffa849732f86992a161b0
SHA1 d25b7ad2816d4afe83fe2ede2aaf051a49af9831
SHA512 fce7f7bb9884007d602000b66b49848d974a053987debda05058dba10c74817554edc4814f41557d09ffdebe43ce642b23bd99248671ff23c5e22dbfe7ab1832
SSDEEP 192:BRCcBzEHklv7Y5s4PRpy+K0VnbxlAFhd9THUo7b+WN0SRN1WkARLvRsVksmQZ+m2:BRCmzEEVU5NXI/FjfW5qj42I2yiE
TLSH
T17462A75FA5201A777DDBD22AF925772AE6F21031A6D01E80F6FC8A2C18D76CD321341B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 2228718019f22ed7de52725e75b1bc146136110f5ee4b3bb09859bdf4cef68dd
MD5 c5bb77605e0979b788c61662f5aad8cf
SHA1 90690c57e63bb5ef009b3869d76e179cc50c240f
SHA512 6f773c0c3136c10d038998f801381724462dad1c660128cd3ca3d74192d39e69ce2b22b950ff8b67da5c11df2d8ef2d471fa64c6bbc79a28132901420e21f12c
SSDEEP 192:7RCcBzEHl/v7Y5s4PRpy+K0VnZlyxlAFhd9THUo7b+WN0SRMirHkARLvRsVksmQA:7RCmzEFXU5NXv/FjVrz5qjC842g2yiE
TLSH
T1AF62A89FA5201A777DEBD216F925772AE2F21071A6D01E80F6FC8A2C18D76CD321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 41dae9bda9c240f724d26466c8282a8ba6927e641f674bdcc7c243f9d1f24790
MD5 89888ab1af4a78b6c36c41153645f87f
SHA1 d5699a8e48cf71256d30ace5204e211848224f3b
SHA512 80f16d96afe20b5c502816e6deca04019d7ce4baa6d3eb77e284f9361972eb52a2ec1ad7baf200b3c6217c23cfe1d3d16dd44a57f4df0ea7f7767d9be941ca82
SSDEEP 192:6RmcBzwH7ev72vAPRp2+YB59THsb+WNn0dZLJ26Xe52yqwAVyIsnAUgE:6RmmzwbaC6XCFwe/2D2yGE
TLSH
T1B642B76FA9102A7B6CDBD21AF9617727E7F2103176D42E84E6FC8A2C14E75CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 46b1c7603988b70921583c36db39463392f7d6486d96c858f5b4cec51ba1e482
MD5 805f66e9766a878ede9f562e5499e97c
SHA1 9292879278be3098d883a6b22e18113b1cd60fd5
SHA512 d15ec4d5229b4f862ddd19cdbed9a109dbd16a94571d2225f6125ec3a9eb9b8ae8a9e7434165fd9d114d8116c107a3959594f399feebcaaca2ad0108c5a14dcd
SSDEEP 192:BRCcBhEHjIv7Y5s4PRpy+U0VnbxlAV9THUo7b+WN0HtN1WkARLvRsVksmQZ+5heb:BRCmhEDUU5NXAFjAW5qjOeV2yiE
TLSH
T18162A85FA9201A777CDBD21AF925B72AE2F11032A6D41E84F6FC8A2C18D75CD321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 023fca7a629333ddfe2a1a8de9b95a720e708b749112985642cfd74795448cbc
MD5 fab278958d646dafb1df1d89b158cb9f
SHA1 1108258ad9386530f323cbbd73bda421540a1ab6
SHA512 a283da7ea093daf70c026404dc259f1c58f7998daa3d9aa9a88c682f912b0048007af52420ec995e8c690ccb65ca1a2ac5ff0ebeab4daf1eee33888e36dc3929
SSDEEP 192:7RocBzEHl/v7Y5s4PRpy+K0VnZlyxlAFhd9THUo7b+WN0SRMirHkARLvRsVksmQA:7RomzEFXU5NXv/FjVrz5qjC842g2yiE
TLSH
T1DD62A89FA5201A777DEBD216F925772AE2F21071A6D01E80F6FC8A2C18D76CD321341B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 2108773f6f308d0b633bb516eeb5cd354da7a0c39308770cc50368e35d396c85
MD5 0f9b176b47f7a6656eebdd497a578b76
SHA1 670810c0b9601f5513a2eeec018a4700df6926d8
SHA512 86ed168245b669515765b93fa2065d9c200ee75b4837be80268bb8962d02d841527cf18a68bbc3ea8c7acabcdebc37c9d53ad99df1ec2bb424aed31402eed273
SSDEEP 192:6RmcBzwH6ev72vAPRp2+YB59THsb+WNn0dZLJ26Xe52yqwAVyIsnAUgE:6RmmzwaaC6XCFwe/2D2yGE
TLSH
T12542A66FA9102A7B6CDBD21AF9617727E7F2103176D42E84E6FC8A2C14E75CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 7199295cd8ab0c770883c4065bbe0d06db62aad280db285806d27ff6f08fd2f8
MD5 488d314ce275b37672b4680be590cc6a
SHA1 22ae7e4c884b1a898b0ff5a9bb69f22c2e835624
SHA512 1daa5f2365d98ce66b66ae11fc22f669604547a0601088962f4acf36ccc849f5f404536ed549fd59b30eee524b4b4973960c6cc3e482daf2d6d4b12199f3e2a2
SSDEEP 192:YRCcBzEHA6mv7Y5s4PRpy+y0VyqlA69THsb+WNfLydX3WkARsVWp1EsXe52yqwEO:YRCmzEg6SU5NXDFwKWqqEF2yiE
TLSH
T14152A65FA9201A777CDBD21AF961772AE7F21071A6D42E84F6FC8A2C18D75CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 09a5fffe57b949cd33a47f96c4274499188d0dc4c290007001be7c82847bf006
MD5 ca805e3de6c79361afca0e7fbdb7de03
SHA1 ca66c4698f619126c4082566f8d2c3bff05ed4b9
SHA512 01216ffcef07359f10fe3a3c57a2dab61a2460725be970e69cbf31d093da6eb13751b1d16c348eed228a7e4091938634f69606857ad0efc170642e6ed0cea933
SSDEEP 192:YRCcBzEH51v7Y5s4PRpy+y0VhlA19THsb+WN0+TX3WkARsVksmQZ+O7katXe52yR:YRCmzEZFU5NXOFwRWqjjkd2yiE
TLSH
T1B662A65FA9201A777CEBD21AF925772AE7F21031A6D01E84F6FC8A2C18D75CD221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 eb0df87538fa5cf30f5861130cd5534d17af8ee607c0d2de0e3f5f2d9f1e6210
MD5 c2b5ad80ebc1b7cd7b000dbab394622c
SHA1 fd2c94df448f824c240765323d8fc45cfeaa6b4c
SHA512 8e27c4cd95d6428bffeffaecf7b20f1026c0e7861f754ea4f4c719871b2b62f0e1ac6f8f60e700cf3618f5d6dcdbe8653acd1fcd8d743a0e923124d44ee73796
SSDEEP 192:6RmcBhwHBev7Y5v4PRpy+vBD9THsb+WNn0dZdLeMXe52yqwEVyIsnAUgE:6RmmhwhaU5iXFFweTel2yiE
TLSH
T17D52C81FA9102A7B6CDBD21AF9617B27E7F6103166D42E84F6FC892C18E75CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 11KB
SHA256 df3f3d7e8eb52eb11376e73179228426d3d2d5efef9c19d4d305887505e18b02
MD5 cf7fedf8f7d2c16e2ee32aeccb0d6abd
SHA1 c0965f169b36b690aaf700b8f80359944a908774
SHA512 0f7e0c7f513e4fbb8754c44a17604a17a368e18bf06088e8c92d246667c4707e4e019b978bfef2975410552144093cebfb7ef11074676b8e4908dde7b23f6a1f
SSDEEP 192:ee14K6IW7KxkXqK4I40pUZNCgVLHrKHfFKslEK2cXzKD/Ty+ErUkKN9H9IB3Wh/+:/1jbW7KxkXqKf/pUZNCgVLH2Hfgslqcx
TLSH
T16F32C727948D9A3F4FECD55CDC526F4F6DB1029272780C2896FB9C0403A97CE115A1AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 8c153a1d550a31a68348576552db74769d8656a503736f5bc2688fea5d4baf81
MD5 639845a1c29c57b6617b00c2ffabb920
SHA1 cda3f5f89ea9d098f4ed7af335c17d53d671eb82
SHA512 6057e340cd1e97dc37f48832b47336ba3735a3e21449e43bdba78953a3109ef6185fad9144d17339cd0b2c7e9bb44ca1c283864636b5b3b79381961f35d6400e
TLSH
T18EB01211C44B5620CC408972250632CC23309E3598104702F3E4699A8C431E84110350
MD5 SHA1 SHA512 TLSH

