256777ab1730e769da5668af12925b7305b9eb1b88e1b34a4642678b8f56032d

Analysis

user interaction
yes
max time kernel
1050s
max time network
1049s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/08/2026, 02:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
GREEN SKELETON.jpg
Size 60KB
Sample260801-c61s8acd78
SHA256 256777ab1730e769da5668af12925b7305b9eb1b88e1b34a4642678b8f56032d
MD5 c624a3d8dcecc1bfbc0453860f819ede
SHA1 1c44b33942e42fb38677a31b697593423a9eacd2
SHA512 b473e33f5ec956107250f7cab8e4ec0c44d3d7d0cbd8684bd939e756b939eac216916a1c5af78c9b1d3ee0e079fe7859ce99d612ab7ba9a0766e2a6727c15417
SSDEEP 1536:lkxSISWSSHR49MNniUCEw3XprTADtpF5074R1hFgQ0EWI:KSISzSHRHniUCEw3sp64R1hFgkWI
TLSH
T17953125F32149A2EF10B5EB1134049E07AA07EAD29B2CC7BE915CECD47303666F8D6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery persistence ransomware spyware stealer trojan

Malware Config

Signatures

Downloads MZ/PE file 2 IoCs

flow	pid	Process
1933	4372	chrome.exe
1791	3016	chrome.exe

Executes dropped EXE 7 IoCs

pid	Process
552	Setup (1).exe
2172	PcAppStoreSRV.exe
5056	AutoUpdater.exe
3268	PcAppStore.exe
3188	Watchdog.exe
4276	LuminaRead_1.9564.85.exe
524	LuminaRead_1.9564.85.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	PcAppStore.exe

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
424	camo.githubusercontent.com
425	raw.githubusercontent.com

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\ShaderCache\index	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\ExtensionActivityComp	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2800_1601704362\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\Extension Scripts\MANIFEST-000001	msedgewebview2.exe
File created	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\Cache\Cache_Data\f_00000a	msedgewebview2.exe
File created	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Local State~RFe5cef3a.TMP	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2800_1601704362\hyph-en-gb.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2800_213886403\keys.json	msedgewebview2.exe
File created	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\Filtering Rules	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\5b00034f-dcba-470a-823c-382dd9100f81.tmp	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2800_1819623498\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\shared_proto_db\metadata\000003.log	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\Network\Trust Tokens	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\DawnGraphiteCache	msedgewebview2.exe
File created	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\Code Cache\js\a4962a02ffc3f586_0	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2800_1531357700\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2800_21337675\manifest.json	msedgewebview2.exe
File created	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\hyphen-data\120.0.6050.0\hyph-cy.hyb	msedgewebview2.exe
File created	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\Filtering Rules-AA	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\Cache\Cache_Data\data_3	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2800_173430603\Sigma\Social	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\commerce_subscription_db\LOCK	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\DawnGraphiteCache\index	msedgewebview2.exe
File created	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\TrustTokenKeyCommitments\2026.3.23.1\keys.json	msedgewebview2.exe
File created	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\e7ee7fb4-5a78-4d29-8dc5-37025f9a1326.tmp	msedgewebview2.exe
File created	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Local State~RFe5ed5fb.TMP	msedgewebview2.exe
File created	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Local State~RFe624149.TMP	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2800_173430603\Sigma\Cryptomining	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\Favicons-journal	msedgewebview2.exe
File created	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\Code Cache\js\index	msedgewebview2.exe
File created	C:\Program Files (x86)\PCAppStore\Uninstaller.exe	Setup (1).exe
File opened for modification	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\Extension Rules\LOCK	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\Cache\Cache_Data\f_000005	msedgewebview2.exe
File created	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\hyphen-data\120.0.6050.0\hyph-bn.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2800_1819623498\test.txt	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\ShaderCache\data_0	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\Local Storage\leveldb\CURRENT	msedgewebview2.exe
File created	C:\Program Files (x86)\PCAppStore\cache\1259544006.html	PcAppStore.exe
File created	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\ZxcvbnData\3.2.0.0\female_names.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2800_173430603\Sigma\Analytics	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\shared_proto_db\MANIFEST-000001	msedgewebview2.exe
File created	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\DawnWebGPUCache\data_1	msedgewebview2.exe
File created	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\Network\SCT Auditing Pending Reports~RFe5b19ce.TMP	msedgewebview2.exe
File created	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\Network\0a3e66bd-93eb-4391-ae6d-63127e77117a.tmp	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\History-journal	msedgewebview2.exe
File created	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\Code Cache\js\9788592225dcbcf3_0	msedgewebview2.exe
File created	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\Cache\Cache_Data\f_000008	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2800_1601704362\hyph-pa.hyb	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\ShaderCache\data_2	msedgewebview2.exe
File created	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\Extension State\LOG	msedgewebview2.exe
File created	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\WidevineCdm\4.10.3050.1\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2800_173430603\Sigma\Entities	msedgewebview2.exe
File created	C:\Program Files (x86)\PCAppStore\AutoUpdater.exe	Setup (1).exe
File created	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\ShaderCache\data_2	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\GraphiteDawnCache\data_3	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\DawnGraphiteCache\data_3	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\Network\SCT Auditing Pending Reports	msedgewebview2.exe
File created	C:\Program Files (x86)\PCAppStore\cache\4255595730.html	PcAppStore.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2800_1601704362\hyph-de-1996.hyb	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\Cache\Cache_Data\f_000009	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\a2808346-77e9-49c9-8759-363eea4f3eac.tmp	msedgewebview2.exe
File created	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\hyphen-data\120.0.6050.0\hyph-fr.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2800_692117227\Part-FR	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\3114b0f9-f730-4601-bd5f-0d545b6631d6.tmp	msedgewebview2.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 5 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3016	chrome.exe
4384	msedge.exe
2708	msedge.exe
3760	chrome.exe
4372	chrome.exe

Checks SCSI registry key(s) 3 TTPs 40 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Service	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UINumberDescFormat	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Driver	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Mfg	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UINumberDescFormat	PcAppStore.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\CompatibleIDs	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Service	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	PcAppStore.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	PcAppStore.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Mfg	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\LocationInformation	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\DeviceDesc	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UINumber	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Security	PcAppStore.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ContainerID	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Security	PcAppStore.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}\0025	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UINumber	PcAppStore.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}\0025	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\FriendlyName	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\LowerFilters	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Driver	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\DeviceDesc	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID	PcAppStore.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\LocationInformation	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ContainerID	PcAppStore.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\LowerFilters	PcAppStore.exe

Checks processor information in registry 2 TTPs 54 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Enumerates system info in registry 2 TTPs 13 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Kills process with taskkill 16 IoCs

defense_evasion

pid	Process
2740	taskkill.exe
7828	taskkill.exe
6860	taskkill.exe
8040	taskkill.exe
7716	taskkill.exe
5864	taskkill.exe
3636	taskkill.exe
7928	taskkill.exe
7660	taskkill.exe
2280	taskkill.exe
6584	taskkill.exe
4732	taskkill.exe
6752	taskkill.exe
8184	taskkill.exe
8008	taskkill.exe
5364	taskkill.exe

Modifies data under HKEY_USERS 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134300257852832990"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 31 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\sb3_auto_file\shell\open	OpenWith.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\PcAppStore\ = "URL:PC App Store"	Setup (1).exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\PcAppStore\shell\open	Setup (1).exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\.sb3	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings	OpenWith.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\PcAppStore\URL Protocol = "PcAppStore"	Setup (1).exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\PcAppStore\DefaultIcon\ = "C:\\Program Files (x86)\\PCAppStore\\PCAppStore.exe,1"	Setup (1).exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\.sb3\ = "sb3_auto_file"	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\PcAppStore	Setup (1).exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\sb3_auto_file	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\sb3_auto_file\shell	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings	firefox.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{9745C049-C297-49A7-86D4-B058F77EF41B}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\sb3_auto_file\shell\open\command	OpenWith.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{8FD895AA-8BD9-414A-B1D3-7395B912B0AA}	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\PcAppStore\shell\open\command	Setup (1).exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\PcAppStore\DefaultIcon	Setup (1).exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\PcAppStore\shell	Setup (1).exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\sb3_auto_file\shell\open\command\ = "\"C:\\Program Files\\Mozilla Firefox\\firefox.exe\" -osint -url \"%1\""	OpenWith.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\PcAppStore\shell\open\command\ = "\"C:\\Program Files (x86)\\PCAppStore\\PCAppStore.exe\" /src=custom_protocol /query=\"%1\""	Setup (1).exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings	OpenWith.exe

Opens file in notepad (likely ransom note) 1 IoCs

ransomware

pid	Process
3752	NOTEPAD.EXE

Suspicious behavior: EnumeratesProcesses 44 IoCs

pid	Process
4736	mspaint.exe
4736	mspaint.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3660	chrome.exe
3660	chrome.exe
552	Setup (1).exe
552	Setup (1).exe
552	Setup (1).exe
552	Setup (1).exe
552	Setup (1).exe
552	Setup (1).exe
552	Setup (1).exe
552	Setup (1).exe
552	Setup (1).exe
552	Setup (1).exe
3188	Watchdog.exe
3188	Watchdog.exe
3268	PcAppStore.exe
3268	PcAppStore.exe
6092	msedgewebview2.exe
6092	msedgewebview2.exe
3188	Watchdog.exe
3188	Watchdog.exe
3188	Watchdog.exe
3188	Watchdog.exe
4276	LuminaRead_1.9564.85.exe
4276	LuminaRead_1.9564.85.exe
4276	LuminaRead_1.9564.85.exe
4276	LuminaRead_1.9564.85.exe
4276	LuminaRead_1.9564.85.exe
4276	LuminaRead_1.9564.85.exe
4276	LuminaRead_1.9564.85.exe
4276	LuminaRead_1.9564.85.exe
4276	LuminaRead_1.9564.85.exe
4276	LuminaRead_1.9564.85.exe
4276	LuminaRead_1.9564.85.exe
4276	LuminaRead_1.9564.85.exe
8076	chrome.exe
8076	chrome.exe
8076	chrome.exe
8076	chrome.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
6480	OpenWith.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
644	Process not Found
644	Process not Found
644	Process not Found
644	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
2800	msedgewebview2.exe
2800	msedgewebview2.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe
Token: SeShutdownPrivilege	3448	chrome.exe
Token: SeCreatePagefilePrivilege	3448	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3268	PcAppStore.exe
3268	PcAppStore.exe
3268	PcAppStore.exe
3268	PcAppStore.exe
3268	PcAppStore.exe
3268	PcAppStore.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3448	chrome.exe
3268	PcAppStore.exe
3268	PcAppStore.exe
3268	PcAppStore.exe
3268	PcAppStore.exe
3268	PcAppStore.exe
3268	PcAppStore.exe
3268	PcAppStore.exe
3448	chrome.exe
3448	chrome.exe
8076	chrome.exe
8076	chrome.exe
8076	chrome.exe
8076	chrome.exe
8076	chrome.exe
8076	chrome.exe
8076	chrome.exe
8076	chrome.exe
8076	chrome.exe
8076	chrome.exe
8076	chrome.exe
8076	chrome.exe
8076	chrome.exe
8076	chrome.exe
8076	chrome.exe
8076	chrome.exe
8076	chrome.exe
8076	chrome.exe
8076	chrome.exe
8076	chrome.exe
8076	chrome.exe

Suspicious use of SetWindowsHookEx 58 IoCs

pid	Process
4736	mspaint.exe
4736	mspaint.exe
4736	mspaint.exe
4736	mspaint.exe
992	OpenWith.exe
552	Setup (1).exe
552	Setup (1).exe
5776	OpenWith.exe
5776	OpenWith.exe
5776	OpenWith.exe
5776	OpenWith.exe
5776	OpenWith.exe
5776	OpenWith.exe
5776	OpenWith.exe
5776	OpenWith.exe
5776	OpenWith.exe
5776	OpenWith.exe
5776	OpenWith.exe
5776	OpenWith.exe
5776	OpenWith.exe
5776	OpenWith.exe
5776	OpenWith.exe
5776	OpenWith.exe
5776	OpenWith.exe
6016	firefox.exe
6016	firefox.exe
6016	firefox.exe
6016	firefox.exe
6480	OpenWith.exe
6480	OpenWith.exe
6480	OpenWith.exe
6480	OpenWith.exe
6480	OpenWith.exe
6480	OpenWith.exe
6480	OpenWith.exe
6480	OpenWith.exe
6480	OpenWith.exe
6480	OpenWith.exe
6480	OpenWith.exe
6480	OpenWith.exe
6480	OpenWith.exe
6480	OpenWith.exe
6480	OpenWith.exe
6480	OpenWith.exe
6480	OpenWith.exe
6480	OpenWith.exe
6480	OpenWith.exe
6480	OpenWith.exe
6480	OpenWith.exe
6480	OpenWith.exe
6480	OpenWith.exe
6480	OpenWith.exe
6480	OpenWith.exe
8052	firefox.exe
8052	firefox.exe
8052	firefox.exe
8052	firefox.exe
6868	OpenWith.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3448 wrote to memory of 1236	3448	chrome.exe	92
PID 3448 wrote to memory of 1008	3448	chrome.exe	93
PID 3448 wrote to memory of 1008	3448	chrome.exe	93
PID 3448 wrote to memory of 3016	3448	chrome.exe	94
PID 3448 wrote to memory of 1416	3448	chrome.exe	95
PID 3448 wrote to memory of 1416	3448	chrome.exe	95
PID 3448 wrote to memory of 2040	3448	chrome.exe	97
PID 3448 wrote to memory of 2040	3448	chrome.exe	97
PID 3448 wrote to memory of 4668	3448	chrome.exe	98
PID 3448 wrote to memory of 4668	3448	chrome.exe	98
PID 3448 wrote to memory of 4896	3448	chrome.exe	99
PID 3448 wrote to memory of 4896	3448	chrome.exe	99
PID 3448 wrote to memory of 1524	3448	chrome.exe	100
PID 3448 wrote to memory of 1524	3448	chrome.exe	100
PID 3448 wrote to memory of 1880	3448	chrome.exe	102
PID 3448 wrote to memory of 2364	3448	chrome.exe	112
PID 3448 wrote to memory of 2364	3448	chrome.exe	112
PID 3448 wrote to memory of 3960	3448	chrome.exe	115
PID 3448 wrote to memory of 2872	3448	chrome.exe	116
PID 3448 wrote to memory of 1908	3448	chrome.exe	117
PID 3448 wrote to memory of 4812	3448	chrome.exe	119
PID 3448 wrote to memory of 4812	3448	chrome.exe	119
PID 3448 wrote to memory of 3856	3448	chrome.exe	120
PID 3448 wrote to memory of 3856	3448	chrome.exe	120
PID 3448 wrote to memory of 1472	3448	chrome.exe	122
PID 3448 wrote to memory of 1472	3448	chrome.exe	122
PID 3448 wrote to memory of 2820	3448	chrome.exe	123
PID 3448 wrote to memory of 444	3448	chrome.exe	126
PID 3448 wrote to memory of 444	3448	chrome.exe	126
PID 3448 wrote to memory of 5080	3448	chrome.exe	127
PID 3448 wrote to memory of 5080	3448	chrome.exe	127
PID 3448 wrote to memory of 3292	3448	chrome.exe	128
PID 3448 wrote to memory of 3292	3448	chrome.exe	128
PID 3448 wrote to memory of 3660	3448	chrome.exe	129
PID 3448 wrote to memory of 3484	3448	chrome.exe	130
PID 3448 wrote to memory of 3484	3448	chrome.exe	130
PID 3448 wrote to memory of 4488	3448	chrome.exe	131
PID 3448 wrote to memory of 2240	3448	chrome.exe	132
PID 3448 wrote to memory of 2240	3448	chrome.exe	132
PID 3448 wrote to memory of 1908	3448	chrome.exe	133
PID 3448 wrote to memory of 552	3448	chrome.exe	134
PID 2172 wrote to memory of 5056	2172	PcAppStoreSRV.exe	138
PID 2172 wrote to memory of 3268	2172	PcAppStoreSRV.exe	139
PID 2172 wrote to memory of 3188	2172	PcAppStoreSRV.exe	140
PID 3268 wrote to memory of 2800	3268	PcAppStore.exe	143
PID 2800 wrote to memory of 4616	2800	msedgewebview2.exe	144
PID 2800 wrote to memory of 2828	2800	msedgewebview2.exe	145
PID 2800 wrote to memory of 2828	2800	msedgewebview2.exe	145
PID 2800 wrote to memory of 2828	2800	msedgewebview2.exe	145
PID 2800 wrote to memory of 4416	2800	msedgewebview2.exe	146
PID 2800 wrote to memory of 4780	2800	msedgewebview2.exe	147
PID 2800 wrote to memory of 4780	2800	msedgewebview2.exe	147
PID 2800 wrote to memory of 5408	2800	msedgewebview2.exe	148
PID 2800 wrote to memory of 5408	2800	msedgewebview2.exe	148
PID 2800 wrote to memory of 5408	2800	msedgewebview2.exe	148
PID 2800 wrote to memory of 5288	2800	msedgewebview2.exe	150
PID 2800 wrote to memory of 5288	2800	msedgewebview2.exe	150
PID 2800 wrote to memory of 5288	2800	msedgewebview2.exe	150
PID 3448 wrote to memory of 5684	3448	chrome.exe	151
PID 3448 wrote to memory of 5684	3448	chrome.exe	151
PID 5776 wrote to memory of 348	5776	OpenWith.exe	157
PID 348 wrote to memory of 6016	348	firefox.exe	158
PID 348 wrote to memory of 6016	348	firefox.exe	158
PID 6016 wrote to memory of 5452	6016	firefox.exe	160

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\system32\mspaint.exe
"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\GREEN SKELETON.jpg"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4736

