993661e8042eb21918eb1dab76acae28b6d9351957a9529facbde38bad764d48

Analysis

geolocation tags

eueuropefrfrance
user interaction
yes
max time kernel
1799s
max time network
1805s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/07/2026, 23:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Balance Client Extension.zip
Size 36KB
Sample260728-211npsycph
SHA256 993661e8042eb21918eb1dab76acae28b6d9351957a9529facbde38bad764d48
MD5 de16ceeedc6242ecf344ccb52d9b6996
SHA1 48a217150f4049ea26679d16d66b405772fbceaf
SHA512 a4b562da97592328898387b66eb0d3daab93cfd6285b2d44fb94ea5c5491be17216c4558409f06da5296a60461faef5f2552b5d6461f7cbea7e9b31ae2534cf9
SSDEEP 768:1QkEMXN4EPBkhdW75ic137yWALhddTI9r/UDMMrvC3f2gq:vHNRPShdoocUWccdAMGvCv5q
TLSH
T10BF2F1BF5B8F34B4DD07AE7544D8A00B634D0050BA07BA27C0D9728EEA965589FDE293
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4528	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297534688037517"	chrome.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
4648	chrome.exe
4648	chrome.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
668	Process not Found
668	Process not Found
668	Process not Found
668	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 23 IoCs

pid	Process
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe
Token: SeShutdownPrivilege	3052	chrome.exe
Token: SeCreatePagefilePrivilege	3052	chrome.exe

Suspicious use of FindShellTrayWindow 41 IoCs

pid	Process
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe
3052	chrome.exe

Suspicious use of WriteProcessMemory 62 IoCs

description	pid	Process	procid_target
PID 3052 wrote to memory of 2304	3052	chrome.exe	91
PID 3052 wrote to memory of 3836	3052	chrome.exe	94
PID 3052 wrote to memory of 3836	3052	chrome.exe	94
PID 3052 wrote to memory of 4528	3052	chrome.exe	95
PID 3052 wrote to memory of 3712	3052	chrome.exe	96
PID 3052 wrote to memory of 3712	3052	chrome.exe	96
PID 3052 wrote to memory of 536	3052	chrome.exe	97
PID 3052 wrote to memory of 1136	3052	chrome.exe	98
PID 3052 wrote to memory of 536	3052	chrome.exe	97
PID 3052 wrote to memory of 1136	3052	chrome.exe	98
PID 3052 wrote to memory of 464	3052	chrome.exe	100
PID 3052 wrote to memory of 464	3052	chrome.exe	100
PID 3052 wrote to memory of 5040	3052	chrome.exe	102
PID 3052 wrote to memory of 5040	3052	chrome.exe	102
PID 3052 wrote to memory of 1196	3052	chrome.exe	106
PID 3052 wrote to memory of 696	3052	chrome.exe	108
PID 3052 wrote to memory of 696	3052	chrome.exe	108
PID 3052 wrote to memory of 2704	3052	chrome.exe	109
PID 3052 wrote to memory of 2704	3052	chrome.exe	109
PID 3052 wrote to memory of 736	3052	chrome.exe	113
PID 3052 wrote to memory of 4896	3052	chrome.exe	118
PID 3052 wrote to memory of 3916	3052	chrome.exe	119
PID 3052 wrote to memory of 3428	3052	chrome.exe	120
PID 3052 wrote to memory of 3020	3052	chrome.exe	121
PID 3052 wrote to memory of 3020	3052	chrome.exe	121
PID 3052 wrote to memory of 2524	3052	chrome.exe	122
PID 3052 wrote to memory of 2524	3052	chrome.exe	122
PID 3052 wrote to memory of 4952	3052	chrome.exe	123
PID 3052 wrote to memory of 4952	3052	chrome.exe	123
PID 3052 wrote to memory of 3920	3052	chrome.exe	124
PID 3052 wrote to memory of 3920	3052	chrome.exe	124
PID 3052 wrote to memory of 4664	3052	chrome.exe	125
PID 3052 wrote to memory of 4664	3052	chrome.exe	125
PID 3052 wrote to memory of 3340	3052	chrome.exe	126
PID 3052 wrote to memory of 3340	3052	chrome.exe	126
PID 3052 wrote to memory of 3056	3052	chrome.exe	127
PID 3052 wrote to memory of 3056	3052	chrome.exe	127
PID 3052 wrote to memory of 3276	3052	chrome.exe	128
PID 3052 wrote to memory of 3276	3052	chrome.exe	128
PID 3052 wrote to memory of 4648	3052	chrome.exe	129
PID 3052 wrote to memory of 2744	3052	chrome.exe	130
PID 3052 wrote to memory of 2744	3052	chrome.exe	130
PID 3052 wrote to memory of 3136	3052	chrome.exe	131
PID 3052 wrote to memory of 3136	3052	chrome.exe	131
PID 3052 wrote to memory of 1012	3052	chrome.exe	132
PID 3052 wrote to memory of 1012	3052	chrome.exe	132