Submit Download

6691c7e514933276_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\6691c7e514933276_0
Size 1023KB
SHA256 2ea4d528bb8e1d18f866e23180f7e2772e0ff1a1e2c98cec68a1b634cf7e07c6
MD5 29e8dfab59a32e44fe3b3850dc50656d
SHA1 3c50ac6eed744ec8bc4cb33c8c7107bf93c7248e
SHA512 d789d53a3aa455e81f70955bebe74f609142811ed58332bee3d00e6baa012f95a1b3a2010a44fabb70a0cb2ca484ed84a8dd62ed5bce3bd2aebb1ae21d3b0daf
SSDEEP 24576:xZf5bDY1+2dPObPSa4wlDRcCxekVGMKIz:xZFDY1+/PSa4wlDRcCxekVGMKIz
TLSH
T134253CD873A2B463A375F1A4426F42C7F2AEE892B449886CB598DCD12E74C5540F7F38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 cc7d295beace72e22deca8e1ad032a0670f2d45781f96f7f97719ef61edead12
MD5 e150d8691934c7da4ed7466831f47230
SHA1 2d66888449b14e8bbd14f16f3ba6557f0a0c8322
SHA512 cf5cfec4e776fa0d1d046b1c7ce2bf97d6d9f91ef26df4db93bc801b06a30643bb69b8840d06b23cbf99e6e4ef09f0c5521fbcab038af39bd41ac086dd105ac9
TLSH
T113B002B454046C62D85923F6B5D3584036F19C3043A2D687F1D003B5E5646815A62D25
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 bf7d0ab38c9766b715e95ed208e80e1acf45f876fa5cd0c2010e36ae2ed6cfa4
MD5 ad7fc490505f1aa4fae80843adab3866
SHA1 1950da5d03bcaee10ba94523b35613ccd84dff96
SHA512 f45a2974f52c187b176904e6ee04644982f1431a2127672ae2bd7932f6e3a975af4b0eec6ec021747edcc77e3eaa70f4f8ca947525152b319e313b0874236f96
SSDEEP 3072:hGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:wm7Rkm1tYpBeh2BAom
TLSH
T1CFC3023B5D74A93759A9BB0FB08E0B1F1EF14AA6C930DE42C8D85E0437EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 45bfb2be58d2897d29bfcfc54dc4e43a70b4bf767b48f4e84d3514181530dd85
MD5 9da778d19773126cf7d4ca4934f6f7bd
SHA1 b3d6d110aa5fc75b21909a70a3692a772dbef92d
SHA512 bc486d1a015891c9ed6f64160ca884a65829e9d06a3117773114b9cd6d3bc4d163a563fe51f8397efd06b0bbe6899a303e1b3e30643ef9f8afac2242bf0bfa03
SSDEEP 3072:qGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:tm7Rkm1tYpBeh2BAom
TLSH
T1D5C3023B5D74A97759A9BB0FB08E0B1F1EF14AA6C930DA42C8D85E0437EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 ca15e54f93ced733d00b291cc3d2a70ca887d71ddb8b7956a96e666018513801
MD5 200372c40e3ee57e2529d989062b7b39
SHA1 fc3e08c56ef682874ad01a5c9e3bb847d052cf5d
SHA512 ff0cb2a162ff4e15e5c704871cd5ab283a560e934b73b3daf1607cbd2f48bd31d11a425d624e695748d18f245a48bfd36b6b61bfc77d4a342eec95f746dbf3cc
SSDEEP 3072:NGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:Em7Rkm1tYpBeh2BAom
TLSH
T15AC3123B5E70E97759B9A74EB08E0B1F1EF14AA2D930DA42C8D85A0437FA7CC1A45D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 a6901e336afb61d628724c2ab37357d987f4c090bf5e5cdc3eb556983f1590ba
MD5 6df81f7b616c82beb8d484b517940312
SHA1 20a37dab639cbaa429db071e0c124cd1560c7533
SHA512 69d70b7bb13f3d6945e7befbf800fa3e3ae02edb6f2856f1e5f98bfb26a6d11d62f3a76331043bf1c7d1384df666efe04d092b95171635668e5933835bde606e
SSDEEP 3072:iiGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:iVm7Rkm1tYpBeh2BAom
TLSH
T1A4C3123B5E64E97759A9BB1FB08E0B1F1EF14AA2C930DA42C8D45B0437EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 68322e392d9fd64bcd56eed454005556bd0bd74c2c138c905b4e8e7653ed5593
MD5 c28bf24a441bffa8d7acc8e882ff5f9b
SHA1 b28e9a9e30932d419b5c9ef643ee7b21c8aa5baf
SHA512 0ffda3e3e2635b70eb41463b8bf3973c1e44a8afda25980a961f798651ce1e0ec8ef49979610ff386025cc8cc1c5d61cf24ee44aec6fe16b51d3cd859fede344
SSDEEP 3072:lGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:sm7Rkm1tYpBeh2BAom
TLSH
T1F1C3023B5D74A97759A9BB0FB08E0B1F1EF14AA6C930DA42C8D85E0437EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 58f1172cb8f6c97eb1335f613158d11bfb687cb79f7690375aff435290a83890
MD5 5b8e7af33fe6ffae12c9eae68a64622d
SHA1 2e89140d4c9ae11a6f4cf633cfff574ac1d9a352
SHA512 d963fb4e29a8f7c660ab09de76484ba3e99eb3b5d08768186ed9041cb21f655c77d48d11805cc0f5a5d513670acf1348b1f042c9eb71498f0e5222a3681a0d1c
SSDEEP 3072:cGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:vm7Rkm1tYpBeh2BAom
TLSH
T135C3023B5D74A97759B9BB0FB08E0B1F1EF14AA6C930DA42C8D85E0437EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 9a7ba15a91a48674276b7439b322974c8d71eab70d7d3ad6c3658f5e421974cf
