68e0a3f56b317d0e936f39d93704b177ef54f32bbc244bf00b43906f91ff7717

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
03/08/2026, 22:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
RoCockWorksBetterThanNew.ps1
Size 2KB
Sample260803-2nbh2sha39
SHA256 68e0a3f56b317d0e936f39d93704b177ef54f32bbc244bf00b43906f91ff7717
MD5 604be8b5001476db03b813782d354302
SHA1 1c00f517dcb5e0df0b930b043ca541c230fb805c
SHA512 e5851a6671c1763683d5355feeacb5646d7a7e7a20c28ef212e86a0a32f939d5891dc3de08adbf33cd84c2d86a0816694cd835d6cc921cd16e968f75fa3e794a
TLSH
T16D5101445987D73842F1C766F55862AAEA1A405F0B411024B2AD8285DFF4BDBC7EC3DE
MD5 SHA1 SHA512 TLSH

Score

8^/10

defense_evasion discovery execution

Malware Config

Signatures

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
2	3936	PowerShell.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
3936	PowerShell.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3412	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Kills process with taskkill 1 IoCs

defense_evasion

pid	Process
2456	taskkill.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302706211576991"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-125073035-2952146151-721812867-1000\{88EDFE20-6047-4A90-9C06-DECBF01A48FD}	chrome.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
3936	PowerShell.exe
3936	PowerShell.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2952	chrome.exe
2952	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	3936	PowerShell.exe
Token: SeDebugPrivilege	2456	taskkill.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe
Token: SeShutdownPrivilege	2524	chrome.exe
Token: SeCreatePagefilePrivilege	2524	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe
2524	chrome.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 3936 wrote to memory of 2456	3936	PowerShell.exe	81
PID 3936 wrote to memory of 2524	3936	PowerShell.exe	83
PID 2524 wrote to memory of 2308	2524	chrome.exe	84
PID 2524 wrote to memory of 2432	2524	chrome.exe	85
PID 2524 wrote to memory of 3412	2524	chrome.exe	86
PID 2524 wrote to memory of 2432	2524	chrome.exe	85
PID 2524 wrote to memory of 132	2524	chrome.exe	88
PID 2524 wrote to memory of 132	2524	chrome.exe	88
PID 2524 wrote to memory of 4704	2524	chrome.exe	89
PID 2524 wrote to memory of 4704	2524	chrome.exe	89
PID 2524 wrote to memory of 400	2524	chrome.exe	90
PID 2524 wrote to memory of 400	2524	chrome.exe	90
PID 2524 wrote to memory of 4400	2524	chrome.exe	91
PID 2524 wrote to memory of 4400	2524	chrome.exe	91
PID 2524 wrote to memory of 1816	2524	chrome.exe	92
PID 2524 wrote to memory of 1816	2524	chrome.exe	92
PID 2524 wrote to memory of 4844	2524	chrome.exe	93
PID 2524 wrote to memory of 4372	2524	chrome.exe	95
PID 2524 wrote to memory of 4372	2524	chrome.exe	95
PID 2524 wrote to memory of 4396	2524	chrome.exe	96
PID 2524 wrote to memory of 4396	2524	chrome.exe	96
PID 2524 wrote to memory of 4800	2524	chrome.exe	97
PID 2524 wrote to memory of 4800	2524	chrome.exe	97
PID 2524 wrote to memory of 3248	2524	chrome.exe	98
PID 2524 wrote to memory of 3248	2524	chrome.exe	98
PID 2524 wrote to memory of 2804	2524	chrome.exe	99
PID 2524 wrote to memory of 2804	2524	chrome.exe	99
PID 2524 wrote to memory of 1100	2524	chrome.exe	100
PID 2524 wrote to memory of 4504	2524	chrome.exe	101
PID 2524 wrote to memory of 3764	2524	chrome.exe	102
PID 2524 wrote to memory of 2180	2524	chrome.exe	103
PID 2524 wrote to memory of 4568	2524	chrome.exe	104
PID 2524 wrote to memory of 2180	2524	chrome.exe	103
PID 2524 wrote to memory of 4904	2524	chrome.exe	105
PID 2524 wrote to memory of 4904	2524	chrome.exe	105
PID 2524 wrote to memory of 2952	2524	chrome.exe	106