PID 3052 wrote to memory of 2092	3052	chrome.exe	133
PID 3052 wrote to memory of 2092	3052	chrome.exe	133
PID 3052 wrote to memory of 3068	3052	chrome.exe	134
PID 3052 wrote to memory of 3068	3052	chrome.exe	134
PID 3052 wrote to memory of 4644	3052	chrome.exe	135
PID 3052 wrote to memory of 4644	3052	chrome.exe	135
PID 3052 wrote to memory of 3860	3052	chrome.exe	136
PID 3052 wrote to memory of 3860	3052	chrome.exe	136
PID 3052 wrote to memory of 4240	3052	chrome.exe	137
PID 3052 wrote to memory of 4240	3052	chrome.exe	137
PID 3052 wrote to memory of 3760	3052	chrome.exe	138
PID 3052 wrote to memory of 3760	3052	chrome.exe	138
PID 3052 wrote to memory of 1432	3052	chrome.exe	139
PID 3052 wrote to memory of 1432	3052	chrome.exe	139
PID 3052 wrote to memory of 3784	3052	chrome.exe	140
PID 3052 wrote to memory of 3784	3052	chrome.exe	140

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\Balance Client Extension.zip"
1⤵
PID:4840

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff81b1ec728,0x7ff81b1ec734,0x7ff81b1ec740
  2⤵
  PID:2304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1696,i,5935056191478671604,17373602120024833475,262144 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1952 /prefetch:2
  2⤵
  PID:3836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,17699722572654653667,17834789813169609362,524288 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2268 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2440,i,5696587461308647270,16790919824198843737,524288 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2588 /prefetch:8
  2⤵
  PID:3712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3220,i,4927102202275223435,6852912123394240926,2097152 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3236,i,15473095941338736261,14475375141020368542,2097152 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:1136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4336,i,6782865301499363460,197422829957699697,2097152 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4348 /prefetch:2
  2⤵
  PID:464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4724,i,4283301310165519588,13567059457375744772,2097152 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4736 /prefetch:1
  2⤵
  PID:5040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5540,i,16356847869111965373,12229212014307630101,524288 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5544 /prefetch:8
  2⤵
  PID:1196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5624,i,3531244279988002205,17230985065736937973,2097152 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5556 /prefetch:1
  2⤵
  PID:696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=6004,i,7457685341853690895,13550638197179671216,2097152 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4860 /prefetch:1
  2⤵
  PID:2704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4768,i,4224279404210485368,17138471986537330909,524288 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6136 /prefetch:8
  2⤵
  PID:736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6516,i,10663619261330771192,10479494141748924424,524288 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6120 /prefetch:8
  2⤵
  PID:4896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3428,i,14787813785915407759,1503653053934380096,524288 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6244 /prefetch:8
  2⤵
  PID:3916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6284,i,12168848973211790380,10486491781724955112,524288 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6380 /prefetch:8
  2⤵
  PID:3428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4400,i,6493905008750597798,3460829588609988250,2097152 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6184 /prefetch:1
  2⤵
  PID:3020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6060,i,4214580227203004817,15978856812108694125,2097152 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4404 /prefetch:1
  2⤵