MD5 3a3fca9e8a11b6c36856319510a138af
SHA1 aa9289b67e8bf03fd8275112051f8d375c6a9e4f
SHA512 d4d68ea8d7fdeb4662492e0cafd0dd54e187d78abe8197eeef1f78571c5a7eef52c5b0da728773b48a2b8beaa931e3ec146b58b7aa60c186e78d53584bc4ec06
SSDEEP 3072:8Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:Pm7Rkm1tYpBeh2BAom
TLSH
T1C0C3023B5E74A93759A9B70FB08E0B1F1EF14AA6C9309A42C8D85B0437EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 a936d82d429b2c621431447778e3d0a47996976438527ba64d598e21dc4ce09f
MD5 41cb515aaf513eb806be1863a6a3e0f1
SHA1 9efd0148218b574dcd197271a2b61d248f0aba84
SHA512 3ce36e3b79e03cc2397ee8dd958c03f46b84641090b6c3cf8b17b40b1f30df6c9f511f61d6f9556e6c298879ae244c8c4bb1dd497ea371dd4ab46b4b79c7f55c
SSDEEP 3072:CGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:1m7Rkm1tYpBeh2BAom
TLSH
T152C3023B5D74A97759A9BB0FB08E0B1F1EF14AA6C930DA42C8D85E0437EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 f0c4dd429c3a54d32371364330bed103fba7f0525dc41383b147df0c55ae914c
MD5 ba7a303592e9aca05d3bffe17737dc4d
SHA1 54bf0136da2ecdb662699b73b6aeb00244f38d55
SHA512 86110055b7277f4707504bdcc67dacd42ed6b612b629bd63684a5446767156d57b62d66cdd21014bcbf83739d0cafbf304b176e5104bf4994c179b720a428fef
SSDEEP 3072:ZGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:Ym7Rkm1tYpBeh2BAom
TLSH
T12FC3023B5D74A93759A9BB4FB08E0B1F1EF14AA6C930DA42C8D85E0437EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 ed7f4449bdfd4fc3b00dc7f876cb068528bb8efabd1e29cb152bf4cb9797ad38
MD5 5eed7ef8ad694f6ed85a0ae94c99ebe9
SHA1 3c59a9a17441957a785c83cccbae8d0de3bee625
SHA512 39bb97aa6af21e2932707fc6ef3998901513dcd34ae240d518bc4b97ef2262e2d572b0a2fe636673dbce6c5f2dedc443d0d3e9dd1c20f60d8b67f861b7c0a69a
SSDEEP 3072:UGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:Xm7Rkm1tYpBeh2BAom
TLSH
T1E4C3023B5D74A93759A9BB0FB08E0B1F1EF14AA6C930DA42C8D85E0437EA7CC1A45D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 c1956d137317f23ec8f45ad5855cc118eae4a6441fb378233c0e4039774db279
MD5 900bee334c82ef63488dda3ce45c3b07
SHA1 de3e8a73f083f26166903d3f139dc7671598dbad
SHA512 a780076169f7534aec0451e2e534527005c9f9e2c9f0987d3312e7ef74350172c9e71d23f9d23120c3e3de482eef877b165825a59af131dedcd33f70c8b6146f
SSDEEP 3072:LGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:Sm7Rkm1tYpBeh2BAom
TLSH
T1D2C3023B5D74A97759A9BB0FB08E0B1F1EF14AA6C930DA42C8D85E0437EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 be8879832a2190e77534f9e7c79e4201213099849ac3670dcf1fdf24981987c7
MD5 9fafe09d2070cd7ddc6c0159e7ddc116
SHA1 320beeb0dc52aca7aa822d8f4c746e4d3633c960
SHA512 4fc7cbe54bf5ddcffbff401baf301f8c362a111d0d10e8eeca5ca33b63875f7f65b09a18aac1f1ccbff171456f6b117425303c57f1f7cf6954371dc0c6d8d076
SSDEEP 3072:HiGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:HVm7Rkm1tYpBeh2BAom
TLSH
T1F6C3123B5E64E97759A9B71FB08E0B1F1EF14AA6C930DA42C8E45B0437EA7CC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 55df53db4c19f91826d535ef2f5788d841bb52abf5e2f923127f39739ec174d6
MD5 28daa039da981ddc3ddb806ba6643162
SHA1 7861127da4ab2c1645d76ab6d2a9e29843230ad9
SHA512 448a29595f8fe4257c1b5c1666dfab9ed151b7890641465e88f9abde8f4cae5b96f1c355b19f10efef5da2ff0b3dd3be7ded004214eccacd94baf3e9ed63a9dd
SSDEEP 3:MsEllllkEthXllkl2zEFllYB3X:/M/xT02ztR
TLSH
T1C44404557FC00C15C70510304011C3501370F43105D1D743747314135CC55401D10504
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2A00BA4BBE3906DB75EEE6D9D38423C81206E769

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\entries\2A00BA4BBE3906DB75EEE6D9D38423C81206E769
Size 193KB
SHA256 95e9c16f94d3b640f8698a9a4bdb8d3843dce833749e44586c06445da38b77d9
MD5 02c25918742ca7f90c5cd9539bcd4a0b
SHA1 d51d20fbdce8d67c3b0fe203b5976d3ea5ea0658
SHA512 cd11e4f9861f56145ab1f8cdb56fd5b77a2d3416ef62622dc4e9340cfa7ffb21738b81ff9b709c61509a9a0623f47ca35b4ad0e6257e526e592facb3ae175b61
SSDEEP 3072:V7q+86xmb8H1gkq5o534MQSTxSeUjTK/sr3fZ7JRUO+ajSfIcX0cdIbG+FV/UFph:V7ZxmIH1gkqWxVlwjTK/sr97UmQCxr/S
TLSH
T15E1412B7686EB85F82410705DC9BAEC33CB39424DA47028B5554DE005AF8979FFCCE96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3EDDA4487B7BB0FA688CCAD556998906EC4B89A1

