a2dccbe99308e1cfe4a00957950c1e8d596976358e92141144381134db154ca2

Analysis

user interaction
yes
max time kernel
148s
max time network
134s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 15:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
grim (1).jar
Size 7.4MB
Sample260804-s6r43steme
SHA256 a2dccbe99308e1cfe4a00957950c1e8d596976358e92141144381134db154ca2
MD5 015d31707ade6a44b047e3878c6be746
SHA1 779b951dc5d80b40ab75e8e76a9634d4a99945c9
SHA512 f6db3a33bf32b5c89c2f903e04a9ac94813732509ec6f498746da3815700a8583e3e9b3646199b927d547dcc51b124624fe311172941a091eed3f42abccd6afb
SSDEEP 196608:GRZEC3QIL0j+2oVRbPLs460+WabmxVWktck+Vp7n2lOEfuAK:KEC3QIQYRzLs437auWsJ+VpILK
TLSH
T132763346C9A9EC90CFD1CB735B942E0B5F58913B82B28DFE1E02F4582C4572796E26D3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4312	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303318897504213"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4520	chrome.exe
4520	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe

Suspicious use of AdjustPrivilegeToken 30 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4520	chrome.exe
Token: SeCreatePagefilePrivilege	4520	chrome.exe
Token: SeShutdownPrivilege	4520	chrome.exe
Token: SeCreatePagefilePrivilege	4520	chrome.exe
Token: SeShutdownPrivilege	4520	chrome.exe
Token: SeCreatePagefilePrivilege	4520	chrome.exe
Token: SeShutdownPrivilege	4520	chrome.exe
Token: SeCreatePagefilePrivilege	4520	chrome.exe
Token: SeShutdownPrivilege	4520	chrome.exe
Token: SeCreatePagefilePrivilege	4520	chrome.exe
Token: SeShutdownPrivilege	4520	chrome.exe
Token: SeCreatePagefilePrivilege	4520	chrome.exe
Token: SeShutdownPrivilege	4520	chrome.exe
Token: SeCreatePagefilePrivilege	4520	chrome.exe
Token: SeShutdownPrivilege	4520	chrome.exe
Token: SeCreatePagefilePrivilege	4520	chrome.exe
Token: SeShutdownPrivilege	4520	chrome.exe
Token: SeCreatePagefilePrivilege	4520	chrome.exe
Token: SeShutdownPrivilege	4520	chrome.exe
Token: SeCreatePagefilePrivilege	4520	chrome.exe
Token: SeShutdownPrivilege	4520	chrome.exe
Token: SeCreatePagefilePrivilege	4520	chrome.exe
Token: SeShutdownPrivilege	4520	chrome.exe
Token: SeCreatePagefilePrivilege	4520	chrome.exe
Token: SeShutdownPrivilege	4520	chrome.exe
Token: SeCreatePagefilePrivilege	4520	chrome.exe
Token: SeShutdownPrivilege	4520	chrome.exe
Token: SeCreatePagefilePrivilege	4520	chrome.exe
Token: SeShutdownPrivilege	4520	chrome.exe
Token: SeCreatePagefilePrivilege	4520	chrome.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe
4520	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 4520 wrote to memory of 4248	4520	chrome.exe	89
PID 4520 wrote to memory of 4312	4520	chrome.exe	91
PID 4520 wrote to memory of 364	4520	chrome.exe	92
PID 4520 wrote to memory of 364	4520	chrome.exe	92
PID 4520 wrote to memory of 4164	4520	chrome.exe	93
PID 4520 wrote to memory of 4164	4520	chrome.exe	93
PID 4520 wrote to memory of 3944	4520	chrome.exe	94
PID 4520 wrote to memory of 552	4520	chrome.exe	95
PID 4520 wrote to memory of 3944	4520	chrome.exe	94
PID 4520 wrote to memory of 552	4520	chrome.exe	95
PID 4520 wrote to memory of 620	4520	chrome.exe	96
PID 4520 wrote to memory of 620	4520	chrome.exe	96
PID 4520 wrote to memory of 3532	4520	chrome.exe	103
PID 4520 wrote to memory of 3240	4520	chrome.exe	105
PID 4520 wrote to memory of 3240	4520	chrome.exe	105
PID 4520 wrote to memory of 2652	4520	chrome.exe	110
PID 4520 wrote to memory of 2652	4520	chrome.exe	110
PID 4520 wrote to memory of 4948	4520	chrome.exe	111
PID 4520 wrote to memory of 4948	4520	chrome.exe	111

C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
java -jar "C:\Users\Admin\AppData\Local\Temp\grim (1).jar"
1⤵
PID:2396