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:1480

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffc3eb0c728,0x7ffc3eb0c734,0x7ffc3eb0c740
  2⤵
  PID:1236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1696,i,11830128952941940217,13717027455374746668,262144 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1884 /prefetch:2
  2⤵
  PID:1008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1616,i,12078211879637999703,6823908594229441882,524288 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2288 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:3016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2368,i,1205389506662409648,8769941769804998340,524288 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2744 /prefetch:8
  2⤵
  PID:1416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3252,i,13631148773101133610,10941503306950032173,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:2040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3248,i,10631676403856911351,1573280131706891582,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:4668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4428,i,12607798885275994434,3155014797425367124,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4436 /prefetch:2
  2⤵
  PID:4896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4664,i,6677290793221703909,7803348438534472306,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4776 /prefetch:1
  2⤵
  PID:1524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5512,i,16930821442277529966,6134220319850006350,524288 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4592 /prefetch:8
  2⤵
  PID:1880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5972,i,15694212470822956268,853060844121052415,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5912 /prefetch:1
  2⤵
  PID:2364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6060,i,5920054432059610117,14345467054268440172,524288 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6032 /prefetch:8
  2⤵
  PID:3960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6096,i,3475153534729894664,15364373371446269396,524288 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6008 /prefetch:8
  2⤵
  PID:2872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6108,i,3761363303542862947,4921475461304796471,524288 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  PID:1908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6044,i,15394917927453418307,13082536280345374738,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=240 /prefetch:1
  2⤵
  PID:4812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6004,i,1450793298025174911,12495439615837490767,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:3856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5972,i,8567444174614377479,7066675374872163108,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5776 /prefetch:1
  2⤵
  PID:1472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6004,i,16069890763450271603,57406490642038196,524288 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3428 /prefetch:8
  2⤵
  PID:2820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5784,i,16087541216542385360,11401308897973267095,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6232,i,12578150070182033088,10557236048344052267,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6212 /prefetch:1
  2⤵
  PID:5080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6388,i,16141561465565651858,7067977460533040926,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6244 /prefetch:1
  2⤵
  PID:3292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=7020,i,106113919035450311,6229034568555321635,262144 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6656 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=7044,i,12238754803587776288,8779020189660999254,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7032 /prefetch:1
  2⤵
  PID:3484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6628,i,15097839728616681281,2125156424492443614,524288 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5536 /prefetch:8
  2⤵
  - Modifies registry class
  PID:4488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6488,i,3880524015095194791,10562022989051031976,524288 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3444 /prefetch:8
  2⤵
  PID:2240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4492,i,834103834545396352,1248025231979972446,524288 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:1908
- C:\Users\Admin\Downloads\Setup (1).exe
  "C:\Users\Admin\Downloads\Setup (1).exe"
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of SetWindowsHookEx
  PID:552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6640,i,3642246312171268469,6954070020300121096,524288 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7052 /prefetch:8
  2⤵
  PID:5684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6632,i,7508269861613259394,15243826515121687577,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6500 /prefetch:1
  2⤵
  PID:956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6808,i,9261343702125800372,4176135519674777106,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6840 /prefetch:1
  2⤵
  PID:6664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=6860,i,17398274437751044927,14683647098898552039,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5768 /prefetch:1
  2⤵
  PID:6356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=7484,i,14058986619660248734,5563676248387910692,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7548 /prefetch:1
  2⤵
  PID:6892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=7348,i,15545909681422512887,7113862919405845812,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7356 /prefetch:1
  2⤵
  PID:1796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=7692,i,16029280255382543810,3577960807358839205,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7656 /prefetch:1
  2⤵
  PID:3316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=7928,i,9918532856966538702,3879265635840154354,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7564 /prefetch:1
  2⤵
  PID:6084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=7660,i,10919201790623225801,14405309858567779955,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7940 /prefetch:1
  2⤵
  PID:2244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=7972,i,14952350784196794035,2670586481272824129,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7980 /prefetch:1
  2⤵
  PID:6320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=7712,i,13639924951553180681,3314610856791616288,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7664 /prefetch:1
  2⤵
  PID:3152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=7456,i,10307751170608628372,4474310133432909704,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7816 /prefetch:1
  2⤵
  PID:6468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=7828,i,11474657031294972132,8618087450737709122,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7736 /prefetch:1
  2⤵
  PID:5628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=8332,i,8617030631513244190,12755995225434137882,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8316 /prefetch:1
  2⤵
  PID:6232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=8464,i,6567987757390454812,10392156803603939517,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8460 /prefetch:1
  2⤵
  PID:5432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=8644,i,8158651749912187871,13639886423590758610,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8616 /prefetch:1
  2⤵
  PID:7096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=8816,i,9738457269465519951,1544591738673026764,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6072 /prefetch:1
  2⤵
  PID:7164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=8060,i,5279941419829795226,928969561619017897,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8804 /prefetch:1
  2⤵
  PID:6308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=8016,i,358168622143935621,17111871773960458254,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8836 /prefetch:1
  2⤵
  PID:6720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=9128,i,2763535585902953741,7660484819297519677,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8820 /prefetch:1
  2⤵
  PID:6748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=8888,i,10782645957488058276,12024168332184679647,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8832 /prefetch:1
  2⤵
  PID:6612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=9336,i,6020416412161945481,3765455515725350909,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8880 /prefetch:1
  2⤵
  PID:6156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=9560,i,16273521174741281132,4773871485677273023,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9612 /prefetch:1
  2⤵
  PID:3628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=9772,i,5170181251123324957,10594260748398309163,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9836 /prefetch:1
  2⤵
  PID:2700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=9796,i,4256035860720426439,12142415680061063338,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9908 /prefetch:1
  2⤵
  PID:3008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=9640,i,4926974028614874407,241577112177206742,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9624 /prefetch:1
  2⤵
  PID:6744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=9696,i,14125630622650229019,361278293293909648,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9636 /prefetch:1
  2⤵
  PID:3840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=10236,i,7831526719708546086,4757082591965558586,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10180 /prefetch:1
  2⤵
  PID:2920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=10380,i,17441097881672763972,5850153090266406343,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10392 /prefetch:1
  2⤵
  PID:5728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=10544,i,10017897890655635070,4180744950943156413,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10412 /prefetch:1
  2⤵
  PID:5744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=10548,i,10087507943069187042,13332095511718075658,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10716 /prefetch:1
  2⤵
  PID:5884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=10692,i,13413674892844424850,6606265926335412814,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10724 /prefetch:1
  2⤵
  PID:4712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=10756,i,8682663476301453581,1579589497703007285,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10760 /prefetch:1
  2⤵
  PID:5892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=10796,i,14148344880218807181,13263846509434533617,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10808 /prefetch:1
  2⤵
  PID:5276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=10840,i,14102024282275440766,188800106656252747,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10848 /prefetch:1
  2⤵
  PID:5784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=10876,i,3097076417216407319,3017679989407034992,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10892 /prefetch:1
  2⤵
  PID:1536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=10920,i,12056045073555604332,11477975294878248013,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10928 /prefetch:1
  2⤵
  PID:2036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=10956,i,14567740195201538774,3358558755176863898,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10972 /prefetch:1
  2⤵
  PID:6008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=11000,i,1804447665638581998,16882639763247013671,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11008 /prefetch:1
  2⤵
  PID:3804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=11040,i,4642885642078528854,4289000564620911445,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11048 /prefetch:1
  2⤵
  PID:6120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=11968,i,14049406999686790350,6005665906083609290,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11972 /prefetch:1
  2⤵
  PID:6092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=12096,i,9853591041467697305,2543207600739732197,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12108 /prefetch:1
  2⤵
  PID:5796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=12116,i,10023102172092201343,8909455807183804856,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12260 /prefetch:1
  2⤵
  PID:6128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=12284,i,2509366317969460756,5377438317529400268,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12300 /prefetch:1
  2⤵
  PID:5376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=12428,i,14299551412455147282,3005303225409968872,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12436 /prefetch:1
  2⤵
  PID:7080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=12580,i,8222334966396345554,10175716069032560183,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12592 /prefetch:1
  2⤵
  PID:1040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=12624,i,7656455591303973670,1686063637906138605,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12632 /prefetch:1
  2⤵
  PID:2868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=12660,i,15100371440989903544,10194820490885841462,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12672 /prefetch:1
  2⤵
  PID:6856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=12700,i,11110792750189572055,9164364428787631042,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12712 /prefetch:1
  2⤵
  PID:5436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=11184,i,6292789980841248239,9590601475774834657,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12020 /prefetch:1
  2⤵
  PID:7756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=10196,i,4544269345255790870,1675466393062779547,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10984 /prefetch:1
  2⤵
  PID:7924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=11824,i,7788952134082921847,12323484064175688001,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10376 /prefetch:1
  2⤵
  PID:7932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=10508,i,1927979198517337514,1716393335165975461,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10472 /prefetch:1
  2⤵
  PID:7940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=12376,i,5981943500594427706,1109059910472710222,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10988 /prefetch:1
  2⤵
  PID:7948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=11952,i,10239944469752145876,15025060079558290715,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11928 /prefetch:1
  2⤵
  PID:7956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=11380,i,1047401267591288680,16228450522396551425,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11892 /prefetch:1
  2⤵
  PID:7964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=11212,i,13651884451457359944,17751753589238278670,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11176 /prefetch:1
  2⤵
  PID:7680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=14292,i,5574693942068054978,5962314600945788362,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14288 /prefetch:1
  2⤵
  PID:5276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=9336,i,8873085666496511137,4265023382448578778,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8332 /prefetch:1
  2⤵
  PID:7628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=12060,i,1294053120430379424,16084624412690482062,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12040 /prefetch:1
  2⤵
  PID:7728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --metrics-shmem-handle=8780,i,9677962659611714811,9045117666231623916,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11184 /prefetch:1
  2⤵
  PID:8072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=10732,i,4628125806766766942,349820670896274824,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12712 /prefetch:1
  2⤵
  PID:7428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --metrics-shmem-handle=14248,i,12080955360676282182,10087053372975840701,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14216 /prefetch:1
  2⤵
  PID:5460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --metrics-shmem-handle=9872,i,7063663419938454612,13354048441074972629,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9848 /prefetch:1
  2⤵
  PID:5428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --metrics-shmem-handle=9868,i,1337744691404640001,9580687156206366128,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9056 /prefetch:1
  2⤵
  PID:5836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --metrics-shmem-handle=9472,i,14564366343237678921,3629986526426746796,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9208 /prefetch:1
  2⤵
  PID:7216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --metrics-shmem-handle=9156,i,13298959469291230694,910949152682402639,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9508 /prefetch:1
  2⤵
  PID:7980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --metrics-shmem-handle=9084,i,4040177998736454810,14344193472428865498,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11916 /prefetch:1
  2⤵
  PID:1160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --metrics-shmem-handle=11280,i,5024058815233695881,2210447796794212228,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8868 /prefetch:1
  2⤵
  PID:7584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --metrics-shmem-handle=12724,i,2995438846762928819,5271212097439225537,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8900 /prefetch:1
  2⤵
  PID:4564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --metrics-shmem-handle=8808,i,7311403844146396341,4469079577985759964,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9284 /prefetch:1
  2⤵
  PID:7644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --metrics-shmem-handle=12784,i,925871938377805741,5646351425089823823,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12812 /prefetch:1
  2⤵
  PID:7356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --metrics-shmem-handle=7780,i,10616842899509157862,539672418210569665,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7776 /prefetch:1
  2⤵
  PID:5376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --metrics-shmem-handle=9424,i,3945801737049665196,12038351297667365164,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6072 /prefetch:1
  2⤵
  PID:7652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --metrics-shmem-handle=4424,i,12087294592415580094,9067130187568382243,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4896 /prefetch:1
  2⤵
  PID:7112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --metrics-shmem-handle=9296,i,10181506007094991195,11466185962763326316,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12044 /prefetch:1
  2⤵
  PID:6896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --metrics-shmem-handle=4788,i,17599698044075157969,16233343075076715911,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4780 /prefetch:1
  2⤵
  PID:6560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --metrics-shmem-handle=7932,i,7954384933328200193,13345032842352842599,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13944 /prefetch:1
  2⤵
  PID:7444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --metrics-shmem-handle=12476,i,16702204823409640578,7917525636039272199,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8984 /prefetch:1
  2⤵
  PID:6300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --metrics-shmem-handle=5580,i,3034878222302747098,12963933774639869586,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11696 /prefetch:1
  2⤵
  PID:2080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --metrics-shmem-handle=6028,i,13152312603902751928,2021979488102742051,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6448 /prefetch:1
  2⤵
  PID:6208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --metrics-shmem-handle=10548,i,11946684526423242945,16446990584960660059,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8784 /prefetch:1
  2⤵
  PID:4496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --metrics-shmem-handle=4420,i,9715135229924526766,4063621398426091726,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7776 /prefetch:1
  2⤵
  PID:6692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4820,i,15869197695153812999,15192478876916110779,524288 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8992 /prefetch:8
  2⤵
  PID:1480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --metrics-shmem-handle=4864,i,14562441681653733119,2683209040145460445,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7536 /prefetch:1
  2⤵
  PID:2364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --metrics-shmem-handle=7532,i,6454924151961062303,5436855001500659818,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7484 /prefetch:1
  2⤵
  PID:1476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --metrics-shmem-handle=8116,i,6848263463984068738,8831071979728331790,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8184 /prefetch:1
  2⤵
  PID:4788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7644,i,10839057565492120248,7561649758080531500,524288 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8932 /prefetch:8
  2⤵
  PID:3404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --metrics-shmem-handle=8940,i,521500327723148403,1650443017404762967,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7448 /prefetch:1
  2⤵
  PID:7796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --metrics-shmem-handle=11696,i,1319500941783016456,6442078795389960279,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7228 /prefetch:1
  2⤵
  PID:6020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --metrics-shmem-handle=12772,i,1747018370722504813,11445992341428385868,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14208 /prefetch:1
  2⤵
  PID:7088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --metrics-shmem-handle=12836,i,5594274576536587902,8704634228605531743,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=14068 /prefetch:1
  2⤵
  PID:7816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --metrics-shmem-handle=11860,i,12853808360051442916,13521818882568222271,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13420 /prefetch:1
  2⤵
  PID:5380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --metrics-shmem-handle=7920,i,11901651951463825998,11216426534544183334,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7916 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --metrics-shmem-handle=12980,i,12053398646001343730,13949075476345574955,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7560 /prefetch:1
  2⤵
  PID:3768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --metrics-shmem-handle=12844,i,2350282336562427256,6845405706671369236,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9848 /prefetch:1
  2⤵
  PID:6268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --metrics-shmem-handle=7756,i,4842108459387247872,1312440601330663754,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7836 /prefetch:1
  2⤵
  PID:6244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --metrics-shmem-handle=9860,i,17129042401128347814,15951757034146654491,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8924 /prefetch:1
  2⤵
  PID:1928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --metrics-shmem-handle=13864,i,4196394488533822046,723568864188092877,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13004 /prefetch:1
  2⤵
  PID:8080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --metrics-shmem-handle=7480,i,2977477585742683335,4614111846423368669,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4524 /prefetch:1
  2⤵
  PID:1596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --metrics-shmem-handle=12264,i,18303488204511863390,14621430531810528146,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7436 /prefetch:1
  2⤵
  PID:6084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=8800,i,1128216901848695039,16762925315304985804,524288 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=13000 /prefetch:8
  2⤵
  PID:4264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --metrics-shmem-handle=9596,i,3247910477212519584,2336797483749705736,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8096 /prefetch:1
  2⤵
  PID:4108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --metrics-shmem-handle=9812,i,11232589370615563710,5996555351202957353,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9144 /prefetch:1
  2⤵
  PID:3752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --metrics-shmem-handle=13588,i,14879016586509984806,17264646614038311634,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8860 /prefetch:1
  2⤵
  PID:7736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --metrics-shmem-handle=9028,i,1243672777570947525,13973457623604003781,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7708 /prefetch:1
  2⤵
  PID:7864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --metrics-shmem-handle=4604,i,8381202696915680796,5211112446888527812,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7720 /prefetch:1
  2⤵
  PID:7836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --metrics-shmem-handle=11844,i,15623740009531298196,8220987709356454975,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9072 /prefetch:1
  2⤵
  PID:6952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --metrics-shmem-handle=9200,i,14087355439411396199,13568593726110116907,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12804 /prefetch:1
  2⤵
  PID:1936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --metrics-shmem-handle=9748,i,3616487568649701820,15437877813545892823,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12692 /prefetch:1
  2⤵
  PID:1116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --metrics-shmem-handle=7872,i,12207153903497954722,11575354453175658240,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4900 /prefetch:1
  2⤵
  PID:7396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --metrics-shmem-handle=7288,i,14566395590778614943,17834095509005742377,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7304 /prefetch:1
  2⤵
  PID:7552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --metrics-shmem-handle=6864,i,14551094559361454010,2784474689764082503,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8924 /prefetch:1
  2⤵
  PID:4796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --metrics-shmem-handle=7504,i,11505346012264417614,16529779401933427793,2097152 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9536 /prefetch:1
  2⤵
  PID:2088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=12780,i,10649915639778370698,6289102673850898991,524288 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8156 /prefetch:8
  2⤵
  PID:6208
- C:\Users\Admin\Downloads\LuminaRead_1.9564.85.exe
  "C:\Users\Admin\Downloads\LuminaRead_1.9564.85.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious behavior: EnumeratesProcesses
  PID:4276
- - C:\Windows\system32\taskkill.exe
    "taskkill.exe" /PID 1476 /F
    3⤵
    - Kills process with taskkill
    PID:2280
- - C:\Windows\system32\taskkill.exe
    "taskkill.exe" /PID 1008 /F
    3⤵
    - Kills process with taskkill
    PID:5864
- - C:\Windows\system32\taskkill.exe
    "taskkill.exe" /PID 4488 /F
    3⤵
    - Kills process with taskkill
    PID:8184
- - C:\Windows\system32\taskkill.exe
    "taskkill.exe" /PID 7628 /F
    3⤵
    - Kills process with taskkill
    PID:2740
- - C:\Windows\system32\taskkill.exe
    "taskkill.exe" /PID 2088 /F
    3⤵
    - Kills process with taskkill
    PID:3636
- - C:\Windows\system32\taskkill.exe
    "taskkill.exe" /PID 1416 /F
    3⤵
    - Kills process with taskkill
    PID:8008
- - C:\Windows\system32\taskkill.exe
    "taskkill.exe" /PID 6356 /F
    3⤵
    - Kills process with taskkill
    PID:7828
- - C:\Windows\system32\taskkill.exe
    "taskkill.exe" /PID 5080 /F
    3⤵
    - Kills process with taskkill
    PID:6860
- - C:\Windows\system32\taskkill.exe
    "taskkill.exe" /PID 2240 /F
    3⤵
    - Kills process with taskkill
    PID:6584
- - C:\Windows\system32\taskkill.exe
    "taskkill.exe" /PID 7552 /F
    3⤵
    - Kills process with taskkill
    PID:4732
- - C:\Windows\system32\taskkill.exe
    "taskkill.exe" /PID 1236 /F
    3⤵
    - Kills process with taskkill
    PID:7928
- - C:\Windows\system32\taskkill.exe
    "taskkill.exe" /PID 5684 /F
    3⤵
    - Kills process with taskkill
    PID:5364
- - C:\Windows\system32\taskkill.exe
    "taskkill.exe" /PID 6084 /F
    3⤵
    - Kills process with taskkill
    PID:7660
- - C:\Windows\system32\taskkill.exe
    "taskkill.exe" /PID 3016 /F
    3⤵
    - Kills process with taskkill
    PID:6752
- - C:\Windows\system32\taskkill.exe
    "taskkill.exe" /PID 1472 /F
    3⤵
    - Kills process with taskkill
    PID:8040
- - C:\Windows\system32\taskkill.exe
    "taskkill.exe" /PID 3448 /F
    3⤵
    - Kills process with taskkill
    PID:7716
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --hide-crash-restore-bubble --restore-last-session --profile-directory=Default https://thankyou.smallerhelp.com/
    3⤵
    - Checks processor information in registry
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of SendNotifyMessage
    PID:8076
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffc3eb0c728,0x7ffc3eb0c734,0x7ffc3eb0c740
      4⤵
      PID:7824
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1776,i,17387468610373750807,13898420333038643325,262144 --field-trial-handle=2120,i,28243387705034008,4440249269366187618,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=2116 /prefetch:2
      4⤵
      PID:1596
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,8135935716172463577,18052496887964596241,524288 --field-trial-handle=2120,i,28243387705034008,4440249269366187618,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=2148 /prefetch:3
      4⤵
      Downloads MZ/PE file
      System Time Discovery
      PID:4372
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2428,i,13499567431376439339,5386641804014842343,524288 --field-trial-handle=2120,i,28243387705034008,4440249269366187618,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=2596 /prefetch:8
      4⤵
      PID:7060
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3656,i,1582595712286775574,2718256586814261222,2097152 --field-trial-handle=2120,i,28243387705034008,4440249269366187618,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=3684 /prefetch:1
      4⤵
      PID:5840
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3080,i,16793240531382119044,13823622827965187298,2097152 --field-trial-handle=2120,i,28243387705034008,4440249269366187618,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=3652 /prefetch:1
      4⤵
      PID:5780
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4196,i,7545306965945783668,15705840313192896683,2097152 --field-trial-handle=2120,i,28243387705034008,4440249269366187618,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=4200 /prefetch:1
      4⤵
      PID:7368
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=4592,i,1331867267298569110,9184159205440396847,2097152 --field-trial-handle=2120,i,28243387705034008,4440249269366187618,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=4600 /prefetch:1
      4⤵
      PID:7580
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4784,i,4832870900138760532,17508699109625343666,2097152 --field-trial-handle=2120,i,28243387705034008,4440249269366187618,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=4964 /prefetch:1
      4⤵
      PID:4164
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4932,i,13096349148655644432,657899737160413047,2097152 --field-trial-handle=2120,i,28243387705034008,4440249269366187618,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=4988 /prefetch:1
      4⤵
      PID:8180
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5280,i,12647945863545394718,15957102061995858759,2097152 --field-trial-handle=2120,i,28243387705034008,4440249269366187618,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=5236 /prefetch:1
      4⤵
      PID:6676
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5276,i,4888696317191104551,13063035034202159209,2097152 --field-trial-handle=2120,i,28243387705034008,4440249269366187618,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=5380 /prefetch:1
      4⤵
      PID:8176
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6220,i,5202671624498110342,7940005689923186892,524288 --field-trial-handle=2120,i,28243387705034008,4440249269366187618,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=6316 /prefetch:8
      4⤵
      PID:5228
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6452,i,11429568066142732474,9048692969376307438,2097152 --field-trial-handle=2120,i,28243387705034008,4440249269366187618,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=6460 /prefetch:1
      4⤵
      PID:3320
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5112,i,9745692406000517687,8445293607180257867,2097152 --field-trial-handle=2120,i,28243387705034008,4440249269366187618,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=6272 /prefetch:1
      4⤵
      PID:6456
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5240,i,7183274405160111098,13053709438090843399,2097152 --field-trial-handle=2120,i,28243387705034008,4440249269366187618,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=6448 /prefetch:1
      4⤵
      PID:3716
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6928,i,1313234532198678312,11862147339664929735,524288 --field-trial-handle=2120,i,28243387705034008,4440249269366187618,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=4988 /prefetch:8
      4⤵
      PID:2168
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=240,i,8596224435744348900,15613007213689706206,524288 --field-trial-handle=2120,i,28243387705034008,4440249269366187618,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=6920 /prefetch:8
      4⤵
      PID:7456
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6924,i,3823516159599161822,12147346955909939653,524288 --field-trial-handle=2120,i,28243387705034008,4440249269366187618,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=6868 /prefetch:8
      4⤵
      PID:4936
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6924,i,6890515337087130109,13862793301836578740,2097152 --field-trial-handle=2120,i,28243387705034008,4440249269366187618,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=6868 /prefetch:1
      4⤵
      PID:7392
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=7352,i,9601034491599844186,6671348623237826543,524288 --field-trial-handle=2120,i,28243387705034008,4440249269366187618,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=7344 /prefetch:8
      4⤵
      PID:3756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6628,i,12724742862897591084,3092623976197005735,524288 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6648 /prefetch:8
  2⤵
  - Modifies registry class
  PID:6576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=9144,i,16037780787574430045,9189051173258630629,262144 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5544 /prefetch:2
  2⤵
  PID:6744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2372,i,13768025297275400864,5908517471690669166,524288 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2688 /prefetch:8
  2⤵
  PID:6088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6492,i,7350089672257596270,6348113314605978380,524288 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6068 /prefetch:8
  2⤵
  PID:4952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2288,i,3877894180523200182,5379966036939233285,524288 --field-trial-handle=1888,i,6809692784279254262,12819874622890040435,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4628 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3760

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2364

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2260

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:992

C:\Program Files (x86)\PCAppStore\PcAppStoreSRV.exe
"C:\Program Files (x86)\PCAppStore\PcAppStoreSRV.exe"
1⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2172
- C:\Program Files (x86)\PCAppStore\AutoUpdater.exe
  "C:\Program Files (x86)\PCAppStore\AutoUpdater.exe" /i /step=init
  2⤵
  - Executes dropped EXE
  PID:5056
- C:\Program Files (x86)\PCAppStore\PcAppStore.exe
  "C:\Program Files (x86)\PCAppStore\PcAppStore.exe" /src=installer
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Drops file in Program Files directory
  - Checks SCSI registry key(s)
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:3268
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2047 --user-data-dir="C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=3268.1344.5221466804509012352
    3⤵
    - Drops file in Program Files directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:2800
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler "--user-data-dir=C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffc2c8bb078,0x7ffc2c8bb084,0x7ffc2c8bb090
      4⤵
      PID:4616
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2047 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1716,i,8933037318449252639,9053847153622574011,262144 --variations-seed-version --mojo-platform-channel-handle=1744 /prefetch:2
      4⤵
      PID:2828
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2047 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2052,i,8933037318449252639,9053847153622574011,262144 --variations-seed-version --mojo-platform-channel-handle=2064 /prefetch:3
      4⤵
      Drops file in Program Files directory
      PID:4416
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2047 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2388,i,8933037318449252639,9053847153622574011,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:8
      4⤵
      PID:4780
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2047 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3652,i,8933037318449252639,9053847153622574011,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
      4⤵
      PID:5408
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2047 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3884,i,8933037318449252639,9053847153622574011,262144 --variations-seed-version --mojo-platform-channel-handle=3752 /prefetch:1
      4⤵
      PID:5288
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2047 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4864,i,8933037318449252639,9053847153622574011,262144 --variations-seed-version --mojo-platform-channel-handle=3796 /prefetch:8
      4⤵
      PID:6740
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2047 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1392,i,8933037318449252639,9053847153622574011,262144 --variations-seed-version --mojo-platform-channel-handle=4880 /prefetch:8
      4⤵
      PID:6680
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2047 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4976,i,8933037318449252639,9053847153622574011,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:8
      4⤵
      PID:6508
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2047 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4832,i,8933037318449252639,9053847153622574011,262144 --variations-seed-version --mojo-platform-channel-handle=752 /prefetch:8
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:6092
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2047 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2208,i,8933037318449252639,9053847153622574011,262144 --variations-seed-version --mojo-platform-channel-handle=4740 /prefetch:8
      4⤵
      PID:1420
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2047 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4936,i,8933037318449252639,9053847153622574011,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:8
      4⤵
      PID:1060
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2047 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4404,i,8933037318449252639,9053847153622574011,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:8
      4⤵
      PID:7796
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2047 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2056,i,8933037318449252639,9053847153622574011,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:8
      4⤵
      PID:6900
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2047 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4928,i,8933037318449252639,9053847153622574011,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:8
      4⤵
      PID:7204
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2047 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4916,i,8933037318449252639,9053847153622574011,262144 --variations-seed-version --mojo-platform-channel-handle=4924 /prefetch:8
      4⤵
      PID:6832
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2047 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5012,i,8933037318449252639,9053847153622574011,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:8
      4⤵
      PID:7824
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2047 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4424,i,8933037318449252639,9053847153622574011,262144 --variations-seed-version --mojo-platform-channel-handle=3024 /prefetch:8
      4⤵
      PID:2884
- C:\Program Files (x86)\PCAppStore\Watchdog.exe
  "C:\Program Files (x86)\PCAppStore\Watchdog.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious behavior: EnumeratesProcesses
  PID:3188

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5556

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:5776
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\Downloads\FREE ROBUX.sb3"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:348
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\Downloads\FREE ROBUX.sb3"
    3⤵
    - Checks processor information in registry
    - Modifies registry class
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:6016
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2012 -prefsLen 27099 -prefMapHandle 2016 -prefMapSize 270279 -ipcHandle 2100 -initialChannelId {a738aa59-7398-42f7-9699-d93b6bb03b43} -parentPid 6016 -crashReporter "\\.\pipe\gecko-crash-server-pipe.6016" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
      4⤵
      PID:5452
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2484 -prefsLen 27135 -prefMapHandle 2488 -prefMapSize 270279 -ipcHandle 2496 -initialChannelId {1ac9ab71-d2ca-4fb9-8f20-ee2899d10804} -parentPid 6016 -crashReporter "\\.\pipe\gecko-crash-server-pipe.6016" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
      4⤵
      Checks processor information in registry
      PID:5380
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3460 -prefsLen 27276 -prefMapHandle 3464 -prefMapSize 270279 -jsInitHandle 3468 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3476 -initialChannelId {a080612d-3c2d-4363-b68b-8cca874582a5} -parentPid 6016 -crashReporter "\\.\pipe\gecko-crash-server-pipe.6016" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
      4⤵
      Checks processor information in registry
      PID:5896
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3652 -prefsLen 27276 -prefMapHandle 3656 -prefMapSize 270279 -ipcHandle 3724 -initialChannelId {bd22a6a3-99e8-4d5d-8f4e-9ee34dd20ccf} -parentPid 6016 -crashReporter "\\.\pipe\gecko-crash-server-pipe.6016" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
      4⤵
      PID:6128
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3128 -prefsLen 34775 -prefMapHandle 4284 -prefMapSize 270279 -jsInitHandle 4288 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4296 -initialChannelId {5c612c64-9b35-4dd5-b0ba-d6f4cf6c3c5d} -parentPid 6016 -crashReporter "\\.\pipe\gecko-crash-server-pipe.6016" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
      4⤵
      Checks processor information in registry
      PID:4300
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4528 -prefsLen 35012 -prefMapHandle 5080 -prefMapSize 270279 -ipcHandle 5088 -initialChannelId {c4d721b5-6508-45fd-a43e-a5f239e84d13} -parentPid 6016 -crashReporter "\\.\pipe\gecko-crash-server-pipe.6016" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
      4⤵
      Checks processor information in registry
      PID:6248
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5248 -prefsLen 32900 -prefMapHandle 5252 -prefMapSize 270279 -jsInitHandle 5256 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5264 -initialChannelId {9ebf6c41-83ff-4fb4-9ef8-91188bb10f0b} -parentPid 6016 -crashReporter "\\.\pipe\gecko-crash-server-pipe.6016" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
      4⤵
      Checks processor information in registry
      PID:6296
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5344 -prefsLen 32900 -prefMapHandle 5348 -prefMapSize 270279 -jsInitHandle 5352 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5312 -initialChannelId {88fba8da-5b01-47eb-b82f-26290be38256} -parentPid 6016 -crashReporter "\\.\pipe\gecko-crash-server-pipe.6016" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
      4⤵
      Checks processor information in registry
      PID:6308
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5696 -prefsLen 32900 -prefMapHandle 5700 -prefMapSize 270279 -jsInitHandle 5704 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5708 -initialChannelId {c5a0273e-439a-475f-8e69-0adbdfc51cb7} -parentPid 6016 -crashReporter "\\.\pipe\gecko-crash-server-pipe.6016" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
      4⤵
      Checks processor information in registry
      PID:6328

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\Downloads\FREE ROBUX.sb3"
1⤵
PID:6936
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\Downloads\FREE ROBUX.sb3"
  2⤵
  - Checks processor information in registry
  PID:6952

C:\Users\Admin\AppData\Local\Temp\Temp1_free robux.zip\free robux\troglodyte1.1.exe
"C:\Users\Admin\AppData\Local\Temp\Temp1_free robux.zip\free robux\troglodyte1.1.exe"
1⤵
PID:7416

C:\Users\Admin\Downloads\free robux\free robux\troglodyte1.1.exe
"C:\Users\Admin\Downloads\free robux\free robux\troglodyte1.1.exe"
1⤵
PID:6488

C:\Users\Admin\Downloads\free robux\free robux\troglodyte1.1.exe
"C:\Users\Admin\Downloads\free robux\free robux\troglodyte1.1.exe"
1⤵
PID:7812

C:\Users\Admin\Downloads\free robux\free robux\troglodyte1.1.exe
"C:\Users\Admin\Downloads\free robux\free robux\troglodyte1.1.exe"
1⤵
PID:4908

C:\Users\Admin\Downloads\free robux\free robux\troglodyte1.1.exe
"C:\Users\Admin\Downloads\free robux\free robux\troglodyte1.1.exe"
1⤵
PID:3228

C:\Users\Admin\Downloads\free robux\free robux\troglodyte1.1.exe
"C:\Users\Admin\Downloads\free robux\free robux\troglodyte1.1.exe"
1⤵
PID:7780

C:\Windows\system32\NOTEPAD.EXE
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\free robux\free robux\README.txt
1⤵
PID:7928

C:\Users\Admin\Downloads\free robux\free robux\troglodyte1.1.exe
"C:\Users\Admin\Downloads\free robux\free robux\troglodyte1.1.exe"
1⤵
PID:6036

C:\Users\Admin\Downloads\free robux\free robux\troglodyte1.1.exe
"C:\Users\Admin\Downloads\free robux\free robux\troglodyte1.1.exe"
1⤵
PID:424

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:6480
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\Downloads\com.robux.ROBLOX.pro_1.3.apk"
  2⤵
  PID:2820
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url C:\Users\Admin\Downloads\com.robux.ROBLOX.pro_1.3.apk
    3⤵
    - Checks processor information in registry
    - Modifies registry class
    - Suspicious use of SetWindowsHookEx
    PID:8052
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2060 -prefsLen 27059 -prefMapHandle 2064 -prefMapSize 270315 -ipcHandle 2136 -initialChannelId {aa0b7035-b39a-417e-a0dd-717e145dc133} -parentPid 8052 -crashReporter "\\.\pipe\gecko-crash-server-pipe.8052" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
      4⤵
      PID:7200
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2388 -prefsLen 27059 -prefMapHandle 2392 -prefMapSize 270315 -ipcHandle 2412 -initialChannelId {c291a0b0-1ac0-43b2-b420-44b40bd3b54c} -parentPid 8052 -crashReporter "\\.\pipe\gecko-crash-server-pipe.8052" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
      4⤵
      Checks processor information in registry
      PID:2280
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3724 -prefsLen 27618 -prefMapHandle 3728 -prefMapSize 270315 -jsInitHandle 3732 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3740 -initialChannelId {211e7cc2-c5cc-4bdc-a6fb-2990ce9274ec} -parentPid 8052 -crashReporter "\\.\pipe\gecko-crash-server-pipe.8052" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
      4⤵
      Checks processor information in registry
      PID:4876
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3912 -prefsLen 27618 -prefMapHandle 3916 -prefMapSize 270315 -ipcHandle 3924 -initialChannelId {07154f1d-2993-47bb-a6b2-41766d6e1d28} -parentPid 8052 -crashReporter "\\.\pipe\gecko-crash-server-pipe.8052" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
      4⤵
      PID:4084
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4584 -prefsLen 35174 -prefMapHandle 4588 -prefMapSize 270315 -jsInitHandle 4592 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4600 -initialChannelId {f40eb845-c401-420b-aab9-73bf17870503} -parentPid 8052 -crashReporter "\\.\pipe\gecko-crash-server-pipe.8052" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
      4⤵
      Checks processor information in registry
      PID:2304
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5156 -prefsLen 35330 -prefMapHandle 5160 -prefMapSize 270315 -ipcHandle 5168 -initialChannelId {142aabb3-cced-478c-998f-851db91199f1} -parentPid 8052 -crashReporter "\\.\pipe\gecko-crash-server-pipe.8052" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
      4⤵
      Checks processor information in registry
      PID:5048
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4864 -prefsLen 33253 -prefMapHandle 5704 -prefMapSize 270315 -jsInitHandle 5708 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5656 -initialChannelId {fffd9af1-7924-4cf2-b0bf-edd20cceaf7a} -parentPid 8052 -crashReporter "\\.\pipe\gecko-crash-server-pipe.8052" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
      4⤵
      Checks processor information in registry
      PID:6092
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5860 -prefsLen 33253 -prefMapHandle 5864 -prefMapSize 270315 -jsInitHandle 5868 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5876 -initialChannelId {67471d34-6649-4a3c-a8ab-dff858a38911} -parentPid 8052 -crashReporter "\\.\pipe\gecko-crash-server-pipe.8052" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
      4⤵
      Checks processor information in registry
      PID:6196
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6052 -prefsLen 33253 -prefMapHandle 6056 -prefMapSize 270315 -jsInitHandle 6060 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6068 -initialChannelId {0d623fdc-0a5f-4268-b7cd-6eb852c170fb} -parentPid 8052 -crashReporter "\\.\pipe\gecko-crash-server-pipe.8052" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
      4⤵
      Checks processor information in registry
      PID:6072

C:\Windows\system32\NOTEPAD.EXE
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\com.robux.ROBLOX.pro_1.3.apk
1⤵
- Opens file in notepad (likely ransom note)
PID:3752

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefaulta5d75996h92e7h4c91h9ea8h49a9d0e1e2bd
1⤵
PID:5788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefaulta5d75996h92e7h4c91h9ea8h49a9d0e1e2bd --edge-skip-compat-layer-relaunch
  2⤵
  - Enumerates system info in registry
  PID:2592
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x238,0x23c,0x230,0x244,0x7ffc25eac188,0x7ffc25eac194,0x7ffc25eac1a0
    3⤵
    PID:7664
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1912,i,14038654347717108123,107504928823398340,524288 --field-trial-handle=2176,i,12094065009288147647,8605155948372975334,262144 --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:3
    3⤵
    - System Time Discovery
    PID:4384
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,7246551205569493222,6561025846962569248,262144 --field-trial-handle=2176,i,12094065009288147647,8605155948372975334,262144 --variations-seed-version --mojo-platform-channel-handle=2172 /prefetch:2
    3⤵
    PID:432
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2556,i,5044566683739519922,6028160067933102275,524288 --field-trial-handle=2176,i,12094065009288147647,8605155948372975334,262144 --variations-seed-version --mojo-platform-channel-handle=2544 /prefetch:8
    3⤵
    PID:6412
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3124,i,4270676840192366519,3497411993076667271,2097152 --field-trial-handle=2176,i,12094065009288147647,8605155948372975334,262144 --variations-seed-version --mojo-platform-channel-handle=3132 /prefetch:2
    3⤵
    PID:7044