  PID:2524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6016,i,5519570369089397315,12139597709562500582,2097152 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5952 /prefetch:1
  2⤵
  PID:4952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3408,i,17072665846392757761,11461602874007899125,2097152 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5992 /prefetch:1
  2⤵
  PID:3920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6024,i,8715374423869916837,8018145373430000127,2097152 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6568 /prefetch:1
  2⤵
  PID:4664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6680,i,7413184087676500245,10534040005792701446,2097152 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6656 /prefetch:1
  2⤵
  PID:3340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6812,i,15432332824852126145,6451709916132007024,524288 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6584 /prefetch:8
  2⤵
  PID:3056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6880,i,4210776798412420774,11296741563460061350,2097152 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4828 /prefetch:1
  2⤵
  PID:3276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=7040,i,10326792768370932704,1676153077056468788,262144 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7140 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=1148,i,8541533694519209812,5765786463504074069,2097152 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7136 /prefetch:1
  2⤵
  PID:2744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6544,i,13158035979378494491,6774748085669403380,2097152 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:3136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=4784,i,16138666655874769707,11025765654758514401,2097152 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6560 /prefetch:1
  2⤵
  PID:1012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6708,i,18276037182697075541,2641196769583922512,2097152 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6692 /prefetch:1
  2⤵
  PID:2092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6540,i,14782551858325918072,7234316197640954183,2097152 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7284 /prefetch:1
  2⤵
  PID:3068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=3216,i,5276564603357583894,8109165086250825516,2097152 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7036 /prefetch:1
  2⤵
  PID:4644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=7416,i,4499557380239893681,16785089351221177357,2097152 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7380 /prefetch:1
  2⤵
  PID:3860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=7240,i,6608035209836089120,16988698797480942033,2097152 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6736 /prefetch:1
  2⤵
  PID:4240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=7204,i,15109712896850075988,15023347762033276908,2097152 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6624 /prefetch:1
  2⤵
  PID:3760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6912,i,13233038783112211150,6759614884548404151,524288 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7156 /prefetch:8
  2⤵
  PID:1432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=7328,i,9166591432526912339,4081327990691225774,2097152 --field-trial-handle=1956,i,14937633800049940267,13380519527963692230,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7336 /prefetch:1
  2⤵
  PID:3784

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1624

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4508

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2944

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 55b86de378d43bfeffa0c83b026c47950ada09f553b19a0045e8537da8c54405
MD5 792cc568da38525bf8e9c4e49a710a69
SHA1 c9dfa739024ba4cd87c7e5bde3cff53a3d1b284c
SHA512 4085a3cb92b2ccea3d7fa66f8c0a3493409a05377cd8f5b5822986d6197dd1fe5acf3a06c498f56c733c7fea3730f60a8b17967075a863f5eb91ac0398e1a7b9
TLSH
