6842af61b0de05f9c0d135b6b7651a3cf79596550dfc09089711a0f64aab1833

Resubmissions

02/08/2026, 17:19

260802-vwcyhsdb96

02/08/2026, 17:14

260802-vsac8adk2w8

Analysis

user interaction
yes
max time kernel
900s
max time network
875s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
02/08/2026, 17:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
disable_vulnerable_driver_blocklist.reg
Size 572B
Sample260802-vsac8adk2w
SHA256 6842af61b0de05f9c0d135b6b7651a3cf79596550dfc09089711a0f64aab1833
MD5 a5ab6c54c0b2dd8e5ad5146760cec809
SHA1 641de301c1e3b0e17984516901059ada38f2ada6
SHA512 04e1318711de6d256eb639ccf4884a9514001f725015b15193b54f3a4a5a75e4994a5ff4f5fa279670fc1825fd193e6555777e991a7e383472254d7c64258691
TLSH
T15DF02BBB4936D2B7E293A43D2FF5F9526235F41606EF8D110094A050B8C7CCA84DBA0F
MD5 SHA1 SHA512 TLSH

Score

8^/10

defense_evasion discovery persistence

Malware Config

Signatures

Modify Registry: Disable Windows Driver Blocklist 2 TTPs 1 IoCs

Disable Windows Driver Blocklist via Registry.

defense_evasion

Modify Registry

T1112

Impair Defenses

T1562

description	ioc	Process
Set value (int)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\CI\Config\VulnerableDriverBlocklistEnable = "0"	regedit.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1836	chrome.exe

Checks processor information in registry 2 TTPs 24 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134301646043390086"	chrome.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3054922120-1500138384-519748408-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3054922120-1500138384-519748408-1000_Classes\Local Settings	firefox.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3054922120-1500138384-519748408-1000\{F1671BC1-0C08-4EF5-85FF-3C77A9E743D8}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3054922120-1500138384-519748408-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3054922120-1500138384-519748408-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3054922120-1500138384-519748408-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe

Runs .reg file with regedit 1 IoCs

pid	Process
4700	regedit.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
460	chrome.exe
460	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	1068	firefox.exe
Token: SeDebugPrivilege	1068	firefox.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe

Suspicious use of FindShellTrayWindow 39 IoCs

pid	Process
1068	firefox.exe
1068	firefox.exe
1068	firefox.exe
1068	firefox.exe
1068	firefox.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1068	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4884 wrote to memory of 1068	4884	firefox.exe	95
PID 4884 wrote to memory of 1068	4884	firefox.exe	95
PID 1068 wrote to memory of 1312	1068	firefox.exe	96
PID 1068 wrote to memory of 1312	1068	firefox.exe	96
PID 1068 wrote to memory of 1312	1068	firefox.exe	96
PID 1068 wrote to memory of 4984	1068	firefox.exe	97
PID 1068 wrote to memory of 4984	1068	firefox.exe	97
PID 1068 wrote to memory of 4984	1068	firefox.exe	97
PID 1068 wrote to memory of 4984	1068	firefox.exe	97
PID 1068 wrote to memory of 4820	1068	firefox.exe	98
PID 1068 wrote to memory of 4820	1068	firefox.exe	98
PID 1068 wrote to memory of 4820	1068	firefox.exe	98
PID 1068 wrote to memory of 4820	1068	firefox.exe	98
PID 1068 wrote to memory of 1892	1068	firefox.exe	99
PID 1068 wrote to memory of 1892	1068	firefox.exe	99
PID 1068 wrote to memory of 1892	1068	firefox.exe	99
PID 1068 wrote to memory of 1984	1068	firefox.exe	100
PID 1068 wrote to memory of 1984	1068	firefox.exe	100
PID 1068 wrote to memory of 1984	1068	firefox.exe	100
PID 1068 wrote to memory of 1984	1068	firefox.exe	100
PID 1068 wrote to memory of 5476	1068	firefox.exe	101
PID 1068 wrote to memory of 5476	1068	firefox.exe	101
PID 1068 wrote to memory of 5476	1068	firefox.exe	101
PID 1068 wrote to memory of 5476	1068	firefox.exe	101
PID 1068 wrote to memory of 5536	1068	firefox.exe	102
PID 1068 wrote to memory of 5536	1068	firefox.exe	102
PID 1068 wrote to memory of 5536	1068	firefox.exe	102
PID 1068 wrote to memory of 5536	1068	firefox.exe	102
PID 1068 wrote to memory of 5544	1068	firefox.exe	103
PID 1068 wrote to memory of 5544	1068	firefox.exe	103
PID 1068 wrote to memory of 5544	1068	firefox.exe	103
PID 1068 wrote to memory of 5544	1068	firefox.exe	103
PID 1068 wrote to memory of 5552	1068	firefox.exe	104
PID 1068 wrote to memory of 5552	1068	firefox.exe	104
PID 1068 wrote to memory of 5552	1068	firefox.exe	104
PID 1068 wrote to memory of 5552	1068	firefox.exe	104
PID 4800 wrote to memory of 2884	4800	chrome.exe	106
PID 4800 wrote to memory of 852	4800	chrome.exe	107
PID 4800 wrote to memory of 1836	4800	chrome.exe	108
PID 4800 wrote to memory of 852	4800	chrome.exe	107
PID 4800 wrote to memory of 4120	4800	chrome.exe	109
PID 4800 wrote to memory of 4120	4800	chrome.exe	109
PID 4800 wrote to memory of 5148	4800	chrome.exe	110
PID 4800 wrote to memory of 5156	4800	chrome.exe	111
PID 4800 wrote to memory of 5148	4800	chrome.exe	110
PID 4800 wrote to memory of 5156	4800	chrome.exe	111
PID 4800 wrote to memory of 5284	4800	chrome.exe	113
PID 4800 wrote to memory of 5284	4800	chrome.exe	113
PID 4800 wrote to memory of 5468	4800	chrome.exe	114
PID 4800 wrote to memory of 5468	4800	chrome.exe	114
PID 4800 wrote to memory of 4636	4800	chrome.exe	115
PID 4800 wrote to memory of 5544	4800	chrome.exe	118
PID 4800 wrote to memory of 5544	4800	chrome.exe	118
PID 4800 wrote to memory of 2312	4800	chrome.exe	119
PID 4800 wrote to memory of 2312	4800	chrome.exe	119
PID 4800 wrote to memory of 1728	4800	chrome.exe	120
PID 4800 wrote to memory of 5596	4800	chrome.exe	121
PID 4800 wrote to memory of 2924	4800	chrome.exe	122
PID 4800 wrote to memory of 1960	4800	chrome.exe	123
PID 4800 wrote to memory of 1960	4800	chrome.exe	123
PID 4800 wrote to memory of 2612	4800	chrome.exe	124
PID 4800 wrote to memory of 2612	4800	chrome.exe	124
PID 4800 wrote to memory of 6008	4800	chrome.exe	125
PID 4800 wrote to memory of 6032	4800	chrome.exe	126