C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe
powershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\RoCockWorksBetterThanNew.ps1
1⤵
- Badlisted process makes network request
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3936
- C:\Windows\system32\taskkill.exe
  "C:\Windows\system32\taskkill.exe" /f /im chrome.exe
  2⤵
  - Kills process with taskkill
  - Suspicious use of AdjustPrivilegeToken
  PID:2456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe"
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:2524
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcf4bec728,0x7ffcf4bec734,0x7ffcf4bec740
    3⤵
    PID:2308
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1640,i,16191303694723640485,14274305381653991033,262144 --field-trial-handle=1924,i,3886234022480421371,14524558299287498486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1920 /prefetch:2
    3⤵
    PID:2432
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2132,i,2700618473422794886,12233101409558364455,524288 --field-trial-handle=1924,i,3886234022480421371,14524558299287498486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2148 /prefetch:11
    3⤵
    - System Time Discovery
    PID:3412
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2292,i,9227999201449298261,16548513080987746212,524288 --field-trial-handle=1924,i,3886234022480421371,14524558299287498486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2864 /prefetch:13
    3⤵
    PID:132
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3076,i,11425737518486764997,2055550739569454246,2097152 --field-trial-handle=1924,i,3886234022480421371,14524558299287498486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3112 /prefetch:1
    3⤵
    PID:4704
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3080,i,12982007733326525182,3862225529046682157,2097152 --field-trial-handle=1924,i,3886234022480421371,14524558299287498486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3132 /prefetch:1
    3⤵
    PID:400
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4312,i,7620501680831451533,15034928722417867734,2097152 --field-trial-handle=1924,i,3886234022480421371,14524558299287498486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4332 /prefetch:9
    3⤵
    PID:4400
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4788,i,5367962761000335606,2078977830117324435,2097152 --field-trial-handle=1924,i,3886234022480421371,14524558299287498486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4628 /prefetch:1
    3⤵
    PID:1816
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5528,i,10053768352098886570,16656472970700630359,524288 --field-trial-handle=1924,i,3886234022480421371,14524558299287498486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5532 /prefetch:14
    3⤵
    PID:4844
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5836,i,18214511597673983282,12856881092298725272,2097152 --field-trial-handle=1924,i,3886234022480421371,14524558299287498486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5888 /prefetch:1
    3⤵
    PID:4372
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5944,i,3307171971987501985,640642522685827549,2097152 --field-trial-handle=1924,i,3886234022480421371,14524558299287498486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5884 /prefetch:1
    3⤵
    PID:4396
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3768,i,16801094613063518192,11274165398998073506,2097152 --field-trial-handle=1924,i,3886234022480421371,14524558299287498486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3132 /prefetch:1
    3⤵
    PID:4800
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4616,i,15053873427602790869,3613390456498753191,2097152 --field-trial-handle=1924,i,3886234022480421371,14524558299287498486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5960 /prefetch:1
    3⤵
    PID:3248
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5560,i,4887556024998076840,12289079415055288330,2097152 --field-trial-handle=1924,i,3886234022480421371,14524558299287498486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5856 /prefetch:1
    3⤵
    PID:2804
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5868,i,9672701403287326102,6818583562991306915,524288 --field-trial-handle=1924,i,3886234022480421371,14524558299287498486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5788 /prefetch:14
    3⤵
    PID:1100
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5852,i,10075875990217366730,13542166027896353216,524288 --field-trial-handle=1924,i,3886234022480421371,14524558299287498486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5600 /prefetch:14
    3⤵
    PID:4504
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5792,i,10565856385633467332,13423128529113663865,524288 --field-trial-handle=1924,i,3886234022480421371,14524558299287498486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3672 /prefetch:14
    3⤵
    PID:3764
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4344,i,611180771380303263,14163038365990372661,524288 --field-trial-handle=1924,i,3886234022480421371,14524558299287498486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4448 /prefetch:12
    3⤵
    PID:2180
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4408,i,14673341490121559561,462125240448701907,524288 --field-trial-handle=1924,i,3886234022480421371,14524558299287498486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4412 /prefetch:14
    3⤵
    - Modifies registry class
    PID:4568
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5788,i,6361367259082155086,17756339941035433616,524288 --field-trial-handle=1924,i,3886234022480421371,14524558299287498486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3528 /prefetch:14
    3⤵
    PID:4904
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5764,i,11856400932749109429,1313437923382759091,262144 --field-trial-handle=1924,i,3886234022480421371,14524558299287498486,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5744 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2952

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3084

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5028

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 ac5f31918b596085cc12c1c67264e0c1e542a982348a17ae54f3a4a328c65078
MD5 eba07c8e00bc685ee9f78f9c346d055d
SHA1 2c888b53e639fe58a2780d294f85338a1cda9d8e
SHA512 3ba45959142db0c5cfc6e38a61a54aeceed10a497ba7b80dc85ad2198b92a32c7df1d7f86fe2d6cbd522389b3e671f3d6f8e48b9afa17af057188afd8da803db
TLSH
T187E0E5A9C822AC6718F9071821600606EB9013AB3A418A6F3E3C911E8F7163A458586C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00001d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d
Size 56KB
SHA256 6bb3eaaf89b581bfc357bb3b7a265519adf2fef016ee7885c6ac98fc9d059075
MD5 4b056da9a552fe32cb006b4e259a9f5a
SHA1 48dbc5c2a16931fbe52e14beea06f194a0c903d4
SHA512 e0818715ca1cc2c9e82662d55228f96c925826d3a72eb85d643b7f1a4e2dbd10495b4df15bf560a95f9d6b5f3c48a09b556914485b14bc3655cc025d91eb72b5
SSDEEP 1536:8jqxL7wpWuOgobvdwYnWzr0NK+g4BSvXsYjDPIoCoPR:fxfgWuItUND48vXhDPjCoR
TLSH
T19043F163DEE36160C5C6F680B8835994F5FA2ECF1DA77A50440DF8BA07246689B3C9F4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e
Size 670KB
SHA256 4326ea24d8caf70c5e5288876af131b4efd8bb5dfeb07041ac0601625cb88565
MD5 ff0788401087986bbe902e3a99a2cdb1
SHA1 6b0911678052ec7742649ebe064e81fe4aa57d3f
SHA512 285ef45d5509b11bcf06c8790befe77a36e91ed11cbbaaff4ad53656546490a73771dae611e0d82de29370cc4dd2137303348073d258b3577ab585496001840b
SSDEEP 12288:xmQUxgeUWgxERD9VCjsBBPre5k+142aqILT+mMDOyuB4qNr/VrrUfU:xBUvgk9Vasqk+1vaBT+xM+gjVrUc
TLSH
T1A8E423D4B9D52784622A0D94E10B0B9FC4C17AF9BB4BE98EBF1E1F9D093CB5B701015A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f
Size 22KB
SHA256 a908970523071775176ca3775fe68c58a99f8de0d4b6ecd9a9c2a2b3671a30b4
MD5 d6e325b8d43bb78e7c20294cc66f5f3e
SHA1 5d44f206c796cad9cfbd9d73f29e7d9adc078a09
SHA512 761389631a4e65c97165cc769a6c22b9b7df559b60e5d666bf23da02eb2c6269939d5ba94c09b51f4ea9cd275618db0ae9734f9a4c8c4ced1af161af1d22ca7a
SSDEEP 384:I7eYsT+Ob//XKUQTsuiUPKlExsXqsljTwd/GY5NbzA3b/UiqXceMsNNzWLr+njT:I7HsT/bnrQTs6Six0qqwVGYDMA5swWmn
TLSH
T1FDB2E1A6AEDE1EAD43A1FECB5365C0625B4AC07852C3178FB8A11511C7332613EEB816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000020