T12DE02BBAC963EC3719F91719A476470AE641231B6641984F373D810C8FBD73A8687C5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Size 1024KB
SHA256 20fd4eaa86593d4709483c9f3107be63a534daaed2760860063b12bf629b8705
MD5 5d40f8bf78cf87b6fe62c63c5bb47bb5
SHA1 df6709ebd60b7020d0306700fee9a0346543d396
SHA512 6a3ae9c8def61f4bc299b69b780d0b986b44f93c5aee12860b0ad0eaa74ca35662ea5d4232b8c906cd8af93caf2e3fbdfcf3a64a665f839ade67ff30c25f0631
SSDEEP 24576:v5W90s5t3npMhF3i2qcfp87gGz5Hni+8QZI9jiJw/vgZBJohJtsV:v5W9x/3p70fp87gK5Hni+P6926/aBKL8
TLSH
T1A92523B35AE90B54FAB0173701BBE36189643E10A24D1EC7B7143AD01EFD39AB587299
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 4KB
SHA256 630d2cf141089e86c25ddbdd7500c9318a7752a413a5caa774a25d1259ee01b9
MD5 0d406ceea12f6df9637a486a33e465bf
SHA1 0d81c2e2ef854d8a8d4087ab017efbf683f39afe
SHA512 69db16d3e578b7d1258171905926ba17567bdb08a24164268a62637fd7f018edb65a137c102d6d702f9ceca72586577e4f779d3d32c4a5412dba77aaa16e6576
SSDEEP 48:27ukuwUcSQ8Cx3vlsYtyeagQGiVTGxyolBVx2Q9V/o96:2TLUcSxClrMTgQSxtryQ7/l
TLSH
T1DB91C8A462682AB0E715537201EE9B3B3133606D55530ECF63F298789766FAAC43F54C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 08a6fe1d919e655a2c5c8c8e5ba6338c319503c57469c45f0e773414063afa89
MD5 1ad3eed3ec31d8c3bc26356d63151ba5
SHA1 7ed52b71655e4274ea7b3b1ee608a4d1044bd9d9
SHA512 b1c1c306a009a7e201c8a3050f9f1af43a5acc76bc3552fc325faf5e164a163dfa05b7fa664c01a8d9ce597256d885bad2e7bda2eec98b00045b83d736be6c2b
SSDEEP 48:KBukuuUcSQ8CxRvlsYtyeagQGiVa6xyolBVAQmwQ9V/o9+:KFtUcSxCvrMTgQFxtriQHQ7/9
TLSH
T10791ECA462382AB4E71453B200EE973B3533606D15534EDF63F2987857A6FAAC43F54C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 6ddd2268c1d3843f39c46aaf24175103a52e7b0507884061563fb8bbbb66ddab
MD5 8bea649935188146cbba3b185e5d4e87
SHA1 caa9d64ab8d7e719a5069410fdc61fc0d7c1381c
SHA512 97e68f4f5cedc3582d7c1b59f38f7f53e3708ea1df933ccc699bc0a71d0c82f8b6d4da727f41e04ebedd51a22ca8acf718d25f623b092e7d788f9a2324a17f13
TLSH
T1CFB0110002C20002EB82E23C0AA3082830200E280322B283C3C000A0803ABA0A202202
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_starpets.gg_0.indexeddb.leveldb\000003.log
Size 54KB
SHA256 085d6bebef1641aa0c0755cbffde99263817afab298dc1608476d87bc66f4c35
MD5 7d682cd67f8e2b7d1e1ac0f29e9a9502
SHA1 797dbdacbbfb8c71f395f903518691e907240984
SHA512 b22810a26ef816d1d45df885efa1f1ea9c2096e891b610a08a52589847dcc172fcf1d8e1255536399663854f6e2e15cc9e291f48d894628c849eb9b1c5bb7cf2
SSDEEP 1536:rAfVN2rHuei7/xkzOtNWdFqH+UyrXo9KNE9UKnvsce4LY5Gjmg8nDjEq8BlJ48+c:rAfVN2rHuei7/xkzOtNWdFqH+UCXJNK7
TLSH
T19043CC9FA254DB67EDBA5A3118221FCC5B777D81BC84821BF1C0BA3DC9B66808C71752
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_starpets.gg_0.indexeddb.leveldb\LOG
Size 341B
SHA256 b04e05cac6b86f8c4c810b0f1568da602f55f84a1c066ca6604845f5cef9ca93
MD5 e8ab223abd98b1ed548a581fb00ed9c6
SHA1 f25478a0d6797c9d10a6702a9bb66ae4710c78c1
SHA512 80502042c645d0eb96886aa63d7fcd79e761fc1e569bd2fe15228be393c13e057975d34d230c041498f2ba269cc94750db592b80db343c2599288ac6783c11d4
TLSH
T17FE0DF6899CAC6AF601480A36924B74FFAAB540996DC2B464F1EE41870C6809A4B92B0
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_starpets.gg_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 102b5bc846e3c6c46fc2d3f1126c87f3861544665b6245442c47d28cf957df63
MD5 fd7dc16d3b4b7cf93f0161c4c3f38094
SHA1 d6c8aaa9ea7ae7f5ab9e36498f710838cda92247
SHA512 b971cba66417748d28cb2e117a57c8d8d81213b8060fb1e925543b1fa1e56ec4197ee8558768f3f0a1578963cec950ced95daa71b8c8ee0a2b0bb8aa78afc24a
SSDEEP 384:D0uvPwSc+TzyG/dDDNDm1RVkOQaaniEd7WQyw9eEAdeh8wMo/w9FcraTjmXwM4NN:M0BYp8n4
TLSH
T1CD42DCFB53F0836D9A2656F09AC52D1FCE5C1D24031C3D79CAD26E0B53E2970E242B9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 036187f40ee307511dc47e9b021a1f8a2a4b0e12f91138b0f5fe8662433d2963
MD5 119c0b51599f288901e0f05db7821554
SHA1 812ec309fcdc024690f6a363767c47a93f4284d0
SHA512 a8b735b8721d9adbd7cb0c4e5e410a33b2a8648c6321dcaaee9110775c02217b41989e72663f5e54c80ab8828034da5283e45054dc262011df121d6a7e9fa372
SSDEEP 192:DHo5W0UtJ7jBEhgvaan09sLYWQyw92EAj+deZN8mwMrCuhpWwvdEM56cJXipwD+Q:DHo5W0U77jBEhgvaan09sLYWQyw92EAB