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\regedit.exe
regedit.exe "C:\Users\Admin\AppData\Local\Temp\disable_vulnerable_driver_blocklist.reg"
1⤵
- Modify Registry: Disable Windows Driver Blocklist
- Runs .reg file with regedit
PID:4700

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4884
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:1068
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1976 -prefsLen 27100 -prefMapHandle 1980 -prefMapSize 270279 -ipcHandle 2068 -initialChannelId {1b8d15e1-26bc-4625-8fa5-7098fc88cbda} -parentPid 1068 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1068" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:1312
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2428 -prefsLen 27136 -prefMapHandle 2432 -prefMapSize 270279 -ipcHandle 2440 -initialChannelId {1b903aa7-6206-4f64-83c7-0550a9c34838} -parentPid 1068 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1068" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    - Checks processor information in registry
    PID:4984
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3520 -prefsLen 27277 -prefMapHandle 3524 -prefMapSize 270279 -jsInitHandle 3528 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3536 -initialChannelId {f076d233-ebc0-415a-bc2b-258ac9d0567e} -parentPid 1068 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1068" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:4820
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3688 -prefsLen 27277 -prefMapHandle 3692 -prefMapSize 270279 -ipcHandle 3776 -initialChannelId {65d87733-422d-49f1-9c4b-840e481a3c8c} -parentPid 1068 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1068" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:1892
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4360 -prefsLen 34776 -prefMapHandle 4364 -prefMapSize 270279 -jsInitHandle 4368 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2784 -initialChannelId {2061cb65-9dd7-46f2-b7cb-7e8a6a22bbb0} -parentPid 1068 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1068" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:1984
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4892 -prefsLen 35013 -prefMapHandle 4848 -prefMapSize 270279 -ipcHandle 4900 -initialChannelId {66261163-8e88-495f-86cc-3d5bdd53d2cd} -parentPid 1068 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1068" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:5476
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4760 -prefsLen 32900 -prefMapHandle 4932 -prefMapSize 270279 -jsInitHandle 4928 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4752 -initialChannelId {c6dc22bd-6bdc-42b5-b3b3-88ec0275ed30} -parentPid 1068 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1068" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:5536
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5148 -prefsLen 32900 -prefMapHandle 5152 -prefMapSize 270279 -jsInitHandle 5156 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5164 -initialChannelId {9a91a054-e609-4866-abb2-eb8020bd3518} -parentPid 1068 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1068" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:5544
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5528 -prefsLen 32952 -prefMapHandle 5524 -prefMapSize 270279 -jsInitHandle 5508 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5540 -initialChannelId {29996281-8801-4400-9b04-0fdc3eb21a62} -parentPid 1068 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1068" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:5552

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x7ffeafb7c728,0x7ffeafb7c734,0x7ffeafb7c740
  2⤵
  PID:2884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1780,i,7459725578944091463,11606665423265587092,262144 --field-trial-handle=2520,i,3993890467115516517,8926558073293575724,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=2512 /prefetch:2
  2⤵
  PID:852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1676,i,8944436876732936042,7069352646024319871,524288 --field-trial-handle=2520,i,3993890467115516517,8926558073293575724,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=2628 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=2032,i,16181338805450251928,2844415654226392627,524288 --field-trial-handle=2520,i,3993890467115516517,8926558073293575724,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=2772 /prefetch:8
  2⤵
  PID:4120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3272,i,8682273183372911406,4827339641333701201,2097152 --field-trial-handle=2520,i,3993890467115516517,8926558073293575724,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:5148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3276,i,9923301171918030638,16500071370537889320,2097152 --field-trial-handle=2520,i,3993890467115516517,8926558073293575724,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:5156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4336,i,3086364421488380281,7879037747328680736,2097152 --field-trial-handle=2520,i,3993890467115516517,8926558073293575724,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=4352 /prefetch:2
  2⤵
  PID:5284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4624,i,4984441717112064331,2260580847040199009,2097152 --field-trial-handle=2520,i,3993890467115516517,8926558073293575724,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=4768 /prefetch:1
  2⤵
  PID:5468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5488,i,1572619557342692305,11468856459507886603,524288 --field-trial-handle=2520,i,3993890467115516517,8926558073293575724,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5504 /prefetch:8
  2⤵
  PID:4636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5712,i,5246583596152909771,2074856388641238343,2097152 --field-trial-handle=2520,i,3993890467115516517,8926558073293575724,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5716 /prefetch:1
  2⤵
  PID:5544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3560,i,1290114589136517330,8831704300342227127,2097152 --field-trial-handle=2520,i,3993890467115516517,8926558073293575724,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:2312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5756,i,753058638038011304,14030491056409674607,524288 --field-trial-handle=2520,i,3993890467115516517,8926558073293575724,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5748 /prefetch:8
  2⤵
  PID:1728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5772,i,15333288416757477721,5313089599188061827,524288 --field-trial-handle=2520,i,3993890467115516517,8926558073293575724,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5528 /prefetch:8
  2⤵
  PID:5596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5732,i,4984432573426640188,3716243045127733106,524288 --field-trial-handle=2520,i,3993890467115516517,8926558073293575724,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5516 /prefetch:8
  2⤵
  PID:2924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5692,i,15758513856151187465,9200764962440797656,2097152 --field-trial-handle=2520,i,3993890467115516517,8926558073293575724,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3332 /prefetch:1
  2⤵
  PID:1960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5528,i,6166120251835464839,5914836238324037645,2097152 --field-trial-handle=2520,i,3993890467115516517,8926558073293575724,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5680 /prefetch:1
  2⤵
  PID:2612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4460,i,12372126389873083795,9722676900146738639,524288 --field-trial-handle=2520,i,3993890467115516517,8926558073293575724,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  - Modifies registry class
  PID:6008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4452,i,12348445465175644321,3218176430455795724,524288 --field-trial-handle=2520,i,3993890467115516517,8926558073293575724,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:6032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5988,i,15862720055334502335,590303121076147447,2097152 --field-trial-handle=2520,i,3993890467115516517,8926558073293575724,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:5852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4976,i,1888043429349020709,5393696228228299824,262144 --field-trial-handle=2520,i,3993890467115516517,8926558073293575724,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5636 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6016,i,9790494302456915206,14805722041739658053,524288 --field-trial-handle=2520,i,3993890467115516517,8926558073293575724,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=1224 /prefetch:8
  2⤵
  PID:4500