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6688

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefault203b8d33he991h4dc5h9baah05f83ac3ac28
1⤵
- Enumerates system info in registry
PID:424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x254,0x258,0x25c,0x250,0x27c,0x7ffc25eac188,0x7ffc25eac194,0x7ffc25eac1a0
  2⤵
  PID:900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,8313546446779588010,2540503890108451556,524288 --field-trial-handle=2708,i,9596972955479939696,4926830780155558460,262144 --variations-seed-version --mojo-platform-channel-handle=3360 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1760,i,6344237546877979847,924139339016847635,262144 --field-trial-handle=2708,i,9596972955479939696,4926830780155558460,262144 --variations-seed-version --mojo-platform-channel-handle=2704 /prefetch:2
  2⤵
  PID:5444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2332,i,1327731713049074043,12621811972658015770,524288 --field-trial-handle=2708,i,9596972955479939696,4926830780155558460,262144 --variations-seed-version --mojo-platform-channel-handle=3368 /prefetch:8
  2⤵
  PID:7648

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6604

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:6692

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:7068

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
PID:2900

C:\Users\Admin\Downloads\LuminaRead_1.9564.85.exe
"C:\Users\Admin\Downloads\LuminaRead_1.9564.85.exe"
1⤵
- Executes dropped EXE
PID:524

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:6868

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

AutoUpdater.exe

Path C:\Program Files (x86)\PCAppStore\AutoUpdater.exe
Size 1.2MB
SHA256 5595f38a691599fb320a6b5b7c66d61c68398391994ddfc232796fa6dfde35d1
MD5 5f31be07d2530838b4908f852475d6b1
SHA1 8881aeffe0596d9f5ae5c84ebc978ec0e84dabf4
SHA512 28bc5a21ba66c6988d73fa3f3a95a709e1b84898faa3b12c9a175785b5e8eff1aaed3a5da62e7bb9a0d4b678a4483f7d7abce6e3928fbad7e523792fd6600de8
SSDEEP 24576:Jc5Atj2SpMZavtMS6dQ/5OfPMdSSoC2UXPNxUsRKZkh0lhSMXlMJRL:JcWdNRKZJm
TLSH
T12E557D1A96A442FCD0FAD17CC657691AFA713C46837027CB1284B9661F377E4AE3E702
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PCAppStore.exe

Path C:\Program Files (x86)\PCAppStore\PCAppStore.exe
Size 5.7MB
SHA256 4279de265b9bc9e4f5f25d7326a9bb4a24d1871f42725ae8d2a9735889b12627
MD5 ed9c20d006e8b56f902439917e8f8b24
SHA1 a961bc5a16150a9335277af1ab90fb35cef06818
SHA512 a254823a469089129a5a6e5f8c202ea0b14853f4cae89e78de9e07f06586d485e187d1dd3bbd585108e95ccc501e7dd62478b39cc8cc1dbb7700b5da21259b79
SSDEEP 49152:vTjwCCgIJeiEb2tiP5mbtvbFClRGvMsidtLkoY2KLc2Mt1E3TQptN:vICCPEWxvmRGYAQtGCb
TLSH
T1F656E85AD6B642E1D4F9D178C626722BFC713C5EC134A70BA781AB175B32760EA3E700
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PCAppStoreSRV.exe

Path C:\Program Files (x86)\PCAppStore\PCAppStoreSRV.exe
Size 841KB
SHA256 4b42c2bcf63210b175588de82c74606fbc0bfe23fd699c1eca225afd649d7071
MD5 c6151e4962afc972ccf3f4d5eace5727
SHA1 9518b4c211b9b1ee47c7365214fb8b73335c3e38
SHA512 f21895bb20a421f2f95dab0a2017816a5a1dc642e8d6d4bd69c035b02bd7e87abfda8beead9417aea16858386c86e49015c588bce6471e51bcde99e2f0e4cad6
SSDEEP 12288:Cpv3/MMt0zEQBdtkCHyBvDSBIDph0lhSMXl+pPIbwBxcBXg:Cv3k40zE2dtjHyBbkI1h0lhSMXlyPOvQ
TLSH
T1B1058D2AEBA942F8D07BC178C992650AFAB27C5A436167CB039175672F336E05D3F701
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReadMe.txt

Path C:\Program Files (x86)\PCAppStore\ReadMe.txt
Size 146B
SHA256 5d2f34957843469949690c30182f3549c5af8211c46283217cbcfcf9b25c1583
MD5 2c23d1996a76f9a6310cf32c3d0fe585
SHA1 6e8788fda04cbe47671ac87825c22380ef04bccb
SHA512 42b4e971b52b671c6ce5bcac1ce2283913d3bbd1bde4714539a197845c511814d32ba296d9ce6c573cd95ffaff7f3964862cb9c6e4813019b9705c07152515ba
TLSH
T167C02BE3B00F04378212824924CBCD00EF1DC07699C14709183240BD9513208C323C6D
MD5 SHA1 SHA512 TLSH

Submit Download

Uninstaller.exe

Path C:\Program Files (x86)\PCAppStore\Uninstaller.exe
Size 401KB
SHA256 3fd0be01793c19bfe0782d6d95b0997eca350c1735c9ebf1caf8bf289993eaca
MD5 2cb08ec5e087ae21294d7f8a51658144
SHA1 848962498fe35c2f1b077fb71f0b151a1a9eccc9
SHA512 f3cf8c5abc22b9bfa5b60d2179ff78232e4b6298c66b5935d03dd0f48d0688a7fecf17ae1e5f2a5459a3ad88c00d132e4487710ee359ef059f96be9faa1be6a2
SSDEEP 6144:xep1lcLWNBPTYmGm1mMd1YSxIJpTWHc/njixAS9rdDgA:01Ym1R17x+eajix9rx
TLSH
T146949D09E7D508FDD867D2B88D934446E7A2BCDE07685ADF23E486560F236E04E3E712
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
Size 3KB
SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
MD5 5e2067a92dcfcb05537479c384a89725
SHA1 eeed29b07d865ac4d46629fddadad629d0ad4e2b
SHA512 c96c5f9cb7a169ad91b070b567cf9fa8f35951ccc5aa930e97dbeccbeac27f7e9dde1379138c9ba6b0d10339f9cb053ef21f19f06d7560f97d5d23a27c8ed4f6
TLSH
T17D7184B7862088194E360AB4AA0DF10DF93702DF2AF598D3B27D455F1F712BB3946249
MD5 SHA1 SHA512 TLSH

Submit Download

crl-set

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\CertificateRevocation\6498.2025.9.4\crl-set
Size 22KB
SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
MD5 d01869348d5a783f61f90cbb27b82a78
SHA1 d4eccc91435adaf01f8589cf7f3589cf65425de2
SHA512 7ad7f27d1f559d1f50f1f009518ccca5d6d01696cd70657ad94c9fe37db7bbe06e4afc13170bc5c065cf72d69a92c3df78f637b7faa2f968bb89aa154fe371da
SSDEEP 384:2t71+UygzeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1y:m4OBwVPDdFhVyYoPWUiuXeG0K5dQYXFr
TLSH
T1B8A2BE9FAF48F112E211523D94245F40DD24D54A23996AB74F943F30ADAE42AAF3CC7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 7abbd40002229eaebe94412b69910d6578f8f14ca39a7ca0b6295fa840867df8
MD5 45a06cbe57ae9076f85e7dbfce7c33ab
SHA1 1959cbb156e29f3c0fc2a64fae1aea5758b5da60
SHA512 d0d60ee7a665881e3aece70ac7687f7e4d53a106ee4ef87aabf788d32c6a307d818cf0c2f357d155f3be78a51010721402a5d5ad9454b24f7462d2b07cc0bdc5
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 64cb8222d7dde3eb5e261a404c23ae16270d0b3f0d0eb801b91705ab4fe96a25
MD5 b8a6793adc589a80105106bc773f2c43
SHA1 8ddc51c99dbcaf6d690fc54ae05ea26fc2535f51
SHA512 ca85da70910b766f8f46b6c0284a55b5d97277895ebf05558d892f2fb549bd05ada42664598e0adb041fa5ec8ddbbabdaaf53ddb886c88490057e42a4160f846
TLSH
T11BD0121B36630939C0102033086263081940C12B41054140E438856D5B240510903C41
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 59865d848b42ad3acef1b4fcea59755028e80db078331b27a9296928378ced24
MD5 4b1ac4017bffe0ef095624e31e559dbe
SHA1 38b1e91ac537c73ee6685ffb08d7e5ff06f866c4
SHA512 280ddda88d7653a08368b76adf65c280b5a21efd6553f92b228b9166b26aa21eb0a38afcc696159731b13aa274b2410589be7eded45b8e2392584a5143b2ac89
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 168B
SHA256 bf6ef3d59ea7c522fc24c8854fe87824221c5758c40f17fb2c44d9746e57d6dd
MD5 8dd8fb431199381bba59f5e8f01f587c
SHA1 2ab6893276d852aeeb79d764626b19e184c0234c
SHA512 4f95df33d2666c5325a7268138c7b3293455464aee32fb303c6b63929d6d573144048fc3a807654fe351582556a8362ac534eccb4ce747090ee9df78adf336f3
TLSH
T17BC0481A48B180CDCEC66E3469A96917AABF2CD44C935662609C426A4C6A2F08200B49
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 168B
SHA256 08144fb8c62092826d52651034d2d3883fde8953e9e6a10ad3d5f2d828956cfd
MD5 3de1274e303839062e26e2971f51df35
SHA1 9dd95db9ea0362d89b3ae3589b936c8c40795eb2
SHA512 6e3e9ea742b1e49e9f93e55ba4129c4faa533c76bae0ad4a0c5a1f14fb209d926a76b8f03b4f7710e351f169176a823ef0f082571a8794affb1c6783776f5ab4
TLSH
T149C0921A49B580CDCFCA1E3565E87907B6BF3CD008C30EA270DC43BD5C253B48600B59
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\DawnGraphiteCache\index
Size 256KB
SHA256 7b14c6c0800dc23dda68959e80831e3d608bbf1e1f812360bf7bf95b177715e8
MD5 632b104f0e45167653ecdd4dab5dd81c
SHA1 74d6efc41f6723585d4c95b0f6269a387379d657
SHA512 bcd86081495317c06b2cb5b6162ed2cd47ce0157ead993e47c96a5710be4837ab1f21205f14fbe48862f153b466284dbd48ba04888df554a9b9b0746a1a95207
SSDEEP 3:LstlNllkll/lPn2Kll:LsX3lEtf
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\Network\Network Persistent State
Size 1KB
SHA256 5b524bb1726c1fec95e9048700decc5774a4bc1f3228e42b9053ab3b4732456e
MD5 827817156491e42be2019c4a434460f7
SHA1 c367603d25420a3d2fe2e7924aefd9f9bf7b739d
SHA512 65789742840ab1fb57d2c1a4e439f088bc20922ad4bd6f1a8a6e3edd8d1f19cf964f529edfc65a9d53e5d40c3823229f0b19ce4b386336eeb0861b74924e58ec
TLSH
T1DD31ACAA47E4897DED8112F86AA12C1BCE581520031C2B76C5E17F6AA7E1460E30170F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5c2bab.TMP

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\Network\Network Persistent State~RFe5c2bab.TMP
Size 84B
SHA256 712196693e3527ac1131831f1a2108b6c0e5c68967b26d51a452611cdfb86e0c
MD5 32b9dc9cc81d0682e78627c873fdd651
SHA1 46c486386d3e153c3e9b11d54cb52cf0064b71cf
SHA512 f18bc37f8b72411548da247aa1394cc5ac03c3bbd98e82eb8ba290ef239ef5b8625cf4835bd41ce7c52766d0bc3bfe9150dd22dbf62f0f05992ddde5fbfdc811
TLSH
T154A0121490405CFB0308835504146463C3F50002421848A91634318D019209D0004403
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\Preferences
Size 6KB
SHA256 c73a8219840b0a64d7055431adb607015ba4fe3aeae44542a2122d92f669b608
MD5 6171f6a59e7fb82f8974b962d8d5636e
SHA1 13f272ca8dc6d9c5ab0d451ece51d5455fc84c67
SHA512 8ccaefb4ee2e30597d2949a5f0226b386dc269f909bd4ae6da0a682dafe07de2000bac1de4a3b2f96aadd1be4161bbd2268bc978dfa2c5f01f5d229df919b78b
SSDEEP 192:ste0CGppfBZ8p9w3t/S+WiCQQ8M+Yvuz4QS3M3:st7CGppc6/Va+rX3
TLSH
T1A5E1A9425E6879B74CC7E21DBA25BF52E6F6102266D40EA8EBFC851C04E66DD230790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe5bb514.TMP

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\Preferences~RFe5bb514.TMP
Size 6KB
SHA256 42b4be65339a3f85a93d616c140612d5654e9e7f7a03cc35738fe6017851a3d8
MD5 b79727444a7c47e6503946f57b501828
SHA1 3c7dcdbed2bafe4711a4a99348d5267e21402b15
SHA512 e171d8527f890fd84a4a251a74fb071c63b200e97493330e23a28cca64537f43b1daf83a2ddd3fdd0282390fc66b1c25693d93b3a5a297e0af19c77f90869aa5
SSDEEP 192:ste0CGSpfBZ8p9w3t/S+WiCA9cpQYvuz4AO3MF:st7CGSpc6/VbypQr3tF
TLSH
T1BBD199425E6879BB4CC7E219BA35BF52D6F6102266D40D68EBFC851C04E67DC630790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Local State
Size 1KB
SHA256 0591b5c98497cd998807fc866cd87652bd231404b9de1c5b16ad08e26a345334
MD5 1ff89a6f822f6194ee69187687bdca3d
SHA1 a6dbe6dc835843018c9ecea371af2d9f7497a07a
SHA512 60eb13c4ae1fc89f9dbed87e2d2b55e47087f7d9d02bd82084fae1d4f32aed83fcd2b2c218e731c18753ea25c12c94bdc4a1ba0d3de4a99984a790d4f1b3bf5f
TLSH
T142316771E4E02B71DEE25285F28F7F573F605066C3604F5461ED5E0802F758C9B26D26
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Local State
Size 2KB
SHA256 07c8be8facd8f56ad4ff0a36795adb100c2eee8e00cff277a69dc211e82d4f3c
MD5 11eb85cfdd45d6eb6e34738149ce60a1
SHA1 86262277a8d0f5f25d98b6c3775aa69b90d75c06
SHA512 5e93d355bf311d8347632119398c957729a4123524281e4678a359d886857a3c8131eb196e41da9f0b4abc93e4528b783b4caa6a12055a7526e1fbb759257960
TLSH
T1C651B872B850A6768AF35684FA8E3F13AB715062C7A12F6095ED1F0C01EB28C1702C2B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Local State
Size 3KB
SHA256 15f796768af3db23113c58d01279be1b11b363a9b4eee556e8127c01d319b02c
MD5 0db1f05a4d129f91494f7891bea0da99
SHA1 59bd7b2b6c0e00ff63d9968ded6f707bbb26cfc4
SHA512 b9691f2073cfa2169acfadf5f45ef85fcd100a9d2e120a63a44bc0743f88e17548baf21ba5f79421547e8f4bf994581f1506e3d7220a68a6c1149e573af6e8c7
TLSH
T13F718462A9A0A5678EF39A41F9CA3F16B7A14023D6D43FA5D9FC0F0C01E73881342C16
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Local State
Size 16KB
SHA256 2ec16f072b47f417f04af4f4c0c8705d091b7533aebd39af64e4164e276c9812
MD5 b10aabc1b0ba77eb5d15e09ab97f13eb
SHA1 2d03f002481f98753a6197dfbe8c235977b28795
SHA512 b5cceb6c0419081657500c854682327021a5c090c2f6efe51ffe0a3b68d9bf4ba124a85821cfdd4e6e24779a085c33438e3307ebb4c0f60819dd30ffc5ae75fd
SSDEEP 384:zL+aQikB+z/xvxjg/qhEwNb+IWzs0b69zQ:m/UxvxjgC+YWw0mFQ
TLSH
T110729E2765B82E239AF3F641BA5C1B8BDBB484B291C16EB84DFD5F0906D73D81302D06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe5b16b1.TMP

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Local State~RFe5b16b1.TMP
Size 1KB
SHA256 78dab552f7d99f65f0306f40e158a68123d17ff1b5a3b18e955c41ac21be6c44
MD5 2c776c9645dd143cafb05af85d1636c7
SHA1 da155b42b9aff0ee6193d10780e328b9f53e5efc
SHA512 befe514a1756cf22af9d66ab261bc79293cfe98786a0ef8538ead85ebf5fea4c7c252a481dbf144ab9ff7e1d3c219f7022e0763ca6e1b03941e2be4f46efe3f6
TLSH
T1E8215772E0E16A71DEE15555F24B7F8B3FA05066C3609F19A1ED550802FB58C8B77C32
MD5 SHA1 SHA512 TLSH

Submit Download

crs.pb

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\PKIMetadata\46.0.0.0\crs.pb
Size 233KB
SHA256 c132e2ba94619caf6143b3bbdd9c32944e80cbf3bff87364175c42801afe2584
MD5 8bbfaa2cd5cdd9a5019da146cf4deed5
SHA1 17ed2fb07543c5d4bc196a1989dd16a9dbcaacc1
SHA512 cfeee2916f19648ed408b4287e234b4140cf82254cd4b83d918c0a4c3bac2b0467d921915aec290823355be4a0cc82017557be588f65134b466b7192f795f6c2
SSDEEP 6144:KKiD4F7BVps9YpVW+J2i/P66k8GyST+uUP:KB69Vps9C2GAQb
TLSH
T14A34AE9A0F3C3A11BFD2DEA466C8D9377D79B3E06A6928172111C4F169927E07D8C12F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ct_config.pb

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\PKIMetadata\46.0.0.0\ct_config.pb
Size 16KB
SHA256 aaeeb46cd91a4a392223cf2885f449bf532f0878c087d50bb0cb3fc7fa873a60
MD5 ca6e253c3fc7718b4455493460053be3
SHA1 4085dcccd29a931b8ea9b74f008e26409edf78ad
SHA512 0004e83a845bdab07f01df32094c202c9f3b8767a6dadd707abc19796f917221f869791673315e9d2c5a6a1fc50b922cceb622db98601055df5949818dd6ea58
SSDEEP 384:7tomWvvtJvzm9myvg+FN2VOhikm5hV5+QiyA94pDmiDyDS1c8CazaUhszz:7l5Zhk5hV5+Qis2DS1cbe7Kzz
TLSH
T13A72C9BFA1169F000383D558D6E157AAA12363DACCF3763DB1E1C005F5423E6B1A567B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kp_pinslist.pb

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\PKIMetadata\46.0.0.0\kp_pinslist.pb
Size 10KB
SHA256 b5b2a45a5b25becb901916b13752e3477d4126a42d088f29863bd8672320ecf6
MD5 8061c7027f406f3e20ea5d26969f00bd
SHA1 635d6260e16d1ac595f760df9c5bdda8279629a4
SHA512 7be0be7d59ed46b7ce6adbc1ddc42119426b3223491a03ff068dae66d13a261cc954640916ff4379a6040e021689f070b33dc82b45c010b728ee59abd42f3610
SSDEEP 96:Bxk+yBjecaikDBwrBnnoxGwMAy5z5tBT6c5MacFwn2Xh6g/gw:I1IDCrBnYQ5jlMacFwn2c9w
TLSH
T1362204B37904F99350E7E0BE1041F59AE93343A540ADF98A528C4A7635F1F0719BB4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Filtering Rules

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\Filtering Rules
Size 2.1MB
SHA256 5e301c48e6d7290990971e9f0bcb2263c8adba06ed0a2c6db5086949825d999b
MD5 43f62d9f35fa6597cec4e2ad5643e282
SHA1 8dba6404724ffd6a2e89901e8dc6e5e55fed3374
SHA512 91891d23464f89e6769d9ec7a28867e28f77925e6e3b3b75fb628d8672157ba239676c07699c931ac307a21ccc4dae95dd707d410f988ff82be4015103d4d6a3
SSDEEP 49152:ua2qP9SKIrivd04TxN/7Uw+zJEhs6dl61n4Kmq9SL6bbBT0HjTsQc8cxjw:u8d
TLSH
T1BAA55D237518BDF45BB31F3EA44B6D48823962A483E3EDC5EA2BD10ED5E014F79601B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\LICENSE
Size 24KB
SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
MD5 aad9405766b20014ab3beb08b99536de
SHA1 486a379bdfeecdc99ed3f4617f35ae65babe9d47
SHA512 bd9bf257306fdaff3f1e3e1fccb1f0d6a3181d436035124bd4953679d1af2cd5b4cc053b0e2ef17745ae44ae919cd8fd9663fbc0cd9ed36607e9b2472c206852
SSDEEP 384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm9:mvagXreRnTqzazWgj0v6XqK
TLSH
T140B2526EB64903731AF30116AA4B64DBF31ED03F362A4564346CC1481FB6E7443FA6EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Staging

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Staging
Size 36B
SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
MD5 0163de1b14421d4eee3757ff76fd81e4
SHA1 96c75c4fe1e3f33a367f45293bd1bd8bff1c06f4
SHA512 80114d59db8f3654dd6821589e5ad03daa923a35610a372756a8865b3e769621e32ef2aed92c2494de2b9fc06d9796b12f1e3bb75873ed794e8c9ae8a0d5e965
MD5 SHA1 SHA512

Submit Download

keys.json

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\TrustTokenKeyCommitments\2026.3.23.1\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-bn.hyb

Path C:\Program Files (x86)\PCAppStore\UserData\Admin\EBWebView\hyphen-data\120.0.6050.0\hyph-bn.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

Watchdog.exe

Path C:\Program Files (x86)\PCAppStore\Watchdog.exe
Size 856KB
SHA256 ef0b07ff0ed8ddcc63e83a2f5350d60c7e6d0f2744617854f6981f1044e68e64
MD5 229f48d824268c545c20b6d7735da39e
SHA1 94365310a8047d62c3f1783b9001030ee70a52f8
SHA512 05a260d8b3a0d8d7b2dc0b95a7fee98069814e7569d0ba54463e063877b4e59efc10d6512306df967e645afdf1253440657228adcd8dffd2ab241d563915843a
SSDEEP 24576:n6dHLN0DHu2CRz+7rbpa0/vTVh0lhSMXlhwG:n6dHLN0DHu/Rgvplod
TLSH
T1C4159E1AEB9801F8D4BAC27989A22546F7B27C4647615ACF139135A73F336E05E3F702
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cache_setup.json

Path C:\Program Files (x86)\PCAppStore\cache\cache_setup.json
Size 7KB
SHA256 3e70689d0d6eb7f799565b09c5b1e80ed8afb9a8bb4c3267a2a942972a941567
MD5 1aab6be4f58cc00f8e112819eb906cfd
SHA1 4f595e285d14b91ee3bff224903c21de89aecdad
SHA512 8bbfaf028daaadbd1bc429c3d0daf87c75a5eaea78e5fc2eb251f6770669970f89b98591b937c564be9438c1e85549b8d58f7376b1e9f3046c51c8562399f578
SSDEEP 96:0zrUdIMCCEG6RPHdZvjAHqSR1v1IKqfx5FuAbv1+reQItoeQIYOt9CXBeQIiagE:0sdIM36R/dRiqYlMPFuALC3CGsh
TLSH
T19EE176BF88221F4FF052A5DC9D9B3C08C76954353F527AE0D7DA1866D062239E8D523E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pcappstore.ico

Path C:\Program Files (x86)\PCAppStore\pcappstore.ico
Size 16KB
SHA256 c753fe727a127586181e04060af8689e4bf9a86c1b0c0e7ac850c030481c5d70
MD5 80950421cd3f8ae4e8606f28ad636a34
SHA1 cdc6faf6415876d939a77218e78e7447d7134239
SHA512 f67e05108bde39ec0643ec16b308447522ff71d788d1aebc98cf19d8c327abe6279ebfbf3bd3ae6172dcf905f0580c584d9cecd4fc79c88eab112c60d8a778ef
SSDEEP 192:fkP+f6Tf1L6bYw0Yl//Ryfc6negmvC4ytCGPJyUDYFU/gJo9FmGI+xOw8SSOshY+:E+f6Tf1LMXeiUDkU/gJo7mGOU+
TLSH
T19472BEEB9258CF8ECD0BB9F9141950FA0A8BCDFDEA4A30D5E2E9719BB4C64350572503
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2800_1298295910\manifest.json
Size 76B
SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
MD5 ba25fcf816a017558d3434583e9746b8
SHA1 be05c87f7adf6b21273a4e94b3592618b6a4a624
SHA512 3763bd77675221e323faa5502023dc677c08911a673db038e4108a2d4d71b1a6c0727a65128898bb5dfab275e399f4b7ed19ca2194a8a286e8f9171b3536546f
TLSH
T170A022833A0EC03B008283B0202383C08BBCAA28380E080E082338C0CAC2BB80000B28
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2800_1531357700\manifest.fingerprint
Size 66B
SHA256 e84df839eb3dee2a10ba66de65c372c6e2bba0cbab46a39af041f4eeaab1ffe8
MD5 06d2b48de0edcb3e022ed639f0fb0085
SHA1 32f93d5a76998c407087269794026d1ea028828f
SHA512 3c883d4c342f95f28e4a76c73ce7151e8a76d6f5b2c86f90a9ee7f9976ae7e1be94c963489b326d2ff5f7c6423b29552d9aa09b65c17396c2f66ce271fe19506
TLSH
T1F3A022E32CE8880EACEC0AAB020A0AFA0ECC8000020280C80008080220028F0008CA8C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2800_1531357700\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-hi.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2800_1601704362\hyph-hi.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nb.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2800_1601704362\hyph-nb.hyb
Size 141KB
SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
MD5 677edd1a17d50f0bd11783f58725d0e7
SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgk:p73HEUP8dsiinTThjy90VKk
TLSH
T1CCE319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2800_1601704362\manifest.json
Size 82B
SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
MD5 2617c38bed67a4190fc499142b6f2867
SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
TLSH
T137A022A0BC0880333E8803A8023E83E3C3BE3E0A20003C0002A33C8022EC33B3038E2C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2800_1819623498\manifest.json
Size 69B
SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
MD5 fb0d9796a86299d3689982f7a949dc6e
SHA1 6179cd612ac0dcc44d0659c7c99d1e0aecbf206e
SHA512 e3e1a18be661da9d450a30a37d24dc08dc8de628a104ce0f4197214ce6f27a2bf9de3eca1c1697fcfa3c601787ca7a6b5e30a5fe3d6ae3b2c10f1ab34af22fd0
TLSH
T141A022200C2088FFF200E3CC0020E380CF28A300A2088C0A022220002280CB80200320
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2800_1896379476\manifest.json
Size 102B
SHA256 932322ae700a7d7606efb182239db5fd9550dd6cb5860e0a17bfb6fe3bcb5f35
MD5 19322c8a94f1ac01a70f8c58cdbbc720
SHA1 7c90dac178c47dac9087dfce738f24a4a627f022
SHA512 f54a9cab8dbe96333862a67912e88c4f26cc3e25a7dc93e8f06d1fb5b0b8e91d53cc0f5619c192380573a2846034ee583276d7eda73dc9fc93bb0d9168f4e099
TLSH
T156B01221EC10B4B32004036C086CC3C063272F032C4079280DE19F84E90D9DBE471528
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2800_21337675\manifest.json
Size 113B
SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
MD5 7ef3c71464d0fef472bc1d81fd363c62
SHA1 230e8ec0f849bf34d444c55ef548ba0c9c94d39b
SHA512 f74b96ec3b9569e360a02bfdd4fe237efad8ee2a5deaf46db891bcadd39dba22fd6d59a4e9aafe5511152625ce9f468519dadd53fc0c9b6c8826dc58cbe6cd7c
TLSH
T1C8B09262DC80D872693A93AC0E2246C4F228234B2558AA493630048C0A3A3F082A2321
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2800_213886403\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2800_258879574\manifest.json
Size 1002B
SHA256 dca3cd7a673d0776a085c0b8958a85bdd8392923db21a0b55f4d37210f752322
MD5 9be87722ce3608a2d38a79079feaa394
SHA1 34ed541044567272d5402b30fa99eff29d70e9b9
SHA512 d4d22a3c277a9cc3325f4f6f15f18c56efc6945ce8abccae32d66158b9f35039b347e93d0f1002b66336fbef2d750f78184e6a4b72644cb71a2ef944af52388d
TLSH
T10B119B00CC388DD322D4BAA21CC6580A93621DAF4CC23E84339E161D8F1C8AB927366C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2800_692117227\manifest.json
Size 116B
SHA256 181a1631374b5ac1fff89559f7e23498ad9ee4796885d7b956d5e7d5f9c3f8c7
MD5 daf93729356a67ea1f849554827fdab1
SHA1 17dad0cbc82d5e04fb068896a5832f983e124c01
SHA512 473d9d608f2f3324d5db6eddeb4554a7271df4a6b62377820d935c001a8a2376479aa4d3e3b80ffbfdd3ba80f56fe72f1bc9dd020bcb396182b753353b883a30
TLSH
T1FBB09262A8084633249523F4A2639363CBA86D4A91346606091B9480659E73B22A5219
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2800_908858625\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