TLSH
T1CD42CDF783E4872D892656F59A952E1FCE5C0E14031C3D6ECAD2AE0F57E1970E242A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 88b6d0cbef7d8a23e88a4ae965b5890a0efa37bc1021ab021b52722cdf730fda
MD5 681ca3ba8bfb0a3aa4c866c61d08ddf5
SHA1 ef924331bb1500d787889d5be618e4269cba44e3
SHA512 b2a8f05ed0609b37b0940a61bc350e574a778d6c196a6422914b4f7c17de84b24d4a7e1766e2f6bd8b8f82ec8a8e8f44f622a929ce2fc716e73a981663025c88
SSDEEP 384:D0uvPSc+TzyG/dDDNDm1RVkkB3aaniEd7WQyw9eEAdeh8wMo/w9FcraTjmXwPMil:xdBYv8Xq
TLSH
T11942DDFB53F0876D9A2656F09AC52D1FCE5C0D24031C3D79CAD26E0B57E2970E242B9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 13KB
SHA256 50baacc13278297b4fc9b89e0a004ebc1173ab981ad5ca3736cb19806a76a1ec
MD5 7f18631bd4742e430ff838b6b9ce512e
SHA1 7c666f062fd297469e72bf51ef733790ba575406
SHA512 089d9ac60e1481f8c173544032bd8941c5ffae2d0ed07d8b87e4b90c22bd25deaf584326d1e53dcfeda09d20b07b68e938cc67773feb277b59fc4c2f27602b79
SSDEEP 384:D0uvPwSc+TzyG/dP/10VzHGkLDaaniEd7WQyw9eEAdeh8wMo/w9FcrgTjmXwM4NU:rUBYXzmV
TLSH
T17352EFFB83E4832D9A2656F19A952D1FCE5C0E14031C3D79CAD2AE0F53E1970E242B4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 15KB
SHA256 a07640ff33ea4480e86e0c5da1680772702e6cb78c0c0ec3c58dfebbee281c78
MD5 3cd85de1580cc2bfa6f7a200ac8961ef
SHA1 26b069b584253cc970a282f509ba902a18e19b0f
SHA512 14ba2f2ab418541df1c555fa63836b0915286a753eaf9a5b59f3a23b16434aaad323f4c337456897eceb06e32f00070174f1b1d1007836a4aa36d6abaacb8100
SSDEEP 384:DHo5W0U77jBEhgLP/10VzHGkvaanisLYWQyw92EAdeh8wSp/w9ecrgTjgXwM4NpA:tbBn8fHy
TLSH
T1D062DCF7C3E4872D992656F19B952D1BCE5C0E18031C3D6ACAD6AE0F57E1870E242A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 4353a64a310cd9baded9901703ecd1cff74e4b45a0fe59af2869434a4b11503f
MD5 b3cf4e1c576cb28d45e61dcaa43dbd2d
SHA1 c4aac2ebd38858fbbb43fb4e7a3cd35483026502
SHA512 de20762aaa530949b00fcefc1af59a9a86df81dd925500bc84983c666093179233c027c7d5cf7c27ef1f83133726abf4901ca73a2d47336acf2ad1aeb1f56e95
SSDEEP 384:D0uvPwSc+TzyG/dDDNDm1RVkLDaaniEd7WQyw9eEAdeh8wMo/w9FcraTjmXwM4Ne:MUBYp8Uw
TLSH
T1FE42DCFB53F0836D9A2656F09A852D1FCE5C1D24031C3D79CAD26E0B53E2970E242B9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 b07fc714060355a53222b46d8ca95ec023087c97c8326848a7e7ae9b4d2920ff
MD5 ff63f293d3a8e76915e18c29c135fa0a
SHA1 96e76b895d8f9ae151a9358f032d4d03d823d522
SHA512 d1284a58537a7f3ff76ce7e42d93603cdcd8dac96890ef53b18ebf5e69a7023719b99332a6194c07058942bd538f02998807c6ec65fea976fae11b9d251c1bca
SSDEEP 192:DHo5W0UtJ73aan09sLgDuHQyw92EAj+de/oWN8mA8wM4irCwzhpsDwvdEM5KjcJA:DHo5W0U773aan09sLgDuHQyw92EAj+dl
TLSH
T1AF32CDF783E4872D891256F5AA952E1FCE5C0E14031C3D6ECAD1AE0F57E1970E242A8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 db2e1dd6ebab201ea6790a7b6410df3e6a8b6c1e6b03c71811ad562cdae7d798
MD5 abd3f8d5fa344b0e59052319012c43bc
SHA1 1cceedcef4f21a5799561e4da632205e0f78eee0
SHA512 d821633701a5a767d9929255dac042a8e09405aef4c93b435a74814bc75348e3f198503ed4128f365b5afc317dbe7e6073496f89a3c24241cac4bf7e9cf36a41
SSDEEP 384:D0uvPSc+TzyG/dDDNDm1RVkkqvaaniEd7WQyw9eEAdeh8wMo/w9FcraTjmXw4NMF:xeBYq822
TLSH
T19142DDFB53F0876D9A2656F09AC52D1FCE5C0D24031C3D79CAD26E0B57E2970E242B9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 dd5cf68bc46bd54305e44c069f2ff24adcbfbe8755623b8a02a7c75544e9b215
MD5 1faff2208c1e3486e51cf602baaa82c5
SHA1 5fb76e05f8da4a6ae131ab594f9027c4eca5d7cd
SHA512 a87508fa68c5c65eacf122d5e656cc9afbee2802074c3d0829e2051420b044555702170df506d564e6fef0498e19b3401c2f5a551df23255b9429a761fa40aba
SSDEEP 384:D0uvPSc+TzyG/dDDNDm1RVkkBzaaniEd7WQyw9eEAdeh8wMo/w9FcraTjmXwPMiW:xRBYv8fl
TLSH
T17F42CDFB53F0876D9A2656F09AC52D1FCE5C0D24031C3D79CAD26E0B57E2970E242B9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 4169a19b0f657cccb253bd41005f0a88264c0159d9e9baf4f9847d0d3357df5b
MD5 3929e529232678f062d3638f19b517cf
SHA1 b24d3db4b48eb971c3f42636286f55c24efa9b04
SHA512 a52d3051df3e3d23d41fb09c0c423a7550e850529bad7daf3a752eacf85460936cf11b3af86cb28e5bd801d8b37d954e3e991215ad28cadafdee5c8388ae70d4
SSDEEP 384:DHo5W0U77jBEhgLP/10VHaanisLYWQyw92EAdeh8wShpF/w9ecrgTjgXwM41xkjp:1BA0aSfZ