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffac49bc728,0x7ffac49bc734,0x7ffac49bc740
  2⤵
  PID:4248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1968,i,3840728099046571872,13333376850886512580,524288 --field-trial-handle=2032,i,17699619286269224893,18267403022339104072,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1760,i,7250139967702186241,12602039950475377682,262144 --field-trial-handle=2032,i,17699619286269224893,18267403022339104072,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2028 /prefetch:2
  2⤵
  PID:364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2428,i,9769049192468946787,506681108366608970,524288 --field-trial-handle=2032,i,17699619286269224893,18267403022339104072,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2596 /prefetch:8
  2⤵
  PID:4164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3108,i,16982647573303603747,14742100700219401812,2097152 --field-trial-handle=2032,i,17699619286269224893,18267403022339104072,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3120 /prefetch:1
  2⤵
  PID:3944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3184,i,12432997444590129443,9350552344475194149,2097152 --field-trial-handle=2032,i,17699619286269224893,18267403022339104072,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4612,i,1459463636201254510,5518620681481569558,2097152 --field-trial-handle=2032,i,17699619286269224893,18267403022339104072,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1768 /prefetch:1
  2⤵
  PID:620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5356,i,16804808496884350171,5847342880776827552,524288 --field-trial-handle=2032,i,17699619286269224893,18267403022339104072,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5260 /prefetch:8
  2⤵
  PID:3532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5600,i,2436813087105930402,18444396383025532091,2097152 --field-trial-handle=2032,i,17699619286269224893,18267403022339104072,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5616 /prefetch:1
  2⤵
  PID:3240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4512,i,7176091092322599912,474523110364774583,524288 --field-trial-handle=2032,i,17699619286269224893,18267403022339104072,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3376 /prefetch:8
  2⤵
  PID:2652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3224,i,12625282228086358336,18188003188449398344,2097152 --field-trial-handle=2032,i,17699619286269224893,18267403022339104072,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3184 /prefetch:1
  2⤵
  PID:4948