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\entries\3EDDA4487B7BB0FA688CCAD556998906EC4B89A1
Size 16KB
SHA256 92e0817e241dcd55923f50daf478b90ee09dd5ecfa1d5ccc9fa0bf9794b80f63
MD5 72f9d691c77e1b0f960637fd3e8fd3ec
SHA1 5099d527161655b48dd8fc7792751aeeaa82817a
SHA512 edbc920e0b5dbd7ab57f12db30ad53591740046fa77d427e593657eaf7fd5d3481c316bf575806a34b46a0dc96ad9db4878cff51e378cc5b29f367fc20f26ffc
SSDEEP 384:59MXV9RLyLV1+yPouKA+cqvX5rpJGHJRv8nyFz/fy:AXBOVtRF+cqvX5+Hv8oy
TLSH
T17B72AF7F8D9525230EF7C198E4875F58FCB5B48360AFF5DD993810400982F7A8B6A857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\entries\4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF
Size 15KB
SHA256 ffe2d34c975ea2f459948c015232faefde3fc8db1dec300e474a22509e172681
MD5 d167f9860f6102227c0bc8be5c27ad5d
SHA1 edd82947a7a7433f033c96cfea1978f894b3eb7a
SHA512 84c6adba765143b6797c41030389ba3b162b7f0c28df799b1bd7b23abf6cf34f105d60f0783d37b0619097d46034936fa4adf5468d03c117efaa48dc0ce351ba
SSDEEP 384:HwCe7iO024YQIdcs3hk2nhfdDE2Ba/rIVy8eE58+Y58+n:QqZY1dv3hk2nhfS2sDIVy8ly+Yy+n
TLSH
T12C728CBBCF416C6D1957D985C9AD5369DC05F9BBCBF6D0AA08243449CB84326B0FA08F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7099426EAA4A4CEDC17407759D40FDAD86D7C3D6

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\entries\7099426EAA4A4CEDC17407759D40FDAD86D7C3D6
Size 72KB
SHA256 59dba16c5f32d4e9556927277d22c7dac625140fad04172e4f24053ba89ba4ee
MD5 422305a3a4e27a56252f68427cc26a52
SHA1 96f2f282e3370e6507bdab9480fc9c0ac7688597
SHA512 623bafdcf4af08211ca7ec9062a01a84e7ec5e339d0ebe3c697a0640600cd11c12137e38f8bd6c34498fcb4845fa22283f89a9eb465798d8d00d13c88ba147a0
SSDEEP 1536:qGwUXXGCmYFH4XY/oExiM9AlwuORvRei51K2xRH0ypod:CU779A8Rxo4R1pod
TLSH
T1927301333D21BDD527428DC48A09DB4F3DB2D047C507E0DD2B959A298CA8B183D7E2EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7CAEB9BB887152A96AB3448FE87E8DD51C6C944C

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\entries\7CAEB9BB887152A96AB3448FE87E8DD51C6C944C
Size 17KB
SHA256 1eb403ec9ccbf0446fe5b76a1c364c1c9914a0559822a55408e62de90df37e7f
MD5 3aa4fa413f1a000c1fbfb7c7d821e9a8
SHA1 cadda73995dc4d03b4ea50f7df62de847d6c95bd
SHA512 265cf9cc95e5f84282ca68b8cd487135936b439a8b7997fe2ed4fb0a71d2db5b0e0a50b4c69b8b53499b21d2429dd0874a27400937aa6bfbb2d1c3fa6b48f09c
SSDEEP 384:yQOGLCe5ItEudu1uCjcBovDY5QDYHHKKaPOGnA1C78C7m:7OGLR+SGD4cBHNaZi
TLSH
T1CC82BF77AF0128088FC082C0C017AD893DFAA583DADAE0CE74013941D5DA7759EED0F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7CF911E7B9B03F4034210DD5F0AC64C8096788F9

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\entries\7CF911E7B9B03F4034210DD5F0AC64C8096788F9
Size 54KB
SHA256 ecb3f905ca4b80ad1eab56cad33175aacb1bfc7b9501df285b7aba120d9dd373
MD5 adde55cc1e8ced99872a6c29de4d726f
SHA1 9990070e86095aa772be1f9197fa19833505086b
SHA512 c789231535e79d06d9d3d6b161729dfa66910744e25f95ce0c4d8e4195fd5a64c1eb5f62e53831e38208d7eb21b844084e63b0b1e086b52988d7516c7006e32a
SSDEEP 1536:mephUbvOnJDIx5RFbYJyNLLO9o2mROgpoE:L8OJDIjAksoNROgpoE
TLSH
T10D43F133BFC454094AA58A85C00AAFD9ADAAF14B4F16F2B85C11B80154AC3569F9DCFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8E2776EB4F77D50363BE885F06345936C050E73E

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\entries\8E2776EB4F77D50363BE885F06345936C050E73E
Size 7.1MB
SHA256 081686564418c542183b826b0d1c3c6a84cd6952b8d496944db0a41b272be481
MD5 6e956239b9f9a34d7cce4027a810646f
SHA1 cac484294395e38479f066bef95bdf1c8168a23c
SHA512 15a00a546a14fb324eb2bef252982bfb20fef61e161f64dfc8275fc135b4cc6bd1a0b693c9f5c09754fe29a971fc61eaad6d120a7451a719f96fba1f774eb87a
SSDEEP 49152:DCgRsjfFGJfYtBOYYdR3PZ6pgQ/leE57OekefNrXskbtt0DEO6pv2uMzTLR91Y8O:DCgyMtBysYw3O
TLSH
T1A4760716EE535E23C43403B641AB23723B79D08157D7F32B2E8F7165BC2A3651EA52AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9512A4488B00CC053350DAC32D417B4A35C11513

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\entries\9512A4488B00CC053350DAC32D417B4A35C11513
Size 15KB
SHA256 63bbf9a8815aa49acfef3b3acfc4f1b864a0881357c3982c48bc7bca1ab3fb04
MD5 e3456f91b8994c04d934838309ae9bf6
SHA1 660a94115bfe48dd44895ea2a650f5db08c8988d
SHA512 0b5971d4805e066a4bf83972dc6ff2b35c5d6dfbac4608a57031007d9bc36c90493b3986b31a549f34f9c549169e3b794ba8d0819c28b9ec832bb5f6fc4e6a79
SSDEEP 384:H9XghOiO024YLdcs3hk2nhfdDE2Ba/rIVy8e/WEWV:dX+ZYLdv3hk2nhfS2sDIVy8z
TLSH
T108729DBBDF016C5D1967D585C8AD9269DD15F9BBCAF690B608203449CB8432AF0FA08E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