TLSH
T14D52ECF7C3E4872D992656F19B952D1FCE5C0E14031C3D6ACAD6AE0F57E1870E242A8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 3KB
SHA256 953a11b15f2b5f7df89fe7f3474f400b49180dfaff7ddbbb680e3bea6ad1f538
MD5 193f5dc3944fa551abac08984b9e5af6
SHA1 beccfa39489d6c5239ed8c98ec937874fc1d16d5
SHA512 be68d0cd27c49ed96c4bba8e5e0a57827a4a196f99867957b67167e6908f78a425b3fbd7f83668587e2c948eca7d45ec891ebd829b09b7f7bde780cabadca31c
TLSH
T18271BED3D6FFF41B603D49BB1D48780969BAA4350652A8F4DFAE81ACB0D58F70B11827
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 3KB
SHA256 0d3fcd647644e725a14f392a60db9b30483dd2679251abaf192603a8733fff5d
MD5 4fcc8a4c63c743abf5e88b5cd161fc86
SHA1 d5d1e955fd39b0e6b3523fab74bf19feff0ca9e1
SHA512 2dfb0a7678850f467e159ae83bcdd80ef9d8a9f97e4a327ad1212d3ebabb3342f41ba2effb19907c17872231b1c3142d73cf0452bdecf9003fcbe08d6901eb08
TLSH
T11471BDD3D6FEF41B603D49BB0D48780959BAA4311652A8F4DFAF82ACB0D58F70B11827
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 0edf0fa25a3aa6a33ce92ec8517902683e5dd23a6bbca679fcd052989e828f14
MD5 d87f74a0c18475f66d297d1a2625bddd
SHA1 65cb076e974cc8c8cfb24756b3442dc4b996c00d
SHA512 f143a5ee7f9d9d3951c3bf5e0faea3a5c5ef5f3fc8e33098eecf10190a3c83e592c7fd2ac3942738db2b3a60899fc780d0307e2c99c5e3a7d48dffe0dda6af93
SSDEEP 192:PRbkQlYVme0Pnv7MF+pAPRp2SZ9HHsb+WNnecFtz2SSknLj/a5wKPVyIsnAUgtaJ:PRbkQuIvgoUX71w9z2On3aF8
TLSH
T1FD42D66EAD15A9BB6CCAC229FD227B17D3F5103261D42E84DAFC8A1C15E76CC231701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 b5624c7547faaa9e8db0abb1e0dc4f77d689e755657f10cafda7228eb9d8f4fc
MD5 32988b899b1592efa76f76af93d6f927
SHA1 0bd223b8cd865adccefd2ea12f450afb68d10ea4
SHA512 b054a6aaf68d46b9553ea647e95aa2a8d9c0fdfedbfc4aab752029963ecfa71f41d1ffd699a3a1b32d28bd28ff4f1d4315106df75f8fa1c57d794832a2dd9cb1
SSDEEP 192:PRbk2lYVme0EJv7MF+pDPRp7uwhJtZ9HHsb+WNUXecUwVCVtz2DSknLj/a5wKw8w:PRbk2uvJgotXSC51wgUjD2/n3aXvE
TLSH
T1F762C69FA91569BB6CCAC629F912BB17D3F5103261D02E84EAFC8A1C25E77CC2317017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 45ba8f4d2d4c1e8381001c35f15f1582c8d7af66556891ca36f1aeef8cd463aa
MD5 cecab0c02a3921f8598ce2aa51113e96
SHA1 76aa29fedeb482619c9a2661ed969abc4c10dcfd
SHA512 1bb9549b7fec5d8dccc417b290bdd2a69aa52acd5426d16359b8071f2948eec975b968379f26a52fbff10a1bf25009f09f027cba4f42aedf59c8817eb017f47e
SSDEEP 192:PR2k2lYVme+FCEMv7MF+pDPRpcuwhJtZ9HHsb+WNU6wLecUwEN3tz2NJeSknLj/f:PR2k2uGFNYgotXxC51wL0U5d2yn3aXvE
TLSH
T1A462C69FA91559FB6CCAC629F912BB17D3F5103262D01E84EAFC8A1C25E76CC2313057
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 a69d9cff9f13374603601fd658c1ed76217a2b411d0e354a270c30d7f6d9030c
MD5 a826fda6ce32957ad180af925e1bd878
SHA1 2beae201a7a0542c4d035c3d8aa6d2a658a81458
SHA512 87a1b5ca2c16da6fbd7d52bd4229ff32581b096052d42cb0c70173cf01d291beeded7f7a524a83b5e30a60ead84bee0d47057f0bd4544135fb298cc3904fb13a
SSDEEP 192:PRbk2lYVme0ECv7MF+pDPRp7uwhJtZ9HHsb+WNUXecUwdqNtz2zSknLj/a5wKw8w:PRbk2uvOgotXSC51wgU972vn3aXvE
TLSH
T18D62C79FA91559BB6DCAC629F912BB17D3F5103262D02E44EAFC8A1C25E77CC2317017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 899163d68a4badf3000cd9c36d5b0c7c7600359a155a25505974c888e6107550
MD5 1a0d8e0e6ba576cae6f350970cb287fc
SHA1 8842a986c0f76e394cfcadaeddc9cce1b3d7c256
SHA512 61178951c1afa04b851423bfa35dc262d4f7c884be1815fee2c0fef1b0ca16e2322f8fb6bbbad1c54ee5a37954628a327e127fc11371640914a6060a5b539b00
SSDEEP 192:PR2k2lYVme0Efv7MF+pDPRpcuwhJtZ9HHsb+WNUXecUwtqztz23SknLj/a5wKw8w:PR2k2uv3gotXxC51wgUZh2rn3aXvE
TLSH
T18562C69FA9155DBB6CCAC629F912BB17D3F5102262D02E44EAFC8A1C25E77CC2317057
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 8d37c6fd0d7426c11273e1621a098c3178def42740377a95809a4a61df34c1dd
MD5 9d50e3c88ef0d76a25c8bcce03394f7e
SHA1 ab490ecc563a19193260daf2b9870c10576a1dbd
SHA512 96b2331828e52b18b7c2938f4be99ffd040ac946dd0c3c4a1dac2931c6a99ef61c8c4e47b77ebf9e1e3ac84fb4e095a49dba21eb8f24dbe608f8f3005a2db1e2
SSDEEP 384:PR2k2uGFNPgotXPC51wfZ0U+p2kn3aXvE:A/5FNIo9C51wfZhLB/E
TLSH
T10B62C59FA9195DFB6CCAC629F912BB17D3F51022A2D01E44EAFC8A1C25E76CC6313057