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020
Size 34KB
SHA256 b15c302f2cfd4476de8460512a655b34cc984b0459a1930bcc8297732d0c6dcd
MD5 ad517ad8c28f2a6663c6db81d8b8a6dd
SHA1 7351adb2bf97809716d351099259a0300f7508c0
SHA512 4483640b22aa6c4f78238be9c6ead09e2c6cdd16ab3d8a014663fd89d265c5b65df483ce64d2c7276df6c7eec9dd2a9ea902c4137461ddb5736c346cac04a160
SSDEEP 768:1LOvo91PCK55NZaqq/z5r1bDVD0A5bNs9YALc2zEiorYnZMAlz:1aNK55NJS1bhHj0Yqc2zEiWYZVz
TLSH
T19DF2F13985F9769DF8E28B50E3A568EB5D00FC8082191B29DE9E38301CE19339DCD756
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000021

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000021
Size 20KB
SHA256 652c695904bc7f0427931acd1988b101a27a14abebea2ad7b57c2fd725529435
MD5 22929c3aa6317203705c12f30d4fc0c8
SHA1 69997309d8f96560b6de50883a02fef551e413f7
SHA512 d2df1e2f8e0ff994f4a47e27585289edd531d66498cd72b85793a63b66291244aa687713f1bb062721f9350d20120afcec5da536cf0c6278ce930c7079523e5a
SSDEEP 384:ZosNmz8MkZcW4E590LG0jJjk/U0sVfra1yEdq997Hvj:Zo+mYMFELjCJjTZrandQ9v
TLSH
T134A2E1E8945EAAFBC28AF4433C5B691588E5C9F01D37097BC9EB34485CEC691B29850E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 acbe61b61574957b4a66ffa3b221709c2bc22c89abcf9069e34f0e0422eb1618
MD5 b8ba1b2ebff40dde23d0753df52cceed
SHA1 7cd0cb67cf44c178cff331ed478604b125afcb49
SHA512 a59c36fea310f8323a8e1785d8d5a30bf732acbe35664fae67d520686a60ff579b8203f70873d0159945f61c272a9ef1e623139e717e592d1111cc6a6f28ca97
TLSH
T15021E8C050C9BE8DDFAC80B118DF690324C6A90A41E2C397C135D8F1B08F3F08E42276
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
Size 312KB
SHA256 eadd9c0c5da7da9ea16708a0d99ebbc6696e2d9423c7aa922255d8db1320d556
MD5 eeedc76bfed1d676713b023303dd8eeb
SHA1 b1a1d1b8bbba67aa65690072ab7f0cefd1616da0
SHA512 027e5f2d190a86875c35ab251b09218b1ffb7a928194ac8b86914bcd0c596f0aa5c1a8be265d5becda6e332ae221acfaadd9a765cf447e9057f2c4e06acb5d31
SSDEEP 3072:7WJA5U4tvOF7icEUiLj+sii3k9zjgz9jbwQii3lW5utl5OaFeQWZwXQjBfPrRNF3:kVajLExBD18gOA
TLSH
T15E645B0821AD62E7D41D033709124E4AE776FDC8A99C309BF9D1BA1C5BF7F443624B2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000005.ldb

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000005.ldb
Size 134KB
SHA256 75f7c77277f2e8bbe0d01bea0a941821f577282ea47dbab348278454b1f9229b
MD5 e5c94201925cef6bb07b1c83824ad4c2
SHA1 a11f6ac524b977d4346f1c3ec6da1338ac9f9053
SHA512 ea8946184bb29e25c67e4efc6a9d7cf71aafc506a6225a0f9242628098088d57ebf874e69c3c80b6796e2fb6b76fd4150c7e0ef4220fd3f6f206a9952a1a8977
SSDEEP 3072:jyWj8+mnnfVyCUQYZaXQjBVrRNFDTXT5oEo+7wOLiJ7EkwkJdL:2WIPnfUHQ3ErBKJSXO5EVMdL
TLSH
T173D39E584DBF905ACD1121BBACFE02CDBAD9F4C895FCEFA52B4CD10891C4A3D119C9A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000006.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000006.log
Size 373KB
SHA256 1096c46544ee6764a1b687d86fa48cc568a27206779306770d275023786bf736
MD5 314ed01920371900eeca4208ee062eff
SHA1 01bcd1e4ec93f188ad1de7e0ff73a0e4a4b9083c
SHA512 5b235a6d1cfe23c66bb2eef91c2872b065a2a3880a3dbfa1ac2a01bf5ae6e98422929f9a7b7d066f23bceadfef72cceabc844d5f90fa1a15c54dbc66ccb261a2
SSDEEP 3072:SJkr+3A3CI3b8G3TEq//iwctI2YZueH1XD3W2S+GycsID3Wc9W2dqKG+fhUv24qc:L2G+22Y
TLSH
T17A84B568A26E63D5B43E431B13659C0BE335D1C8C6893465BEB23F0D26A7F843E58778
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000008.ldb