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5272

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5924

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

T1562

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 ed37b34837104b6322c4c98b7f887a048c73e09a6345fdf287b50d2dddf8c152
MD5 eb659c71498a782da9ff7e7444df7eb1
SHA1 399e230be24a10ca8a97d61212d0c53765c521a4
SHA512 aba7e7c6e7c1e2ce0c18f65bd33e0d54dac65b98a925d928601e3a81fb2b25acfbb6524b6de40287e08a1febbbebddfa9fbde980e795860e4457d01a5e1c06ed
TLSH
T172E02BA9D951EC371CFD175854100746E65413166A40850F3E3D911CCFB563B814A91C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000026

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000026
Size 269KB
SHA256 f6d55bc5bce164d148c61c0361ec0a956ad886291a6aed99ffd0862931efb258
MD5 88a1b9c88953a6f6ee94f518bd8b0d9e
SHA1 a17a4912f01079a0b46b01e7ac19b9d1a3073525
SHA512 d72561947cee8876e23da0f3682a2b8baf6536461765f8b7b74dbd338b38c403fec9156f8731d5485ec958264a5b907de39cdbc3fd318dd11a6c7859a61daacb
SSDEEP 6144:tMR/6OJM1dZijPIrfpPKC8gSDvFE+gCyVV6iCebJIq3:C/62M1d8PItK+6iRx
TLSH
T14B44230E0148B88F7A4A6F3D765FDB97301661DF3542C9ADA7EF488EEB22244C550DB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00003b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003b
Size 56KB
SHA256 6bb3eaaf89b581bfc357bb3b7a265519adf2fef016ee7885c6ac98fc9d059075
MD5 4b056da9a552fe32cb006b4e259a9f5a
SHA1 48dbc5c2a16931fbe52e14beea06f194a0c903d4
SHA512 e0818715ca1cc2c9e82662d55228f96c925826d3a72eb85d643b7f1a4e2dbd10495b4df15bf560a95f9d6b5f3c48a09b556914485b14bc3655cc025d91eb72b5
SSDEEP 1536:8jqxL7wpWuOgobvdwYnWzr0NK+g4BSvXsYjDPIoCoPR:fxfgWuItUND48vXhDPjCoR
TLSH
T19043F163DEE36160C5C6F680B8835994F5FA2ECF1DA77A50440DF8BA07246689B3C9F4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 4cca34bbdad4f6fb12e8ddc744135066dce530598b2a017cd7381b5140eb88ce
MD5 d7165a138a6b5129481c710d8fb32d1b
SHA1 e86fb9f8fdcad2f5f7a3cb1fe333d5154219f17c
SHA512 af781565d61903e4f8f13c579240c9bc0d874046407a23b2e01a6906be0902d42459bcd3aa4d314da9e0b751cdd70624faf8252cf8173797e83ab39004bd9593
TLSH
T19741A81480A3B017EF9F193D609A3B4652E123595CCA5B97718AD43C78DFDFB34415D0
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
Size 190KB
SHA256 3a72cbe726a556021740c72f02d95fbedb827baccb047983b3f68d8f91c88128
MD5 7f0cd5e8ff1e1980c0d7930a800f4189
SHA1 3091e17ae1f933b7b878291c90493750c73d52b1
SHA512 f0fbd45723dab4ea6fe0c6fe3728a84da21c553e46617c464a35d6301e59fcce8c8c6f47d0a18d36db65949542d4a72c0286aebe7dee10d18fe41bfd219691ce
SSDEEP 3072:7lyENuCxx5kiclZFHSLe5TrxX/LZFsZLjV2b5lFijsiY1y1M1:7Gr
TLSH
T1CB14D86541E680C8D12EC373034D8E07E77A99C5E6CC74A5FAD23A4D6BB7B403B68729
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 349B
SHA256 a12eff4722b3a3f68928147c51def15082ed395b3d0621a48ce71ec57a279ff8
MD5 de1ef760ccee08bfcd191dd77fa85fa2
SHA1 30e1e4fb5168847d27fc111b6b9020d2f322c1c6
SHA512 ad4944fe2a11aed8dee173aab82edf4d040b373d2f3625ebc0092f0a62b8fe5a24738af1969fb9efdc2d37cb3533e25f29a3bbcefb026e1755bfc054a90e39bb
TLSH
T198E06F2C99C9C6AF20A484ABBA34770E8AEAA00CDBCCAC520F42D81438C940C80A8220
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 a3df973ec4387ef5beeff0a49f7b1aeb0aef2273a895c5117b4654c659bcfd23
MD5 d188feb47eb16889af01d12740efe7ba
SHA1 12b4522707472837f66f0b1610607935d5921fde
SHA512 a73d6846728c61230c32e4647f2a730cf7f9c9c7c80307caefd6d9df8fc52caaa948089b5d11ad8d403c38776f8ecf228ec074bb68997ac17567d610859bce6c
SSDEEP 384:D0uwtrVJJq5JwMN+Zk8h7exW1YrNc2ei50xTj9NaIJrEdLHaRNIGIqSkuqSTfcTm:m+Sw5nZf+wL
TLSH
T1DB52B9F783E4C22DD91156F4DB29AE1FCE290A24432C3876C9D4BE16D3E2432E25575E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 18KB
SHA256 23a66046ecc56a0eccb309524d3ba0a32d7add21e42c62e87c82ff9fcf774751
MD5 fa02c216d14134c2f0d7d291381218de
SHA1 b37aa74da5d7c7b03919e7d68f6f962ceaf4a289
SHA512 f4850c053e39513d7b0a56b3b820beef343f3ba0739b3a5649ace8fca41d98eb85d8228f53471688f29e678d05ed95899ca8d607ca541dc119440f5f6e052290
SSDEEP 384:D0uwtrVVJxuJxH/orvXpPe3qLu7RdMmetQDEkfaIJrEdLHaRNIGIgUbkI/q0IfcP:Suhw572HHbujz
TLSH
T19B82ABF3C3D8C62DC81116F4DB257E1FCE2E1A2843293C6AC8D9AE1B93E6431D25565E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 16KB
SHA256 feaef1af40e91b60e6c6571c975b4f79b32dde240a59018d211752029a761430
MD5 c215cffc73b6861f80279688705141e0
SHA1 7027fc61a2c8e2e0f960a04aa87f8fba1d613409
SHA512 264616a3dbb6b7cf3f1c12320038e94bb0c900c2c37af3e44ac0508f2dd23ad6849974192260757f628fce0fb3af97a5bf30ed07fa0b5fd2b29bb5e8cbc2ab8b
SSDEEP 384:DBI0FrGVJxuJxH/orvXpPe3qLu7RdMmetQXaIJrsiLHaRu/IGIgUbkIzq0IfcbQ6:Ku2n57qS4burP
TLSH