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 67ca9b13d338d101ae6e70d68f7d49d607631d74973f622b81734838346a251f
MD5 2402fe1da6fdcbeea5728f11e07fa5f2
SHA1 69e5f71208cefe34898ca29eb3c46e40cd48c53e
SHA512 c5493b2b85e6589b9f1fe60ef82c7f4ba47fc5baa070512c854f4372aff5088d011bb3d582a08b14e7055046e2a7c09a5463bed1f39aa7a1fd57c1d80ab3cd86
SSDEEP 384:PR2k2uGFNSgotXEC51wfH0U5d2yn3aXvE:A/5FNnoGC51wfHhOT/E
TLSH
T1A562C69FA91959FB6DCAC629F912BB17D3F51032A2D01E44EAFC8A1C25E76CC2313057
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 bd0a437522f10dc3e06d5d89cc71e4ec36418c703e6a539392061087c86a1701
MD5 cbe2b9a7eec5a331ae5e5ed33e23cb54
SHA1 19090cb7ebe9529e61d239d9e749b3a276d26c22
SHA512 1938b277b59fdfbfc4205933d94776139412d91ede1a53d641ecaa72d05c35058541c07e7bb884f41fd28a36bb533d64b1fc17b7d69264159f5f66a68350a52d
SSDEEP 192:PRbk2lYVme0Pnv7MF+pAPRp2SZ9HHsb+WNnecFtz2SSknLj/a5wKPVyIsnAUg5lK:PRbk2uIvgoUX71w9z2On3aF5E
TLSH
T1B552D66EAD15A9BB6CCAC229FD227B17D3F5103261D42E84DAFC8A1C15E76CC231701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 64ea7a4f5c6c3cc21a55698743add82e898b5f87f4052fee82e5d9851265ceb4
MD5 f5e0033541847ad60ed007d3c766c240
SHA1 48888f7cb449dcbe9dddf8622605ccaf75a9004f
SHA512 86dbc78042ea94e04f66ccfc5415df994920f2346a57cee28984f65d5f38e4463472dd3a5bad4267e08001d6a1536acf1b9752528df9b46f7f6fa7da4405d156
SSDEEP 192:PRbk2lYVme0Env7MF+pAPRp2YtZ9HHsb+WNUXecUwu8Ltz2eSknLj/a5wKyVyIsb:PRbk2uvvgoUXZ1wgUu52Cn3aGvE
TLSH
T18D52C66FA91569BB6CCAC629F9227B17D3F5103261D02E84EAFC8A1C25E77CC6317017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 6f8ae45af6cf83e73b1c9e3022d4cc548a45f0b6d9afd98bd7775b5ab01115d0
MD5 ef5ee942499b410e489870dff46027df
SHA1 fa1fa8ee374bd4e7fad069de5143dddc5e59d3c2
SHA512 fe0e577d1caa0560f27afe672ff7b69597ac9fd9c1f84eb8505236ca5fa1e879968deb417b127eff165b8cedbc631d73a3c5fe5d904288a20794fc8686a1483d
SSDEEP 192:PR2k2lYVme0EMv7MF+pDPRpcuwhJtZ9HHsb+WNUXecUwnz8jtz2VSknLj/a5wKwf:PR2k2uvYgotXxC51wgUNR2dn3aXvE
TLSH
T10F62C69FA91559BB6CCAC629F912BB17D3F51032A2D02E44EAFC8A1C25E77CC2317057
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 4d1d96fef582433401ac5b00b380b4657c1c24e9315dd6555608125e0830210d
MD5 666939a4b8a0ea74350676bdf163ba15
SHA1 a48606720bb37b7e143bc81b17f7116f11c7caa7
SHA512 3c1aaa32f7be9a8a84e40ebd086b57d3169618a4dd73d513a11cac5e45f3bdf42d8c90d78ad67f2e3488fd8c068acfbc8d6770c155ad061018a1ca4fe78e81ad
SSDEEP 384:PR2k25GFNFgotXPC51wfZ0U+p2kn3aXvsj:A/0FN+o9C51wfZhLB/sj
TLSH
T1DE62D69FA91959FB6CCAC629F912BB17D3F51032A2D01E44EAFC8A1C25E76CC6313057
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 2cbf386f4156375a3e7768fe8d31472d2a2fbd2e6c0fd852f46a1f03535c485f
MD5 486a799437561cff7d09dc05e42a3271
SHA1 99c9c3770abdb78bce52996feb2dd715629511eb
SHA512 5284537ae97402ca39d9dde342633bbee9455f2f0f2e5dba001e43674b650764871650d0672f9ce6f4e3f2a34456c2b2ed27c192d291fca482f748e7804d98ed
SSDEEP 384:PR2k2uGFNUgotXPC51wfZ0U+p2kn3aXvsj:A/5FN5o9C51wfZhLB/sj
TLSH
T1C562D69FA91959FB6DCAC629F912BB17D3F51032A2D01E44EAFC8A1C25E76CC2313057
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 34d3b150d9ebc3413240a436dcd8cc4d2da0e46d00a681d2118263aea9d32f3e
MD5 73285efb9f7ee0bd384426865ccccf8e
SHA1 51903f2b7a36fa90857257254c2bebdfe5da7eef
SHA512 e9bab3e8a04453bd7ca516137298f57170d38058ccd5df170108532fdb6eefb2d5ae94de47967a5242cb07be597050bef4f69d7f740877c626e131f01424e28d
SSDEEP 384:TRjPq7KxkXqKf/pUZNCgVLH2HfgslT37pLuLcSjFgXODPO+ErU3voHGjBm2oR0h9:TxPq7KxkXqKf/pUZNCgVLH2HfgsV37pM
TLSH
T1287219676C4C8E7B0F94CACCDC167F4F9DB5025B65EA886482FA582903D5ADF01061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b6c28cea6ed9dfc1_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\b6c28cea6ed9dfc1_0
Size 43KB
SHA256 1ebd56bfc949d14c5a7cdd88297a7bebaabdd72f704a909061f2b960457f185b
MD5 2f2154e3babc0c7a020aa22ff30ffb92
SHA1 a55c84c594fbb3690de27c3b31de7387fbcc4a8d
SHA512 60f994344e1d7c965172d74ab4122e86779c48965339e7dcd23a2febffd3d4fbc4083454bae6634d08396299e867273db196f05cd7292f362dd9f09629c07d38
SSDEEP 768:yxyCsK9UOtjBTgVLntL0PgOyXYddodnDPWAyJ7s6wOoH3CetoK4/7TWUXQoEMVWk:NCdOWyXYPbZHn