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000008.ldb
Size 12KB
SHA256 0fe7ca842996787cb43ff5c8a5a80a195b3b1405b99c032c32740202a776b0c3
MD5 0e77e6b0101b8fd3cb91f2cabb34799e
SHA1 cede89a285caf95040027895517a3f2ddd9d0735
SHA512 20b19c4d54ad4dabfdc33d86553d41f32cb4659b8f3a58e1ec3732cc7b4a2091418fae6ea71a6332a76332fd9ecd835c589e3b3eb7e919caa488c3c8e72680cc
SSDEEP 192:13wVflp9TkjoyyajWxAupngpgF7DYfm12v81DCi+N3SVvaB4yfgb9KvLQwkTpJe1:lwd8bSGup97rPE4JEIJeqeShwmTxBGx
TLSH
T153429E4A29E8D89FE0726637B4F721492A11740D3349D8AEE797108D04626BF24B7E97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 2KB
SHA256 394860184ce57620ee71d8fbd8bf91dc9988de740a5d592a31d32046dbeacf9d
MD5 a22ab6fb8161186fa29e6a32e86bbc8b
SHA1 1465c958b899d32438a3a6dd9044b0a36a2b4644
SHA512 6ba17241ed6d99c88934041f2087f4897b4c7f6dac64b7b6f0c7aa961aa56f14ebc6a12ce1801c3d4659492a131521561bbf6c4e215e5ad6446dc7c1b99be9e6
TLSH
T1FD4169CF7568D5E85491C073F6393086CCCAA101AA8C9794AA5CFBCB07E045FE4D64B2
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 327B
SHA256 e1fa675543d49213978ae9399d5a77399ef72c2ce8a774cc734e93548859e61f
MD5 42f6c2b3791d604c8292a5ad9eb8870d
SHA1 a92055c9b8c8ce952bb21d9ef7a079133ab1bf4c
SHA512 96dc126b387714938c14acc48b01695e6a1072fb2c37c229749a73d03bf76142e7710587d6e7756930c53d7394b808a22049b8aa7198835c70a4d1c363d2e452
TLSH
T16CE0C291CAE809D0C57E0F30093F6659EA11BC4D2C1BDE0E6209D22F80A6F81CE7852E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 61031d6f0011ec1441c34302e29bf9a79c2fdb04cad56aa4a7c6ac37a9ec8e05
MD5 9fc68119390c3c3763eea8078b95c315
SHA1 7f72328c9835d73a6032f6591404c67b371e7ae4
SHA512 52b6dbbb1ca300cf12f066d31aeee3ed9a1cd20584f16a7f525f92adf8b0c66d8d263560f90531892d06b98ff06c89e4f7ad81fcbb799fb5b5d59af415435b44
SSDEEP 192:DKmaCJbDL/j2eJOCaIuupPjEnTNGUXQNPmm7ZkyX9GVW2r1WM1WlbqWIW1+PHrbo:DKmaCJbDL/j2eJOCaIuupPjEnTNGUXQJ
TLSH
T1793279B3C3E8C63DD81156F4DB543A1BCD6D0E2843283C6AC9E9AE4B63E54B1E25474E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