T12F72BDF3C3D8C22DC81116F4EB257E1FCE1E1A2843293C6AC8D8AE5B93E6431D25565E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 04f9d31ecd21a6ad8271ab497b18fb76d8a7283ca05c7427ff5190ab56ed1469
MD5 1e572982ca06b73ffc95e24ef4cbf822
SHA1 ee012c692788b91eef80dbf10345e8ccb0439eb0
SHA512 7703f38b60487f47895ca798ab2fec3a6c8ef1507b6af914b8809ce6f090b8b61f08bdbcb414ad595cec4fa7540a3bd23e703b85554ae0df956014e30a5e3fed
SSDEEP 384:D0uwtrVJJq5JwMN+Zk8h7exW1YarNc2ei50xk74aIJrEdLHaRNIGIqSkuqSTfcTt:m+vw5nZf+wk
TLSH
T15062BAF783E4C22DD91156F4DB25AE1FCE290A28432C3C76C9D4BE1A93E2432E25575E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 94e895872f6574a21cbc5c988696074d1859002471930e320b572ac40423e22d
MD5 91cec4dab0946b8f4a5fff714c28f713
SHA1 2897ca0d12114a939c30c70c343f14a1af51b635
SHA512 b9063827e9dc37ee0394a0dec6b6cb70165449245b703779d5cc2f2fd4427ea9254dea251109075b8dfa127830e3948fce8416b2160904f5a71f0861dc8de18f
TLSH
T19F117BE7B2BA742710294C6F2E047C0519BDA43B456228FDDB67C12EF08E6FB2F11412
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 4a5f52f12347b87d8e9e25186c809fbabd9fbae62d5912d5ea81e2fa40fb7e03
MD5 10892b9bf4004d4dc5451616baaa2de1
SHA1 1a2c80158ee6aa1ec1e7446424f1a152adae2591
SHA512 20052dbb6d051328bdca4778bcb1e3c8bd7c08462dc01d400664ae26349846a80a6547f7e7a5b00803e299d9177e2fa9f036161bbce48175e00968cce2721616
SSDEEP 192:ERZ1NxGynvQkaXcv7bhAPRp2t9Q9Hsb+WNnh50db2qekwD/IcVyIsnAUgtaJ:ERZ1bFv2If8Xmqw30N2qe048
TLSH
T19E42A52EE914693B9CDAD329FE217B53D7F5103165942E88EAFC8D2C08E75CC6227017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 0e7aa1fe6356ec5ffb9c03b1b6c905cd2e88b8e86bc204ac91ee5ce9ffb705d2
MD5 239634187b913fef94faba97f76002d1
SHA1 f65692a8c0a18b385c1faa8fa00a90a6f32531ad
SHA512 3a082bd638fc508bd9d03ef91bf2ca63565d6fe92ae8b9170668ccdd0bde237365b5a8394101020e2d8c5140aac1a3f99d57bbd867e12db79fe8e84942e70c81
SSDEEP 384:ERZpmhbFv2gK4TlXMqwvaJhfqQ52qe03e:SmhbFv2G2qwvav523
TLSH
T12662B66BA82029779CDAD369FD117B67D3F5203165D01E94EAFC8D2C08EB6DD6213017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 a319a5981c2d464eb0cd027fd02fb8a22775c04fc7600b44870d2f20ff015505
MD5 2609f0b351820e642113c4698cb3f2c2
SHA1 58d44377b202f072d4ae86e731080c88e0af9325
SHA512 b5f814d0097d09a09c456d0acf54cc1598e3a75355e415b420fe25991a8a4c6ce0d769cdea85615979e0d2a95184b5a10f11caf2cea8449fc7f60c5315c687dd
SSDEEP 192:ERZpcBzNxGynvQkaXcv7bhAPRp2O7x9Q9Hsb+WNnFoMrxB21b2qekwD/IcVyIsnH:ERZpmzbFv2If8XtqwFhT2l2qe048
TLSH
T12652B32AF910693B9CDAD329FD217B57D7F5103265942E88EAFC8D2C08EB5CC6227017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 8568d7089fd7bd3464ab2f8b7e43096b2129330b67d82c7ed83a46377260d285
MD5 9dcb624f96b2b7ccb220150544f601a5
SHA1 b2fbe5e1cd74fcd4a7778cb3ad23b02916f61192
SHA512 9e18ef8b500a487760b18606113056f59e614c2a08d04e75f03d6aaab2d77a8eb381bcaaa4d2bec76e12084b68d16df17f4f77c08bea136119d8c86736bd2821
SSDEEP 192:ERZpcBhNxGynvQkaXcv7XhAPRp2VSsoAu9Q9Hsb+WNzkLFoMrbnetb2qekwD/IvM:ERZpmhbFv2IT8XLqwIJhfe92qe0Je
TLSH
T1B252B42BA920297B9CDAD369FD217B17D3F5103165902E98EAFC8D2C08EB6CD6217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 a3101d36b34e98408590385db1a0112a4ff440996156db856c9419026ed6b837
MD5 a9c9f2e03f2770db60a0dc30201ca90c
SHA1 dfa1e8ea5710565afaeabde0461a9d3909ab2041
SHA512 704325f5d139c336392791cf648be0e023253909f7b20be6d57fe1e7da70bf623b6f2ef838e337c335927100a54b541699ad6615af8f554d8a26140041dec902
SSDEEP 384:ERZpmhbFv2gi4TlXMqwvaJhfy2l2qe03e:SmhbFv2Q2qwva1l23
TLSH
T12F62B56BA820297B9CDAD369FD217B67D3F5103165D02E94EAFC8D2C08EB6DD6213017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 04d7f5385ca63f7f5384508feaa432311814320f861e0b11184d2ae95a60061f
MD5 7e1c892cca1175c1c3258a637ab2bf3f
SHA1 a2816e5df6f1ad55f36598adaec7f58073903475
SHA512 22e0fe03547181fdea2c88699e86e8a19ad7ff5c2c3b361dde255d67b487e0033ced0d5126e9d1917e6c49c981fade8479965a22fdc785a658bfcd7d7071c145
SSDEEP 384:ERZpmhbgv2sK4TlXMqwvaJhfacO2qe03e:Smhbgv2a2qwvazO23
TLSH
T1B162A66BA820297B9CDAD369FD11BB57D3F5203165D02E94EAFC8D2C08EB6DD6213017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 dd2f60b87c921e0c108510918a4feab66d3dbd4c764762bb5eeb58b6c1cf829c
MD5 8e57cb8bfea0622664b34a683f258fe9
SHA1 7ade466af827577f464ccdeb75e934acd9dae0b2
SHA512 cb689c26a4fa66e4985e12ccda8317926a3b0861560065212cef74a011ca18aa9b68950bce8600ecda9aab4c7dc3d35fecf7385e3d9b44d84b7ed25efc483732
SSDEEP 384:tnjp87KxkXqKf/pUZNCgVLH2HfgsljH7pLuLcSjjeXODpk+ErU3hCHGfYT8+wA:tjp87KxkXqKf/pUZNCgVLH2HfgsBH7pl
TLSH
T1EE7219677C4C8E770F94D5CCD8267B4F9DB5024B65E9886883FA982903D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\51cac9cc-e9f8-4cbf-984e-2f93c61b4c77\index-dir\the-real-index