TLSH
T1C71376D673B6A17547E210B5FC362A41A22689DC3C47901DBB7C29CBAD0E9059E3EF34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 168B
SHA256 0a81825b35c87e5435aa55ad2086bd7ed58019e5559a02357e3f1304d10f2479
MD5 6f4abbc0a6590387e8d383cc442a9605
SHA1 edac227e4543137a088f092e1c660af87be53b47
SHA512 47f6f853a6b5a5b438166fee9e225739bb2ef8b9506032d8b106059f6be63a8caa0eea4c9fd201c25f96823b4282a719d30cac6722c4c5891ce6ca54da22a97a
TLSH
T1B4C09281C552F012C05A13F92566A4AC72B8EEA5CA2E238493B87A6BAC79361C0252D2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 ca45f8d88fbd16c0164e1e6a6fbfac72232d737b15a81abc2c452b949d1f0043
MD5 e448d7a28c5d0a36b6c75cc4897853c2
SHA1 0a5d2d5d963f4e1f6c37b3b9363c524f665a45f7
SHA512 67547a1194d51c7f469a7027eb385fbc5f4c7f544b0bde248e87e90f56eb0c1fa1f26ceccb1274c02b266ed0a1e85d82e096325fcb7b6162adf844aea617e113
TLSH
T158B0128084019D16C40302F419433C88751C9F20960A670147E07D6388351908414090
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a592.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58a592.TMP
Size 96B
SHA256 74c9a09692225a4d2032469f9b28834fcb1ef03164fd92f80a3d9b37cb88d7de
MD5 57bc021cdeb0e5d4cc055e3824cfb767
SHA1 c8e4654c8da648e06c2d6f4244986b3b7bb36f10
SHA512 2fa9b52977276578a9893b09ee215df4499b2a2d5a982149b6367ee227250e2b52a5c66060be49a56f7f23c7efb44edc5ec95c6c35c00f1836a8ed4798ef2e91
TLSH
T166B02280C0CA2222C00303B028A080CC3220CF20CB03030283E00EAACC30A208A22020
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 454f6bd9b3814b7bbe274bd33828ec2c5f8f1d345775c8a9e4006ca7681ed681
MD5 bf43f4846aa852aee7217637c7ddf896
SHA1 f70bb6fc628e76a1f7caf37ffda9ef570f7de703
SHA512 50bcdbb6e3879a5d241808df7af8645ae43edbb7021582cf01046177393fc70bf51a99f3b05c23ccc64cdb9b3e766681ca240a39a8f0d129d64d1f0fa7d27c2b
SSDEEP 6144:u+QvqqWNBL2OGgSYWWdLcm2z+du9rm7Rkm1tYpBeh2BAos:uCNB6LYz6hiu9q9oBGcAos
TLSH
T10A3423373E61BE779869871E784E0E2B6EA00D5AC555CFA284D49F09B3EC7C85A0643C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 237KB
SHA256 6cfd9be2ace177b6e95a9db6f6b20c2001bdaed9bfff8613da454e4a388e0bf2
MD5 bb10acc6bb9bb8766469f8977b57718e
SHA1 f6165c9d6de0f411cbaff9d2ee7e245f57cef57b
SHA512 006419462cc2461aba74887c8c0e134aa02bea1bc89b9222ddfe7ad94add0b9a1f21786fc851dc1324e3dc4289a5aa7deddc4d888932619d7465a43b55f65f2a
SSDEEP 6144:uVQQvqqWNBL2OGgSYWWdLcm2z+du9rm7Rkm1tYpBeh2BAos:uuNB6LYz6hiu9q9oBGcAos
TLSH
T10D3423373D61BD7798A88B1D780E192B6EE01F6BC505CEA694D49F08B3AC6C85E06438
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 2c8059c27ba9c0ee9d151b5ee20f9898786a237425360325fe6faa4e828a9ef0
MD5 e2d8f166508c3b2843ffb7b95946234e
SHA1 892cd18b36c0cb61b959997b4cdb909bebedf5bf
SHA512 be1f9b8719d3a4e533614105f637950998f46a8ae6de35928e84cfb17f24c4b6b23319da7a7aa41c2811087b5bbbdc923252311f6452c2a946790db24d387299
SSDEEP 6144:f+QvqqWNBL2OGgSYWWdLcm2z+du9rm7Rkm1tYpBeh2BAos:fCNB6LYz6hiu9q9oBGcAos
TLSH
T1063423373E61BE779869871E784E0E2B6EA00D5AC555CFA284D49F09B3EC7C85A0643C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 237KB
SHA256 003cd6d655589138d10b9721fa2a45fd989143b8c7486f02b6beeb1a0f507329
MD5 b03de79f5122fc12e12bb736b562f823
SHA1 9b6e96430530e540552d606a0ee295ac737c6955
SHA512 9bc6efb8fac25d0f7f2a040ab60dcc4b0d703d266b6e45c25dc730239727c96ffd0e34070925d1df2d54ac47652c020231e72aac44ba4ebdf2b0c9b91181a04a
SSDEEP 6144:OVQQvqqWNBL2OGgSYWWdLcm2z+du9rm7Rkm1tYpBeh2BAos:OuNB6LYz6hiu9q9oBGcAos
TLSH
T1EA3423373D61BD7798A88B1D780E192B6EE01F6BC505CEA694D49F08B3EC6C85E06438
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 bc9928df9448bba0dcc6bfaef5d0de935043b733c8b3e5edaf9c889b69edc351
MD5 d3b3717371c2c7b6b9a236f5eb386963
SHA1 63dbbb79752b1fcc5bca03b9fda09acdafb3d61b
SHA512 425b24aff986c0ba1ba5d6ff18d9245e66bbed397f17d2a5198d7dfe0c0256864d317eb14baa9241b86452edc25ac937e052bdcbf1d3194326c97f29d8e1374e
SSDEEP 3072:/3Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:/2m7Rkm1tYpBeh2BAoM
TLSH
T1D7C312275D75E83758B8AB0EB08E0B1F1EF14AA6D930DA92C8D86B0467F97CC1A05D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download