000001.dbtmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\000001.dbtmp
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 9862c8fa7eb3ed9ca75576bb77d57c5a94d5e628adb86d7e75ce792b12eb6870
MD5 ad4f862df749c17930b76ac16474d90f
SHA1 50132a57e112a915e4cdb3d7977e18c0dc8554d2
SHA512 ef7706405e935a57a7cd2b6583a480a701117dd1f5613c3510612c5610289ccd0bf9b6c71337ef03b315a5e5b866970d67848c8dab208056a288ad4e6ddeccba
SSDEEP 384:mR22n9v2bVF7xy1CyoRZUXKrwNr7u0Q/aK8:t2n9v2bVF7xy1CyoXjrw1Qix
TLSH
T14852D61DAA50693B5CDFC32AFA657753C7F6106621C41E84EAFC892C19D39CCB22711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 e85e7199e1821d79cf24dcde8c1998a2c11760966ed1c2f12ed98b3b15027788
MD5 d9f254116d17059b578f8a7d97b6b97a
SHA1 eb8a3135a60fa6cf27959c196c256276b2a10bff
SHA512 abec189ab7906459ec74bc7a4cfacf99178c3968563e03d6e2818f8cddc6a9601d7a15c3b0e3897e90d016eb65f21af70c8f2732b9811903a90a6857fce0c71a
SSDEEP 384:xaR22OPfkv2bVF7xy1CyoiZUXKrwNr9qjnyA/aK8:xh2Wfkv2bVF7xy1CyoGjrwLqDyAix
TLSH
T1C052D629AA50697B5CDBC329FA617B53C7F6102531C41E84EAFC8A2C15D79CCB32B11B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 62d33b6818490c67bc5048f4960deb5a708cf19f0916a01c2c26b1da9d3deb89
MD5 196758e10c37d469aeaffd3b1bb3a98c
SHA1 bcfffe0c847c719523eb8ab11e02c9791ee67a14
SHA512 bb8c6fbcd72b6faec2f302bcee50f9c16bef50db33ca5b5896f2e9850cde16d7990653a62f168df94e753a6e094febab7aef838c4742c650bcc56b8870ab023b
SSDEEP 384:xaROmz2OPfkv2bVF7xy1CyoNmeUXcCy1rwHt7sr9qjZz02yF/aEe:xdmz2Wfkv2bVF7xy1CyoN9tn1rwNgqlT
TLSH
T16B62F72AA960297B5DDAC329FA617757D7F6102931C41E80EAFCC92C15E3ACCB327007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 aca430400c5275ceccf21b4c37112bb56134fd332cac6d3f92bbdd34c7dd0052
MD5 62b700b7e31b570cd03bdce7a508b6b5
SHA1 1664b5811549051b1fb886c84773a956192804da
SHA512 99553e60f9910e282ea12b16ad25116e286680df211c1d241cb33ddbd0560e7c1fae594df898540b910178bffac214a88f4a89f235e5d62ec296056f6c2937d6
SSDEEP 384:xaROmz2OPfkv2bVF7xy1CyoteX8XUtCy1rwHt7/0sjFqjZz02hUaWe:xdmz2Wfkv2bVF7xy1Cyochn1rwNtqlzZ
TLSH
T12662F71AA96029775DEAC329FA61BB57D7F6102920C41E84EBFCC92C15E3ACCB317507
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 86a708718cf15f4439caa697f6058448e2b7016cb1cef9cd2e54315587d87208
MD5 c23047ed70b8fe98404f2d539506eb71
SHA1 777411f14fab3beefe67a6f475f14f7e6e56c013
SHA512 0a47725dfc0cd3a51a0c13fc01329dccf73a0e6fe775075f027ab629f4c8fde68db8b61d4cd2ce4269a02632bafb0dcbc043ec6377186b9c4b1d39ea91b3d0ec
SSDEEP 384:8mjoj7KxkXqKf/pUZNCgVLH2HfgslTg97pLuLcSjuvXODof+ErU3i4JHGtovIld:8Goj7KxkXqKf/pUZNCgVLH2HfgsZg97V
TLSH
T1C77208676C4C9E370F94CACCD8167B4F9DB5014B65EE886483FA982903D5BDB110A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6e25c55c-20b6-45bd-bd0c-5df71b387dc1\index-dir\the-real-index
Size 2KB
SHA256 df0ba6ebdfcd95f1fdb3c8460a89f25cca7132d2def238fcb0671966faf26734
MD5 d0984ec0e8adb1bce6dba6daca79f1bb
SHA1 4a2859bca61e95547ce3448dcf4ccad9ad3b258d
SHA512 371f4dbadf8b296d75fbdff9f7c54b1630d9293a6182dd49c4169dd1c442931e04feb7cd0ffe39ff60371a2d6ef96a278ca3b49750b088603d915e600e41eac4
TLSH
T1DF51734CCD809BAEEC7191FA2D9414B6A7752D28FC58C3928194B1B13483AB41B5B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6e25c55c-20b6-45bd-bd0c-5df71b387dc1\index-dir\the-real-index
Size 2KB
SHA256 e37191204c581efdc723005ea5f3f5cbf9ac1c2ffe82bf1b3c19740233dca029
MD5 d7bd8ccf2f61096a06813afb9a64cfe8
SHA1 9ce00bc14afdec5d0261d1c89996da256d9b1943
SHA512 ba88680d256a981aea5dc101f5d020ca53497b2e77bbd78c2dcdf5c581ee05a5ab81b730d1be605c5c163a3dea943941f0c35f65fc0834898ad128ad8065bd1c
TLSH
T16641744CCC80ABADEC7451BE299815F657752C28FC58C2A24094B1B13403AB41B4BAFC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e78c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6e25c55c-20b6-45bd-bd0c-5df71b387dc1\index-dir\the-real-index~RFe58e78c.TMP
Size 48B
SHA256 7be33122765395944b95388d7dcd244376fa929ad6c1530551cdafc89c7c6663
MD5 74bd5fa4717c028eff1be83afca0082f
SHA1 7a42600e33be07dfec07ee746c97f82db959e450
SHA512 df8667c913f73fc738eb4992e5f302b9716a505c5d3b53b5dcd74218fd2ed23945a1784107d06610cced30cfaaa8c1f76128914f425f664c61b61fb21d8ba755
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e8005761-79f4-479c-9120-fc8e69b42429\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e8005761-79f4-479c-9120-fc8e69b42429\index-dir\the-real-index
Size 576B
SHA256 498ecbfd1480c61341063815c04ddf0fb82589fe317a6317ddea513e57e130fb
MD5 37780192d2fa3425b720e9108a25f4f4
SHA1 3dd5fb233a4f6cc9c2764280d305760dccca60a1
SHA512 b759d4cda19d43136a7674b83af817074cddafdac0970d6ba1f6f8514da6e198b89d82fde0d452194d9ce04c79b9f16ffc9cdcf37a761ae9e0e785617c7f332a
TLSH
T182F0F115FBC83EA5DF2AC976017BF4A231E1D028099A5DE3B786012E711B6A20E84200
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5943d5.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e8005761-79f4-479c-9120-fc8e69b42429\index-dir\the-real-index~RFe5943d5.TMP
Size 48B
SHA256 48dc718f45d7fe70eb9aed94198fd3d9ed1e6e42871082af9b986e9549a15f4e
MD5 58f001e096ee39fff13abaacb9d8a64f
SHA1 eb42c17f2b2ed87d5026577ebe3180440e88efc1
SHA512 4b5baf5fa6ce44e0c0b0cba158c8a13a0f71cc513895e49aaee87ec573aded7b179b7993cca721e752966153dcac3c40d639337016ffdc9385b7935b301bc49b
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 afa157ce02476717f78e6b12456fce51eeee06850e7ccf4d26c0461c52e363c2
MD5 3141ddd125cf835f05a29736cf678e5e
SHA1 dee4aedbee2e86161b9c79aa45d749b9f4e6d57d
SHA512 bda79001430008c02125850251a8b15e6316363506c77b9e5bef206b5648575db824e15ebd0c081a0177daa6d035310a2c04817562efb68a3dc26e1a5c1084df
TLSH
T137D023C6453594575F75DFCCE434154C45365F18CCC0CCD456857006747C713C113E25
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 dc264295f5cdc11f4a488a16ab39bb2d7e8d649633fe63fe7612b6cd7956eee7
MD5 21c02e5b99a7a4e456ba72e3a391c236
SHA1 10309f665448370be692ae298f9bfde823776eac
SHA512 b6ed3c417fac988b97afd74035f5b1221aa30b40eef1d8637a8762775d302af97f96cb174f225564ca8f429d49db190875b60409c7d12ae6931df8c7389fe20c
TLSH
T136D0A7C5573155915B30A684A838198D9526FD55C8C0CCE4AD45705A6178513C022A6C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 243B