Size 576B
SHA256 09f37e35fbc09ab9be7e393932ad0e9e3052d37f53ae578e48e186f3a5d86c86
MD5 59cdc14c065e168cc7454a905d1c8475
SHA1 7aedce7ac446fd83db9182890693bcbbfd0247a1
SHA512 4ea0b285d4eeb1889a6b5d108b661c78cdd0196a622ff805d4790713e8faccf2202e5f26a8deba0a1a3432a44005d394b0fb72d13b851d8511734fa67b4bae1d
TLSH
T14FF0AB74AAC0440FCCA3CBB9013B25782538855E16DAB2A74140A4EAFF17250049E222
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b3fe4.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\51cac9cc-e9f8-4cbf-984e-2f93c61b4c77\index-dir\the-real-index~RFe5b3fe4.TMP
Size 48B
SHA256 7e9d5f91af261dce6e0d3524eee1d027514cd89648db6294319e5df55d859522
MD5 ac234762b918e639e56c804420fd9399
SHA1 31d891d1770d92b56020557f98750b7c254bfb83
SHA512 b0aa8610927240f6b7592230fd2961a9dcb080d6013eda04622b61332ae9d922c631ce9b69165cec574a3768fc6543cbb561bfa41151f94c8ad97cac97f2b35c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\9c84b578-6d81-4be2-a09f-f20f89994276\index-dir\the-real-index
Size 2KB
SHA256 73af39e9c4f06d5438521927a3fd3f6b1b6cd39383bb4fdefa81981e8c2f4d3e
MD5 18547c4ba5be24051ece6bcbfd0bcc85
SHA1 93b266c512a330056fb5d87995e63163a8859986
SHA512 290715fc3e03e7604506ed81ea17d1fa3a16d1a2caa5ea2fe6b076d669e2996d94a83723c7d1e055dd626558ba701c6aeb6a2a92cff6566d2eb70fb784f2ab43
TLSH
T1FB41864CCD80AB9EEC7591BE2D9415F257B12C38FC59C29281A4B1B134532B41B4B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b634a.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\9c84b578-6d81-4be2-a09f-f20f89994276\index-dir\the-real-index~RFe5b634a.TMP
Size 48B
SHA256 cda7e424a4d01dc454321a5e41069d40a4e57e85a44a32401582422e1e0c97fd
MD5 480762d922d6d33d66dcc33b01dbe715
SHA1 c176996c69b3a571e241b7baa69fa72683db5aa4
SHA512 c075b04c7e764d58284e3fb08cb0012db4da0899eb62d147ffca88029dd8566efb1495d04bbdffb929ff6da096acc7f76ac127dacf57e522e3fca2dd0cf1221b
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\a2a7d31c-abc4-43d6-b328-6b1e1e563ea3\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 48352722d293c4213a304de80ba2213dd8c86bbb7a034ab8ee6b160a0dd1889b
MD5 adbb52b48ac0ba8b8efb40cfc635887b
SHA1 3dbcba2f8136f34803d287bdd877355fe1e8cc55
SHA512 db0c1b60fc8c9b6a4bddff2277e28f0d68bf497c663691e9659292bdddab59d81e8bc033519730933eb31ecae10541926681185846595fa8b019d856b4dbedfc
TLSH
T187D023FA2334E57756715D84343C158D6117EE45ECC0C8D4D904F4073478B03C006634
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 241B
SHA256 9e6ef8a971b9c0967ee964b6c2e19e6529e01286f4ce8680ffc226720673b882
MD5 7c6727c69dfe5779b8596939bb59b09c
SHA1 3751e4bddb575accb64d7ba14823f3012f2af420
SHA512 525645899bb570799fdd0e55aee3d10a4fb5eab236ac9e80b61a9ea266853aa44c7d5a1105ffd7b2fe9af04f220c978c6fad9f8bd37c77010957e938b0c470a2
TLSH
T14ED0A7963622824B86754ED8343871AD518BDD89CDC6CCA8A64570052078593C816938
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 387B
SHA256 69dead63dfd540a8ccb3b099c52a33688b747b6289355c0497a078d1477b5d80
MD5 a9864cf0ca100f8ccfeca8ba5fed0c53
SHA1 8af5021a5bcd43b84875b8e7d2abefbb297ec4f3
SHA512 2841a05ae131197124c2a6001fc8dec09f47557bdb5a5a8f8e72a593f5cb7c3938c3d157a84467ab7c05f4e33f5a9078fc0bfa9f40d4bc5d0bbe4f00a3220ca9
TLSH
T174E0688AF662616BD973CFE13C2430FE62B79D88CDC6CC68A5C6200D30B464BD826D25
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 383B
SHA256 5b7f0c1738af8c4d5ccc6662d51fc0398758334d188546fe0db62e05f8aaa8d9
MD5 182a2631252e02b65efd78ef2896eeb1
SHA1 91ec98d86b5eea1d8c61303b8ebe0daf13c2335b
SHA512 922d4263df7395fb4464e05490e50524cabb2ab8c39c8503f72e0b06f13de4fca79face8f4c8074cf6757f5ca76dc55aee42d2bd8875e6f307b4139a3c9d74ac
TLSH
T184E0C04AFB52616BEC77CFE03C2570FD62EA9948CCC5CC64A9C5000D727424BE816E3A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 c23391d45ef25f5fc4ba56dc19525309c6801c23c14d2e78e6b09ce3a1cec9b0
MD5 cae054686fdb5a5663891cf42deac1df
SHA1 f0564a4cc3572137664c3e3d47da7271e2aa3704
SHA512 e711acfefaa513fdd410989910f3f9ef96fb746b977eb5572d25da06a0e0297a54aca7e016700c4a24e8efb5d1bc1fecaa1e6334d874bcb4f77b5d7b76a815e6
TLSH
T172C092F63620D79B8A71AEC82078669DA14B9689C9C4CCE8F908A4062038A53890A935
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5ae0eb.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5ae0eb.TMP
Size 137B
SHA256 2275a96464affc3bcda74a787a146fc20c9b604a7f8c8c0a7bbe73bc35df228c
MD5 7da8d884226b818490b533e2149247ad
SHA1 109215ededff7627de65761aa2c943a39fa9e7b8
SHA512 4c299399ebf6443a6d5ed87bdf90f726a56f19604d4c63d1ff1f9d446e17de519e6f1b20ff11951ebb3e6590beaf54b5040aa0e722bd84f2ff61b4f452eb3af7
TLSH
T127C09BF62520D7578B315DC52078664DA55B9D99CDC0CCE4F505B4053038553C509575
MD5 SHA1 SHA512 TLSH