773CFF2C7835D48C4E76FE153DBA9F81_D9070B80E002B56309375EAD5B6A198F

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\773CFF2C7835D48C4E76FE153DBA9F81_D9070B80E002B56309375EAD5B6A198F
Size 471B
SHA256 68ec5e6ab996803fdef8360aa382f471faa349eeb86080cc669795cf19643c71
MD5 ec3bacb18dbaa81a47e0f99af3936dc9
SHA1 07781b7efd46113b57753bf67cf474a28d126cec
SHA512 b5254a495634fd8f8e34ee78129175a65ec05e46338b53eca9c16bc1766cb4d15874cf34495eca933fd7436e60c28e15cc6abbf5a1c459791c419a2847880c89
TLSH
T192F054A781C879D0242C8D54287CD895380305A8AC52C830546DB2319419FA45A176C0
MD5 SHA1 SHA512 TLSH

Submit Download

E2C6CBAF0AF08CF203BA74BF0D0AB6D5_C39E9DBC666D19C07EEE7CD1E11AF8BE

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_C39E9DBC666D19C07EEE7CD1E11AF8BE
Size 471B
SHA256 7b2db48d56bbf1bd80dcad73b36e10bb5ceed846085226c60ec0daac35223ea7
MD5 d7def3e5c9f77cab3c13305627b6ec43
SHA1 42b02e03674e7ff4db9534e760ef1c15bff67180
SHA512 038af19ff551e692198248501a56fc92d42a31fc534db07570a80fda2c019ae67a97fae846b1c5b13d1bd18abbf5468295542ef117137217a859570cc4c7f4e1
TLSH
T173F0DC42687EF0723EC394EC2FF88275F060E4B1108820A6D468D5B1E45553DA95B275
MD5 SHA1 SHA512 TLSH

Submit Download

773CFF2C7835D48C4E76FE153DBA9F81_D9070B80E002B56309375EAD5B6A198F

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\773CFF2C7835D48C4E76FE153DBA9F81_D9070B80E002B56309375EAD5B6A198F
Size 416B
SHA256 eb860b6efbbe79fff08033c8323c3f21b523d685dedce1b607c148da095f28ca
MD5 a55029964d51da5c802873fa8c488645
SHA1 ea3db15de54cf8aee471e5217de0bc0438a04c50
SHA512 9f1c01773c97fc0b51e2ba5972f09e003810b1014573e04143e6cf917bd084b08bcf7b96a5c941a4a8cf3607f2eefe742adce431b29837434870933cd9ba514a
TLSH
T197E0C01D1AFE419DFA71C87A83EE48666E0BF1230D05C6A22A44C30FA62B641FC31D24
MD5 SHA1 SHA512 TLSH

Submit Download

E2C6CBAF0AF08CF203BA74BF0D0AB6D5_C39E9DBC666D19C07EEE7CD1E11AF8BE

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_C39E9DBC666D19C07EEE7CD1E11AF8BE
Size 412B
SHA256 0158c3ea7ccfb91e2e4abd27fe38c6cb696f2b11c2b9f4f66959deae7f9765d9
MD5 b9220ff0192034ac33b2192d53a41fd5
SHA1 892891cd7a4da8154a0cd3b8cfc3dcbc7940f855
SHA512 66411337c450f34b978f5303e890e8d4d9606d013319ad41ba78993cc39a14f3f14a796dc4e73ee70e118926017241d56bb1875e4e2b9d0fc8f30331efe83458
TLSH
T1E9E0C03C13FE511CF8E4E4396FD5B831D96EF0250409A6B429C01704B706B00DC13A72
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 a9bc91a3244e7d72467b656c5486d15c0ed9f92add88f691c3853e2b856cbd81
MD5 b1e1deec2c4182d0013a230b355f4c7d
SHA1 126437183b8f548051a3f561eea1eb0ee68fc9cc
SHA512 e718639402727b342725497f1be1fb31c240520b2883d9791df2e05dd851d0e309e06e9942c2a24d6090668922ba1d9f9a1ebf9b87311e7d55ee2d605549ce06
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 9dddd3def53063b84f3a36af5ad3ad0698da7b60ee9ad3d401c50fe95672d6bc
MD5 439b5654c22e43bdf04b2f5d6afb0aa5
SHA1 370e7816910fefb268238b803a30c1e1afe0ae5d
SHA512 f37f3b2fb47104db2ec9bffd7e6285e9fa49c53948e01d258077cdf773f12fead621ffd9269eb440f361ee06a4d41f66c761e5b7fd84af2823640cf3782f51d5
TLSH
T128E0A2A8CE72EC3B18FC1328A87A4705EA9123072B40880F373C810C8FB473B418AD6C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008
Size 38KB
SHA256 7165713d3e1a610399471a5e93d5677508f62ef072c1151e72273bf4bd54f916
MD5 9436affc97843765a966b3568fa7e5ec
SHA1 7bfda74bb30589c75d718fbc997f18c6d5cc4a0b
SHA512 473ec3a843c33e18d6d194651fe11353fcd03a7959225faeabf8c77484155ea6a7bccb72dbaf2093ed53c408faa3be9f6fc907f7a5ddf8223375f9d09b504456
SSDEEP 768:eUEh2+iKBVQbBhu8vjenqz2Ez6Y/AxHLEaP72sV9qKYbDblXqhP8qwFSE3uk:eUEEoBVQDjeQaLnP2pfZTqgSEB
TLSH
T11703F112148F7FA1C244F224A4EFE416ACC3F565ABA15E6980B8B7C7010E3C657A46FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000009

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009
Size 515KB
SHA256 85fdbd1d34a14adf9c38b06edea138a78d6a55c7ffe874beb7def4c450bd6615
MD5 31d2ed5dc1687448458f011d18319f56
SHA1 b57fe9e6375663878daf15abb1f83d43654cf057
SHA512 cefc60a8c5ed5c8631fb1e18a94bf8981c11009aa5586610d5e470b0b9f351eeeaee8da045db455160d8cccb6fe8b903e621c2923da10304ca505899b53d40a2
SSDEEP 12288:pjItd1GqKO07xvr7fPHLIB7+eOoMEYPUMxF32/lpQ+TKqI/2j0ya22iI84s:lItdwqY7NPrIBahL8MPmNJTFI/2M2x4s
TLSH
T1BCB423C80EE98C0602CBA7CD04F7538D4B84E59DAD5B9F7A0FFC51A7728115B4ADAA4C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
Size 84KB
SHA256 b02d81653438f2206e406fe74f198c4081b749f7ab9e5a2de8c1fcf349bf0f82
MD5 a06a101f4e9ae9bc3c7185f29d973177
SHA1 71ad19396030d4f261a2b79d182e107583b81016
SHA512 b022a01a0aadcaa3e9f8ede517d02121f852b5d20a3f0e07f76a01d73c412caff82f6ed33f8e8b459706741720002af2c8047988e7c4d96d360348d73cb8c1f4
SSDEEP 1536:X/Vo6Xtocjv/2uDQOwVIC+Qo+kgi1GbP5xunBQ+JPqiCEyDddmWOGPR7hjMHy5sK:X/Ntnj3BwVNfzq3lCEyYGPQHymvMNrY+
TLSH
T10A8302D04C3B7A5463A19924C5CF3A4CD4E1A65F9F97E8AD8C89B39B11F640E3C0E84C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b
Size 436KB
SHA256 0b320d2cf00e9215763a5377904e2301b2edb7a5d299bd319259714cf8bcd9a9
MD5 38e965609b7e0769e6754549cfa3c2fd
SHA1 8ef9e62fa3ae6d8b371f5a9e9344a6cdf31515fe
SHA512 18cff962b979abf3e3d06261422f35502463a0e196aa0cf801cadcff8833a83f20c9e9f22fb3133041e406fdf2304088a0a5eaa4bbb8aff07ab15a0c1b46b0e4
SSDEEP 6144:HT+7EhQjYpz+XUGr9+7Km54TxcjJJEWv6p0qOJ7kuKtAiDL6GnkES7+S8HBWzDi2:6vj0iUI9EKFEJdU0p7riDxw7L8oviJ3c
TLSH
T147942367DF08D99BDA158361EA30EBDD1158EB6EE00A3CC844BB462CE54C0F9F6913C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000012

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012
Size 17KB
SHA256 3de56181def2bda43463a723ececbf2186266ccb6e92e1fbaccc0a3a1e935e06
MD5 a72b0fb86fa2c7775d0c0aa2af45f56e
SHA1 a9ae060d51ebeb2d1a6ed48223d02becdc4dcdb3
SHA512 4cea2d46873af9c1f0b35d8f504ed0b9b1651cdf24b6fff36b6af1fa7e9d89010b508dd5265f720b35c035e04c0efbe99b4ad63eb69c3ee68175417e7fd42ca6
SSDEEP 384:GZH6wpjvATV38tDKHOtkbBbCA6CA51XWyWejOGeDSYr9a99:qHLF2d8tDNtibCJXzWejzCz9c
TLSH
T1D672D0730E3F2A5FD5690765C75237FF2CA3463102D0371A4883E1EE8F426A6A879A31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000013

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013
Size 21KB
SHA256 c0973cf7fe203d43878a422dc0e448b1aec56c0e6fa58cff0bf95fa10aa804a5
MD5 649c76c706bbbfa4383ba9fb7798e78e
SHA1 b60d818d640ea2eb22d55c7e5d829a32aa8d88e6
SHA512 19efe475ca7a9c6528d93e03b3b3c847c7dbc680bee9b11a7b3c2364c05a7fec58ddd75a02729221afba4d9310eab7ecca7fc77cef227088e7d01cd4bc0d722f
SSDEEP 384:1PB+Zb0VIWMN59WPdPnHf5jfK0XhwLvtlqyhOHg3DqpDZ6vFCNBNcx38hampJNnj:+lBWMUlPnHBjvwLjjz4ZyCfNcx4Tpjj
TLSH
T13EA2D18411A61954DA0103BBC91CDEC73C6A79E3F7CDF1722A16B5FA013CEC52D25B98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000049

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000049
Size 60KB
SHA256 37bb4ac0c719d13bbced38609f3968a13f1c639b0f0f92d3ae51eb0f10843fad
MD5 960f60b93eeb2b8ac0b73df5e138dbff
SHA1 8820afa12492bcb94bfc80d18d9336daeae749a1
SHA512 28f225e62b875445708239b90fa627fa24fa615ede8b5c112414d71714f74bb98b89396a9d9d3c70441aed421a69c7bd168e2cfbeeb00d434f16d4fb2f2329cf
SSDEEP 1536:eKcB7BSK0hdXmdbNdviUmMZJRSvFuBCygInQ93:eKw7dZdZmMjRQsCyRnQZ
TLSH
T125530263978C3D477F3F5978019EA912CE835D2A53542BC09F77E59837B8B23822A1C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004a
Size 50KB
SHA256 ad4e811397eb65ad669cb6ff9d43fdd211b7bc84ddc628426d6125b27f3ff588
MD5 825ab597753c2e86d893f25a7502eb6c
SHA1 70a625cc63da9423ba21ad0fdf9e83b6abc7f915
SHA512 c80d479cf045052b62aa5cff83bbb102a365765f007ebb8c7b0e632e36a17b90029490b90d6cf4034a17376de7ceb4cc72ed0e655560c6c987da9fb622e347d4
SSDEEP 1536:DtYFBqjnCvt+NqTafHdRT7qs4FUQWiMsR6zJI:GezCwNqTalRjvKMsyI
TLSH
T1DC33F118C0E68F059016C7BFE46CE68A3B603A767DC742E4593DC5AC9FD21826CA7C79
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004b
Size 35KB
SHA256 8a371fe28c513fb4957f7bcccfcb120fdb0d3c445fd590faea3f0a697b53826d
MD5 b52d59fa0816823d243ecb67a23da3ab
SHA1 01c9770ffc68fe86161b50034678af5bb13f3548
SHA512 4c33959142e4a0fd3338c3247b30cd43d0912368e0266fbeb643501162443dee86d177894ca973b099377d15328dc774b3c263e8bc1f383150709a2821f0573a
SSDEEP 768:lfpsWsk3nHAQeUd8ubhnas3bXAH2mCABwCF7hrukMiMqdJC/c6QvlKEZ0UTp:bs6HZeUd8ohnas3MCOblrZR7tvwEmsp
TLSH
T1BDF2F11FB2C508EBBD47C621488E312EA5FB2BC42286D7CF396499390DE53B14B59234
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004c
Size 56KB
SHA256 eea9d8f41760b9f4c1691cdfcbfc4323564162766da916d7b583c0179e5fdc74
MD5 408c07a6fa9f94315e8b397f83312058
SHA1 58f56e94968c20159681df1945e2d7a8da117b97
SHA512 9ea5a589ac6bdf81f23362e8bba960b6a08052550d32bb7a1b5947ba5b039c4c0b9dec173371fca1e760c38045ba60701bdb8a7baa7401da01a8e866ce6f0d37
SSDEEP 1536:YW+RsZuoGi0AJ4WvNNWx9N4bHH60BP6i/fvFr4dj+LiPmPM1WUchoF2cjD:YW6SueisN44b60h6i/lKj+L4mPMChW24
TLSH
T1004301688AEE7E5B44EBE50991120CE252F97A27998BE6F13D89701F1C374C8713FC85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004d
Size 92KB
SHA256 5d608d9b62f21260601ef35019becf8051503eb27694d35b843f86e73ab3e613
MD5 a27dbd4f10a62731b6e32de462e582b6
SHA1 92ed39089cbfe95bbe9252d0890ef86d5195b6ca
SHA512 12955310c9d6a4054e5a5d9a65f9e31cdafae23af894bab12ea5f238a892e7978bcd3fa42a925821a6c69280681eb6c2b283a33fda0ce611c2eb117cec329c49
SSDEEP 1536:G2H6Ao+a86u0BzDm461TTKE5SmVJks8MzBRB+oxvybIzGEyrToVhr9GQkDh0LuE/:La8a86u0NDmVqoVHB+oq2woVqQkDCJmC
TLSH
T182931260891F8D8A4A7C695976FBE72CD4B28340EF6CF6B4F5F1A0985A1E14CE07E148
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000050

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000050
Size 71KB
SHA256 fe41a8ee2862830877db416957252330ba89e83e1dea0f0819237907dc8869f5
MD5 1a2113829d30197e2492efdf5a810092
SHA1 3d88627768c2ce95f371df9be51aa5282ac72175
SHA512 18879951bf0ef41e174c13ecfc408ac6ec8399b61deaa4575e4b051db184cd2fd4c53e79fbcc8f63d0f771366dd809c56a1ca7a828d229959b3a453a23fb3756
SSDEEP 1536:b1G2xqsEC6EB9qpGznjlQs8fws0VaQZ575m9i54LRZtb:c2vFR/qpWjj8Is0oWH5kZtb
TLSH
T16D7302C191B67C87AC463222378C137B4167EF898BDC9138BC07455A9D699C99E14FB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007d
Size 24KB
SHA256 5cbdf118516a25377b5e3cb53394ded5ea96de75ade2f81c80a8bac0e4a39451
MD5 363640467e37802dd89f6ec9e01ad2cc
SHA1 835ac2b03cec23ad37d7a19a8cf7103a227ce910
SHA512 38df037b907039fa3650ba08f17a61313be3efbea580dac58919bebb27b1a844bb2fcdb72c29b25313a5b38cc9774b712b76a7bc829e5c290b44df573514375b
SSDEEP 768:nCxv41N5H3xI6mB2eEp5BfimT2Gkh6HgFj+:nCOn7I6mQRDilGU6HgFy
TLSH
T14EB2E14827AF5C0E724CD96EE0053A71B5513CCDBD3BDAB2C8B26AB4E07DBC4915A907
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000086

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000086
Size 141KB
SHA256 1bfda951373c6268199c4c8f86980daa73db910e46c47596ebbef8950365a32e
MD5 9a1a57beb768306a29ff4db8cfaadda4
SHA1 564196b01bc84ab69332d03d316710bee5584527
SHA512 02532d2cde4cc3464a2a6176ae960f59e365b7c1fa2669280e1b17aaaa91e369d079726ee3324feeea6a5434b2f2d4d0dae73517b06527e05e41c406d87360e8
SSDEEP 3072:Y57NKmx+Il4MBho3Ogy7uiOAeyklhzfx3EVLuP7SOMp5TwywIdOZ/YRBRQ4:Y57NKMlxerK+dLJ3o2SOufHWw/e4
TLSH
T185E323E4267CEE5E5F8A4F2E28FA4453EA05C195175ED0EB34C41FDE24C68726E2DA03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000087

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000087
Size 23KB
SHA256 8af9915f48211dab44ffc7ff31de198caed78603b3c7fb1db3cd5c45c40ae9e8
MD5 1cb903ed6f535d4cd1b66c098f4a2311
SHA1 89bb18d7ae9e43490d4fee41bcbd99ea572ed651
SHA512 c9620dfcc30a7bac559e81a6c9cab6b29438bb9e7d514a86b93a845e249e99369160692424aa1bbd047eb9f125a4f5936589d31c9ecd39a339a8e9930ebf22f4
SSDEEP 384:6p/djkkaKu1IBC+YLNlpk2VicdhCm3mbgxiKl8g4eyqDGlYo8vOh4nib/eVMnb:0Ii/YxT9VJdhCHgQKl8g4eyqDEf8Znil
TLSH
T15FB2E0FFC3A092B317A3C42EE527354448132AE18761390EC692C6F6B0639246CB2B65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00009a
Size 73KB
SHA256 6dbf4ce8bd7984da3b3dec2833e8107b11b10aa56a537a2e23284cc52a2d9ea9
MD5 86ab42d92e8aaa951eed274da507ad23
SHA1 311714e51063b0fa75cc3854c967f6a1d7ceaf10
SHA512 8272707b178435da9ec5a970dbfc34f76d6b0b0cfbdfa0fcc7c068507e0681318916ec3aecdd2f3227b153a5285bf1a4b9ab367ce2670223a925bee6e56ef655
SSDEEP 1536:moe3GAn1hvFY9yIeaRApCRxZNBo2TePOYqTvPOaYE6meGxfwpw3vidG7:mj1h9rIHApCReO9vWR+V317
TLSH
T1B17302C63DA8481B07FB429B47D08C556C2AB3A5CB7559446FB81C2CFEAA427132E58F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00009f
Size 17KB
SHA256 c43210fb056d4c7044f17d96ceed92c4318ac9f28afab179025ea54c6f29fa4b
MD5 4be1a8698da3702d52ae518ddd2b1c0e
SHA1 c8abad7a6e56e47c1da7eb8fe591e6781f4e256e
SHA512 b17a006c55c7af1583b3a16161cf2ab5d748e105b8e02d97f0f46371367ffade2d05b4785f6199796fa0c1c4ab5ee8dd8208d3cce0f63ce85bdd7bcbd52e24e2
SSDEEP 384:6ULvbYEKKxWMXdWZdl8tzwD0FWkHVgYHzXe3rbJgOM9NLUwlPTO4b/CafH:vvbTKKxWIdOewD0gk1giLkr2OW+wZTP9
TLSH
T15F82D106FC61521460AD1C39614CDB8B1DD21AF2A5E727672B4FA90BFBF10E39442F50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000a1
Size 23KB
SHA256 e79154dc08c16cfc9d4848effe688f39770c2c56835177a2c71e04743265feac
MD5 978200081b014d3aa8cfbf35ffc30ca0
SHA1 e1a5eddf0d4fb5d9f7c5c9dc572cf944845c33a1
SHA512 249faa7c96abe3234c8c5b40411b47a532c40c03d05a499b6edf40400b4ff8415f98f468b9a34c191a9e22298be15fc983bdcce2974253a4b07663fe67829caf
SSDEEP 384:hBdPSn2dCrqEPKEDXgXvyqKuyPmEheLjtdNLB6URuzir6MgrNjm6bWQf7qCAxpd0:3dPPCHPKiXgXqZuVbpLMURKing5jm67z
TLSH
T1E8B2F1C5640F85F77B4001C3439D997D48706BA42F2F8B61B7CA7ED67C3E44EA268815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000aa

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000aa
Size 158KB
SHA256 60072b4eb6fc5f1f1214a34fcd55b3cbd1d05eddf778f85611f9b352c4c6452d
MD5 83266658f29f5cb762001d5d9f6985a7
SHA1 9ff52157193e1e798944e6a3172d938183f5e550
SHA512 60b2a8749bb597b71c6cb7113c4ea6c430ab90c6f6a5f78a36ab5fbd2676fbc173ade236be939e862569c786fbdc8e0aa984f1ae4263e91de2ba681cc8ce5d66
SSDEEP 3072:pqj6fcYjfI87fn/NWUEu+Y4rwgnWSPrrGh9SC2VRvkQdv45cf+Fg:pTvjg87fnVTEu+W3rSC2VRpBf+y
TLSH
T196F3232CABB1EF2298ADD32D789EF491C870553AC097303BB84FDF8575154348A7684E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bb

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000bb
Size 24KB
SHA256 f254eb93b015455a3c89aaf970631bc989fe2bd387f79e871b514992359651aa
MD5 5366c57b20a86f1956780da5e26aac90
SHA1 927dca34817d3c42d9647a846854dad3cbcdb533
SHA512 15d7127970436f2510344600f3acecc19c39a05f8e82c8a7950095386382b2e2da55883a5a9faa97b84452e67315b9ac1693b6592274c8c1c35c813dfeb543a2
SSDEEP 768:ZfRLYs8uBykIQZ6yXBeQOS9JUmBgKYTbgVec:vsbmrDXwEfUmBgKYTc4c
TLSH
T18DB2D004F02ACA26E53655B371E82BD54CB6C4CAABA9935C113520AF3ED3F48C991673
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bc

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000bc
Size 24KB
SHA256 a3cf4861c7d0c966f0ed6564f6aad6b28cbd3421a9ca4f60e2246848d249f196
MD5 344ee6eaad74df6b72dec90b1b888aab
SHA1 490e2d92c7f8f3934c14e6c467d8409194bb2c9a
SHA512 2a9a9162d610376512a8fae2cf9eb7e5146cc44c8ebde7a12e9a3985da1718c62ae517c25b00de7c0269efab61b4850a0becfbf04382a25730dbe9cf59825a62
SSDEEP 768:RMxowxdaCb0WaY4P8keYUej86bykBRWIsna:RM1r0NY4P80j86bHtqa
TLSH
T1EEB2E0EEEE552E4CE2F059B4962B734B8A46F022191F947832E7844E8F494C24EDE477
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bd

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000bd
Size 41KB
SHA256 0e2e6d1994902577a3d3a7f0e37875dd22de26342bec8403ebe262f92f2eddd7
MD5 a587d1a659231c3c59460569a5564da7
SHA1 eb542e028c0b1d2fd44d24b15f20176a26255d07
SHA512 73c9bfccbe137b51140469d22c9469ccda975e6caee5402a819a4629d1d5a23664e062e5f96271c1ca37b2f737e39cba6f7c25d25c0f1a3d7a31394ab8ecd814
SSDEEP 768:aS1GIh+o3q6EIwVfpJWMT3PHw1ALy+wBAPYqaia1PsbtUZE5JCaUvZGJatEG2fhN:aq9/EIwVTT3PHGAmPXRiMPmoKkHZGJau
TLSH
T17313F1CCED8DD55C266FF1E788F8B6B35468BF818819D336A4A067DC0724803743BAA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000be

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000be
Size 21KB
SHA256 6f32da94d4f26e98cb6ccd97034d306aa38945322c816f54a93c7d15dc0905b8
MD5 2c20035257a126aec473203c38baf276
SHA1 cea71b90976aab1ed5d2c1324bb4b09be960e15d
SHA512 c94fb11cae0ed5a7870ac53453e1917fa4e09dde68048a48071798b03c395e97efbd55b45a0360775525bbfd2a24e6d81ea0cb9ccf0569716735ea4d02b50465
SSDEEP 384:X7cRxmywBqrZEV4zWI1TdquIrkzoCu6DzCgpGhH7P2kqwV3fofML:X7cRYdMWI11gZC/o72kqwV3fofML
TLSH
T1D0A2D055FBA8B200E768257A25EC85D9C8B83F318599BF0DCA6B40C60D73DBF06CD192
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bf

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000bf
Size 22KB
SHA256 9c4f02f38678f2628292d66c4f7a1a6a06af7ffac4d279359b09074e7d0f1fe0
MD5 9e38e04780525a20f28d6c455901b2cf
SHA1 9a8514b5e462d06a2b6a4f31e60b97c48272f58c
SHA512 15efa4e8efdb92442e270606f13948aecbf4902a7ccba2fd186bb0bea52feb59530fc922eb4ab603c70cb8cdd26b5d5b2d8318d0cf61f26a96099df38dc694dd
SSDEEP 384:Wnkgg5ugJYnmChrWRPP8mVjX23owWnt4Powv5/cwR2TkqOOCjc/V:WkgY2mcmVzhwK6AAkwRbpeV
TLSH
T18FA2D0EF49DFF985CA334058F4FF0CB982365178E7AA60EF1194969660888F24432BD6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d9

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d9
Size 60KB
SHA256 b52ca3b42e256254dce826a61ded064ec1b37cca526b89184bd847a97fd68fc5
MD5 042fbb90b70f8ce42e6f191ca921935f
SHA1 02c25a636efd419de653cf80930b62eb91ea6fef
SHA512 808570b0cec2a7e910d6808299355346ff0ec04c5c4dcb89b9492d894d8fa3087d96ace1e1e739ac2c9b2c4715960eabb77d4b14d3aa9bf8ed24b0d550fe9f00
SSDEEP 768:i1dX1EOEYZ+fiayxUWt4Erz3c+91YGc8Kj8tUTupilOZ6j37r3smd9BpOLWaKn41:i1dXGOEKVTPtBt9Bum6jcQ+3dV9nt
TLSH
T1675301450EF82163C8BACDEAAD6E9585109736E3F2770BAF438739374B9F4442C32919
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000da

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000da
Size 423KB
SHA256 150fe8124279eff53c5e4ccf9d1cbbad3e84a9719b30c0d3990d6560a91030d9
MD5 9a3101ced71374c010f9e7356ee15986
SHA1 bbc85a60063eb2c141fb969e0d1a4c29da44ba6e
SHA512 671bbbbf60aa4931fe0e0ef026140fa2ad5e554d0c2cf392c41ea58f10d5fa3127ae1f95c431deca992e8c290d964b620f9e01f988288ba73e15f9a03d791e0b
SSDEEP 12288:H57CJlvRy6ejFQQXgDUA6SWXCEDRUINA4yC:H57C3hDfECIl7yC
TLSH
T10F9423B16016A7525A241DAE97E17B9F2473FDF40ED66C7080AF8F14513FC1902AFEA1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000dc

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000dc
Size 24KB
SHA256 0e89d0fd5995cef7708b3a668ec5822c53319d9da05207fa5cd2726a20148827
MD5 a5d2d9ec0d21038796c2c6fdb1be2d73
SHA1 c55e86807d09095d47cf5078db99e9dd84bed953
SHA512 d2956182109a74d478d39631af9facda3ce586101221b9f74d9e0aaef5e2bc1177a3123f606026c6bfdbcb3e36aa1e8ca1bfc0af60e616f82fe4311205ea5abb
SSDEEP 384:Olr559Xh3PZzugu0qWLaSFumMusHhy0bIADJvwOutk3wZXr5vDcMpa3Ig:Olr53Rhzuvs9MusHhINy3wZX9pg
TLSH
T11FB2E17177B907A2B71E1B512D668B582854E043E4B0F882308EC8A67CBE9582DDCD97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e8