SHA256 777aef5df703c17ef6e34cfa103bb93c11d84be1003ce54f0c658a8bbaee5ae5
MD5 cc48e7665cd75ce918c5988fb04e2077
SHA1 4f8f04b82c2a7477075acf3a848a1417e51f14d8
SHA512 b56fbb61b47fb96d757dcd77a477210604446036666bbaed55af83dbb4277fb68bd81113ba2e56dde1ccf1c363f5a0a0cccd678179a15db402acc7cd10b49c59
TLSH
T106D0A5563554514157356DC43434765C411EAF4CCCC6DCF8954571057374517C131A6C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 390B
SHA256 aca6eec173ec726216391300ed7d2371e77d3be920e8fec2a492e2809a7d8191
MD5 a0473344f07a11affe89d5fb49745762
SHA1 26341858916cd1ce2ea2b48437c24c35dadd5313
SHA512 a9a3c95f8bfdb7dcb7361ff5487d203668497b2a1636cd7dc2d6c457fb8c5a7344428603f38f1d165c78803306b63f5b25f41b331b5083be0ade739fccbbe920
TLSH
T16BE0F101B55110419E339EF17831759F8129B5444C49CCE84641700F773011FC072E29
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 1ee3ca00bf24628b389973da4955a0e31670c3dbf3d54393becee5bdfec89ecd
MD5 057f4bc73c035c83e35a8cdda90e490e
SHA1 f483aa7c4cc282cd8837abf59be9a3ffdf1290f7
SHA512 86b340700357fad93b13b386bd5fcd21537cc7486698cecb0591ced87212cd2328befcdea7e23d87f4480f5da6d5eacb46f4e2b72b7201309c801bcb30ac75d0
TLSH
T1AAC09BD7151495D65F71EFC454356B5DD51B965CCCC4CCF4A545700AB03C9138513A29
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 e7ee1643476b28b7ba413e228c27498578a4a097d8609db8de38745d5bc6360d
MD5 829ca71b6e92aa99f7d74924b38dc4ca
SHA1 03c5d0d81b29a9e9d9def8f578a6a0c6eb0742bc
SHA512 34e40f6ade2ebfbedb6868f7063efbfb7954e2fcb9670a92ff5b6a7a3fa4ba5b8edf4c279c55642a0581022f3bcdf754254231afa799c51af847a3b25fddc835
TLSH
T16AC02BC3050090D24F30EBC838343F1CC51B824CCCC0CCF4E909300BB23C8138012A28
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 383B
SHA256 8d8d2d728b654fb157b3df306f173e89f028f71eaf84f94040f789215dfd3714
MD5 bd7534226161e94206e34c30e65225c6
SHA1 8c0293f87219d06a58113b6f15e64735146ebd46
SHA512 8fcd687333f0a9fc6c47bf56e6d325b4a7704b0978b7982e5f24d67c0cf6d35ca6c93c9e789225db10fb1514e583357f40702d7bc27c5c4be6045c1807be5163
TLSH
T17DE0F111B5512001AE33DFF13C31726F8218B1448C4DCCE88241600F793012BC073E2D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58da1f.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe58da1f.TMP
Size 137B
SHA256 6d94ae859d9edbab004a9373f1df701bd0e67b95202ed2a8c21dac9753fd2962
MD5 f93ecf66ed4e28a99c6dc5fdc5cca2ea
SHA1 50dd28687eeadd151c63ba359b760097897278c0
SHA512 f0a36487fe0cf63e86bbe5f37805fac17f88d19f76021a5e08c06d6a46afa35a110426c2f4cd2c699a467467bd7006f0b17d44b224708de781e03b2a8e91048b
TLSH
T181C09BD7151455D65F31EAC454356B5DD52B8D5CCCD4CCF4A50B7016F03C913C512A29
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 eb76c433adca38b2d51a71acd8f590d17374973730c1dd03b6721ba023ec3ed1
MD5 3eece2173c7243a0a63f4e193e6a0e23
SHA1 6a59c24fe1d622548f618c5f56130b3e3b0b6854
SHA512 31fd79e36432b250308433b32c103e24819ef2928936aae31fde7eca673bba7f813ca85ee1a8311c68d3b2f5eeb5ef219c4545c4d52bfa1553fcdf8d02f7c3d9
TLSH
T1F5B01240C4019211C05602F4114214C871149F10D60B170183F0AB23CC35150D0250D0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 168B
SHA256 b6ed6ff097513db1e185c598b1166b47484114af075b9b5c89b8078f8187a683
MD5 3f003c086301a0b2e7d41dd035909aeb
SHA1 12d01d109140163d29835b57c1c673f7146bf479
SHA512 7dea16c90379d47f5da926274a7dcf7571a69e2d0ca1fdd1891fdf4e64785b06cf23bd460154141ddc8efd4caf4c3e64aaaab835167c760a457dd2290c5b33eb
TLSH
T1B1C09BD58C135502C45606F4566555CC7134AF95CB0E370541F8A97BE87B271C45C155
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b0dc.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58b0dc.TMP
Size 96B
SHA256 2563a95fa4ba30c60d89145a178d7586cb0829fed903d4b5ecc24826bf031daa
MD5 9e71464b2d2f64b333d740356ed916e7
SHA1 823b31fd7764a2ff02f627eae8bfa07c09994737
SHA512 6bab4d08b318ab1e9802a591140f281bd697eda779b7bdb580757e4d5844130e9847b8b6259da7f8b1d70fded960f45b5e40f9b924db66091dbe869761b1e08e
TLSH
T1C9B00255C1426212C05A03F07999A5D87164DF79CE033216E6E16B6BED356608BAA560
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 68e74002d91b63d0188212b90cb57ecf3e4560785a30693d4c2ed8c1ad758a20
MD5 36622ecbd1b3bc02c6ffb3bd0f18fffe
SHA1 ad8a4cd844e3f39b5612cbafd4a0e108fbf9922e
SHA512 dfdaf19037bfe45e66daea98e492afeb555ac3667ba730eeefaa0f1f7fef409d20c05c2cda5c5043cecf4922d5f066161ef36f3afaebd1c553ae6a92df8b597b
TLSH
T1B1B0121631C18806CA0002B600E042403A215C4042820052209A055480423500769460
MD5 SHA1 SHA512 TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir2524_146409014\Shortcuts Menu Icons\Monochrome\0\512.png
Size 4KB
SHA256 d345d2dbe2efd56ff9494cb31cae0e28cde5bdf176a22bca9aee27465b117c88
MD5 97193e4d969021cb6e6ad1b25bb7499a
SHA1 69cb3acd8bc0b31b63791efc9dc47d5657bbf40b
SHA512 1df06713846ea152089ea40434f3fcff250ba2d2c0b5afcbc546b82a65b68f3ad1cf503dbc4e8246765c01f191b4f8389c4c55efb7da507f443d858a8dfd704b
SSDEEP 96:TTcYKfambSQTNpzzBOWUjfRVS/TFm9BfyKhnaBS8ZP9jeLWfbOGp:SbSQTNh9gD+mLfB49ZILWfCW
TLSH
T1B0A1968E8CB5488E66658747D48538A2C5B030A7A7BFC3BE719D174851E32C6FF29B06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir2524_146409014\Shortcuts Menu Icons\Monochrome\1\512.png
Size 7KB
SHA256 1e0b1b2e4dac49da1e2ce91a72e01f77fdb3bbb26ed3422e5d4037745cc307a4
MD5 cc525d60c0dc9696ddfe9524dc9abe82
SHA1 fc94cbd2a45bf2ff0fbe411f57a7cafa31126bfd
SHA512 09ab42f7dc3d6a08b9635ef229539a5c4c240506378a9de4eccf1f69d52b266222cdf084e9a567c6d21f19e61c4da7ccd98928870d6f10cd74e9158c64a4142e
SSDEEP 192:U3/tgbWgm8Xl2X+xqWwB3kUXPmv9rCywxAQU:2/rgXXExWKdXPa+txrU
TLSH
T159F1AF6F639B59EA3AF8493D4BD7A21FD62E108A2F275B71C5101045628A1C1FC69F0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir2524_146409014\Shortcuts Menu Icons\Monochrome\2\512.png
Size 9KB
SHA256 ad08077126e7106674e4219f5f9cfac2305e8b3f627247c1d3e72136399e6fd2
MD5 660ae59d489be5b5e1e9036b88b4a033
SHA1 b1ebdb9421bf14b5c43a399b4dbd92288d91a604
SHA512 3bf52f4d1e92ececb7691bedf1f53dea75041615447eac2c1ec9f99d07417a571e08fbd2db58896506350e8af831e8fc943d35e35747a8cb6db9a03d880331f9
SSDEEP 192:uJTyU9sUZdxl59pfNK8EliT9Tjx/t0xM6LwZx4nwBmJH/Rr6O:g9sUxXM8iiJKMfcTJIO
TLSH
T1F022BE9744E4E7A3427CAEBF4684D914DF4E1B7384366E10020B199F0D7AA8268E8B93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