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4920

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3856

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 475929ffaf6d7e4fd9675acce2afdd278e9309545589f7deec5cd3a8e7e06fa4
MD5 c7f907e7ead430ae6d436b39f09f7c15
SHA1 cc13050e4896b31f920e592ee248c0e1d14c2867
SHA512 939c0eab7d1da2a22d0cf8dc4c0f1be31b4b80699e89788bb7289113139ce9940232c7edbfadf7f09fcbc7e8f5a565c66168f249add70eedb7978514fa20c52b
TLSH
T1ABE02BABDA31BC2B18F9076C50800B8AE64013573F40C95F363C8109CFF5A764145C1C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 0ac3e305d28b41d3f9da0f99f786efc653596594d490a83685fbdb946c451035
MD5 0c208adaba271a737ecb1e37edd33256
SHA1 931397fdb60145b295085a629d14e74669ada3b8
SHA512 1fbd54d717d351e2261263e0e9b6d816dfe57a76539e51a1f21fb734eb74fef989263ff4a7a06429b1696898e7695dab636e3910876b3c7d3ca2eade66fbb330
TLSH
T17551D755B8E3A80CCFAED07301642F1C6BE821860C83739BEB407D35225F5E4E672591
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 5fd1955d5fbbe817ef91a40c77691f15c78a0c2d2a707cdd0602a3d76946beec
MD5 a4bd8fd0731a3342e81f0df1d0539cf4
SHA1 de35c3f7dc79146624876a7823814cb5e9a2bdc3
SHA512 422957aa5934b4598cc7618f21197ca8190256f7a40f43fc06b40cf1f15ce1bb7934355d7d2126c08766a3d5923b09dc082eb5b51ce178e663bf316faa208f41
SSDEEP 192:D8dRWm6aIfO8w6DVIh1Lg8IzIDIzENGMOg8u9HfwHuQ7:D8dRWm6aIfO8w6DVIh1Lg8IzIDIzENGj
TLSH
T176E1ADF3C3E5C92D891256F4DB156E2FCE690A24031C3876C8E4BE5B93E2871E20175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 2KB
SHA256 e977327678a7d3520bdefeefb8a2eec59c7fdf7fb6c587b9352db0670d3feccb
MD5 c2761d7d07d80d19273aecb4a730e6d7
SHA1 8cb7ee7de59af08a5a0cc54b85e07f7050a95330
SHA512 7efc312f0828c49300c00234688c786ad3ddb73e336c224e768324b4923bc7a852d29955d7604e6efe05931672be5ba0e3b9387c0ceb221c12f50f018c1ff2df
TLSH
T1B9419E579BBEB40750B85ABB1E09BC0959B6A4324186A8F4FF67906CB0825F30F12477
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 6769d7b78995ab4c622c2da68bb70f54a0e49ef47e92b088ed544323275559d6
MD5 0932bcfaee81748e81ddd9465402ec31
SHA1 ac2b12058013c284faa6cba5be5adbb2a24d5280
SHA512 17ff75594b890e9506472563cc9fd97f8eb530fcc78512174cba9cece8023b88597b297670b52837644896e31b78d670015b3be3edb467bcffd8a6847e4b5e32
SSDEEP 192:ZRAcBzsxrjv78pAPRp2ZIdm9DHsb+WNBynU4VS2BeeSXaM8PIVyIsnAUgtaJ:ZRAmzs9b4UX65wHz2BiaK8
TLSH
T18D42C62FA920693B5CDBC229FDA57767D3F6202161A52ED4EAFC892C04D79CC312711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 13KB
SHA256 3426e293396fa1424a09f9423424627a398157ab7bfc3ec06964ae1df493a1c5
MD5 be6f9d6a2cbcb56c02708e735863c266
SHA1 974f8ac2aeecd275c490a6e72bf1549cc608ea18
SHA512 5d06f958f136237f1a30c847cff1a2af158baf7b8f8804d6c444ebc126d222c22c946442ed853f321e6823a9c6894841dac031de891b36a87a920630130e9eec
SSDEEP 384:6QjOp7KxkXqKf/pUZNCgVLH2Hfgsl9RXODOB+ErU3ymHG/5Ut4vtEp:6UOp7KxkXqKf/pUZNCgVLH2HfgsL1OSK
TLSH
T1EE52E867648D9A3B0FC8D58DDC16BF4FADB6015766780C7452FA5C0803A97CB124A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 29c023e4f80b2e65610321a8666a18862f733518a2b6755dc3893f38a5480fa2
MD5 1fbf3f5b1b3e84c471395a0601c1912b
SHA1 0094534e1de206c3021e7a8f2104535f56fb79cc
SHA512 3e48973f1935b023efe87b63ec3d527b87327e8c7b2b7b2bc29f77ab13275a0f36b773cc638c20fa0e752416a94a98f9f1b5fb671b0db813faa5a67ef219c342
TLSH
T17DA004F401474070F03C07F1D0C311C113104C5575D57FD540D15075DD711445131D40
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 241d1ace01f85762caa7ee818e2956b53865070a6ca072efd936015b0cfb29e5
MD5 f592e1a50ee9e2580d291af172c626c7
SHA1 1a25ef4bff1cf53c9d9db0f7ca9c29e46d34b275
SHA512 d8f7f61c402567318aa4c59f1c0f45aa11e62dfd8a8a00bbf24c626cd5a11b1c8533bfa6b707bb2bf6f7367502e6527f0c5532629cab2d2fa8b97f76033d9b0f
SSDEEP 3072:rGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:ym7Rkm1tYpBeh2BAoO
TLSH
T128C3123B5D75E9375979A71EB48E0B1E1EF249A6C930DE4288D86A0437FA7CC1A04A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 f80ce9a1cb486fff7f6a36b86d174cef7913e8ef08a27750dd075362719f7833
MD5 85314e8e025324888578517c28d59dbc
SHA1 2e0adaa6a2b9c6e7cbea3dbd4ad98c850c9487b4
SHA512 78e9d973c3ab1cc024ebb7eeeadd9860769e1a9497e944a92760cac48301d544729946af9708c6f2f71047b820a31b140992092f7a8835e3972d906d64d02a93
SSDEEP 6144:j1OlsPQCfjiXVzoJHg6JOMxheoPNm7Rkm1tYpBeh2BAoc:j1OlsIejilEJAkbzs9oBGcAoc
TLSH
T1CD34122B8D206D7B5C74BB1E704D4E0F7AE08DA9E7099EA1C6C52748336E5C82F47638
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 d477285856871b919be1f29924a4ed0b21e9f45eebaa80320d3632f26b29bc2a
MD5 4c4d284e9385d72da8e7ff8955a6813b
SHA1 f4312cec3de9fd8de62d3556cd1981c86e72b7f8
SHA512 d04fe7ab33bb23131673860fe13ad671248fc74998326459637b5449cd04f0a8d1f96f76c22192b52c13cfe1f4392a195bc9c4164839ed7787c0fbb529231c0e
SSDEEP 6144:41OlsPQCfjiXVzoJHg6JOMxheoPNm7Rkm1tYpBeh2BAoc:41OlsIejilEJAkbzs9oBGcAoc
TLSH
T14834122B8D216D7B5C74BB1E704D4E0F7AE08DA9E6099EA1C6C52748336E5C82F47638
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2396-2-0x0000021080000000-0x0000021080270000-memory.dmp

Download

memory/2396-12-0x0000021080000000-0x0000021080270000-memory.dmp

Download

memory/2396-11-0x00000210F55A0000-0x00000210F55A1000-memory.dmp

Download