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000e8
Size 42KB
SHA256 1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc
MD5 665db5e157d2138835c4037c971ff3a4
SHA1 41ca6b7e4818eb81531d8006ff7ddd971c640879
SHA512 6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a
SSDEEP 768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW
TLSH
T1F9130231EB70EE59962C903454E7FDA9433B1457D731ACA80E99A1CE6F8103454FACEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000f3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000f3
Size 47KB
SHA256 d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0
MD5 dcf31ebe107435bd68e0164d59e19b87
SHA1 b68160c9333af833fe483928b3ef7128c07a56a0
SHA512 130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08
SSDEEP 768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE
TLSH
T11623F218F29471F7EDECD4D500A18C72BAA528D442F116ED07B8D53CA36CA817A729FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00011b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00011b
Size 47KB
SHA256 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
MD5 015c126a3520c9a8f6a27979d0266e96
SHA1 2acf956561d44434a6d84204670cf849d3215d5f
SHA512 02a20f2788bb1c3b2c7d3142c664cdec306b6ba5366e57e33c008edb3eb78638b98dc03cdf932a9dc440ded7827956f99117e7a3a4d55acadd29b006032d9c5c
SSDEEP 768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
TLSH
T1EB2302D92E54990D29202A63F45D6E2641301B6ACEDF4BBCECA4FF38006C76F9FE1548
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000123

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000123
Size 905KB
SHA256 563e110bbe202dfaf9cb6ad085567c95d4cb54c818ce8d18abccbb98dcb1d0f0
MD5 8816a03cd6078cde03c21446178a61ff
SHA1 6150fc31cfdedfb3c14b8d136332af9073c7c01b
SHA512 f8fa7e175587eeeb57d471c2008d7a4e22694a8f6a43caee9ceed888c0b7bde5c9a30e1cf5290a9f332c7db8f51bb905a713f139b67bdf03ca05ad43cd2f4d18
SSDEEP 24576:IFvAQ0ttr/DC42pwfv3/MSTqaZXt0OTxVdjq/zSQ:INF0tZ/32piv3/MSTpZXGK3RmP
TLSH
T1D415333B7B8B84A07A8E419CE86018C7C24FCD66E67457A4C875B456833EFDB78613E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000193

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000193
Size 47KB
SHA256 3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62
MD5 260c81a4759baf163c025001c4f27872
SHA1 f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298
SHA512 9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9
SSDEEP 768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw
TLSH
T1BE2302DF9E4D72D29271267045338383798E2D8A50AAE7A1061C0FE6DE05B69D31FB9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000195

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000195
Size 5.0MB
SHA256 921eb55037b19e1642ed60c4b95686a52b3d58ce58985b09a7573a77ba4395b2
MD5 1f60d07b59a936be1cd96c4df18ab458
SHA1 fc1d958a2bea5082dd766cbcdd21a5cdcdfd8db6
SHA512 aa6dc3258f8fd39a2646d9f0580ef767a11ad5be3f0d878f1597691f4b2b033f4b44fc2723e15a276c0ca51f6321ec4b53a5d45db6d790b58ab305612d3ffd70
SSDEEP 49152:HzkyCxh94Mt7Im/DrQISt0sLgXs1BWP+uPhoNX/EBCJ7SDq5HxHmC64xpanT7s4/:W57NH2g3NOhN+DwMC68CX
TLSH
T119367B43E2D680F8C05EC174935BA53BEA33B8490536B2EF6BD45B112FA6B909F4D319
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001ad

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0001ad
Size 82KB
SHA256 4d53dd5ed96e892070ad5ced2b4e3f2dbf6cd98b677e19cb43fe3046280ecf34
MD5 c00e04ca64f91d0de8390c161d7a4c80
SHA1 4dba6c4c3d56e163ed8bab11eb715db2715d8b7f
SHA512 7c29b3218a8cf6ce8b0977e9157edeffb57991420b008bffd775e791116250796ca899d90a59f6b74dceea9b9d1fffd7098063f074cee357b6b61366707134fd
SSDEEP 1536:0NBE9s0haLyQYjSQyNvT3TRguyOHl/lzSr8QyNvT3LRguyMsZiVM:0N3+zyNvN/lRSVyNvdRsZf
TLSH
T1CE83D0863BE41512EBF70FB8B8F65101DFBBB7065D82DA4F6288504C9D523832B62767
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

44908e83477273c8_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\44908e83477273c8_0
Size 1KB
SHA256 be308e93388b2ca65b8aef11c7be67cff312f9761022b0692be3bb46e60268d1
MD5 163cf5bea32a04f9d07019bae03863d0
SHA1 90723b54d223509996a434a0161b617e4609bd02
SHA512 e74bb265d84ce66919c8665c8fd954ae7b2cfdf09812ddce84aa5d89053bf9ba03b4ccc348f3b83bc0d8168c7da83c2fedd93b0806365e76564f3e923e9c53c2
TLSH
T1ED11A277D50B7DDADFB74DF0D18637099DB9114B768CC185BE4011A316B1411DA308B0
MD5 SHA1 SHA512 TLSH

Submit Download

629d2ad320ba1a46_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\629d2ad320ba1a46_0
Size 57KB
SHA256 b9642993824c2329788ffee4c4806dd3d0d545d1533c15a047ff9ed11511bc2c
MD5 9e68f1c4dcbbaa1b4187586fe2f70b3d
SHA1 601a46ec92bc489db98343c27836cb765e2e9b83
SHA512 2f791fc133dd30ac08a7847c1ba493ea70879d6734296326b383c0b937463d89569114736891cffaa4c431b8e9e0f85f2065648fc62fa788002827fe63a21ebc
SSDEEP 1536:A9Q8rSMAM2ax2a/hZJxqD2DCU3IK7kbX/BbfFp3IcQ:SbwEtxs25z6X/ZFp3RQ
TLSH
T161432ACFB1D1A73189F362F2205B124DA27D68495CD4249E7A16E2F1BD3488B503AF3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7fbfefd486c562c3_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7fbfefd486c562c3_0
Size 279B
SHA256 d1bafba9559696a3d5cac99cb090acbab7ceafcf5347a05f74c53b5bf472afe2
MD5 5cbc20fd1c5ae8102d698dd62cc17c6a
SHA1 2c39ecd69d286c77ec8b08647c84987d8c8e9da1
SHA512 4d6308ef3d3d9dbc16a3db96947be3d9b56e243a40eb9b3823ce928391af0f52652264da67c4d13045a34ec34db6debb265d70fc7f8f16e0c273c5d313fcfe58
TLSH
T182D095975D389814C50F43F0D3AAD753C133C5454D5DD1D7D32154DA7E000B537C5545
MD5 SHA1 SHA512 TLSH

Submit Download

8f82c5d8857775be_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8f82c5d8857775be_0
Size 352B
SHA256 c506e52efd0284c6d89a1cecd1dc2943f5f02f68aa4b2fe38a6e46dcbfafa447
MD5 f58c025c06bcd9ac9978522307c26f6e
SHA1 4087ce53035b447f822b9fdd8311b1dce8edf046
SHA512 f53d65da15ad414a01ed790a744ea704f29f9edd072129be880c8f58abb634765b620cded97efb253c1a5389a41d9e04fae380eff176bc255363e402a0ef566c
TLSH
T186E07DEF81009D94CA22FAF0DFAE3765EE32D2258D5C91EEC441719B12891712F5B6E2
MD5 SHA1 SHA512 TLSH

Submit Download

9cdab7d0d6bacc0f_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\9cdab7d0d6bacc0f_0
Size 312KB
SHA256 ed017e8026cc12e7623e78e63587d9bda3b89d56e32aa0b58b74f2f9e04f01b6
MD5 60ffa93c53b6d5f3046745c7d6a257db
SHA1 271838b557ea32e3b6bb7e6e55bd6aedf2945041
SHA512 a15831b0b96f7141022ef6ccb016be9bef2575259d9433ff1f72be4a309921afbc51d37bf4d0734246eefb4b97636bdc11267d9031499befadcc7f2c02333250
SSDEEP 6144:qfQhOqLYbvqLvtOpb+0+81qujCKohEzX:u92B0zqqoh
TLSH
T1D364B591A7892FBACE3753F906639FA63231409C2FD7D30B25E1D7292C1D2E11E15D8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d5b7b122131540d0_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d5b7b122131540d0_0
Size 3KB
SHA256 cf7641f4b77fbb30dd233cdebeec45d8e5df90c1d377bb863156a854724b16aa
MD5 8b8eafffb05a7bf2b9f180bf83808197
SHA1 394b03d1cdacb930680d9b9607f5c7a099da2668
SHA512 a42f2df6030b94714c24e8f943bf4da1a0669d27a65c03c03dca343c5aba8769a48cb4b61295b21b86c476c286bdcbbdd0a196025ed06b7d5302cde1529017f6
TLSH
T1D9817332576D7EE6CB3A09F8855A5B053E3001DF36CEC34BF7C292A428A91D49D249E3
MD5 SHA1 SHA512 TLSH