16.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir2524_1505911207\Icons Monochrome\16.png
Size 257B
SHA256 d52376c8b210b8003f5aed9f4555a7916b4640d4c42a36cc81d9864991c87a8b
MD5 6cc922565abd761f4039c816d86018c4
SHA1 05393c91529467f8ddec22a121fe482701365d6f
SHA512 8732f24ea85ab3fa845b3cfa2a354a85cab63a507947fb61bd8119c623e31c87d6f0735ce7f06119db597ec4fce4ad44c15046859b574cb11fb1306e489cf995
TLSH
T1ADD095F2E311DD34C52E96900533C473F433171B1DD56055664491DA4D9E90533C8D59
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 e5894c11c6cb0cf8482e953f89d781c701ab189e54bda667772191fc6a5ca3c7
MD5 404daed7954abab097ea12b93a97e0da
SHA1 96a27841deec3cd85c991253093656d1d353bce3
SHA512 e105f4e928902c17bd1d2f41a751d8771bc345d2bf23531867fa740ed462bd2a64bdbfac554f4752517041a42b86d7f5368a3d080e2a5e42bee52518ec7494d2
SSDEEP 3072:JGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:om7Rkm1tYpBeh2BAoi
TLSH
T1FAC312375E70E9775979AB0EB48E0B1F2EF149A6C830DE92C8D85A0437E97CC1A45E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 2c98479c8e0faa0052d00e76f4433536a3fd87bf147ae9c3561f351a2c7e6fde
MD5 146d30cb82811ae5e4ffc15f719e298e
SHA1 1934bd61ba5508f9a868bf82492e38ad85cc6c02
SHA512 4dd1f4078166980de90c8de3934213097955ff8fb4c3c62101489deb0e8a43fd38e9a457cdfd682badaf706fb95e86bd6517c20766a5d1e60f1a016852527cc4
SSDEEP 6144:dPnKCZgoCcq8Unqtm7Rkm1tYpBeh2BAo6:d/jxpnQqk9oBGcAo6
TLSH
T1FA34232ACCBBED776516E70E604E1A1D6FF12CE7C864AD71C9C8AB4466D82CD0B06D70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 f0339f56bc70fe386cac7b110dea9efc71d2766fba7711ecaa8b9193604b0ca4
MD5 8916e1e9fe90ed5bd4dcd3d3bc1a3dbf
SHA1 2b1b6e6af2590e49ab477149a767211b96fc4cdd
SHA512 5e3487475f8f20d91949152d58eb61e8002fd38181f1559e5bce37ecab357f6d93aaeed452e3dc2f941cc8a49ddc35bfa3806db10cea5beb484b7b13a2ace1a6
SSDEEP 6144:4PnKCZgoCcq8Unqtm7Rkm1tYpBeh2BAo6:4/jxpnQqk9oBGcAo6
TLSH
T12534232ACCBBED776516E70E604E1A1D6FF12CE7C864AD71C9C8AB4466D82CD0B06D70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 495eb57382db4f554b9dab49a5095dc09ddab03d0feb20f20f6c88ee515bbc8e
MD5 981a87aece5dc8154241c7d97d14469e
SHA1 c365240c9580e49e17f7cb8c85c75d26969e5eb2
SHA512 14cb196ff4a07ffb2923c4ccaa9592483b886e87a184b0f69c367092d5ce2b8a819679e1b28cbd1ac99e4006db44c421ff9646612a7d41639d40563d367d51b5
SSDEEP 3072:WRhKbOPmAxhKn5xYgoieCrDo6I+i0t8UemqZUGm7D5Lk17ox1tIpud63U8BehbC2:WnKCZgoCcq8Unqtm7Rkm1tYpBeh2BAo6
TLSH
T14A34123ADCBBED776416970E604E1A1D6FF12CA7CC68AD75C9C8AE4466D82CD0B06870
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 9016067b975412c2de7aa0f5131e569d6da118b70a21f5684d7c5e45354886a0
MD5 13a3134f5eeb1c44c9b08ce098a6a241
SHA1 38aa16eea604bc069dac5f60946b16f31c599285
SHA512 25e994a465ab70fb04e342e8814d25db8d0da843eaae2cd3a8b6a02803b0125aa3bca51b11a1c015a0362b652eb3f830be52d9a31be01860d5bb7fb996539901
SSDEEP 6144:jPnKCZgoCcq8Unqtm7Rkm1tYpBeh2BAo6:j/jxpnQqk9oBGcAo6
TLSH
T14034232ACCBBED776516E70E604E1A1D6FF12CE7C864AD71C9C8AB4466D82CD0B06D70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__PSScriptPolicyTest_u430aoc2.1m2.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_u430aoc2.1m2.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3936-51-0x000001A07F160000-0x000001A07F16A000-memory.dmp