Submit Download

b6c28cea6ed9dfc1_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\b6c28cea6ed9dfc1_0
Size 192KB
SHA256 629d77ad292d3559fa7338be7d48205cdd255c0ce549d378005a483c1e326528
MD5 285080267f8ca1f6a0f3938e2c2e92c2
SHA1 34d311a5856f03d82f25b4c33aea87fd1c4f042f
SHA512 2b878c59babace378d57a3da40d31156d17f8f4cf3b4e12a98ab235ec8c93e6cecae42672831e89fcaf999b58920a82f091ff161e95c6ddc4dd6fd709b1e994a
SSDEEP 3072:zVRngQblhbC2VNyG9H0ZIe6lFlHAMkeu/OYPYI:fn1hbC2VNPHIIeYFloeu/Oil
TLSH
T133145BCDBB91B47752A744F4802F0403B239B896B80CC4B8F595DDD96E24699837BF3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa813c9ad67834ac_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_0
Size 20KB
SHA256 ec52f2bd238223a8c890480eb8f0546e8f31feaa94fc7543d9ddf2e58c4d4af5
MD5 8b55b8cce51742c8608a5604c6f39835
SHA1 0df26c05298f9ec7b0f7682c980952f3c342dacb
SHA512 f61af3879e00be93c01c2d96a8b1a1f32eb1f613514bc9ee92deab33cc1adb17292b870616dc3976d53d59f0ae7b48e9bf03e31c696b9e534e19f2fa84f39aeb
SSDEEP 384:daUTY613m1eeDcUNJvJzHhqnIj0y5f99FD+5JKS+hqc:M2Yxt7ZhqDy5fjFe45
TLSH
T120920AB60C94A537C6A5C7F56ABDFF086CBC12AB199A96E4F06D467C00F4987034F84B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 168B
SHA256 f8648b2646cfac2656355d59940387f060244e5ed46bf3fb251452960524b787
MD5 56cbdf4828e168cd2261ff6da0b1d956
SHA1 2f7ad40328f5e74df8227d39eb34000a6b0e6703
SHA512 147cc7b03923f6f80f94a5f5221c2afa390b96ec9bc68ec1e475ce4cc9acbb97259b47f45465527f6e5e0ba4d3b6fdd838299259cd415d3723ccc0f95c814cdb
TLSH
T193C02B9187006001C05603F00815505C7124AF55D74F170511A8059B64321308008342
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 72823cc179d2885c422e1723c28d2f8bc68ef6240e16f61a36ac87987bc4daf9
MD5 168a522722e305cf9612cf52584d7c4c
SHA1 c7e1eaced46b1daca21bb390e6366ba8be32966e
SHA512 594675d68b87187f56f115ac5594752f0ee15264d43aecb5e548dc93e18a6ac2d3fc6e144848b24d140b4a09e7a35d01d207a3990154cdfa42a9851c8c77df52
TLSH
T166B0124180015511C40306F81583548C71589F20DB0F1F0193E0696398395609014051
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a92cb.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a92cb.TMP
Size 96B
SHA256 cfc3fe4757242fb48b2fe8aa4e726010c826057a2c0dee9260f890ced12f83cd
MD5 4359841dd0b61fbbd3dcf3c8cd9b9979
SHA1 018ed35cc928e03bdeb3ef172b4579baa3c5911e
SHA512 e7007f3d0cc48c55a091d07e599ffe3974f44d465b39865c09fc8a50051f91a0fe697f43d14f2eed95c2f40ebf16b7f5bb1bd048e16899a6986818a627d33c3f
TLSH
T1CAB00255C1027223C05203B82DA695DC7160EF25C60F1216E2E11AEAED366635525570
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 f31c54bfba6d90f841c1b2df36a5e8bcce138af7ef17b3ef6a79ab0511313d1b
MD5 d764d906fa95ecc24e0383bd18974758
SHA1 c4517577ca40dec50973a42ada9d11d4e8196c9d
SHA512 11e24bc5613196c9755cf2bf926d62d66ca110c1fc8e158496637a7106d98322aca0f4369db9c91d7a003ec4321034cf2243b68686a925ae4ef07a49bae926c0
TLSH
T161B0022489902833C56F0BB09EC308D03B750C541BD2A31340B18558F9617DB67A3628
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 150B
SHA256 536b6e7dd2bff1d0be51fe0f21840e1b6e443667af3ff7a91585a6467e95c4e3
MD5 1d4cc2607ad4017e9115738f3945bfa8
SHA1 9dc4f86fa28cf790d7e9753c0e86f5e0c112ba8b
SHA512 c6612113f186e9a9ff1fa97352c822af86178ff554c2cfb05687f2882b6aaa6f1774e9dedf8205fddecb9126b6e6cfb458f5104cb476f8d78aa60f6442e266e3
TLSH
T1C6C02BF31450418B8738EAEC2018331DD407430CCCD0CCFCA41424123038937000163C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5b0cae.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe5b0cae.TMP
Size 157B
SHA256 e3ff69b0ddbb1b742711209ce5852da1d53ec606059d0a86db3ad79492cf6d96
MD5 05b9d9905d07af4dbf56669f1037391e
SHA1 0734132b701170b73e7b0427637e8f14f6524f8e
SHA512 639f83f6c3d3265679fd10e740d6780be2c1bd83dc9f4b217f9073e1497d8c8a678e83ad29047894e0f92cfff45565d4312f56959defe9aa72a488709698d717
TLSH
T104C02BE3046000978734A5D92028330DD4174F0CCCC0CCF8A41538123038937401053C