Submit Download

fcfc4898e9560454_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\fcfc4898e9560454_0
Size 305B
SHA256 47a3cbe9df01b283b3b576cd8fbf061af7ca34703a642784067b341a301ee218
MD5 30f73b4a60d1c655f6e4f99b45507b3e
SHA1 982aaedcb3fd91e5829bdbebdfcfcd70b89ab1d7
SHA512 7bb3c23b6d2d5872bb7344ddb1031bf2136c87cab5676377bcea079568cdceeef06a6e31349ade5797387b3031ee6a31ef564787b10b206b8dce4253a8d5100e
TLSH
T1CAE0EBE312F02DD2C82F81F5DA5549CEAB3200520E9CC8126084E6F32240CE47BF5063
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 840B
SHA256 9b741d9a805729d7c38f9ea527c4c97babc5ea000435fd963b07cb2a1a1a957a
MD5 9d419914a0e614c5c130ecd88a0b50b9
SHA1 9a9a47d433e9ea45075d9719e561836ca418a3cd
SHA512 22a7beba4d04f4656fbb6941048605eeb8df73923383df46ab234c16a7956e8d13526a8c5ed458ea513f6832191738c4a61bcefbfed9d2378a089aa9e5b75609
TLSH
T1F9017DE8B6B75011DFF72D7555F90BD90C540D75012B3B8D8654B02B20AE6F7828A14D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 8cd1451485d4684a7cf54ba3d00400291f93a3883d956baf005a266876894b84
MD5 af2a13b895e87869565c19e97a2cc74f
SHA1 6e493362293f290a5d0392c5ae0a9a83ccd0d15a
SHA512 acb2edfec723903cb1cc48f72ddc4689a3b99a83715bbce47197886792f170bf8bd573c8066e678a98dfcea95acf689d342886fb67987eeadc0492f8136e80e3
TLSH
T1C63175DC71F26901CFE21C704AF91AD75C9408B5000A2F8B8558F4AB104F2F6539D879
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 0683643865eaac272cd70043d221dbc2d601553c8e1c197cd5071a779c451a36
MD5 440dfc38724af762848eedc4b94d96e0
SHA1 7031935622cac9f01c232c8ab28cfe55b4b522dd
SHA512 f47d2d6d129232e1f9806c1b0f7b4b350461a3272133c9409e7d255df7de526578062c97630395c1cbdb25062bf454a3f05d79faf8ac2e94b020851de7fa3a0e
SSDEEP 48:u+eDPmhN1a1qtj00AcV4UPt9IOSoYJRFWWgwbRrtyxXRKriCrKzzK4zq1efi7Nni:u+eqMZZBRQzCryyDZ/pf0O/oOMk1IZAA
TLSH
T157B1D78CA8B67849CBF11C7054F116A6F87406E1003F1FDA843EEC7754DA3F61AA9938
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 9KB
SHA256 fc0ee963d10b2ac564102aed61fa48860670ae8e18c89cb6de30f5779eb04b9b
MD5 eab227422d00471a04114ea2b296f033
SHA1 845cc0730c7d8fc73bc6f9424a7bf1f63ed3901d
SHA512 73e82393a995ed291be7981f4330780d394098ae8827c7baec211615169627bcda5e2aedfe25ac5c8c35513728ca1d1fa9fdad5a6ee2ab1f8f77de894f579fc3
SSDEEP 96:BPS+e8wWTfWeRyImqrCv7g6RZsA9fFQXtb/0i/ghEwzaLWJXH/4b+fuRC:BVNJRyImqP6bsyK1/ALzJhvfuRC
TLSH
T1D912E7A989B6342ADBE05C3185E05E99F2742192447F1FC7423DCC37989B3F59AF4124
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 12KB
SHA256 bc813191defcbe0aa5a069c27a228b68f71b81b764dabb6e96260c08d0f2b872
MD5 ea1ac2b134b6da3570bee381dd278202
SHA1 2f0e8c8eb7280b5ed217734f0f9544a21eca09b8
SHA512 fefb131d99ca519fc95214e845ed77b88fc00af9d55f6f7f4a4add88efe372dd8bf1ed948253b8f57f1336bf8d7162d1c56403eb87f5bb5b11358fc3fbc2f791
SSDEEP 192:3TPjRyQijSE3LDTsqNdpLCUXrDsEkmtnVuq1G:zFiJ3Yop1rAEkIVK
TLSH
T14E425C688AF6302ADFE24C3585E55E65F6356097422F2FC74278CC3B989B3F15AF4029
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 12KB
SHA256 247b3a47aeec9c28fed8d45f9eb91e6d5d6ce496f769ce3fe5767f7946f602a1
MD5 01b48bed650ecb6a07d4169f1d70e0ba
SHA1 5a90b73b3816996ff8ffe0ed32498b49225d4267
SHA512 29953ea1aa6a79630abe364f1c2d5b2b9cd480949364c575225dad5b744a05945594305dd8d5a49a9ac221e6d8f84a46ef0adc44ef6c7f12f095f3fe55bdbf95
SSDEEP 192:hpTcjRyq6jrE4uLDTsxNdpLCUKlXrNvET2m9/+pVuq1e:g/6kVYVpw1rtEa20Vi
TLSH
T1B4423B689AF6302ADFE24D3485E95E51F6762097412F1FC74278CC3BA89B3F149F5028
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 13KB
SHA256 db44e3a973cdd6ff0f6717f1d1986076ce5b9087347d6273a37324669a355160
MD5 f11fe895f868e2ee9e9e3aeb4b10ea01
SHA1 f6c766090a2a51f8cb736862928aba2b948e5352
SHA512 c49381b359a9bb69b17f39a7c9fa4ef2fd18e1e59511435f797627281a73bc15428c16a1dd63b78394f6134072a5da7e374dc294d72ebafa0a702263949b295c
SSDEEP 192:u3iPRyNg6jx4uIDTs8+qcLC1Kn+smsvETPqOJT+WVuq1Py:J8g6V0YeQzLmiE9pVm
TLSH
T1F7523B5A99F6302ADFD10C3449E94A21F63620E7922F1FCB5279CC7BA89B3F149F5014
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 15KB
SHA256 2bf1e05a8111184d7aec3653027b75aafe5879455d2e6763fb8ee1c16aefdbb4
MD5 fcec593a56cd4bf167bcc2540a5ccb38
SHA1 b7da38d486cc9177c96b5572c6a6962df4afd720
SHA512 854dde5d4fea2929edbb5fdbbf7658fc8c0458f3669f9bf069547492cc940f3e7f7cd8b13eadd22cf7bdc4324ae3ae5cf4988a2d07f60884f9734e1559fb04d1
SSDEEP 384:eZihUZCQgHh1iD0sNczMrLrlRIOyHSXD5HeGjrV8x73JT2XjYCxnCT1kQ85J5J+d:eZihUZCQgHh1iD0sNczMrLrlRIOiSXDm
TLSH
T1756280268BB57026CBE10D3849E65716F3B2E2AA827F1FC5A17CDC3BAF0637501A8545
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 9KB
SHA256 48ae9879d70d73547ea101414ce2a45a67e2969afc2396efd86e8bf1592b4e57
MD5 f4cbd1ad1cd74164cc999e2a79764f51
SHA1 8134d3725f5c46c5459da42c74f5dc04b90d8198
SHA512 01afadcd789c2217f946626f99bcdf158e845bc19c2468d0069cc8811ae1972962a511db1affd5f467d846307a442e09b78fabb4a1100991ff27c279bfeb7234
SSDEEP 96:h+e88WTudeRyQmqrweH7CV6R8PsA9fFD1+b/mh/ghEwzaLyJaH/4bnfuj/+1e:oNpRyQmquV64syHr/ALzN8efuq1e
TLSH
T14012E9A989B6342ADFE15C3585E01E9AF6742192447F1FC6423DCC37989F3F54AF8124
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 13KB
SHA256 6ced328efb8819c0275f62b32d9de2e3735cf5626b54bebb6ec060c4ebc705d8
MD5 aaa24488cd3b7eb9053654a68ccb18e1
SHA1 7c65897dd1bd605c823080058433f0f922a5b4d9
SHA512 1f1aa984cfbf1bdfe3bfa2f493474f7ddf6e577b2a71efa4fe7d43a532be8900b95c764ecde5b2077082f502f929fdf0031c7ef78fe7488f2af98f8e051eec40
SSDEEP 192:r3ITRyNg6jFE4uIDTs8NqcLC1K6smsvET2mOJh+8Vuq1k:kYg660YtQzPmiEa1BV4
TLSH
T1F4524C5A99F6302ADFE20C3549E94E21F67620E7922F1FC74268CC7BA89B3F149F5014
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 11KB
SHA256 38c43bffd287511c54aade19ed7af92be0d29fc22980b8ee41acb29bcc014d29
MD5 f40adabe423517e3490b105aaa74febd
SHA1 360e5294cf8b44645fafbe65edc5e6a00c27e512
SHA512 245cbe759fef98e3bb05ffde81d7347b98710b409a0e08a45ce238c4f8d4d4c9db3768365571a44c3a1f21638687af859c7748dcef911466c40e9d99301470d6
SSDEEP 192:SNWjRyQwj9H3LDTs5NdpLCSfreEkm/+Vuq1R:nFwR3Ydp7reEkzVt
TLSH
T1D9426D698AF6302ADFE24C3444E64E55F6756097412F1FC74279CC3B989B3F24AF5029
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe679e65.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe679e65.TMP
Size 14KB
SHA256 fcb8b46d7126a452d4d8b3b10fa760aa7a43d49a0a283a7f45d3c003cee7f98c
MD5 2221d7a65017da3c676b526167b861ae
SHA1 734beaf108318d10b600ed5735a3c969301aa1a8
SHA512 97c14834fb058f1edd86542bf787a6d32f8fc9254a853ee949b1692993b179e73d295b321b343efb2773bb58d59e9d5761fd785bcf135986612cc19c9f25fde2
SSDEEP 384:IZihUZCQgHh1yQnAXN4zhrLrlReOyHtXD5Hfh6rRHI73JTVj3YCxnCT1kQZAJ5JI:IZihUZCQgHh1yQnAXN4zhrLrlReOitXQ
TLSH
T1FE627F228FB57426C7D11C388AE64316F372E2AA827F1FD4A17CDC3B9F5233501A5589
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Size 96B
SHA256 0dfbaa9efe9acc56e4d0e7da91ab109519811bb4d173541a9f90313accadd065
MD5 04648053eface1182828d8a7e11a5d54
SHA1 ef75ff21926ab6ac47cdf679b478a43a0e25c635
SHA512 7ce08b1a1d3f4c47abbf763a97ce24fcfda8b8a4c99acfb580378542858fcb54208149c364cfe523784e0fc71874834ed3d26ccbf8ee3d783732e330c7045fb8
TLSH
T110B01278003C6831C6D01B781993128C6D540C104381432E00507090D2881704506460
MD5 SHA1 SHA512 TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History
Size 160KB
SHA256 6a52b7c576e3b5ade6af2df6dfacb1c3dc4356f1d167c2e85adec4c389456fa6
MD5 d2198fe1f82229ec5260896fb33af073
SHA1 c22de81982e821669469c47789fcd81445014f9d
SHA512 30aef5b11377073a50352c20e2f115d48951c25953632ed092eb5d674fa6425ef8a4dc72c80bd49452db850f576c9fc89ea22d4d5d586bf0f75a6dd7e8faca97
SSDEEP 768:w1g6mSXDN264idkqEwZqTfSMz4gyMTW+HZy:wi6mBiAwZqTfSMz4gyMT3HZy
TLSH
T1D0F3B6AF6E30F203CE69D03A68DA87561C7FB06F879355D5ACA00065EDE0263621C5BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History
Size 160KB
SHA256 51b7195399abe8d8f9126784395a9ac1c48d971f6d152f72119516bbe97ab2a3
MD5 0983efd9fcf0af8ff63098b960d3f4e7
SHA1 604562013e4c88b51a5141e0ca6832f702a11980
SHA512 b0d9d802ef6769884bfc52f8cd91a8fce03ec351244b6ef1454e271be94335ae5b349de8efb5dde122d390652e8ec44d117830a43d13ce0288755ecc5cdc9110
SSDEEP 768:m1g6mLXDN264idkqFwZqTESMzOgyMEW+HZy:mi6meihwZqTESMzOgyME3HZy
TLSH
T166F3C7EF6E30F202CE69D03A68DA9B561D7FA05F879395D1ECB00065E9E1263621C1B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History
Size 160KB
SHA256 76c6460ca59dd2e5c07878838d0a3781d2fdd412c55d281be505613fe6532d2d
MD5 346b9f1844cdb3d6b9ec294ea9382077
SHA1 efde2848799aea2504e69bc3d57863bace437e69
SHA512 a3d442dcb6ff0295b26c893b16b23556feb763d57ae3e40e2d6e6a7e5b825a23e80f42c28285795f9a19545d058b12f046c8a448d708d1214ad05d226d162483
SSDEEP 768:j1g6msXDN264idkqFwZqTASMzZgyMyW+HZy:ji6mvihwZqTASMzZgyMy3HZy
TLSH
T10BF3D8FF6E30B202CE69D03A68DE9B5A5D3FB09F8B9345C5ECB00425D9A1263621C177
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History
Size 160KB
SHA256 59dc386d1b7a43e7d2d2ba55f4ec418cda6f7d20558b032b4d19056424c87242
MD5 86febe3e90e4bbdb31984dc8718438dd
SHA1 e0a2b521b1ccf48c446604e32219ccd6c041b581
SHA512 be2209afd7c32064492d5456b5e9cbfeecb62df81a1ee89bfcbcb89ba3b8a37e49520bc926becec09cc34b213e19b08bd332ac1fc4f6228e8560bd601ece28cb
SSDEEP 768:VZ1g6mVSDN264idkqT9wZqTuHSMzjCzgyMHLW+HZy:VZi6m1if9wZqTuHSMzezgyMHL3HZy
TLSH
T149F3B6FF6E30B102CF65E03A68DD9B4A5D7FA09F8A9385D1ECB00425E9A1263520C277
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History
Size 160KB
SHA256 7a4c585387906b119610e27d77365470ba1e546407f87e9f440b2e6a043f6461
MD5 c68ea5f5f9bffe2b5b210fd4ee6ed8a4
SHA1 c377049df35b3e3130942c8705bb0e0a38e63e94
SHA512 3908a70e93141f8f2050b25524460927373b8efc01b2c24a88ca9676b10cb0689330371f20c396eab57387b2d8d20a6ace4e266dfa461657debc8cec7747b772
SSDEEP 384:W516xEMEnW9NND8/tIkUI3ijVYWNkqpdZqTsp6p6YEer6P6PE0T6kEaEy:kg6vWDN264idkq7ZqTzMzlyM0+HZy
TLSH
T145F3C6AF5E20B203CE69D13638DE4B931C7FE05F879356D5ACA00065DEE1267A21C5BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_github.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 b64d37a005d9148f045266df869601ddcb92eb716033c677c841116c7bc7ad7e
MD5 b4abc96817be592a4402485978df9965
SHA1 034a0e8031d4e78192ccb675f6b550d472f93987
SHA512 bf2bff4a391379705f4f6eebef3593aa7696ae24a962ba6a82995e38e092d174af7febdca46caafb16df9b465949406f80bcb7ff1fafd0a9efc7b54afb231b6b
TLSH
T14C5189F3D7E49A6E891156F4DA206E2FCD390A14031C3C6689D4AE5B53E2973D24138E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 93KB
SHA256 8f39ed553048b82ffc06b6fdb3c736df23ddcd379b8d22ee01b83a5d898ad70b
MD5 b6835be2d4cff58f9fe986a0f5a881da
SHA1 139da7f4d287676b1c1c80c1c86a67b2f4dce814
SHA512 5e07615dd864c8e02fc92bd485a8438c146e0627936f59a42ec5548543cd418ba4b656ca1b011f60233b8875f7e88bbe27bb909e7dadf2d4ba003eae291335a8
SSDEEP 768:YOh21OT11lKOcC2DNARD/SiAX8pi1O+IzhQBcoO0vIZuv5QJpWpHV4pE1J9Sw:blPvx3uv5QJpqF3r
TLSH
T19193BDF3C7F4966DCD2252F4AA253E1FCD6E09144328396B89D9BF0A93E1472E24174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 71KB
SHA256 675b51328aeaee2639c1c4e3c132334382b47a96133d3cb6b3402d4182fadefd
MD5 c2e761146245011efbfa8eb2cfdca66d
SHA1 6dec66e13414fb8e6332d85f8fce682fb0d03271
SHA512 f642837588acac5d0203462dabc16b6542fcf0485cf6c46f4931049c3fbda9c651ceb044e8ca1ad23d920c22cbb72184e406aa7ad7395f4e84d03ce802006bf1
SSDEEP 768:bDbOLm1OT192DNAR13lS/CiAX8vius38i1O+IzhQBcoO0v0wTy:YlD3lqa8vxi+
TLSH
T1C7639BF7C7F4966DCD2262F4AA263E1FCD690914472C386B89D8BF0693E1471E201B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 74KB
SHA256 3e00fba54d9a4960727a0aab7fc598416890443efa1196d67d1d5dc2d6d12938
MD5 c6693a1e1dd3d96b3e9740206ddbcebd
SHA1 2510189899fb84bc7dfb3598c3b6b0c58e175507
SHA512 2f9cd68d01abcd4615de6629f6794655ff8d942c81e3e3a5f35728f48e0e0503ec3777c61f1b1aa32d867fb0f49d5aec84f3b27ad4d9da37097456e58c7bc318
SSDEEP 768:4bOym1OT11C2DNARN/CiAX84/i1O+IzhQBcoO0vIZQwBDVWN3e:ZlUvx3QwBD8Nu
TLSH
T1C673ABF7C7F4962DCD2262F4AA263E1FCD6D09144728386B89D9BF0A93E1471E20175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 94KB
SHA256 de05bf2ab84ae757761830cc281fca0204767548a9f10a50be9c1e223476b2d7
MD5 b7c4112ce120da8ffbc094f5ac8182b4
SHA1 ff1bd146e02c835af03ebd4f18abc2c5aab937f2
SHA512 7aa71bc97fe528aaa983e2cb7b744fb761a3ac9c419619c644e755d1679bb3ff462c940032b3a54787b466680b898f9c99b605fe7af8832e40d5781c874fd5f9
SSDEEP 768:dO92u5035lKOc/j0k2DNARD/SiqX8Si1wZIseBBdBAl/Z+zAypWp8V4pkOF/d+3j:ulaXaU+zAypRIF/K
TLSH
T1B993ABF787F4966DCD2252F0AA253F1FCE6D0924432C397B89D9AE0693E1472E24174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 36KB
SHA256 2ae5d40f9fcbe5deea2d2d6d976e7f6a68b0bf52341f5e2f298d7f117c14f64d
MD5 fb51288488e70d5a61d75700f075a52e
SHA1 280d546ac868f9f7e92723b7dfa64b534ef09294
SHA512 6d1b0999817be743b8d2cf86a9c4f51c3a2b3e679a36dc4603391d00d4479a975c865c0a2f7a9013ac2fec19e98f7c789248a6d8795ebcdd18f7ac944c5d627a
SSDEEP 768:Vq6rUmE2o+9Rw3lS/CiAX80uM73Qi1KgcpkUZd:EeG3lBxQGm
TLSH
T118F28EF7C7E4952DCD1252F4AB253F1FCE290914432C3C6B89D9AF5AA3E1872E24164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 89KB
SHA256 94fcf2f9158d9ce7eca38e8519f387b4eb76363f4d798e2a8c31fde1ac5dc0c6
MD5 cce8e14822d6e4788e09a40d277fc7c0
SHA1 bf428622eb7b8ec48e8207cdecbae219f7634d00
SHA512 d12c0a38f67dabc939009ed532d4fe7682804539e9409a8bdc4e9777bfb91d64b7c38ed044e5cd6fcc6a55adccadfb535e626a37b3d06e10bc7b07dd523f096d
SSDEEP 768:dOS2u503I0DNs/j072DNARD/SiqX8Si1wZIseBBdBAl/Zm5HWprdwqPfF1D2O/Nn:YlaXaUm5HdO/Nn
TLSH
T1ED93ABF787F4966DDD2262F0AA253F1FCE6D0524472C39BB89D4AE0693E1072E24174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 17KB
SHA256 199a5429fd49f82c1b0033a5da97ff6295fe5468657b9ee993619a36b3c09601
MD5 ccda5902fb49a0142a521bd3a261b85d
SHA1 84d862dc6ee5fe2d8acae1d4762c7391d792f0a4
SHA512 c6baa127a4f814d2316bc0f12b70995f832008edab20589aeee00fa94701becccbc17348e454af1241d926c0d47e70160e39d6096b4c2a0098a542648f9caff9
SSDEEP 384:D2Zap2B5kTAJ0JjhjoceR7HjRIMjLzZJjFJjekbAe2aacbLUfU7rac6ran+fk5Np:Mq6rnaWT2o+rRy
TLSH
T14E82BEF7C7D8862DC85253F4D7253F2BCD2A0959426C3C1689D8AF4BA3E2473E28164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 74KB
SHA256 193f61af6f206c50e0db1671b96165c50d951bb3ea1d57cca0d7e5f58712edcb
MD5 cd7d7989979e1203f85517f717c1b099
SHA1 309a3c775c00a07f9736848f3e25a11867591654
SHA512 c6b3b0a7665794a96a7ddd0d862b1fc14b70441e81e3546a01b4e8ff4f8240a57fbca19a013b3de9fe2e364c24692040665f44882b1ca870453eb690bcaa2e5e
SSDEEP 768:vq6rUm1OT122o+9R13lS/CiAX80uM73wi1O+I3hcBcoO0v7wu:Zev3lBxwvVpu
TLSH
T15373ADF7C7F4962DCD2262F4AA263E1FCD6D09144728386B89D9BF0A93E1471E20175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 93KB
SHA256 70568c87407edfd54605e4052748b18eed9dde23e1127211f96094c1243c336c
MD5 fedfca12744229db22ffe836340ad13a
SHA1 9a9ec6c4303a2122c76b39878fa4253de62772e8
SHA512 bb97e6f1d84a4cc6184a100b72407d41ecc6121c5123593b2c33c41153bf1f62c51aaebae5aa7b648de416df6233e208eaaf15f8e42ea9007fe94fd04e5c7d1b
SSDEEP 768:YO92u50b1lKOc/2DNARD/SiqX8Si1wZIV7gBRul9DNZuIAypWp8V4pwOFVd+gv/u:PlaXchuIAypRAFV8
TLSH
T18E93BDF787F4966DCD2252F0AA253E1FCD6D0924432C3D6B89D9BE0A93E1472E24174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 11KB
SHA256 85a317241a5205e5e9bbece3f7f2abdee3452393c909b53767170a197e9e717c
MD5 661faac5c11ab139ab0e72a15c17566e
SHA1 d0924effda44429b6e5ecca184fb0e8b74103d59
SHA512 7c7a8db674cdfa107458160cfaf0f9a47cd46be24b02d84ebce07f6823a8c6c04510f13e22599cf4a492fb6a871a742b76c7773caa2ad8d4b94e710656a2f099
SSDEEP 192:+oUO+UPUDUSU+YU6AUZUWUqqUcUQUaU7sUOUQUoU6UFU2U2U2U3o7ULUdUUUaUQY:XO4QfcvAYFsNfJQs3Bx7odnvT7SMhVZY
TLSH
T199329CABC67FB45B243948BB1E4478065E7EB8370183A8F8DB66C96CF0854F71B16436
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 97e8af6bd59092c577d0f491f9acf40c37bcc862f8274231a34d3e99b0261847
MD5 f699912c00d3a2348b66fb1a51a57c3f
SHA1 2428523830a379597b036fb3b49928128671c58e
SHA512 e8c99a80eb49fdbef41ef5cc373eb107bcfff3ac695cdd04a42c69902f6ef369a20d80776615b21ae5a8dde149991f49e96b688371c15ba67495e577242543b3
SSDEEP 192:IR5B8jQN0iv7MF+pAPRp2S9HHsb+WNnV7txW2E+AeyzaIVyIsnAUgraJ:IR5B4nugoUX91wptk2E+Uase
TLSH
T11142C76EAE14697B6CCBC219FE667F53D7F5102221D41E90EAFC892C11E76CC221B05B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 3b01d6b289df7a170203d0dcc648cb6a10c20f6f7b37115b06fe276dba956917
MD5 ae0577195efb73d5be5be95bbce81608
SHA1 608f5f6f7cf5bec8fc714341912d6f3553257344
SHA512 92654318810f43f29bc06028228b9f967db771fe55e8ae44fcac5059137fb6efeaa883d5e846eef0cb005aaa2b561548a824790aeb8d1dbc7fa12c25543d9761
SSDEEP 192:IR5B8jQNw0v7MF+pAPRp2S9HHsb+WNnCo0OW2E+AeyzaVVyIsnAUgtaJ:IR5B4FwgoUX91wN0J2E+UaD8
TLSH
T1CA42C66EBE14687B6CCBC219FE267B53D7F5102121D42E90EAFC892C15E76CC221B05B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 17KB
SHA256 0d2790050f82f45545f69911d2fe1d640f30046d8c69832941aaa8d56cef7416
MD5 bfcaf0b434cf8a015d49e7016466b64e
SHA1 1a01c251f4bc2283cee87769d457a8c1ed384a70
SHA512 9a720e85f5bff0d6c2f4b9cf0cc98a7d346a66ceb80fb2c619945fc8fe2ed889f2c280eb9399e4afe87f8a93001819fee8353446b5b2af86907268aa5a146bec
SSDEEP 384:IRlmhbRGSAMqozXT1wmEpdMj/Zz9Cwl2E+Uaoe:MmhbLUon1wmErIl2Dx
TLSH
T12B82C6ABA8206ABB5DDAC229F915BB6BE3F4102651D01E94FAFD9D2C00D77DC3207447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 fa432e0177fda5bc02af5c4b1aa31221dc979bf9264bb138fd331591a55be597
MD5 b9b4ab4a6e3bd31dca45db8e286ee620
SHA1 5be6068426dd2f03ed117aa38b45133a6a96fe9b
SHA512 5afd9510ba0c03f9106eedda4039e233b3b633ca6abcddf9685a082f140d13b805eb9f7775a437d70ea1cc6f34c14766dd4c74e743367c6ae4fa40f09bc7688b
SSDEEP 192:IR5B8jQN0Wv7MF+p9PRpzS9HHsb+WNnPkhLW2E+AeyzaMVyIsnAUgraJ:IR5B4nigozXW1wMhi2E+Uaoe
TLSH
T1D752D76EAE14697B6CCBC219F9667F53D3F5102221D41E90EAFC8A2C15E76CC221B05B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 17KB
SHA256 304353aa2edb0906a8333f38e8f27b043bb53009a7e2921a2b9e3b786231aac4
MD5 ed61046a3dd69e13292bc2bad158e244
SHA1 959d3a719268fa74f3d01192788a67ddb6aeb25b
SHA512 b979ad63a4f50af114c5fb04d177507f92cd5f8f0cb7c9f0ed8a954b8e7952fab12b781641735093add268f6479ea950a6e8fd27625f686fe014454bf13ca3b2
SSDEEP 384:IRlmzbRGSsMqozXZo1wmEpdMj/Zz9Rk62E+Uaoe:MmzbLQoto1wmEr562Dx
TLSH
T13282D8ABA82029B75DDAC229F915BB6BE3F0102656D01E94FAFD9D2C00D77CD7207447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 20KB
SHA256 c0c3e48a0a503ed5231871d63d4b5f785c3fc54f460225972acb407a9c5b3e0f
MD5 3d411ae0b5593b8de4197ec1cdb55518
SHA1 5b40392b783c15cee2c857a98e6b7c66fd1976cb
SHA512 28922401e76ffba8cbb9949c4743802031cf09f5f9ed8f781497664054bf0e557eecb6316d997f4a4436113c6eb742c821b0b4d5bb3be00633200163f4ff1f3f
SSDEEP 384:IRlmZby+RGqBMqozXa1wAEqDM1N36FGtQm7C72E+Uade:MmZ++r7oW1wAEc372DA
TLSH
T1B892C7A6A87069BB5ADAD225F815BB6EE3F1202655C01E90FBFD9D2C00D7BCD3207447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 468515e74d141d8225f5f6b232bfb7a27a2baaf0ffb03b2bd7049335787a5190
MD5 0bb42e68c968ae710a022a2c02c15380
SHA1 3a66058718c1407526f5d7bce3a2ae7f73284cc7
SHA512 eab0f6fdbf3fca7aef78552606b5454f1dda34dec56cf8ea8d9ac39d6e19986d2c7e788b4b951d914cf723a9329e30485092f97a0affa85bf09188998573d05b
SSDEEP 192:IRlcBhB8jQNYIv7MF+p9PRpzzCKlu9HHsb+WNj6Pk/52WJW2E+AeyzaMVyIsnAUp:IRlmhB47UgozXg1wJYWc2E+Uaoe
TLSH
T1B752C66AAD10697B6CDBC219F916BF57D3F5102621D41E90FAFC8A2C05E7ACC221B05B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 ef92ca7198ebcc4d495908e512f615a8cd88fda497b542def0d1e1f99092c75f
MD5 88cd0aa00b2fa2b7118d8c2dd424b411
SHA1 bd377fb57b0e7a238fc2600c80856d3eae501cce
SHA512 554f7ee0b2a82437d259321daf84f1e4a5820c8ce558cf54297cc623e9e5e95974899540da709e91439cc88924d8e1df6ce6e8577bde471dc1f6c0aa64b2b02d
SSDEEP 192:IRlcBh88jQNY6v7gqF+p9PRpzzCKl2r9HHsb+WNw56PkjUz+52W0W2E+AeyzaMVK:IRlmh847WMqozXW1wywVWj2E+Uaoe
TLSH
T19562C76AAD10697B6CDBC219F916BF57E3F5102622D41E90FAFC892C01E7BCC221705B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 b5d45de15a6eba2cc65e7b5b4a8904c36ad578196a331b2fd34bfc05d0f3aacc
MD5 13da423df4fba03c1678f827244eb8d4
SHA1 50218ebeaecfea6d96fcecb8300ddf1bcbcc2871
SHA512 6575d31b896e589bc71644d9971a2e5d05fcb07bddbfbf3ce78a82b6c29d575ddb803cc4bacac68c2dafb998aa5fb22cb6bf5b7bc19ae70916a17f539eb7b373
SSDEEP 384:IRlmz8RGgSMqozXj1w5EcdMZeYm2E+Uaoe:Mmz8hqo/1w5E8Ym2Dx
TLSH
T1CD62C76AAD2069BB6CDBC219F956BB57E3F5102521D01E90FAFC892C01E7BCC620705B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 2ff29c2e2a9a368cf4c89ee26c173b58b5236d1bb6d1638fc265faaa7f3736df
MD5 2734bc49fa876928631555086d72fb62
SHA1 581b8379414b5b15ef011c5ac501a82683539161
SHA512 a3bf4da6dad6cb28cf6070a7f298ac887b1da7c9ac4e4ed5dda7e08ef539c18c273453ac3d4a4be6bb83fe1e18ffcc96a8f2619f8735f1c676d05f21cecc45e2
SSDEEP 384:IRlmz8RGEEMqozXcN1w5EydM/Z0Yn2E+Uaoe:Mmz8dYowN1w5EOOn2Dx
TLSH
T1B572E7ABA92429BB6CDBC219F955BB6BE3F0102251D01E90FAFC9D2C01E77CC2207457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 17KB
SHA256 9f163ef2d8fbb1b89f7d8af746060bb37aab01c2293f7624cfd60aa6f73d6a1e
MD5 6f9e77ff6069ef008662dce9477d9737
SHA1 ee9f4184cea9c2ea0869c9103430cf24ad5cdbaa
SHA512 9ec479fd965bf8030e99aae2048ca1f01ff633e49df9d30bcaf20d5957fab256a3780d8377c081e3bf4f5ed25a8ca93497ec087036d4a876a3c0e029eebdb3c3
SSDEEP 384:IRlmhbRGFsMqozXN1w5EpdMj/Zz94U52E+Uaoe:Mmhb8Qop1w5ErO52Dx
TLSH
T1C882C8ABA8202AB75DDAC219F955BB6BE3F1102652D01E90FAFD9D2C00D77CD3207447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 17KB
SHA256 69fb1a796e1e864bd02cabe9348a06b6347e972d554a8f5fd9e2e38bbf035cc2
MD5 e2b2bf747814930b59c55321b319f422
SHA1 6a9c58c73943353485e8e72e569bcacca1f30509
SHA512 ba5ed794b20485f184d52e7647db4f993708f34da1eafd8e5b6dc852682f5b52b6960ba752dadda8bffdb2b8a6712fae7621e7d63665ca4d4614f8f9c197e537
SSDEEP 384:IRlmhbRGSIMqozXd1wmEINdMj/Zz9Owu2E+Uaoe:MmhbLMop1wmEI3ku2Dx
TLSH
T1C382D8ABA82029BB5DDAC229F955BB6BE3F4102251D01E90FAFD9D2C10D7BDC3207447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 18KB
SHA256 87e118f44ffef4511cd5dff599c7b44adeeb53f1fc649e91fb59186ea6bb8606
MD5 67105632ad56bd083df1eaa520a7f188
SHA1 4c70af47f06311be6bb75eb73571011debe2019a
SHA512 d0620be14624819ee67cb077cd01cd4d277c520f3f54df8e6893a7267f99c05fc228d2dd0f4c420d4e14ce0e3031bca007f6be1595fac4399f317e6f217f67a9
SSDEEP 384:IRlmzWRGLIMqozXM1wmEGNdMj/ZzcP5w92E+Uaoe:MmzWqMow1wmEG3m92Dx
TLSH
T13682C8ABA92029B799DAC219F915BB6BE3F0202651C01D94FBFD9D2C00D77DC7207447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 18KB
SHA256 ad9c9edd81c961c56a858872250e692551ede377e63becda4ee3e0a927118544
MD5 36bc6959a671f576e7762ee3a732b800
SHA1 f2694b559fda8980793c2bf906c7f8a27e42f4d2
SHA512 6908af0043fa6c71b4bea28566dd1db69c00e06ff477b08500cb24274fcf814b21959ed9e75232ef88ed9a273fc642d8c260784cc5ebe54eb8ae2b6bb30d0e2c
SSDEEP 384:IRlmZWRGL6MqozXe1wmECdMj/ZzcPmZw+2E+Uaoe:MmZWqCoa1wmEel+2Dx
TLSH
T1B682C8ABA9706AB799DAC229F815BB5AE3F0202655C01E94FBFD9D2C00D77DC3207447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 19KB
SHA256 fcd958e8f60e061aed0f2feaf9db45a97f1f9fa244986f0a1c7680906f98f88f
MD5 b9898163c3a46ddc6b1f23cb61e5a334
SHA1 53ca5d20c16d7d5132d042d39d8fdab9a07f405f
SHA512 32cfc583e5b1e91830c06c8394330f67572a8af7373f742fcb4fb3faa81568401c4fca6966f868e51dfd2fd3bfd47fb26a63088536fcc7164c16d1aaed2b6fe9
SSDEEP 384:IRlmZ1RGLiMqozXi1wmEsdMj/ZczcPmZwZ2E+Uaoe:MmZ1qao+1wmEM6Z2Dx
TLSH
T10A92C7A7A9702AB799EAC225F815BB6EE3F1202655C01E94FBFD9D2C00D77DC7207442
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 21KB
SHA256 acfb9e693a8d3000a5c5bd88b06e4c1dc92c17e5758482f06ee866d3cb37f4e7
MD5 b1cb8142e740d042133425d60b9852f2
SHA1 6c4d18dcff7f38d6466bc245fd69faa6b1f7f2ce
SHA512 670934cc58fa0b206bfd413620c6d35d5ded907d0281e060bd4afe731d237743582cdff3f7e83a61820fda6329b21126df45acb25834471a0f09d5998acd1c67
SSDEEP 384:IRlmZby+RGKOMqozXa1wAEvDM1N36U6tQm7CV2E+Uade:MmZ++3WoW1wAELGV2DA
TLSH
T16EA2C6A7A87069BB9ADAD225F815BB5EE3F0202655C01E90EBFD9D2C00D7BDD3207447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 72855cd2793d5e853f8234282b1a961aac6a7a493c006273a8be026c7e420fcc
MD5 cb51db5eec43192ef022ba885d7316be
SHA1 006163c48f3ac226e2b81d3cbb8e2160e4157171
SHA512 c8aaec23fa77576de9bffcbcd3c5418ab0089b0c4a0ffe2d5361823289dfec4a676c04c18438fb49cc1d5ff40abec8df8d0dba372c26a10d8488c562b2dcd4f4
SSDEEP 192:IR5B8jQN0zRv7MF+pAPRp2S9HHsb+WNnV7t3W2E+AeyzaVVyIsnAUgtaJ:IR5B4ndgoUX91wptm2E+UaD8
TLSH
T11142D66EAE14797B6CCBC219FE667B53D7F5102121D42E90EAFC892C11E76CC221B05B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 92e7a3894912e10406c27e5ea6969c127398b39771a6d5c9203230264030854c
MD5 f55e995f36c495d5ed236205ea80a70e
SHA1 924eb3b9b7b12f135b1ec72a738b67fc5561daa0
SHA512 3e2469296b15ee41112bc28af72d906862a8100cc79080f7817c6a5dd37fc93931ada8b29a04a935ddf70261521c64e2019f9615e43da2a3fd9b2df208e1c429
SSDEEP 192:IRlcBh8ROjQNYmv7gqF+p9PRpzzCKl2r9HHsb+WNw56PkdvXUGUz+52WbW2E+Aer:IRlmh8RG7SMqozXW1wydMZVWy2E+Uaoe
TLSH
T10862D86AAD1069BB6CDBC219F916BF57E3F5102522D41E90FAFC892C01E7BCC221705B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 27616b12e96da45249d7d5468f1c98c785fde0c29ebb040eae46013f687e1d8e
MD5 bd8c7d853a2370d722db1071be43fe07
SHA1 f281c141cf19691ba01ce20d5e234b5c3728d3b9
SHA512 0ca4b5a5d3ca9d4df04c11532424674c6ba03610a4e99a9d017bb799d6c5b29cb768fbf10391e532f464fa703a92ccee203d335b2b088d2b6753ee2e67bed207
SSDEEP 384:IRlmz8RG6EMqozXcT1w5EXhdM/Z0Yn2E+Uaoe:Mmz8rYowT1w5EXzOn2Dx
TLSH
T1CB72D76AAD2069BB6CDBC219F956BB6BE3F4102152D01E90FAFD9D2C01E77CC2207457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 17KB
SHA256 2bf20bb44d63ff41826ecc70ed0b25dbadb780a7d1fa0a7df11afa3555159e3f
MD5 4c65eb7265b90e68b0385bd19c85a50e
SHA1 40784c6de56fd0646f7b1dd588ec757935392ec0
SHA512 56603b7712bd8bba96fa58ad30420e6c4da7602b4deee62babf87a7f90d87933c75672034d22bf9ad0114199ab4505bd86d549941e80afc7f1e15b524cfc853c
SSDEEP 384:IRlmhbRGSsMqozXm1w5EpdMj/Zz94U52E+Uaoe:MmhbLQoK1w5ErO52Dx
TLSH
T16482C8ABA8202AB75DDAC219F955BB6BE3F1102652D01E90FAFD9D2C01D77CD3207447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 18KB
SHA256 b13ff2f80867869daa350eca09b5c2b677630bcff2c0ee10c73fcb7404b3d045
MD5 5dc5dcaae4da20aa56b76fe217838c80
SHA1 32f66d1ad76d9e40dde2229af3aa3f51b4bed59a
SHA512 f2d3ac60f4af4cf9aa15eeda72716bcb1fd773a59857a150d170566a8b623a699ea45501fd8cea808877aa04122b8c5accfcde19366b23faf90237f6aa93361a
SSDEEP 384:IRlmhWRGL6MqozXD1wmEGNdMj/ZzcPVwQ2E+Uaoe:MmhWqCof1wmEG36Q2Dx
TLSH
T12282D9ABA82029B79DDAC229F915BB6BE3F0202651D01E94FAFD9D2C00D77DC3207447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 17KB
SHA256 372acba22715040aae2b2a1cae9747ac0ee6902539bc94928c15041adee9880d
MD5 146c03de9afe91b1312b902d052bb0a0
SHA1 6b6bf4a6b75858f64e2ade940d9afde01163d576
SHA512 32f9761d31b3d011567307d229e63f7cdb13c1f44caf7910eba36ec8b7ac0c0768ffa32b9c4a0b255c1b61509163a118b26cd63973e5646c26e0118ec740c485
SSDEEP 384:IRlmhWRGSIMqozXK1wmEINdMj/Zz3LOwZ2E+Uaoe:MmhWLMom1wmEI34Z2Dx
TLSH
T17582C8ABA82029B759DAC229F915BB6BE3F1202651C01E94FAFD9D2C10D77DC7207447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 b1fb25b82ffa02a9312702d02167f999ccf4f2d883233329ba3573140490292f
MD5 b711a26ab512e035f7c4de9af45ba5c0
SHA1 9f9e71810cb1a06ef04e454e9b33a28b5381e812
SHA512 53bbf56b76dd44fe70ea80f2309c92d8401d267947bb0d9666bc19903b7b506d3bbca4e05f2d07c66216a3d8952de51eb40a4daf8a2bd4f00a885e0760697013
SSDEEP 192:IRlcBh8ROjQNY6v7gqF+p9PRpzzCKl2r9HHsb+WNw56PkdvXUGUz+52WbW2E+Aer:IRlmh8RG7WMqozXW1wydMZVWy2E+Uaoe
TLSH
T1A862D86AAD1069BB6CDBC219F916BF57E3F5102522D41E90FAFC892C01E7BCC221705B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 e28d32871375f61e30733d19bbe7c0e6fad4bef1edea5c3e59a3064ea169dd50
MD5 a436871ff784b5b9bd2025fc6157c1db
SHA1 9a3253fcbded410e6211e9deacf259003d458073
SHA512 aa452c36267db0dfa91badcbe33f46e61bc44504e648f23d6bd42cdb8655016e4606c3a8f6e253e56f0d6144d72c1be1b3a78ac6caaa109ce4392ded4adf8804
SSDEEP 384:IRlmzbRGEEMqozXRx1w5EhdMj/ZivWXrqTi2E+Uaoe:MmzbdYo9x1w5EzBvDTi2Dx
TLSH
T1BC72D7ABA8246ABB5DDAC229F915BB6BE3F0102651D01E94FAFD9D2C00D37CD3207457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 59f8d21442435e46f164eddb9794c019aeebf3596fa7dff7809676a686b8d658
MD5 59875554fe4de545aa9afea1033c219d
SHA1 050868f3306a0902e53360e3ef9daaee52bfd2b2
SHA512 74e252c49a065648f19f4bfa56edba6aeed2da85cb7b66263f34d62f22c8637b11b381d4edd7a5339ea7cf90cfd6ad427cfaba4cb413d636b075e9945df4a5e0
SSDEEP 384:IRlmhbRGEsMqozX31w5EadMj/Z98wl2E+Uaoe:MmhbdQoz1w5EGAl2Dx
TLSH
T12C72D6ABA8202ABB5DDAC229F955BB6BE3F5102651C01E90FAFD9D2C01D77CD3207447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 58531052526e12960c364cbefd5cb1337c6a9aa53ac673486e0fbeb999e1b983
MD5 45a91f687e2accc1adc213fe1820f9b3
SHA1 ebf346d0e0acf2948aabd4e256d6b72881a5f4b6
SHA512 e508a4099206e15a46531d836a69cf206fb38226532ef1e72f5a08b29a61b9210273353b1e4831825161b697e7d2116b3a7234a3095299c30a580ca14a99000e
SSDEEP 192:IRlcBhx8jQNY6v7MF+p9PRpzzCKlu9HHsb+WNj6Pk/52WJW2E+AeyzaMVyIsnAUp:IRlmhx47WgozXg1wJYWc2E+Uaoe
TLSH
T15452C66EAD10697B6CDBC219F916BF57D3F5102621D41E90FAFC8A2C05E7ACC221B05B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 21KB
SHA256 dd4477fa32381007841fbb0c03f7ce11cd815bbf086fbb433ed7df0866af7e36
MD5 e121c880e33e6189401b775c3e357cb3
SHA1 a36f533600853440fc96fbbcf5fd267f9ceb5d20
SHA512 34f4d0089d5197dbfa3dbcfe02b9cebbf082e0b1a917c05d2317a8be9f0089b809250bec7fea1f10c1985e8a4e814a2461da1daa97f081175f1a88d0166aa1a5
SSDEEP 384:IRlmZbyXRGKOMqozXR1wAEvDM1N36Y8tQm7C62E+Uade:MmZ+X3Wot1wAEL462DA
TLSH
T15FA2C6A7A87069BB5ADAD225F415BB5EE3F1202255C01E94EBFD9D2C00D7BCD3207447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 2cf599be8b3785411898891c7ea36c4495f2d97b05ae70d77c346cfb4d0e3099
MD5 4f85af97054c1c6de00992aa5c66974c
SHA1 67174ef0c31833dddfcdde4459051fbdfa07ccc1
SHA512 41038c8748ac8ee450109423c15731139ecad61fe0bb5fd2e838ac5736841f6e9256e1a65316fac0deb682c082c3097d0be790e81b718c5b8604cb23bc758f45
SSDEEP 192:IRlcBhB8jQNYdv7MF+p9PRpzzCm9HHsb+WNnPk/52WJW2E+AeyzaMVyIsnAUgraJ:IRlmhB47dgozXx1wMYWc2E+Uaoe
TLSH
T1CE52D76EAD14697B6CCBC219F9167F57D7F5102621D42E90FAFC8A2C01E7ACC221B05B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 34d3b150d9ebc3413240a436dcd8cc4d2da0e46d00a681d2118263aea9d32f3e
MD5 73285efb9f7ee0bd384426865ccccf8e
SHA1 51903f2b7a36fa90857257254c2bebdfe5da7eef
SHA512 e9bab3e8a04453bd7ca516137298f57170d38058ccd5df170108532fdb6eefb2d5ae94de47967a5242cb07be597050bef4f69d7f740877c626e131f01424e28d
SSDEEP 384:TRjPq7KxkXqKf/pUZNCgVLH2HfgslT37pLuLcSjFgXODPO+ErU3voHGjBm2oR0h9:TxPq7KxkXqKf/pUZNCgVLH2HfgsV37pM
TLSH
T1287219676C4C8E7B0F94CACCDC167F4F9DB5025B65EA886482FA582903D5ADF01061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 7b89625018dcfc80410b0345d9ff0236022408e16a75c488d038686315b550a1
MD5 2b705d37bcccf55860a9764391d71c84
SHA1 7d5dd31553377053dfbfe90e1cf29d026eb263c9
SHA512 4402d4dd39f97dcb6584b858ff5253901e60f0ff6c33fd630f7704517e979cc91e2193c18dd90d2eb34e6a553aeb8be0c619b5ebb477f753f1249a252cd0c2f4
SSDEEP 384:TRjPq7KxkXqKf/pUZNCgVLH2Hfgsl6V37pLuLcSjFgXODPO+ErU3NAoHGjB32fR4:TxPq7KxkXqKf/pUZNCgVLH2HfgsoV37n
TLSH
T1788219676C489E3B0F94C9CCDC167F4FADB5015B65EE886482FA482903D5ADF010A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 19KB
SHA256 9a4cec6be94b4b25cbebed28dd0bf634684f0218c64ae7fdb932d92a81cb710e
MD5 acfaa5ade5e7b464359653d2b8ede2a2
SHA1 98d409ad0e31b682ea8c2bc5a3ef7ee145e621c6
SHA512 8af45300c65bbde3d01137d86ce46f6c455b7f4e70e9136ff026e48e5f88c7d54afc994576d716b864abae0be4f02b4cdc2ffcce484985d3cc0159d320c4abe4
SSDEEP 384:XyoyVRjPq7KxkXqKf/pUZNCgVLH2Hfgsl6V37pLuLcSjFgXODPO+ErU3NAoHGjOS:CvVxPq7KxkXqKf/pUZNCgVLH2HfgsoVP
TLSH
T18C92F7676C4C8D7B0F94D9C8D81A7F0F9DF5015A75E998A4C2FA9C1903E5ECB020A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 91c5d914fbdeb2a81ce58dfe28cc811e59b6a1b74fcdbbddeca748e3de081096
MD5 6581a11f33ca541761b653d74fd0cbad
SHA1 a715fb32445e7f998a67c5b6ef980def27897ebd
SHA512 2587f11774041c236ff0942b038d10ed8306727a66562923838d3d7c43f3bf1a3f9dca8ef7f65c451f11f1ca9fc1a3fff4c40572aa87a5780a3d25eab6264d0a
TLSH
T19BB0120080025519C08207B0115635D8B1149F11D60B1B0143F069A2CC26272C018254
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 8f0850b8e5245f851a7560e992cffd66c5bd52f3a0f4f880bdc66cefc9c7c88d
MD5 4c501efaa267c367c1a2d0b7421fd762
SHA1 0b2a3a437bb140811d28cad3e575fd497d632cdd
SHA512 aa8b14b3c5cc6d2bbdba2afbc272d23781114ce3a2f7860f07f4e00d1cfd52d9dff4ae8ff78e815824260a6eeb65fb7637f5471da311890f63f443bcbac5e722
TLSH
T1F2C01211C403A682C05A03F41092ACEC72959F20EF4B3B4C86F41E529C352319217261
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58bbf8.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58bbf8.TMP
Size 96B
SHA256 c86b0932375bc66f3bb0c7b8fc8b570b95337af9a7a7dc3e7a52b57da3011f60
MD5 669c1752539998903413109a43798eb6
SHA1 1ae21fc4a08be829ef025f248799401a457ce871
SHA512 1b50b5e1dda41295e20fb45edfec7bda8dc0b5c156cb45e440c935b35075614918d1c0f00f538cead5db6d9a35dd0b49a55a1faa4841aee30f7634a8c8d67e5b
TLSH
T1D4B00256C2026A12D18203B135E6A5E87760DF66C6435623A2E15F66EC2B77199271A0
MD5 SHA1 SHA512 TLSH