E7D6BD12FA7EF705676F93F0FAB1EF24EA462E7C

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\5hc785nf.default-release\cache2\entries\E7D6BD12FA7EF705676F93F0FAB1EF24EA462E7C
Size 82KB
SHA256 26513bf312041af668525da62ca87fde5037f75e0ed25ffefab305f347813151
MD5 e813ce42278e3127ad674b564cc4c18c
SHA1 a7819f85c199c7af0fefdf7fa0cd1d9bf7897917
SHA512 92a5587f5cc43466a3cc4b1fca7d85e1a5fdf3ace39eb04dc4c48a150dac51daf69eed235e49e645391483d881d698b38704734a15d48d951224473b6c5b0c63
SSDEEP 1536:SxODPiVesipDxQJHVSZjHNeakRhIUY7WEAT4mvDK9DARfeVWr1W2w2e:WODhxPjtedDlKXATFyA7rRq
TLSH
T17183027328AC330BAD4269D1A308FF4D7DCA9083AF83DA6C71CD6158A694781676707F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\AlternateServices.bin
Size 10KB
SHA256 9d986958e202bb9e752bf9beda3ee22c3e4ba844475be3ee2352eaf33a4d20c6
MD5 972936276e86948ad59a12394b7e7d63
SHA1 36c9672a1df47336b49808a7c9c967dd470d96ad
SHA512 df82eea57334546f03695838ff64c6f0067feb8bbaf8e53e1cd476f268ec0645dc7f616516645b66c6a23d91aeb9020640dbc94c7fe17da0dc20e2df2a830a05
SSDEEP 24:auhMZ791DT9xvq9B2EYC9VvQEYbK9FUEYN5q9F55A5LEYC9l4EY:QxBRIIwBsbo6DI56XwO
TLSH
T1722262F36B72E473F0A28FF4405AB15C9C3707251978D584C744A0BB42D1EA9913EBB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\AlternateServices.bin
Size 28KB
SHA256 26b9bd190741555edd097b10a771a98edef0fba304fb4ad53d743dc51d4b24c6
MD5 025ec9834e1c58d7d10ac2b8a9a7ed2b
SHA1 2bd08db6a844fe02fcb984f751f497e11afc7ef8
SHA512 244625c218ecb5a2209205edaed0a535b1d2eae8fb39e2b0e0db26388e3a5afbabb2539714fb5153a7b48840ae968b2cc09af05f619efdcf8afcf251ee4a6929
SSDEEP 96:6V4g8BkMOTI56bAyj3EM/p1vyx2/FoyuZwFy8tV64hlxF7Hpe6JlbEPbEbEqYPQH:5Qb22NoZZSFt2IgVoso
TLSH
T1B6D293F72BB1B863F0629FB040AD705C9C3717295868E5C4C618A4EB0291FA4D17EBB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\AlternateServices.bin
Size 28KB
SHA256 cb32b4ea0bfd2890fd7b70bb21cda26f3a63344375834ad2e198bd1f203edfb2
MD5 7518601b992691f4426755877d0db0b7
SHA1 865971f69c10fda8819c35b0245af7e01184cb2e
SHA512 529cfa09d9562599684f25020327db6b20a4cbe36a53503097d654fca4fca6b4c0d599487078115913175f088e9de04894399730e962044ee569ff0d246af0d7
SSDEEP 96:tOEM/p1YyuZuay8tuTjTDRpaEPbEbEDBPQsDdI6yM1a4:5QkZZXFtoIg1osQ
TLSH
T126D296F72BB1B863F0629FB054AC705C9C3713295868D5C8C618B4A60295FA4E13EFB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 5ae478b95d8e90d90847ebeacb8347e3449bf55f826ec785dc772650a1f1a30f
MD5 16bce0d29e34a924d8a33dfab9aec41e
SHA1 e5f601f8bdc73ea31f86c796785427669b97d13e
SHA512 ddfe8c44b1b0fef5564c77b00859f85e63f2e6ce22bb7e76015d422be33b9ee19b73b8cf0fd0046e1d71b526bbad876694ca9fb198e134de8347e3698021f203
SSDEEP 192:mJ1d66JozGzgCl6mc0dKOv5zboPhZbWyjOwP:yd66JozGzgC1jHbo5ZbWyjX
TLSH
T122E10E64E628867FC408037BCCA61F914F3A389AD84E3F2535DC64482D5B2DE7A9D1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 c99f309d1ed90f87a16edab1a61eb24b2f401ef95f2fa65e92bdacc8723d1562
MD5 90aa8aec48c896623c2f2d1eeaa54f21
SHA1 7e9361aa74d56f8451980a9e573a752ad4460688
SHA512 6e912943711759346e2041325bb3ae2e2e47ee2fb0549262291e18a661c140c4c917b4394d546f5d7c80198ed604b2b2450b55e193acf76f461dec232fffc9ab
SSDEEP 192:DOv5zbowbbWyjSwJJ1d66JozGzgCl6mc0dz:MbowbbWyjtd66JozGzgC1jd
TLSH
T182D1FE64E6294A3FC408133BCCA61F914F3A389B984E3F1535DC64082D5B6DE7A8D1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\datareporting\glean\events\events
Size 1KB
SHA256 34294edfe6165ef34d09d52eee6bf4c9e5df03a3e85c24fb979204fb6a6f7158
MD5 8fe480410230badba19af8de3fbbc869
SHA1 9e653282d7af2084f900ca886526856dda257024
SHA512 58a3001a5ed3f5ffb0124499448b4a6c15d393db8ea15b5bf80211f43a204cb46a9bb0578a557d820f9306476e73969c8bdee5716d89246633b666f1473eebd4
TLSH
T12211AD9C39F49D2AA887F25C7444128E93594E0704871C834D53FF8CCE81EE9326A43C
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\datareporting\glean\events\events
Size 5KB
SHA256 ac542d1caae266686ff94510401a396ae915b25fdd0d34fd7c2fa75e9b4ee823
MD5 92bda1775a6fe75ddddaa5b192466a98
SHA1 721194e7ba73c1a2a1ca53584732fe2035e9d688
SHA512 7f2b26cc52388a1d011238a0863c93466d1fe45e84bcb6e1ded6798ad2013270d7f8c16e1a1925bc7d51f083eb702f06bb51e2e9df09f601278647f83cb83388
SSDEEP 96:RDEe8ttPUa43XjBdR1hodvH050n0y07207o0ck0RC0I:Rwka0/R1hqvHyWxlvqDL
TLSH
T113B1FF3E3AA81CBF76DBF5187482239E46AD9B4351861C434C67FF49CED8E9A3149068
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3512f250-14d7-4ae3-b4d7-b7f39ce6ca34

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\datareporting\glean\pending_pings\3512f250-14d7-4ae3-b4d7-b7f39ce6ca34
Size 235B
SHA256 b0be756244c7abe80f093912cdc1a22924624e15d6da50dc5dbc63a291cf140f
MD5 ddd41c890708249443bf1be80a1326ae
SHA1 4d950c40342ab4925f3a3fd6c146016b806410f7
SHA512 f3333805357ed93eaab1a75650c93652e05aca677c428ec95d1133bc3eec50a549e3e408e1cea505e87af686955ab60959066fe9bac17bc42f0201e1ff193ab1
TLSH
T1CFD0A7A82898776D5C181F07B4E169D671988C3338B46830D5A25574A9F9DD4C261C67
MD5 SHA1 SHA512 TLSH

Submit Download

60417ce9-8f44-403f-b6b9-a5836ea87120

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\datareporting\glean\pending_pings\60417ce9-8f44-403f-b6b9-a5836ea87120
Size 2KB
SHA256 d7c5b11d5c6008cdaf431b50716f05bb60bce7c9e489be25c53e18c31d0cf04d
MD5 f60a463106a2075133f6c2fe4ce859a4
SHA1 f8098eba60fabd23e345df4812ca22a563387083
SHA512 0b60316b1c571da6b3f775eabbb8fe601d5e86934b306566f19395b364d2e4b4c648420408ff0362b3f1ef9a236941a53e610391aa05d05cd553ddcf180e2e96
TLSH
T1A341432C77785DF68CD6F18DD492234D97608E0300C62CC32E92DE4C8C9A66D736A16B
MD5 SHA1 SHA512 TLSH