Download

memory/3936-49-0x000001A07EC20000-0x000001A07EC3C000-memory.dmp

Download

memory/3936-53-0x000001A07F170000-0x000001A07F17A000-memory.dmp

Download

memory/3936-52-0x000001A07F190000-0x000001A07F1AC000-memory.dmp

Download

memory/3936-55-0x000001A07F180000-0x000001A07F188000-memory.dmp

Download

memory/3936-50-0x000001A07F0A0000-0x000001A07F153000-memory.dmp

Download

memory/3936-56-0x000001A07F1B0000-0x000001A07F1B6000-memory.dmp

Download

memory/3936-54-0x000001A07F1D0000-0x000001A07F1EA000-memory.dmp

Download

memory/3936-42-0x00007FF428240000-0x00007FF428250000-memory.dmp

Download

memory/3936-16-0x000001A07EBE0000-0x000001A07EBF2000-memory.dmp

Download

memory/3936-15-0x000001A07CAC0000-0x000001A07CACA000-memory.dmp

Download

memory/3936-9-0x000001A07CAD0000-0x000001A07CAE0000-memory.dmp

Download

memory/3936-8-0x000001A07EB50000-0x000001A07EB72000-memory.dmp

Download

memory/3936-57-0x000001A07F1C0000-0x000001A07F1CA000-memory.dmp

Download

memory/3936-0-0x000001A07CAD0000-0x000001A07CAE0000-memory.dmp

Download

memory/3936-1-0x000001A07CAD0000-0x000001A07CAE0000-memory.dmp

Download