Submit Download

16bf7c987b73647f_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\16bf7c987b73647f_0
Size 63KB
SHA256 79fdf00fe17cf337c6dfdb09aef278788e5d2e13843b62c3be3f1290523a8acc
MD5 5b3dd04143085aafbb3c74e9f8cb021c
SHA1 d9edc5b95bf73310fd3cc761c657bfe1b45aac72
SHA512 c7fa9a760f56d9dd394091ae7400650f3f002866205dc54e6473178e1534979691669ba8a12d5b62fc25815f46ddae36aa94aeb4c208151a85aca3ce8d63eac0
SSDEEP 768:Xo7D6c61j/SAXPeEFfgoAaWhrJTt9/XTghUyqxTBXSD74+EACmiQsNnTBVR8noGS:q61j5RmtRXNyqx9XY4JuqdV6no83iPj
TLSH
T1AD536BA6337178B3827BA1B190AF170B713ED167B404C4F8A194EEE54A54B9A0177F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

22ec01e2c79eebd7_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\22ec01e2c79eebd7_0
Size 255KB
SHA256 45394f9d8d5e0d8545e4b5d77ad2dcf3682f3bf1c88301512221f3442d52c354
MD5 b36cf164892a2d3e9774e77ca67e8fc9
SHA1 2d98e2d3a36232d47b5bd729a419204db9dfbd39
SHA512 2db4c58874ef68bb811006f6dd44b08a88262f27efff542f9fc30eb2228eeb50865f5d4daa48b2ddce6a05ff471ed3b59487d515e8cc3f26f911e1de6c8d1efc
SSDEEP 6144:4Ijv/6CNHJ3ghfu0OqA4oPuqhDo4E4cH515w5P5+rIP7U0WwN8H:4IjiG0Rje5Do4E4036hWIP7U0WwN8H
TLSH
T125447D723300A53FA8278AA1E67E7F4D3835E217DD2706B8D2E4E9358FD6DFA1412548
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9e17c2197f0f3981_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\9e17c2197f0f3981_0
Size 1023KB
SHA256 ccf2dfd7f85fc61ad5b1c46f1adb0355d2d3e7b78d40a14ada7ac951ae0e2a60
MD5 8d5bf81c5ca78b6a8a26fbf8c148a79d
SHA1 066f7c7d19d2ca462c861785781e3d08fa3dc3df
SHA512 75ece39c3ceb41f8d2d655670fddbc24aec82d737e4a18e47029174a0573025779615a9e63adb8617f36abe1f70297f2ad1ecfae522eeca072dda83725286977
SSDEEP 24576:VZf5bDY1+2dPObPSa4wlDRcCxekVGMKIz:VZFDY1+/PSa4wlDRcCxekVGMKIz
TLSH
T101253CD873A2B463A375F1A4426F42C7F2AEE892B449886CB598DCD12E74C5540F7F38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 f52912e48f45cacb13a486372ff1ca584f10ec53020f3a0354b58eee774fd82b
MD5 d67b6d78eddeed852236192ec12356e2
SHA1 419e4210c38e67e14805da5030ca9d32b0d376d9
SHA512 8645e58c05b569521fedce556b6c767f64730d8ab032207019bd1bbd6f0c29717377bd9a8304ce52210bf61cd8325faa30dfebd54ad62193868728f32c02e508
TLSH
T137A0025041D00223D0B84BB0619511816B31E9B1838683819590109E8D901B0C7A3805
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 c1b7e763e07abbd63709c80b09096ab76c4f18eee7bec44702b65b6cfc64da3b
MD5 56f12d4b6c633e7c20fb13c9dc043f04
SHA1 97927936f54dadf99cc6c07506b8ee6e701e51c3
SHA512 237e25479a1cdfae6100c4064c22c115bf00b05979ad50cebe033eaac5c2f2d663bf7516a74c1005f8ca5fcdc3ef4a10e8a900cd965b3ed8387db7aa92b1502b
TLSH
T12AB0026551801963C6840F7952DF44C17F2A4EF09386C6525CA014EB9897272DB657BC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 120B
SHA256 f0617d34a7a3e4620c5f1982ea6aa6845d2fb9bfef90f9fbca0880e9746f98b7
MD5 3d75ddd7776e94ce3a845d85684cf625
SHA1 58bb4e325303961ee251812080001f25e464c321
SHA512 6472ae84c306dd599b894c8a3e9657730c86b2f20650f55682c02a7ccea12c7994d8efd93342340d3146b7746ccbc2d903ee04b85a74bfed3236f4d65ef36338
TLSH
T17BB0121000C83557C5544F7492C550C16B1609B0C30586060090048695DA1628364508
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 144B
SHA256 199774b4ce585cb85c14ad1016edfa359cbb043c7a718654bcae6fdc437fe168
MD5 ef7200c09a366d9a6b68ca39af78c349
SHA1 df87f9e9595c17659748e3656ff61a2baa7bde04
SHA512 84aaaa9fb4b8db3e617766185a3f1abf525fb278dd7746196ea495937f73764a8cab1dc992452521e8d013561d745cf2fcf5331561b70e116d1791a5487409ce
TLSH
T10BC0121240443517C9540A308AC630D0E71F5EB08308C54F12D080C3AACE8A3C639754
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 150B
SHA256 00eaf24fe8b91380ccb46ef156637f34f472800ac9fd3aa4f2c2468816203a53
MD5 a73077bf32aeb03e7870b85fd0b0f524
SHA1 d78ae56c453de1bcaedb3fef4c21640f17b391e9
SHA512 b2f1d232aa0b24191859b5b2313eb58b99df95ed74e6d4737ce45a690a05eee29e7833d9acdc4b08770a7a8e88b573b15dced15fa1a1c202c5a806e1f2e6f767
TLSH
T1D5C08CD71A20849B0A30EAC83018722DCA0B924C4CC4CDF8A80840422538A328805528
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5d3f4e.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt~RFe5d3f4e.TMP
Size 157B
SHA256 dff5c67fca012515920892d887b0e70ffa7408e91ea746af81b4ae7a9eae0a79
MD5 88e7c00fdb964b2b0f624e0d98e9ec8e
SHA1 b959b4d8be654c60946b85f733a97c02a61e1564
SHA512 81b55b9758f009ec18ed88f860158fc56cbb7fb2cd200664e89438da467be6f56151ba8929f9c4bf57afb6b8b1353f210d439720c7554102ed23e242acc34108
TLSH
T144C08CD71A20859B0B31A5C83028722DCA1B9E4C4CC4CCF8A808B0022134A33C508528
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\IndexedDB\indexeddb.leveldb\000003.log
Size 57KB
SHA256 a2f3bd60c09e550f62e4437f512290a62062e28df5df18ae6e83cc21446ff83f
MD5 e7e7be15af67abdc9b0e8e401da0a3ae
SHA1 5e7fe4a1dfd65ab2737cdd92b1af342899d2afe3
SHA512 7bf50a7d4b8f7437971a4aaf2d51fa3c283c0e207cdb883b217f920d349780561af80a1b7b15fb2d296119412a9eb33f44264490baae666514e4a0461b9eda72
SSDEEP 1536:7ibf8kfRFfDbfricfoifZKf9WfYSpADJtN9:7ibf8kfRFfDbfrlfoifZKf9WfYSpADJh
TLSH
T13F430A16211668E0F83F423297974F8AD3328EDA97529126F8D1BE1C3DB7788295337D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\IndexedDB\indexeddb.leveldb\LOG
Size 327B
SHA256 5f289fdce3013721b349874094fa7a92249441f8512b1ba26570ab7c804d70a8
MD5 577027d66525c0586e46ff156fddc5c8
SHA1 76b9650ec09a7d0323c126923853e079fd82c41f
SHA512 b9d3ae4b5213cacc780156775336968db4e0a102bee6db3b91c52bb5fe75c0f51bacf6aa010ef01ebe05cc6aa9de5b0b9b1b00664356675c70028d055f056ed0
TLSH
T1B5E0260596D6C2AF1068C0F7E530B74EAEFA7409DED8AC0A0F02E01860CA80895AD2B5
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 0df788ddae83ff8746a88ca5788eb1486bcd6a16f6a288685d67bf82924859fa
MD5 32e3df473829b07f81752614316afe69
SHA1 edba320cfe7034160ced2060025c994b51c043fd
SHA512 809899706e36453068cc071ee59db6e904d742b3bcc4c1e4c857419558dc23687798f960b63e3f4803378669645789fd009ed3dc2a9b8191ae31f3e6852a0ec8
SSDEEP 3072:/4Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:/zm7Rkm1tYpBeh2BAoM
TLSH
T1D9C312275E75E8375878BB0EB08E0B1F1EF14AA6D930DA92C8D86B0467F97CC1A05D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 55ab9001634b6816d945db6390548de9f094de7ba539749d38c0cf5db7457711
MD5 ccaa1b88ee0a6572a83efe1b59e36358
SHA1 bdfd0e78124126d74726fc3328c90a4b8694e13c
SHA512 5514aa6154964d8b56b1f180104f75208fbdba31df88b81d5599d4d639dca9932cc757436afdb364fb9c2de9664c00f49a66deef83359380071b05cc7cc8d55e
SSDEEP 6144:UuGv6q3rVULzS5Dm5yze9smOnIm7Rkm1tYpBeh2BAoa:U/vrXq5y0smGL9oBGcAoa
TLSH
T15334237A5E65AF336894B70FB05E350F16F24E93CD40DBB5C8DCA7082BE8C955A0A934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 288KB
SHA256 3bd3ec53826c88e8eab7d0b08c5efae26267f6943ce8ef6e3e8e72a742e7cad7
MD5 d187a7b459c90793815f3b809179b071
SHA1 0eef38de3873707a852702d5ffd9171410ae763b
SHA512 a39d948b4d1995512ff018f1ef493c2f5eb03598160a6cb1812bc28fc69a147ba48f0bb9ca6a0e26ece28daf80a0a530dce0bc10f5257ec2ac2ef534c2fbf99e
SSDEEP 6144:U1XcitEEkwEZzGv6q3rVULzS5Dm5yze9smOnIm7Rkm1tYpBeh2BAoa:UZcQkwTvrXq5y0smGL9oBGcAoa
TLSH
T19454237E5D695D336C88F70E919B750F0AF25FA3CE40D799CCD8AA0866EE9640E0B530
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 be2b8a84448346e49759e7d7263fd40d7b2ea9888cf299183032cc78331c2782
MD5 5bfcdd2374f6da1b5ede910fcb42de1c
SHA1 49c6c992968d082a69b8d1530e09a0370f11e704
SHA512 dab240c76dd7eb70c5f0d9f378ce304d9e92597a1654cb4c079f7b62def84b38cb1d7f9dbdc37430048d08622ee76d1c7e79134d32961cbcfcd7d20bb344c3d1
SSDEEP 6144:ZuGv6q3rVULzS5Dm5yze9smOnIm7Rkm1tYpBeh2BAoa:Z/vrXq5y0smGL9oBGcAoa
TLSH
T11434237A5E65AE336894B70FB05E350F16F24E93CD40DBB5C8DCA7082BE8C945A0A934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 237KB
SHA256 a021c5f570f475c441fbcafd67c2aaf7e2790ddfdb6b56e39cc80d3f37fbf59a
MD5 29484a01be44d1532d5be2c295aaa495
SHA1 83cef06c5a0c1356d039ad6c756562a8694a5370
SHA512 a241f7377a3936262accf271fb1ceaf86f9a63d16c1e6632bbfc6d15b9ebd099a27b29e31c2517948051b3f5cc00220d7354b598c217496eb3937dcd5ba433ab
SSDEEP 6144:wehGv6q3rVULzS5Dm5yze9smOnIm7Rkm1tYpBeh2BAoa:wpvrXq5y0smGL9oBGcAoa
TLSH
T18F34237E5D256E335CD4B70EB04A350F1AF24F97CE40DAA5C8DC6A086BEDCA45D0A834
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 237KB
SHA256 3051bd2f7e33b758b7e9cdbc9326b63837da1a7c7a7260d3171dd1c69c5a8502
MD5 d3b1a034d862ff267865dc8b8b07ac96
SHA1 4501067df8e3e0d02c8c3cdf1fb5605e98b00956
SHA512 08934a448c5a1a0815972d6409a12891f78a342156a96a733c87c31ef545771636e44137c679d2c17d57f7ae21b631f1fd6af0719923b22b145620e70f4452b7
SSDEEP 6144:wLhGv6q3rVULzS5Dm5yze9smOnIm7Rkm1tYpBeh2BAoa:wsvrXq5y0smGL9oBGcAoa
TLSH
T14C34237E5D256E335CD4B70EB04A350F1AF24F97CE40DAA5C8DC6A086BEDCA45D0A834
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 237KB
SHA256 45ed9c965a11b22b72f8dd99ab3783d6bbfe67d57680c58a7b44b15cc5271899
MD5 a5811d292781e46de58d4daef82429fc
SHA1 6a73e935855fd6458d392524ffb943703eebb7c5
SHA512 ba105a867619d4c138d1b97f03c1e4385ca261e09ffd9935d8d7f6186635e275af0ce8ac4a79d51119a670c9347c0284635d71ee9e7cb91c7c120848d5b5e003
SSDEEP 6144:wyhGv6q3rVULzS5Dm5yze9smOnIm7Rkm1tYpBeh2BAoa:w9vrXq5y0smGL9oBGcAoa
TLSH
T11D34237E5D256E335CD4B70EB04A350F1AF24F97CE40DAA5C8DC6A086BEDCA45D0A834
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 237KB
SHA256 cda45fa841ae94029f35bbd0eeac2bb8299cf78d5a9dbd08ff9bb03e00bd39d6
MD5 008b4d4de0ead77d2f110916e877aceb
SHA1 97acbddc07287261c08a33ddbfd030b87f120baf
SHA512 f670f0633b909100eef8f52b1225e0eb14d68370d954dd7201dda817d1ef9e3fa4e3fade43807aec1f131c322fcf53e11a0df97eb708dc6e6fc702102426af5b
SSDEEP 6144:wXhGv6q3rVULzS5Dm5yze9smOnIm7Rkm1tYpBeh2BAoa:w4vrXq5y0smGL9oBGcAoa
TLSH
T1AC34237E5D256E335CD4B70EB04A350F1AF24F97CE40DAA5C8DC6A086BEDCA45D0A834
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 126KB
SHA256 19cf50b6505c38594de1505816c309064f213e56a1c44779a7183186077a776e
MD5 c09eb5da05d0cff0a8e8ace17a27a507
SHA1 c718b7f4cdc0da0e478538be18c6c05cd9cb9feb
SHA512 9cad9a4df21dbbc26721cc2230c053599387633c7b4945172270219db4a70b2afde0fe1b76635c93ff62cd9411597fa71693b3aea7f83b0d8c01878f03b883fe
SSDEEP 3072:KApGeho6dI3YEVULzi1FvbNDm5yze1TlVEmOnU:KCGv6q3rVULzS5Dm5yze9smOnU
TLSH
T1F6C313E899595B2364D4A30AF272740F13EAAB978FC057B4CDDDA70E09D8C71EB07426
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 126KB
SHA256 23f373a54edf105e5609fd20fde70e17d22cdd575285ec12a7db0c45b46ba1e0
MD5 2254882b3b51dfaf5d3d7c35ce3f1e26
SHA1 d14ac924588bf1194547f0eb8601b5d333813600
SHA512 82fabaf6c1252cf98e1e7eaf1932436c7538b369cf84038f2f6e3c3ff11ae622b1362cf5619814aba9126e454e563a04350132aefbe20f3b870a7bf5a85a5766
SSDEEP 3072:K/pGeho6dI3YEVULzi1FvbNDm5yze1TlVEmOnU:KxGv6q3rVULzS5Dm5yze9smOnU
TLSH
T11DC313E899595B2364D4A30AF272740F13EAAB978FC057B4CDDDA70E09D8C71E707426
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 237KB
SHA256 0564f0e6ccac92d4736cd2f4bd20a473db1489b3783c48a79dfb167c0e847b8a
MD5 58ada6e25b5942e4289ec4a488544eec
SHA1 5b1e5450ec0eb18fa33fb636ca9161c749d79b85
SHA512 5b05e2cb5f99d8c0d80a2612e10e3ca147818a29a62a7cfeb8ae749091bbbb519cef5f7e55dfa8c2c8d447334249d633814da0ab1da0e1b3a8b21cc9dfc86e4a
SSDEEP 6144:wRhGv6q3rVULzS5Dm5yze9smOnIm7Rkm1tYpBeh2BAoa:w+vrXq5y0smGL9oBGcAoa
TLSH
T1E534237E5D25AE335CD4B70EB04A350F1AF25F97CE40DAA5C8DC6A086BEDCA45D0A834
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7d64d2777f444a09968d6c155732e22d743fcf7c319c222bc06f6bb97808e489
MD5 89bc5edb6bd922f1cf8ec5536b066fa6
SHA1 c50aaf0fe1444780bb68ee7ab6e1c7468c2f303e
SHA512 77a1265c1484940562f1514202a0072e343efb323e1dcdb979fc9b7a2c69d85b814c076828b260c0b86a19e482ebb0a2df850f9b7c130a327861a7c56e26cde8
TLSH
T15CD02B20BF04E402D1072172540047100E0848902093C241E030441CCCED844D395307
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

dc87f177-fafe-4cd7-ba80-2b664e1cacf0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\dc87f177-fafe-4cd7-ba80-2b664e1cacf0.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 dfa43321ac26c07786b5ef57fc591def7adae4a58b7b21424ed7407550191f27
MD5 d76c6edc164b8d74ee5a72aefeeaa6d7
SHA1 e60c8769f9f8e176b1df62786ee44240df8bd492
SHA512 64cd9d13d53c66a3175da853bd1c83076c35532a0b02f224eece61915a3d5355da2a31f31a6f77eefb933be807c785a81dd95b2b2792403e166c3bad68e898f5
SSDEEP 96:sa2j0iEDWI0scQb9mo3ldHW+i046W6hfuH9EOx+WVoMfm+uecpYQj+e+P67743wd:sxIu3syo3frpMHW6+WNGYx3xhgF
TLSH
T12AF1A7526E28697B4CCBE11DFA267F43E2F6502166C51958EAFC9A5C08976CD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 178b27b25d5f2f6a2844fc82409f5be27db780cb5447736bb01c642748fee4ff
MD5 76fd9edbac145d5657eaeea9c6243f71
SHA1 4d41589a6e6edb7e5f65f97ecef3caa1eefe6796
SHA512 f887feb59c91605a51e4097e6f302cfc64a04344224feb42b0260fdbc08e2a55c77adab42e37a234a3bc895241c5654639d44ecf482b7a474555002fb0f508c4
SSDEEP 96:sa2j0iEDWIxr4scQbDmo3ldHW+i046W6hfuH9EOx+WVoMfm+uecpYQj+e+P6774C:sxIuVsko3frpMHW6+WNGYxJXxhgF
TLSH
T165F1A7526E28697B4CCBD11DFA267B53E2F6502276C4194CAAFC9A6C049B6CD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 26KB
SHA256 53d3444e00dc79e5bdc43bc2cbd0094d65601685765b2c1ed880068d7d083406
MD5 02ca7b392ee9e4ad62226db4e69ee870
SHA1 3cefe3a7f28587682ea587a47db9be784989c5af
SHA512 7991a05d9027ac51c0bb8c575fad25571a699f87be44cbb3758871bbf73fc143eca6d3c95c9bae30edc63ee64b76a6ce45a904abc56354cf963a212db2c8fc20
SSDEEP 768:bOee3rxWvhffn8F1+UoAYDCx9Tuqh0VfUC9xbog/OV4cLly0pHwroG:bOee3rxWvhffnu1jatcL88HbG
TLSH
T12AC2FA2B640CCB7E5F800EADEC5A6F977FA802C797548D4087FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c70cd0e7f73c1388e95132f64dc20fba927424efe645c47aedc652f95b142642
MD5 97d23025503b42fb41d52a62b1568368
SHA1 79d1ea2585835b98411baca9ed5d479e2cdd41a6
SHA512 1ccfe31f2281eb8ab7be4995c40fd0d85ef5c873d311db7ee985fed1784ed95472bc3205e124bb4eb1a71b7945d7c9880c3d529305d5b873e50126dfa0a69b2b
SSDEEP 192:lONQ6vMtPQmiUy74ThTQj+FdLKKSh8479WU/u:lONQ6UtRfTbdeKSJEU/u
TLSH
T1AA02F735AC786C7B9AB3AE46F48A27175FE4216FE5D11B54EAE82F1C00D765C1303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 24439072362696d5ffb520c9432fef8ef00b2d81405effa399c6045bd71b23f5
MD5 d556e1c5de3fa93d58d23729c4bf7425
SHA1 fd884214768e3019dbe9404de1ae21a9056f8311
SHA512 9697b040328ed127f9fa80e3307e61b1b879575a8ca351e981b4818bddc4f40a19e06642ef806b67c4f20f2cd4241a604600c8dc4485fc738296d3d2fe925014
SSDEEP 192:IONw6vMFPQmiUye4AhTQj+FdLKKSnGNlp80IYqP8U/u:IONw6UFRwAbdeKS0l+qU/u
TLSH
T164122871A879AC275A97B142F08A27835EE421BBECC15F54FAD95F1C00D675C270B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 e39052e1673198e3d24763e2324aaa0998adfe778c7174369397713f811272a8
MD5 74b7e1bd400959c848f36b5a6fc6bed8
SHA1 354eb78022c9b9b6a10074b26128ea5aaafbc982
SHA512 42e87273a6bcdab02b5b293a6dc5e731cf03c561b7295b5615a491fe2f5feca169685878f0f04eeffb43b5554e442d8da669fd045f90bc64e0200b3c1301ceee
SSDEEP 192:zAsN+C6vM7sPQmiUyRfAMTQj+FdLKKSnGNlp8JUzqqaU/q:zAsN+C6U7sR0AkdeKS0lpUU/q
TLSH
T1D2222871AC786C6B9AA3AA86F08A3B074FE4516BE5C12F54FED82F1C00D765C1307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 3049cd14fbbaee1ca286e9204a008a9f9832ea75c2207bf2cf66df3ddf3513ad
MD5 1a46d8b8deae585c887bad6a0bb270fb
SHA1 9d21b2b646f2dc61cc34405421c48b484a2b62bc
SHA512 8c591087fc5d1120d2ebd49033c6d72652298425527d2079b2308ddb2b5c5c5383949bf1057c9ed8c4808334d1bf338266ee4f9e6e1875c8265dd3a60f12e1b0
SSDEEP 192:zAsNB6vM7sPQmiUymfAMTQj+FdLKKSnGNlp801YqP8U/q:zAsNB6U7sRXAkdeKS0lvqU/q
TLSH
T14D223971A869AC279997B146F08A37935FE461BBD8C06F58FAD82F1C00D635C270B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 92dab7666dd9ffb9886d21e93ad6d2aeb16c66ea5b2f9ec12db2df147befea0e
MD5 2c331c8340ce36a57f687816b82b28fc
SHA1 b40d8b799894966bfba16855dce975d07bea5b55
SHA512 fa430814fd72fe3e8690bb74b03e4ff1f3258536055b9af0ca91a7297d5ff087035a92ad9b06f51a59eb7b8a876961fa46c511bf8c1eebbf9fe9130a7c9fdd3f
SSDEEP 192:zAsNB6vM7sPQmiUyhfAMTQj+FdLKKSnGNlp801YqP8U/q:zAsNB6U7sRIAkdeKS0lvqU/q
TLSH
T1D8223971AC79AC279997B146F08A37935FE461BBD8C16F58FAD82F1C00D635C270B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\activity-stream.contile.json
Size 5KB
SHA256 1aad4933621688b53835c152d55b346e830ab1ee4a359fd86d70242397bfab1c
MD5 2b962b7819036f0595074dcc60843050
SHA1 9fc817a8b5d3f42099c0652da557eecc11269af6
SHA512 be0ac800f3e4401ecc70f14b7fc620c2b45532edb2bb467b1df74ebf732f22228c2dbaaebea914adf1a8bcba3aa0d205a33649bffdaea889a6adaa497ca84316
SSDEEP 96:kKY0n4x/vNc6DNWhtMMpx/Cp5laxiAlT92xiJjLnDXAnOq3:032wNWh//CtaxRlwyjPXg3
TLSH
T1DFB11A1E8B7540A32BB2A5B23D0B2394F3D3B21A66E8CD5DF395F811967831548DFC48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 7a99aff56443a3db57a9e59a02534c53383ea4c9e4f63dc7a56fc540945602c1
MD5 188352f84ec72a143b793b4ce17b6704
SHA1 9c9414865feae848ed888c94e196bc83225e091f
SHA512 af34089cf77423731610e591f1243bc3440144eb8dbf4a99f83431fea5c2f0299ed544cb30eab0cc6c83fd5a574000810c0e37404198bd711d9b7ffc7eedf2f4
SSDEEP 768:wyos3ciW2oAfz3wjnvqH09K6bvu5RaMXQCRqIPzb6StzQzmiOEgN1dac:rgljnvqGbvAiC0IPz+jzZk1dH
TLSH
T109731BA3A6A8B1BB0F9137DB1C0B795B63E24186E34506C8EDDCCE1CC0CD655127A6BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.weather_feed.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\activity-stream.weather_feed.json
Size 14B
SHA256 1bead770ec2d7afc6ec1e9d35383f40ef676591e079dece21c38db17c5c24a20
MD5 3ea4da2ce03c4204ffe9b30074d62fac
SHA1 b6b82844f7ce93098971fea6f2559b220be08e2d
SHA512 dbbbee11f26deb954124b96d0fb7748ad170d9bab095f79691c83fb1dcfe57b453cd4ffd6a367c701d86bd676d40aabde7a390ecc57e2fcbd0c545d9940a41f2
MD5 SHA1 SHA512