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 ceafd04f6b2ab03b360f72c76f8a9b5033edf0cf966aabe4d4f8e062e8e92f04
MD5 4e117cc223b4f5911d1421cb4da063cd
SHA1 688d564944ae7440774101898685b5c86d070ae8
SHA512 e0ca8734949bf2cbd13f1ea9647118d62e10fee40719860551345c431a5551aaf7bcb48d07c07a8be040ecb99d51139119a38d33194efbd71d8ecb463117cff4
SSDEEP 6144:C8i0Aw9NDv+qw5ZtAnqfRRVZFX8KZGES4B:CeNO5ZtqqpBFX8KZPB
TLSH
T153342371AE16CC6FE7C5660DC14F5F0FE69CF819D5599EC238C8662F840BA89213B724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 b47316676576ac3b67668bed625b17ccc627a587defe89f461664da5ccbd1975
MD5 3dae4f1c1d5c3aa223c02c9bac7996cc
SHA1 8046334ec2b20d3d5371f88e09b36a615db85f2f
SHA512 d60cfe9d850fec0264858c656893a011a22167b5556eddb709ed2274ca3ed816af1310c3ab037b110a47063d23fbd0744267420e5e03e597ff3508d976cb6b46
SSDEEP 3072:kqfRRV6mr9FX8RtWZ/Q+KLl+13pvDOlmHl:kqfRRVZFX8KZGES4F
TLSH
T1C1B312F1A81AC96FF765630DC3CF2F0FF66EB141D1265A80789D052E98477802323B6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 5e7edb01a0435f279899e40553ef19b8047294ff5dbf7aa4bbb0ce54528049b5
MD5 37617630fbcbaceee9434c6e11887464
SHA1 e4567aa62a6d7e84429b855c1a0f05c62640301e
SHA512 44e188948d209945f68a5238d69945f451e260abeb6fb064bee896b0aa426daf31abd5cea144ab6fcdd28ecf1ff12830c23101a5a9be55489b8b79e364c46772
SSDEEP 6144:b8i0Aw9NDv+qw5ZtAnqfRRVZFX8KZGES4B:beNO5ZtqqpBFX8KZPB
TLSH
T138342371AE16CC6FE7C5660DC14F5F0FE69CF819D6599EC238C8662F840BA89213B724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 80d966ce620b2cae2e6b8ac2022720a3fabc30a23a0250b12f3df0ab34954140
MD5 088888dfdfb080a142f2a0f6e33724bb
SHA1 8839e47350d97a16b4caf36d4fbe2026abc053c9
SHA512 eca367d5b3209717dca85753e7abf50a9ffd29dc033a9a7867705646952f0e81e45e293152fa35b175eb88875b1a800ac955d61b01da5617626142a0ac94ae20
SSDEEP 6144:A8i0Aw9NDv+qw5ZtAnqfRRVZFX8KZGES4B:AeNO5ZtqqpBFX8KZPB
TLSH
T1633412717E06CC6FEB95220D814F5F0FEE9CF817D559EEC538886A2E810A689253B714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 87df1a3a69f708e5b2f46b24c57ef230d998ef7b7dd652bbb17125794f1fb86a
MD5 e0abcc63b0c6b9898b52fbd4d6f5f260
SHA1 62d291269654a88eeb0cd879d2dee354cb329971
SHA512 16f1dc8cb76a4241c778776eeffa5a2351976efea4a2ceee6b171dd96cbf7ed179784c4905e85de6595fd7cd07e4ada8812cb5a6638b30126d00697607acb6c4
SSDEEP 6144:48i0Aw9NDv+qw5ZtAnqfRRVZFX8KZGES4B:4eNO5ZtqqpBFX8KZPB
TLSH
T1063412717E06CC6FAB95220D814F5F0FEEDCF817D559EEC538886A2E810A689253B714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\db\data.safe.tmp
Size 3KB
SHA256 9355ec94f01e0c853e8c6d9c03c10247a9eacb7403a9bd94aa73b4c61bffd66a
MD5 bf5bd7dda6f78f7b464c3f4567eb194e
SHA1 1cce8864f84fedfea1073ae74011e63cb4767568
SHA512 ec0949673673175047934384eb6e35578964e976a5315441c8b35abbac0deb0096d909cc598df4249ef946063d87d4a027dba8619d7e01156b35311d70762fed
TLSH
T1DF61DC58F229863FE84A413ACC961B411F343452A8AF7F2A359C604D1E572CE778D87E
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 87403dcb89fa4796bec6481281a6b330e171728c12cc924cc962bf9f8c7d7f81
MD5 2f3f356de40c8492ff15542fd0f10bbd
SHA1 f09af846dc5c4c7a64989080ea3129218a6e54a4
SHA512 66a444c1ac2e5772320b35c6245169c814e29a21f09100e89553faef56bb367919d93d377d38d6a5298a5b60f820111e8315b5f674921390d95bac9ee3dc3ecd
SSDEEP 192:OOv5zboBZrOhyjyc1d66Joz1zgCl6mc0dz:FboBZrYyj/d66Joz1zgC1jd
TLSH
T10FD1BA68F729863BC819027BCCA60B405E76788B988E7F15319C654C2C572DE768E27E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\events\events
Size 1KB
SHA256 77a5f42594ac679fad694017cb4fa25801cdbe47b2ca2b87a7f1950655cb7b70
MD5 76fc4cca6ccc5be3090351f6b99464b8
SHA1 1a3022d8bac93ee4f17cb87daa4a456c408c199b
SHA512 8c5ea85947336756f0f38c22c64697f23395a29c7e04e8ecd313359f3be3c0210c0f989284e0d7717067b9daee870e9e8167d8c57c78bac50bf7710a59216858
TLSH
T1BD212C6C39B84E2E69CBE39C7441118E53918E0B18871E474D13EE8DCED5AD9326A43D
MD5 SHA1 SHA512 TLSH