Submit Download

9431dc30-7643-4b90-bbd1-1027b35dfbbf

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\datareporting\glean\pending_pings\9431dc30-7643-4b90-bbd1-1027b35dfbbf
Size 15KB
SHA256 792d2fc3b649623ca9ce31903ffe90047ee0db9ef3e6277e9262c39f78cfb343
MD5 1e1953bc04cceac39b4a8572b996c536
SHA1 6e0ca9b936eeb48cee4aad174d4e7cdad541aa90
SHA512 47c58ed076f05d4a066ae24df2f8111106b5ebae8e9887641ab7a8812d7025c3ab0a86c907b8580cd4193580840376b78639bb47bf2ad23635b1eda415f7c194
SSDEEP 384:/iluRq7KyXyeF2hVjF10cCV/PWGAZfXcN70u:+yhhVjT89zA9u
TLSH
T10372C9562820497E8691E36894FC7FC7E5F528CF4C419FCA9BE4BD086DEE06E112784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a40541f7-1002-4392-97c8-78f7755f0d04

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\datareporting\glean\pending_pings\a40541f7-1002-4392-97c8-78f7755f0d04
Size 886B
SHA256 bf03e374d7c33992b7cc4c03832b4301fa0a6aff30903e146845f1891e2b5b27
MD5 b299096c312cd7084260cbe7df7d329b
SHA1 bfad2ef485a6179a008ea2fd542448d0bcf9b125
SHA512 153d545c6452fe0424902685d9ba84ebe29ca7fc6bdaf1d5c315cfdc79c45d109d7a9474d754be38e5e969f7aec0f59b68787764b4490c93ad005f2274ab86ee
TLSH
T1661167809638B9F1CC7CD287E5A07B528FF07023C0C618103DD04A081CBE51E637630B
MD5 SHA1 SHA512 TLSH

Submit Download

a456bbbd-6e90-441b-aa02-f778ea8b3c58

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\datareporting\glean\pending_pings\a456bbbd-6e90-441b-aa02-f778ea8b3c58
Size 883B
SHA256 243b68efcfcca013ba5e77f42dc41d7786381965afbca93d3a505e3a3fbe7fb1
MD5 dcdca3034bb6d64f1d6acff07ebcccef
SHA1 97b376ba4e676405f69032efa4e95c2349add89f
SHA512 0f837dcd92f380bb96d019709abb221d800baf38c486ea8751d6d2baf9b8db55f7ee63721ea933cc773ff65ea7d7ca0a60e59cfab4bd9b1734900cb210ca48ad
TLSH
T1E111C441E634B9F2CC68D24BD55137528FF4755380C954543DE05D040D7E92EA77A34B
MD5 SHA1 SHA512 TLSH