Submit Download

4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\cache2\entries\4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF
Size 16KB
SHA256 1aa2577961dc97bf1f573223efcb2e9fcdc8a85ee5da5af51ba8be61a51fbd1a
MD5 c4c70beb19b0d4c48530ac62e5e04c0b
SHA1 9774953b4bfb815dd760c69b4ca1a4b52c173e31
SHA512 437ad31a721a21651bdca5200b23bb49126ae034e7dcbc95187d34554c4b6d8eeecf2400da0d0935c2f39516d2be4080b1f90bdf0c18c08f1ffbb1946b29e2a7
SSDEEP 384:HwCe7iO024YvDL84KKDL849B7SOEAd9KVRaAcP+AWRMAAy+yh:QqZYvDL8lKDL8CB7S/AmVAf+hRMDy+yh
TLSH
T1C8728D3A9F013CAC1597C0E8C1B852998C19B7A3DFE6806D22683D0DCB98969B1F548F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nxqdpovk.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 7b7003fd9d0e384ccbe425d18c42ee6e3df8d4fb79f225be5b3c66beec0ca15e
MD5 e4a6ab8734987edfbe10c7f0ea622339
SHA1 3c1a322737d2fd1c49a632c684437567c67392f4
SHA512 dfc8c699210288edcf57763289b3d1cd2c1221e0e324078c100a892a2680ca2d03b008b80e84bd2732a26b0505e1cddb176054ee1a38a60d8b5ceeebeb109d41
SSDEEP 3072:j3lE7jp7AizuoQBlyihMolT+yAoRNYNghY:pERAiCoQBldhrSyAoEJ
TLSH
T11DA3AFF6DBA2CD2D54FFD42CAB82C43EFD267810B3A73009C923675561C6BB86675608
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TSecure Preferences

Path C:\Users\Admin\AppData\Local\TSecure Preferences
Size 19KB
SHA256 4d61d8ef83b64ad0a34cc1d4c1d1f6084b0dd3007559c3342ec1042aa47ff221
MD5 838ea7ace65769c7bd39846f7c4a44e4
SHA1 ff5be0d999ce180f595aacbe1380e9a9de291671
SHA512 6c21166b70e9b19f4868674a13d50333ce002e3e1ece09ce03de42a846475bef15e4b9f997a5e8daaa16a8fd163c3d5a7f91defad4f5a7f527c32f39a90b35e6
SSDEEP 384:TRfPq7KxkXqKf/pUZNCgVLH2Hfgsl6V37pLuLcvjFgXODPO+ErU3NAo3Gj632fRW:TFPq7KxkXqKf/pUZNCgVLH2HfgsoV37p
TLSH
T18A92F8676C4CC97B0FA4D9C8D81A7F0F9DF5011A75E998A4C2FA9C1903D5ECB020A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoUpdater.exe

Path C:\Users\Admin\AppData\Local\Temp\fb.UTmjQW37astlXHukT1WOjLJn1yyYWL.tmp\AutoUpdater.exe
Size 1.2MB
SHA256 90cca9477be0b7c6a608876651dc0ad1d8a8ba1d3effa25f24c94283b4598af1
MD5 3243d2b0ccc52b14cb9100c9176a80fc
SHA1 0a0115d30f9aaf66f66194bc255fa3eef82a578a
SHA512 92f268fa5dac38edd9a2e8ba6e5f97c9ec56d4608fd5752e2670e49c6d1f13089f253d17248fa2e705fd2efd3a21dcf25f768b17d6227ebf0bb2ebe93fcbd3b2
SSDEEP 24576:Jc5Atj2SpMZavtMS6dQ/5OfPMdSSoC2UXPNxUsRKZkh0lhSMXlMJR:JcWdNRKZJ
TLSH
T1D6557D1A96A442FCD0FAD17CC656691AFA713C46837027CB1284B9661F377E4AF3E702
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\db\data.safe.tmp
Size 28KB
SHA256 0b7682090fc3dac4823c4b9a74d5b96339f75e428c28159955b4c772a518b582
MD5 8afe594a8793e041a30e4ea0f55dc21f
SHA1 84635de10dfa493828f4f41018650d7d856538b2
SHA512 8e28fa23a543005a373f2bfccfeaad04032e1e3ba5ab81cc6bc239d9562e963789e766930db36edd96a574c89b26f2c26f77d222bce4afc0511ede8143c087e7
SSDEEP 768:55/zNk7FdkGcmhuqgRagriplbEbNbkbO7E/:vzNk7TZgvG
TLSH
T18BD22344EB1A953FD42912BBDCE557002F79B88998092FA73A4C646C6C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\db\data.safe.tmp
Size 32KB
SHA256 950bf4276b0f20a8bb505efb1879d1671b1c97ef47b117bdbae0a0eb9cf80b2c
MD5 e4e1b3b9267373e4e8d67e13feec154c
SHA1 21470a022281785b625ffa230df34e1a4474a9dd
SHA512 e44092805f2bc08ce61d6f2582293a32661211ccca41ab39aa2a9fbcd0a2179d340002811c274ced89c0839911e691c57c6b2552704bd9f8fe8678b9ad275727
SSDEEP 768:T6bwDuIPvXuGcmhuredSKissj9i1TbNb7bSbBbXWQ4E/:T6bwDuInxShv
TLSH
T172E21144EB2A913FD42912BBDCE507102F79F88A59192F673A4C64686C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\db\data.safe.tmp
Size 32KB
SHA256 a0ae81c287cae4fd9f96598dd8d6a48c48b6c740663236a62039a27dde7d9f70
MD5 49ea77b609e9725aeec4d6b1fb8588c5
SHA1 4257f351c5762e8c7818f1087bb75b77c9bcb017
SHA512 0c81bd603bec782ea2648de4d8bbefd847b8f6637e22e6215b0d95c8f58e4c70309e8e894ddf080012fc8387843cdc86771adebf06e041b80ad1d23a71cdebc4
SSDEEP 768:T6bwDuIPvXuGcmhuredSKissj9i1TbNb7bSbBbXAW4E/:T6bwDuInxShP
TLSH
T1D5E21144EB2A913FD42912BBDCE507102F79F88A59192F673A4C64686C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\db\data.safe.tmp
Size 28KB
SHA256 ff6145f54a53a4b51a0d288c50426be6628ae04225e80c22d76c6512a0db1dad
MD5 a8c0752aee79ccf3d415a923bd4e0ffd
SHA1 61d6c060d29190037045f6403c48110a25e61221
SHA512 ec6df2cd835cc16706f1e2a1abe09c873c08e3435ef4358652f3fa557fc1546d9df98141d8d9b261f344e543d2e3c1d21b80156bf19911623089170b90c23eb7
SSDEEP 768:FELzNk7FdkGcmhuqgRagriplbEbNbkbOwir:2zNk7TZgvl
TLSH
T183D22244EB1A953FD42912BBDCE117002F79B88998092FA73A5C646C6C872DC3D9E07F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\events\events
Size 1KB
SHA256 f6c7ad07d703312839fa5ff477b086801221fecdb5608f28a6067ec468af0ff3
MD5 a4f7036b9f4e9688a43dee5ce2f9d75d
SHA1 eb1fdc4990d29c5a86bead79a10476cee748574f
SHA512 9966b5d04b351c30342ef76fec79ea0f93e22d3fc6a2d6b2c43391c2993d33d7a02493e308d53922db48af47c59e4bf2f73d5d15ebfac32bb94bb5f7742a6cd9
TLSH
T11F219B5C39F94DAAADCBE79C7481028E93214E0704871D434E12EFCDDED5ADA326E539
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\events\events
Size 1KB
SHA256 611479af5a09690da66901bed9400e5308a50e10e0b03bb9dd679253aace1e60
MD5 34913b24402801348cfd79deb5884023
SHA1 a515dea9446d897c5758a28f8b0c58cef2829693
SHA512 5ca913a6c2fd6dd80e070595440d04b7f623bfe5c55f5c99a89da42b7a7e0fa742c6299e5dce0135c18bc809b227247064212c6e18ccdf034339c43e847cdd33
TLSH
T1C6213B5C39B94D6BACCBE7DC7481028E53614F0705875C435E42EF8DCE91AE9326953D
MD5 SHA1 SHA512 TLSH

Submit Download

4db10b03-fa6e-45f4-9cec-7656edb93128

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\pending_pings\4db10b03-fa6e-45f4-9cec-7656edb93128
Size 871B
SHA256 6364edbbbe2efd63f03442d63627a79648adcafd7b87786e78f37bd6b2430128
MD5 86d2edee5c295f18c5430e48244bf3ff
SHA1 ea151f07f213c2d3acf1877557da92edf0197299
SHA512 be465e6f932754da15a9cd67fde229fdc3b7067200fc91489c54a4d3d5980ee54d9092324bf3f8acf03fdd1ee166b5aa573a4bded04d15fc4d5f279ba8cfb9de
TLSH
T1C2110C41D230B5B2CC29C21BCA513B528FF8212380C654083DA05A080CAE22EA3AA30B
MD5 SHA1 SHA512 TLSH

Submit Download

57734631-4162-4684-9f02-8671bffb9691

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\pending_pings\57734631-4162-4684-9f02-8671bffb9691
Size 235B
SHA256 5e041925487f67bb5dc5067e93a1a17b6cd0e0951f334596c94f67d512a3824d
MD5 26867d37d4155d63736bb00eb930c418
SHA1 6eeb1b35f6326fff258296a8759348160545e20c
SHA512 b7bdaaae38055b5b477a173bf156ab87c89eb0128e98cf360f9203efc30d9cc8b741518c752611d975fd5d3f0849d9ebb19a5ba7b636df2664ec4f89998c71ad
TLSH
T150D0978018ACB3AC88240F03B0A82DC270848C331465A810EA620678E9BE9C901A1827
MD5 SHA1 SHA512 TLSH

Submit Download

6deaa579-8397-4045-b0d8-5cb60c3d598a

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\pending_pings\6deaa579-8397-4045-b0d8-5cb60c3d598a
Size 235B
SHA256 a78ee6b600339e85ff8ca8464914db8b78c72a04e6826c62222c6b92152896e2
MD5 d11ac4ca307ff0a0b76adbf653505c8b
SHA1 22e30f5c46cf6462c4c6a5b59caf42fca3190c1c
SHA512 5bd5b9ba8aa7efa4a19282d5f23daa394c0628feb28f0460db8c926a78a52e18f06871849c469e941824a13ab6006e53d0e114f853d1bb0412929792496b71b4
TLSH
T1EAD09780249C676D08240F1BB0E06AC730848C3710A06C20C9610235D9FAEC85291826
MD5 SHA1 SHA512 TLSH

Submit Download

7065fcda-ae13-420d-b353-651aa389b0ac

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\pending_pings\7065fcda-ae13-420d-b353-651aa389b0ac
Size 886B
SHA256 25b77cf33747a4e1e76ec14434dd156a5789e22c5df1027ab8adb27716c51199
MD5 3c68460038d74c9840199f08b1a14d1c
SHA1 ba7bd7ee21966715cd247cad957d192010b4f44e
SHA512 e747f4d732ad4d1ebf818187f38c78cab6745680fa8d8a66e32c831378c33a57fb46cfdad7b675f6aca658f16b75647e7c610bc88fb09eb0a5f6139b8627dc2f
TLSH
T184112351E630F5B2CD6A924BD9E0B7538FF5303380CA19187D915B184DAE61FB39670B
MD5 SHA1 SHA512 TLSH

Submit Download

91a7ce6a-92cf-498d-b747-05877060506e

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\pending_pings\91a7ce6a-92cf-498d-b747-05877060506e
Size 2KB
SHA256 c96d312381db3623b0f2f9cbdb4bad2c7054cb709bf24f832532b40c74738dda
MD5 be36deaae82078b62a9a85828f509f6a
SHA1 c15c62c18a03e776a1014a32c0fcf88cf0e05e48
SHA512 16a4e9f1b1934f1b32ccefadc15518575e0fded337e17cc669ce2733523106226209179343822c9bbd1e36903038d27263c7264e7ee059496b4f14bc70671bf5
TLSH
T10F410F5C35785CB68D97F19DDC91338E57698A1300C629832D52EF0C8CEA75E236A46B
MD5 SHA1 SHA512 TLSH

Submit Download

a1cd0570-b058-402d-b262-c6dba1c11847

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\pending_pings\a1cd0570-b058-402d-b262-c6dba1c11847
Size 2KB
SHA256 1c68e127b5a079cc438812f0ed61731647f3d400a3152a7be721ef77a8063eb4
MD5 f77d7095cd0e2186b45729177568c177
SHA1 b3b722dc64291f2e83456983176b0f374633bbe6
SHA512 3853cc2cc8608a682a271cc36163d44c9888f2c671c03b7f4ea31109007a180e5e3e6b00ebc0a86f8f5c0895c1db028bc73fadd314ef97326fb7249aa0006000
TLSH
T12751446C75B89CBB8CCBF65D9482334E87704A1300C228835E51EE4CCD9665E336F52B
MD5 SHA1 SHA512 TLSH

Submit Download

b662fdb0-0f40-450f-943c-e312f03284de

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\pending_pings\b662fdb0-0f40-450f-943c-e312f03284de
Size 235B
SHA256 964892118f8d3da071f5f52852da3404a132c4c8d41a3ae0f16fae6b1399c0a1
MD5 4ee2647872db1cc0d6c8339d5b2780d6
SHA1 e1e388cbd66c7e80e34d204dfde3bc570595ed11
SHA512 1f2096612653bf1ea94be419d3acc94aadfa1d8b6273f8b880f57151573251f72e5d16822c793ee7c8697464f241a823d40e612001a0c37804698b148c7ddaee
TLSH
T14CD0978024E8E32D0D005F27F0A028D230848C3328786C10895000389EB8BC4512690A
MD5 SHA1 SHA512 TLSH

Submit Download

e5eb3979-c83c-451d-a200-54850fc051db

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\datareporting\glean\pending_pings\e5eb3979-c83c-451d-a200-54850fc051db
Size 897B
SHA256 de53e0e1d009af9bead1c906dee5c51d10e8dd13de46d01583a2a44e8e15a599
MD5 39c4afc47e87706fce8b65ac54a6ef20
SHA1 9a16768b90ad35864f06a93ed81cc18986c05f1f
SHA512 4478cf04b5b260ccb3b052194f905eda968f40eaf55e43dca3dccc72773a84d033f46b231e58f20526bd5c0c0412b36dc2c405376b0416240fd5889e75bb3c5e
TLSH
T1F2114081C234B4B2CC7A828BD99177438EF8302390C915187EA16F280DEE61E73A7707
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\extensions.json
Size 16KB
SHA256 e43bf29be7e54fdb1be06ba625e693f9304dc6aacb36e58adac6739f93d5f025
MD5 ca897213f9620a525bcce11b9a9b8cb4
SHA1 a3b81a2d3f8b3e55bdfa3c302a03a6c0b7804e7a
SHA512 8a5694f6b74c437f92d07ffb3d4314b971492db700981a70851e09050ec0bfc004f2eaa07a2970318aceba29ff47408a6e2ef602e2967be6967533cc3871b014
SSDEEP 384:qkI4v3Umldvc8dhWA94z196o3tL4HzlL4PTL4HeL4HCL4HAN4ho:NI4PRflXV4H6Ct4p4H4E4Q4k4e
TLSH
T1E372421545048EB82A4FA79BAA367D01C37D473B60845C78F4DD8FC842FA5B902FB66B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE.tmp
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

places.sqlite-wal

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\places.sqlite-wal
Size 736KB
SHA256 981a45c7243f2d85cccc49ddc2cf984ad140e047f197888eb48af6bf1a9b41d4
MD5 be01dd877fd6d341b7856d8f86c168f7
SHA1 eacfad248377adf518d8d9d09e8960e93dcb5889
SHA512 6d608ba1fd5f705ff09b3d1ce69aac3e4b5365ad3743261c8fa28430240631fdbb9121d2a6b4b2927f0dffd56522bca676243ca26e482fb59e0ffc72d5bae25a
SSDEEP 48:ajo2+6wX84IlQV1QJWPx0onnRrBhKTEManxkrw9ebS+gTLbwc1ebSS:vbv84IlyeGxrnLhKTLanxQSicKSS
TLSH
T11AF44116B756CFCFCA71577A9136B65BA073420C0AB89E0D344C152C9CB49602ED47F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\prefs-1.js
Size 6KB
SHA256 3e3d05dadec1e78ac1f3e622cbecc84e5c3d61f5ca77287390bcddf95b106f8f
MD5 8d85b89a4fc2268a4a858e147689d41a
SHA1 9eff562fd692fb8a695e2e5d820953462c73722a
SHA512 dda82b915e4c13964b97bf72df66244f8d35df480b4be8d2893beddbc6cfb843b1910efeccd80b49114364fee08e42825b455e3ad2a27589752322bbcb247cbf
SSDEEP 96:xHgUTUPWPqGqnfLh8ObzSfqSSladv9jtn3H8RNBw88n8L4cnFuC:yfWCRnfLh8JqSSy8HBw88c
TLSH
T1DCE10F789508CBBF64B6776CAC688871AAB2013B77BF68C750B554C4015CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\prefs-1.js
Size 8KB
SHA256 db99ed0683565a1170d732b4bd19860518e87b04620682192fd55299bf05bf90
MD5 6e7f1e66adf8bde26c38edd51ffd18ad
SHA1 3855a401ab5f3d7267a66dc706bb8537d3783c50
SHA512 6676740f6e5a0852eca7eeec5c81b77155e78d94fc71062ce9f04c5890b310daf68f74729e489cde1dd64c2e2aaae0a07bc78a7b149b2510545ca2398851074d
SSDEEP 96:xHgFTUPWPqGqnfyh8ObzSU8SSladv9jQAn3WRdgRYBw88Wmc8L4cnF0C:ySWCRnfyh8K8SSJRSSBw88N
TLSH
T1A202FE785008CF7F68B6767CAC2489715AB2023BB6BF68D651B548C5050CF3845FABEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\prefs-1.js
Size 6KB
SHA256 9bea9b9b255629d9f4e87a27857da21c4313992151262d18da571e82b59b0b1c
MD5 7f0b6c5f9f25981dddbabd211ca35479
SHA1 a710caa5459e1cdbabb3a9875f622d8ced8578cf
SHA512 0ac57ba940fa62cb528404d47c0083b39e1e5194d013848e250add01ef71f5ffec5a484db3f49b23e9074462e64a0f7dc6dafe7c176c33f69eeb1810dc068633
SSDEEP 96:xHgUTUPWPqGqnfLh8ObzSU8SSladv9jQAn3H8RNBw88n8L4cnFuC:yfWCRnfLh8K8SSc8HBw88c
TLSH
T1E4E1207895088FBF64B6776CAC688871AAB2013B77BF68C750B554C4015CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\prefs-1.js
Size 6KB
SHA256 4b6f4e95db28aaf5a03f0a630a022a30c76cbcf08e7ff1360b9771271b666979
MD5 f138edc93a69336b9e82e25d163eecdc
SHA1 d8a95a1794cc92a42a57d5228d83144e6f658087
SHA512 0386331afc8c98edee279111aaf67e509b5632cf18fd510dc54295f2008cf6a80384695af1526e4b5ad01bc5636fd35a5d7a5aeec971e53624edcc65902ffded
SSDEEP 96:xHgUTUPDqGqnfLh81zSfqSSladv9jtn3H8RNBw88n8L4cnFpC:yfORnfLh8CqSSy8HBw885
TLSH
T183E11F789508CBBF64B6776CAC688871AAB2013B77BF68C750B554C4015CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\prefs.js
Size 6KB
SHA256 4e1766e70e072d9ff25945a785f34d54f1a6670a939ce6c19ee4cdc13a1fd382
MD5 45c5ba736700d046015c25d100e93680
SHA1 ff1aa0933a7dabbb780bc0b2b277f567d18269c8
SHA512 44077058e87ab1741d73efed99920250265caa5d2e23dfc262d39469d44a625a1d244de9820e7349b4e9f344d8a0488ccac0e86c98688dde7d0de973ddd4460b
SSDEEP 96:xHgUTUPDqGqnfLLy1zSfqSSladv9j8n3H8RNBw88n8L4cnFpC:yfORnfLLyCqSSz8HBw885
TLSH
T148E1107895088BBF64B6776CAC6888716AB2013B77BF68C650B554C4015CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\sessionCheckpoints.json
Size 146B
SHA256 7343d5a46e2fca762305a4f85c45484a49c1607ede8e8c4bd12bedd2327edb8d
MD5 65690c43c42921410ec8043e34f09079
SHA1 362add4dbd0c978ae222a354a4e8d35563da14b4
SHA512 c0208d51cf1586e75f22764b82c48ecbb42c1ff54aa412a85af13d686e0119b4e49e98450d25c70e3792d3b9c2cda0c5ab0c6931ebaf548693bb970a35ae62b9
TLSH
T1C9C02BC385460070CEC3229D33A07F92AE3F00FB37B10604706CA54C14770278203443
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\sessionCheckpoints.json
Size 122B
SHA256 72d74b596f7fc079d15431b51ce565a6465a40f5897682a94a3f1dd19b07959a
MD5 99601438ae1349b653fcd00278943f90
SHA1 8958d05e9362f6f0f3b616f7bfd0aeb5d37967c9
SHA512 ffa863d5d6af4a48aadc5c92df4781d3aacbf5d91b43b5e68569952ffec513ff95655b3e54c2161fe27d2274dd4778bad517c7a3972f206381ef292808628c55
TLSH
T14DB09296895A1070CE83259D73A47B92AE3E14F676A1164471ACA98C24BB0278657883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\sessionCheckpoints.json.tmp
Size 288B
SHA256 3a0285c8233ef0324b269f7291094e19fd9b77259f9419861ad796f7e9c979f3
MD5 6b77a9f779399e95d1cee931a2c8f8ff
SHA1 826efd4feb0d50fcce5696111af7c811b81adcd9
SHA512 ef537c75fab8e86483ac03cc0d2feaf41575e35f54b95669a26bf6dfbf58021dc9a5bbe54d9537b55da3fbb0e0262adf6c5efd4394faaec81a31604533afec4f
TLSH
T120D08C83C10950BACE826A58B398BB509E3E00F271140142B6AC888C183F023418B803
MD5 SHA1 SHA512 TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nxqdpovk.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 4.1MB
SHA256 d82eb84398854d2beedcc238f8bbc7df6348e0a84703079684c3582974403022
MD5 cfee81a87501a018d87ce705f38e4ee1
SHA1 adfdf8a038e3bbecb0ec05835ace7d27c5c8683c
SHA512 047f710562a75abe6a62c873853a53a8c153abfdcba9719dc3f346961311054cb55801dda6071a918c3ff4989e9f20a826deafa70a24e737b95cf679ee736628
SSDEEP 49152:3DmgkuOjA5lUT2loecNeaKvgmRBbFOYLg/:zmpuO856T2KzeaKvgmk/
TLSH
T1EC1639F824D1A257F3818037668563EF21AFD00C6467DD484BE966F990B8CDF9E05B2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ERMaByrQ.apk.part

Path C:\Users\Admin\Downloads\ERMaByrQ.apk.part
Size 2.8MB
SHA256 a19728fcbf16e427213b303df58a9dd040226977c640f88e855ac51dc077a78c
MD5 d26ec0dcdec69b0a95f0f2472a9adbb5
SHA1 c9330eae9ef721a2d5bce84ffeb2970aeac72b69
SHA512 67b5207b0baa48636b3b97db9565c93197ba0b59fb94de6382f29f587c50f57ccb1c4da851e722e46df63209d517f3d88f732d72ca6ebcc06386451226fda9de
SSDEEP 49152:LDkjGREmWm+ms/Lv7yc3p0sjGVURgrNYC8c1I8BSRrUpfg4gA/BbIwb4Gg2xi:LDkjGRzL/oic3p7jBRgrNL8c+8oUpY4O
TLSH
T16CD50281F3D5AC2FCDB780364BB60B2651564D5A9A06C713746CB22C9FBBAD04E85FC8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FREE ROBUX.sb3

Path C:\Users\Admin\Downloads\FREE ROBUX.sb3
Size 11.3MB
SHA256 54c59527ba85ea335aa003f30fdf53c8f7018ea365977665d787f6b4490ad355
MD5 c04efe3d87cf5096cc6e3fee467eff87
SHA1 6c368dad2c5bff1b967ef8ac3d51b48b882d7ae5
SHA512 a607b725d27a26b691dbabdee65315ea0d4f4779fb09a1a4c8a6891579b06ecc7678b5d036220d7ad92a08edd3e5bf0577a3d0ae984c1e663487f9cc494fdd45
SSDEEP 196608:fvfGfVX7YDdf231YbnpU1WLFnsjZilHozsrrY4PRp4Qu/4Iw9/i6AntVNuxRy+9t:nfG9XsRf23qnOIFnaOHz/YSpRu/4XrJ/
TLSH
T1DBC6331ADCDE1435EF75A648BB50CD022A0F8C6AD361A739834344C33A675892B767BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Unconfirmed 474659.crdownload

Path C:\Users\Admin\Downloads\Unconfirmed 474659.crdownload
Size 4.5MB
SHA256 ad9dcfbabc0a87d1daccfae7d939ed3783a9a510f59807ba784e2cabd1d056fd
MD5 9e8e29fb9ac73944be407f833ba8b90f
SHA1 8e6e012e0a0c9920673473bd739c7c492cda408b
SHA512 2595068ddc41adb37ee555b73646e8ad1b078ac89eb81b9972165fada2683bfd1b065c3d63fe7603647fbdb5ea9dd8d4a6d054ddd7174231c00422cd6ffc9732
SSDEEP 98304:uVzCTWj5bvoX1bE0LIhyotUVXeg79NziJeK6BKbda63PF8pk:uoTIvsNE0LcUNH2eKtbEA
TLSH
T1B7261209DAD702F8DDA7C6BD8A965403D772B8860374CAEF02D197160FAB5E09E3B711
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

free robux.zip.crdownload

Path C:\Users\Admin\Downloads\free robux.zip.crdownload
Size 1.5MB
SHA256 4e02795aae09edffb4b1d637928319abebe5b7c38c3c3b9619e5d20270205b45
MD5 ae052b21e59a2a598de27e546fc530ba
SHA1 bec76f3e4d4dca8aab8aca08d5967d21589c8fa6
SHA512 41909b7aad45db559f724e3380a3dde107678c44b53626481b5fed37bfd668d6086ee80b4e5a2f3f4d5532cdd00817d2dc01ce544391ec8836bfcb2ffb728cfb
SSDEEP 24576:aob5fwJhqMqus5vIzIQ65uILccFgK4KgxM7bTr26PfF6D7tQeoBT:aoVfi5qR0TzanFJVgy7XS+F6vtQeqT
TLSH
T12E7533E2DC523DC35CDCF6998340CB51572EE33E02F9399D2C821767199AAA5DD3A423
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2828-571-0x00007FFC4E760000-0x00007FFC4E761000-memory.dmp

Download

memory/4780-621-0x00007FFC4E760000-0x00007FFC4E761000-memory.dmp

Download

memory/4780-622-0x00007FFC4E770000-0x00007FFC4E771000-memory.dmp

Download

memory/5288-938-0x000001D782B20000-0x000001D782B8B000-memory.dmp

Download

memory/5408-935-0x0000021E02B20000-0x0000021E02B8B000-memory.dmp

Download

memory/5408-673-0x00007FFC4E760000-0x00007FFC4E761000-memory.dmp

Download

memory/6092-1933-0x00000169D6AE0000-0x00000169D6AE1000-memory.dmp

Download

memory/6092-1927-0x00000169D6AE0000-0x00000169D6AE1000-memory.dmp

Download

memory/6092-1932-0x00000169D6AE0000-0x00000169D6AE1000-memory.dmp

Download

memory/6092-1931-0x00000169D6AE0000-0x00000169D6AE1000-memory.dmp

Download

memory/6092-1930-0x00000169D6AE0000-0x00000169D6AE1000-memory.dmp

Download

memory/6092-1929-0x00000169D6AE0000-0x00000169D6AE1000-memory.dmp

Download

memory/6092-1916-0x00000169D6AE0000-0x00000169D6AE1000-memory.dmp

Download

memory/6092-1928-0x00000169D6AE0000-0x00000169D6AE1000-memory.dmp

Download

memory/6092-1918-0x00000169D6AE0000-0x00000169D6AE1000-memory.dmp

Download

memory/6092-1917-0x00000169D6AE0000-0x00000169D6AE1000-memory.dmp

Download