Submit Download

05385339-2abb-4d76-a3f0-f507a78739ed

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\pending_pings\05385339-2abb-4d76-a3f0-f507a78739ed
Size 16KB
SHA256 1b11700a89136f751697a6c25d2feb339291d3009cb40c960a6afb3a93eaf7e7
MD5 57587b585d9ba133c376d199495123fe
SHA1 1a7a9c0ca1a36e5f495990e09cb96c54f456c86c
SHA512 bae4023774454c190315c488560a8155029891ef3521f922e747ebb72b35f82a6fa283bab71e6f53a522176b2f5631e3c759c543a718d6667f278112151c344b
SSDEEP 192:pqHmB41H1ijHBNS2z1ZHJTiqtnbtU2HmNUpXOO7XKM8/+E831cVNjsieCzx0RR54:8mEGvlz9zR3uaieCl0RR5peij0
TLSH
T14B72C81A6860457A8651E3A894FC7FC3E5F528CF4C419FCE9BE4BD0869DE0AD1127C4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0dade6fb-2f62-4799-a1be-e249f9f5e964

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\pending_pings\0dade6fb-2f62-4799-a1be-e249f9f5e964
Size 235B
SHA256 2f9093f1659d031249efa31687c905834c392acd8be53e7e598b2b4cd8509346
MD5 a08a7e067d6861a912d9f713f92f1108
SHA1 00f3948a7bb26f53f017c3ae4da53677983b5762
SHA512 90fd1e81e3af72fd2408465d31dd94ff4817a10cdf6bf5b304ad50b0061294504b67e7f7bef85bb3387109cd4342eb12290185fb25b1df74fb7e045c5f105392
TLSH
T19FD097C12898672C08090F02F0E028C7309C4C3320A158209AA141F489FC9C942A2C4B
MD5 SHA1 SHA512 TLSH

Submit Download

6d2bc5ee-01d9-47ed-939b-97fa09167ec6

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\pending_pings\6d2bc5ee-01d9-47ed-939b-97fa09167ec6
Size 235B
SHA256 8968978694406a6e126c1de1c3f0dd1e4c1fed32818e15994a51ef8e6fb68dce
MD5 ff0623dd9cb892ae99d43dd3222a3f67
SHA1 bbc97a5c16adc71433effddbcbf61e6d18f2bc3e
SHA512 d5a1c1727bfc97a2ce93eba0f193750808fed08945225591b9add2fcbad25baf449aa7185a137a62cfe3cd76b062b160a8a0461a8399671f7ce64e2b3514dba6
TLSH
T1D2D09780349C272E08100F4BB0A0BDDB30888C3364B55820E59102348AF8AC4819290B
MD5 SHA1 SHA512 TLSH

Submit Download

c438ef6d-a867-49ce-9c75-dfdeb9b8d93a

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\pending_pings\c438ef6d-a867-49ce-9c75-dfdeb9b8d93a
Size 886B
SHA256 5faba1617200fded97e253178179b91e4b38f427e4c8b9defdb8fafc3c662068
MD5 f000164b817248ae67a1418aa1a331d5
SHA1 805da293f24d89fd206c239bcb6abcd3eeeac7c1
SHA512 3feb666d89258fe914d768ee65b6d2db10b62d6a8a1af7af68d5122b5432e403d8d71d8f303ef3d7901a760c8e38a77ea45dc8b949af2ba6b664f444ce837eb0
TLSH
T1071123405624B9F2CC6DD1CB88A93B038ED87023C0C619047E916F180C7B55E53B6B07
MD5 SHA1 SHA512 TLSH

Submit Download

c6930c45-b0d0-4527-9495-bba2b1b2a1f7

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\pending_pings\c6930c45-b0d0-4527-9495-bba2b1b2a1f7
Size 883B
SHA256 258244b858925bfbc278a79a5046b766148c38501dc0881b7d283f20877f4966
MD5 966effa2af2b34887922b895a63269f7
SHA1 2f94cc3e60ae8d931bbcae856d473846c6510dbf
SHA512 68d65172be8c893d6cb2d2e3e4086f42cc09808ae925f97a2de5d49a90c2eeee3fe0bd868a804103cdd1c7624a716f5a724b8b1e0c3139e21eb151352c8a893b
TLSH
T13E112790663475F2CC6CD18BC9557B029FE8721780CA54143EA12E144D3E95ED3A7707
MD5 SHA1 SHA512 TLSH

Submit Download

f8a684a7-878e-4036-8952-d4fdf0255ab2

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\pending_pings\f8a684a7-878e-4036-8952-d4fdf0255ab2
Size 2KB
SHA256 055d76c49af2748da73177a36a6c64778d9d8d0159a951f0184352234718b855
MD5 2f626cecd6c1561b2ac632883b1fd2a9
SHA1 634918b8be4504ad1ad7fe803e629146bee216cc
SHA512 18eb512ca8e6c6cf24b7eda393797574b3241c44b6fdbef2b5c03b4127c77270dbef4a399689474b17fab93067acea7f2a085da5f1c514ba0f51a71f4feb4c41
TLSH
T13A41F15C35789CF68DDEF5DDD852275E57A08A0300C62C431E62EF0C8CA669A636B63B
MD5 SHA1 SHA512 TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\prefs.js
Size 6KB
SHA256 2cb07b63e192302bb5771bafb606404defb1426f602fcd1cc829b896afc905b9
MD5 54bee9e5d6463e3b331de46e715035d9
SHA1 1de0e0965dfda75795d1dda92e531b9f450a9e34
SHA512 ef9e1f8a8c3f874cdacf30846df290cef7b04fde9b3cdab7c2618a4072b2f7fc7796a09a91f315962b08628d9e9f77128b9675277dcdc37f0f2fe4519448d156
SSDEEP 96:xHThUTUQqGqyf1B3J1zS+YSSlNdv9j+nZRHboedaBw88P8L4cnVWE:zrRyf/3JLYSSY9bT4Bw88m
TLSH
T17AE12F789408CB7F74B677ACAC6488315AB2013B77BF28D750BA5484054CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\prefs.js
Size 6KB
SHA256 636b99517cfcf406ca77bdebb789f7ef553f167d7c4a44bf67b11f6fb7baad1c
MD5 cfa78d513e75b05548c919010bb6bae2
SHA1 8419d88f43e192db526993e82cde8cf8e32cc2ff
SHA512 f95c73bf7b8174cca7947836a00fc7db61069c6edf5f0fe9cd279061c4739602f3e25777c54ab0884c4a2db130ac0b027462661c7585ae1f54aa12fd63966c51
SSDEEP 96:xHThUTUQqGqyf1BFD1zSjSSlNdv9j+nZRHboedaBw88P8L4cnVWE:zrRyf/FDWSSY9bT4Bw88m
TLSH
T1CCE11F789408CB7F74B677ACAC6489316AB2413B77BF28D750BA5484054CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\sessionCheckpoints.json.tmp
Size 241B
SHA256 dd8349e2789db1125b477971c5d445b6afb2f6ea3b57de65080631040900fe8c
MD5 48fcad918c62db97e9af1dba1d131473
SHA1 d89381594d3241b0e645033f67572a5d8c166764
SHA512 2278d074aab519859188b047c77fe7b4db718e0af237b63e06a1b095d7a1eb4e07d6ea59cab5d7b1325aae0047fadea36eae12a80bfefe112aab85fc18aa1ca3
TLSH
T19AD05287C00D10BADE832E4873D4BB81EE3F00F7B2640542BAAC988C283B023858B803
MD5 SHA1 SHA512 TLSH

Submit Download