Submit Download

e9ebbe4f-3f51-4ce8-8524-d1ceb9ef9b8a

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\datareporting\glean\pending_pings\e9ebbe4f-3f51-4ce8-8524-d1ceb9ef9b8a
Size 235B
SHA256 3f5ece8366d1c9b2cd438b8e19256845e611f5cd381ad8ed5152c5f7ef3dc3ff
MD5 455e3f31dbe97ad37435909363c8be7c
SHA1 d455eff93b5623a195c4886cf2d0245dc6d74b10
SHA512 9f6c2598a7705dcf38d275624cdf9d289346f93317a5b50f1773bef4acd53a0b5f21dcef41a2316c0423a0dd560d59b5c75fbd91d938bbd11df8550c03e393db
TLSH
T18ED0978025AC271C0C140F0BF0E028D630884C3318606810C97285789EFEDCC1251D66
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\extensions.json
Size 16KB
SHA256 dc9e71b38f40e48ad6dbafec9ce245e70172cca821db3f7220ad63886ac983d7
MD5 0e741345b10961a51911a69f039e1d57
SHA1 ff111cc0499c6e4089627f7fa012c08db070c5e8
SHA512 af124036da474caaeb67ecc6818c5ca906ac624a2167ba3cfba3a5c977c1ed30a4d48de7aed03abe26fa6a0c9d8d85e311ff96e66ae727addec7fd8a814ae9da
SSDEEP 384:AkI4vyUmldvXf8dhWnV94z6196opL4HBL4PlL4HDL4HfL4HEd4hA:nI4qRf/0Xen4K6W454d4P4j4M4u
TLSH
T1D172421545049EB8298FA79BAA367E01C37D533B60845C38B4DD8FC842FB5B902FB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\prefs-1.js
Size 7KB
SHA256 29ba3290ed3f443f436df5a4d23dc1276b128dca6d04cbc504b11314d97fcb6d
MD5 a074ef308f900b67957ce56d903e7f34
SHA1 aaa0e085626ee9103788bdbdc82685df9d9fc014
SHA512 f8c1e00fe0c3ad28d53d1ea61a79e37d70741ec4017582ff7b92f4ea181f94f42242f505074be891e3cb38c52c4aabb17f99b409f84075f598d87e058d70b132
SSDEEP 96:xHHUTUZfvqGqqkf+reNbzSSSSlDdv9jcPnLHH4/39Bw88n8L4cn/MVzPGS:9QRFf+re3SSWrH4/39Bw889H
TLSH
T180E11D7891088F7F68B676ACAC6889316AB2013BB7BF68D750B65484051CF3441F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\prefs-1.js
Size 6KB
SHA256 451d61dd9181d0940845a20d441c7014793b4d619cfe8feeec4cc873e58cc24e
MD5 ad75acfb2c98c911d7b37d982a290dd1
SHA1 26f350210d590d563a61290eddacef811e4a58a5
SHA512 e6d51d84ae64adbd4c844338588ebfcdd48a7c4385721c77f76230fb4fa8d681999009e947c8a89a44b0a201d27b13620b2e9893ee6a7b359ea72d240e5032af
SSDEEP 96:xHHUTUZfvqGqqkf+rekzSSSSlDdv9jcPnLHH4/39Bw88n8L4cn/MVzPGS:9QRFf+reESSWrH4/39Bw889H
TLSH
T134E11D7891088F7F64B676ACAC6889316AB2013BB7BF68D650B65484051CF3441F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\prefs.js
Size 6KB
SHA256 1ab64b33e1c854442c61d96b3ca08b4df5697e113e1213a828d8d2d2e64b32cd
MD5 f9840296b3f1652de629561e4d8ead9f
SHA1 ee6bd34731535f18bdf34052f4b9edce6ff64c5f
SHA512 88b94db6ec48d4a569dab867f84db4d70b21cdaf60af96f6b5c1c85f6b4370fb2cc6503c6e40c5168c2417d589b2e1105061a345fd26a15aa4014acdc2635155
SSDEEP 96:xHHUTUZfvqGqqkf+/m1zSuKSSlDdv9jABnLHH4/39Bw88n8L4cn/MVzW:9QRFf+/mTKSSSH4/39Bw889g
TLSH
T159E12E789108CF7FA4B677ACAC688D316AB2013BB7BF28D650B55484054CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\prefs.js
Size 8KB
SHA256 b2e247e397ff381a4eff3d948ffe3b61706aaffa41d1003f8f7a8745d4077a36
MD5 742fb6b566b332c2f99a2a7432733a21
SHA1 694c53dc3a543c6fb2ba5e2cc105a5ee8e8ca05e
SHA512 9903439dfd6f234eb131340d3e8946c99a7597883a6f883e140bbbaeb5783b7f914cd65baffe8e22d04fbbf5534ed2c7129eaf1568b5e8e78dc3680f1d810847
SSDEEP 96:xHHFTUZfvqGqqkfzreNbzSSSSlDdv9jcPnLWReL4/36OBw88p58L4cn/MVzPGS:91RFfzre3SSWiRG4/36OBw88hH
TLSH
T1AA020D789008DF7F64B677ACAC2889315A72023BB7BF68D710B96484051CF3445FA6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\prefs.js
Size 12KB
SHA256 275d01200ca9da294b667b3339fb70578b1be49ff776c14fab510aae8a18d936
MD5 5c47b52ba33b95c68a219e2f71335032
SHA1 0708c96286236d7d53aa13cf789e6b010d151afb
SHA512 c238623f9789203e96286774c34d95a97dc3e504a109472047989ebdf810495a17f88a08493ba7934b2393cb7a7a666b127fd4e90cb29de16cf7e64e53286e28
SSDEEP 192:91RFfzreASSWtLRG4/36pOBw884/WD87bJ:T6RdwuHZ
TLSH
T18A42DD389044EF7F64F7327DAC255AB019650227B6BFBCD205FDA482055CF2441EAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\prefs.js
Size 6KB
SHA256 3becd6786a1cbe44f075c95a44327c4911ed8c6c56c741eb8cd1daae896f1f7d
MD5 282cf0ed6b4ba05aee0b9675dad4a3d0
SHA1 1876b81303b30a1a0a70ee445d2f1d256c2c301a
SHA512 5f79ef4faad750a8df856f6974c1e073420495982d7f41f05a71f4f3c78365306c7c44bd2084e52f6ca24d1c19bf6429f752a2c75bc7269338e681d3804640a2
SSDEEP 96:xHHUTUZfvqGqqkf+re1zSSSSlDdv9jcPnLHH4/39Bw88n8L4cn/MVzW:9QRFf+rezSSWrH4/39Bw889g
TLSH
T1E5E11E789108CF7F64B677ACAC688D316AB2013BB7BF68D650B65484054CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\sessionstore-backups\recovery.baklz4
Size 12KB
SHA256 2dd9c4b6f1dbdd640c3352526c4fb8fd4b68c61ec3400824f213736d234408b5
MD5 9049e1df6858eb030dd61f7ac2d85193
SHA1 2dd923e9f19e621cba778b3924e15e0dcaada0fd
SHA512 827e09cbece18a6dbe726b7623a05b69343e3f78429e1a35298de98d4daded78bf61db7e3d6797eacf41cd181639da4a59e6e4259c38e5cfc4be9f782de889fc
SSDEEP 192:rOaS9GZeqZEZB/EohvdV4SpJ4cPEIVeu0bWmKeM6p6i0v/4yv:6zjljzPDKWmKezp6pgY
TLSH
T10542AF3BC8253BCB8E3229F6D0FA0F2585F22476CDF92105D9586E33A2597097F1899D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\sessionstore-backups\recovery.baklz4
Size 12KB
SHA256 80059682322e4aa6cad1f6796bed5b631e4fedc1c9e3fcb7d093dffb7049458e
MD5 d7859d0fe88a9afce3ecce9a36924581
SHA1 8879995c6b52a041b5b322339cd2b23bffcf8444
SHA512 0e30194092861ed0905142e1ad6a8e70eda23308d999e433436c9c1ecfb4696da504359523bb2c56ef28fa09c0841ad34f370730a6c4605d08a65cc68158c960
SSDEEP 192:jOaS9GZeqZEZB/EohvdV4SpJ4cPEIVeu0bWmKeM6pcwi0v/4V3/vV:izjljzPDKWmKezpcwpgn
TLSH
T19A42B03B89762BC78E3225F5E0F90F254AF21476DEF52109D8887933A28D74D3B1858D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\sessionstore-backups\recovery.baklz4
Size 2KB
SHA256 aa6e15de076d1aedb523fadb34693582269a1a889cd2a10059a815973a32fbcc
MD5 38e0381e1a167863b5444483d0aeca85
SHA1 b8fbc6b212d3681d6d47fc884b8eca4a5feb2847
SHA512 24d15c54e512e3ddd586332d65cbbbd06a2e71408cdb8b0647ddf3b3826f0e1ba91843413c492de34d4f9d0546778a2456a84860583d3db85288d621bf9a0934
TLSH
T163517E671C1F6CFF3471C29678CB0FC0CA12202044A9906D7D59FC2101EC10EB695E6F
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\sessionstore-backups\recovery.baklz4
Size 4KB
SHA256 4c0d1d35533f99c04d03ca7a728c0d7dd16ed157e5aae151ddc37f26988cb362
MD5 b9ca5e4f67393d4f88481c092899b526
SHA1 726627ed26d3b10b2ce1741339dd02dc6a55f6a2
SHA512 fd60026916b7d6e0bf7a891f82e46b23316385c2a4ce0c6b6a300363aa135c405a0e3139c7867b461467197b8ac3554b8297a5c15b9078294c12260971982bf3
SSDEEP 96:c2qtT3/J/vVYCd01VrqM4EcZZi6rLKJRyb+vW9MiOIjEa0OF:cl/Jnii0v/48yN9t3j1
TLSH
T1E1A19E375C2FBDFBE4A0E1C074E94FC14AD31049D4AC51A8DA093CB520FC2092615E5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\sessionstore-backups\recovery.baklz4
Size 11KB
SHA256 a0fadf9fd684901684d58eeaf65a8aeb5db8bd3bd1902fb7fa01c5d31485b982
MD5 40a04951b326a445ad70a468d2a20e2d
SHA1 6c663798fbb1b5012de12e4b1b67e6e8e65e15a9
SHA512 e30ef62490c31c27a32dd1afa4cbd1c7f82ab3ebcfc3d67937f47a98e5b2843c2d05e088adc782cdf410bc9ca65338358c4ab2b1df9eccac1c6ee217897135aa
SSDEEP 192:/OaS9GZeqZEZB/EohvdV4SpJ4cPEIVeu0bWmKeM6pGlKi0v/4NCG380:2zjljzPDKWmKezpGlKpgNCa
TLSH
T18C42BF3B88352BC78D3226F5D4FA0F364AB120769EF82105D8586E33535D74D2F18A9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\sessionstore-backups\recovery.baklz4
Size 12KB
SHA256 70cc17da3bc4eeae84c2ad0f9325d43783b643f9f47bf13ee469606c88c508ff
MD5 f96543c64a900121fc0229242b3eed42
SHA1 3649f06bf0594645af38cd46f784ea0fbd4db88d
SHA512 ab5fce6228a114790439e8ed39be4e4895da1e8af74cb5a63302f79f71b03ed0590d663819eeb57767ebe0d92eb7f1606f26b3b33345862b88a57dfc8a1f2dd2
SSDEEP 192:KOaS9GZeqZEZB/EohvdV4SpJ4cPEIVeu0bWmKeM6pcwi0v/4V3/eX:/zjljzPDKWmKezpcwpgC
TLSH
T1B042AF3B89762BC79E3225F5D0FA0F2546B224769EF52005D8987A33A24D7093B1859E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\sessionstore-backups\recovery.baklz4
Size 13KB
SHA256 262ba468640f59043bba8bd50ca29529df1a09902c3629e402995bd76276be96
MD5 2344417a38825e516a9a05ef7487d02c
SHA1 b179b3e816b667cc4cb1a4ec3f01ba235c1907aa
SHA512 426dd7d86623dc89ce654a44fedd2692789e5c241a675f442b20de66446760b4e27f4c7ebfc039ee50bfc95131019e855525b6bee0ff3a2e938b58b5b491feea
SSDEEP 192:jOaS9GZeqZEZB/EohvdV4SpJ4cPEIVeu0bWmKeM6pcwi0v/4V3/WpcLJl:izjljzPDKWmKezpcwpgwYJl
TLSH
T1B952B03B89756BC78E3269A5D0FA0F254EA21035DEF46109DC9DAA33718D34D2F0458D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\sessionstore-backups\recovery.baklz4
Size 13KB
SHA256 97521ff14d9e1f0372dbcd9f60bcea055dcfe174ae69b8f653672255a916097c
MD5 4bee2bf3c47034dc641e445ed083802b
SHA1 01f7f838e2e6862f293f93020dca5ad596849ee8
SHA512 3dbf7c9d93522f827632660ac59e38cf122a33098f494472b8b16972fd2b07c1f102e20bf3383faaa12e59936808e2a2aaee589acd78a8edcfe250ecf8e4ac92
SSDEEP 192:HOaS9GZeqZEZB/EohvdV4SpJ4cPEIVeu0bWmKeM6pcwi0v/4V3/WpE2eV:uzjljzPDKWmKezpcwpgwM
TLSH
T18D52B03B89766BDB8E3169F1E0FA0F254AB22035DEF56009EC98A933755D34D2F0458D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2171031483YattIedMb.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\storage\default\https+++www.youtube.com^partitionKey=%28https%2Cgoogle.com%29\idb\2171031483YattIedMb.sqlite
Size 48KB
SHA256 49d8cac6e3c3aa0533a44222583c1167b336c812bb320e884e2435fbb76041af
MD5 1f6796f8aea16295e20e22418d0fb4f0
SHA1 db40ccf23fba50a3a4295be7bb457a6658bd8984
SHA512 e310367457d12ce7cce49a6d4d6af2000d91dc32d1386f5db15001d6b061e769a0426e960743aac1aa9f802be69d94343e13d1925caf3517e729f53e93f76776
SSDEEP 48:TiaOA65g7LV6CM5znpgBlizb5pxVgnO9zxV+LU7mY2wzY5QcEVdyETBtfES:Oa16S6CKnqlizbxV+2xVeU7X2B0TBt
TLSH
T13123918E3F07F511C536F0B1B9A48C52A85E321D07222AD679D0DAE4C8F2116FE5F9B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 4.1MB
SHA256 697c32bf2739293275b38375d23483d97fb178c901b33a786a333534fe8b6a4a
MD5 686106924e672966464dd477271f0b4a
SHA1 c3594df9a5a108e137c38ca41b970eeffc588296
SHA512 3879bc70b22b5b2b0bd8efb7e21730a16ce78002e20f4cad1af2e6dcf013fcda17a0817289b58f4116f140500ff223078c8122d9334eb35468e05ae0c51b1c5c
SSDEEP 49152:37snfswyaP6ryMtvJd5C9S8ARzMUghuRPbPxYUpq:rqfs7aP6ryMtvJBRzMUghuxq
TLSH
T1871639F824D1A257F3818037668563EF21AFD00C6467DD484BE966F990B8CDF9E05B2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 4.5MB
SHA256 2e170003968bd6edcf3a6812a6c5e0349f1c31a68c8943572dbcfd077fe29bb1
MD5 60f51a2fee00675a665ec9c445876982
SHA1 c51e4fbcfba1c90b42a1645968d9c9188e028bb2
SHA512 2008837039b64807118bf46d7b716ec041056e799ffce0ff672c6f859abb051809b13c19741b3914cd9fe95698d65db511042b0b17ab11389624c8e4b6349cdb
SSDEEP 49152:T7xufs/yaP6ryPtDcd1hJS2sRz3UghkR0bPGYhpqSc:/ofsqaP6ryPtDcCRz3UghkMqh
TLSH
T10C2629F820D1A257F3814073A64553EB21FFD00C6037DE484BA956E9A4B8CDF9E16B6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\5hc785nf.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 6.4MB
SHA256 192740a9034364ec140a51797110e4c74ad8df52865697545e94ff9961926116
MD5 8330fc47235ab6cc56c978d62683db07
SHA1 ff941de4f52ca7e7e528ef160722b6df580d4348
SHA512 5cc6343dd92c9708f0c8e4f70568c74298ee8d570c32b2c9bd08c0e41cda609debf488adeffea56b2a00b75c9ea6ea39b73ad608dea21cc54892f6b7a10862d1
SSDEEP 49152:iLqLyEaeUD6QC5zYYU3rJgLzSjhWwobBXBpNFZw4RPytVR5uOdyyycLfxUDJc80:xuVRjjycLfxqx/ZjH
TLSH
T1C7665BE420E29252F38140B3719953EB11EFC01C6077CE445B9896FAA5B8CEB4E977BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Kui.zip.crdownload

Path C:\Users\Admin\Downloads\Kui.zip.crdownload
Size 600KB
SHA256 a76cd7de99478dbb93e4448b4d5df8ec0a2b49b21dd70bea5a1cff0fb4051fdd
MD5 afc41f3a27c2824f68c874b9d1bfca88
SHA1 462b8a391ff9cc52aab5aa384148c708caab50d9
SHA512 9d5650563336d389ce2b01b9a51d43c21f5cf5a16afc7890656c6bf4e6cd59836a87c7fa814cefb82ac069731f11e392f846ddd09fdc4bd6592482e0776a1e58
SSDEEP 12288:A3XW06z9yD+G9cXmcbZ0F9PI3rankP5FDz9NCMMre35o0uEfeNLaBc1bRMYabMHG:AnWbz8D+CJa0XADzCcFuEYemRMjbMHeT
TLSH
T1F0D4123AD7167803D68F7132A50A822DD1BB96409802DD15BFC5EB367B294F83E35F98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download