03a234060541b686ac4265754aff43df9325c21383f90e17f831e67965d717f8

Analysis

user interaction
yes
max time kernel
86s
max time network
84s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/08/2026, 23:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Optimizer-16.7.exe
Size 2.5MB
Sample260811-3ft6vseq51
SHA256 03a234060541b686ac4265754aff43df9325c21383f90e17f831e67965d717f8
MD5 7f57207f221db2b08e27d64bc9121b28
SHA1 3bfc4b12a533ee1ce62e5d348027d4ac90ab49db
SHA512 7cc44ff1c3210db2478f4e37fef23669f0425b1b1672fc5f53956890daccb84b32fa25c8da9f7ce0cd1deb9e697e46cdae0762a0af818f98b93544b8e39f8a25
SSDEEP 24576:zv5MZtiOMKNOJMv9EC8oJ8VxHuDBjk38WuBcAbwoA/BkjSHXP36RMG:zxMZtiOMK9EC8oa6CSA/Bkj0
TLSH
T176C5291333E84927F2AE677F9071093D53B9AA3F9A77C74E7814B89E84957028907723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
7	raw.githubusercontent.com
8	raw.githubusercontent.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4360	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134309645081919749"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 5 IoCs

pid	Process
2524	Optimizer-16.7.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	2524	Optimizer-16.7.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe
Token: SeCreatePagefilePrivilege	540	chrome.exe
Token: SeShutdownPrivilege	540	chrome.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe
540	chrome.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 540 wrote to memory of 2008	540	chrome.exe	90
PID 540 wrote to memory of 4360	540	chrome.exe	91
PID 540 wrote to memory of 5008	540	chrome.exe	92
PID 540 wrote to memory of 5008	540	chrome.exe	92
PID 540 wrote to memory of 1544	540	chrome.exe	93
PID 540 wrote to memory of 1544	540	chrome.exe	93
PID 540 wrote to memory of 1548	540	chrome.exe	96
PID 540 wrote to memory of 1548	540	chrome.exe	96
PID 540 wrote to memory of 3704	540	chrome.exe	95
PID 540 wrote to memory of 3704	540	chrome.exe	95
PID 540 wrote to memory of 1884	540	chrome.exe	97
PID 540 wrote to memory of 1884	540	chrome.exe	97
PID 540 wrote to memory of 4708	540	chrome.exe	98
PID 540 wrote to memory of 4708	540	chrome.exe	98
PID 540 wrote to memory of 3512	540	chrome.exe	99
PID 540 wrote to memory of 3848	540	chrome.exe	101
PID 540 wrote to memory of 3848	540	chrome.exe	101
PID 540 wrote to memory of 3472	540	chrome.exe	103
PID 540 wrote to memory of 4172	540	chrome.exe	104
PID 540 wrote to memory of 1412	540	chrome.exe	105
PID 540 wrote to memory of 3392	540	chrome.exe	112
PID 540 wrote to memory of 3392	540	chrome.exe	112
PID 540 wrote to memory of 2060	540	chrome.exe	113
PID 540 wrote to memory of 2060	540	chrome.exe	113

C:\Users\Admin\AppData\Local\Temp\Optimizer-16.7.exe
"C:\Users\Admin\AppData\Local\Temp\Optimizer-16.7.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2524

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffdba92c728,0x7ffdba92c734,0x7ffdba92c740
  2⤵
  PID:2008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1656,i,1164154758018969150,12791284433713984499,524288 --field-trial-handle=2064,i,7020873823864436898,7016101549880794141,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2260 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1756,i,17522343763283345705,4102035027177666933,262144 --field-trial-handle=2064,i,7020873823864436898,7016101549880794141,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2060 /prefetch:2
  2⤵
  PID:5008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2464,i,67661942751264376,16102674185580021517,524288 --field-trial-handle=2064,i,7020873823864436898,7016101549880794141,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2388 /prefetch:8
  2⤵
  PID:1544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3292,i,17558135470179326263,11232654709083915728,2097152 --field-trial-handle=2064,i,7020873823864436898,7016101549880794141,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:3704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3296,i,5905342090049783231,13700264034824574869,2097152 --field-trial-handle=2064,i,7020873823864436898,7016101549880794141,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3348 /prefetch:1
  2⤵
  PID:1548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4388,i,12653337565055566755,12023881479524928047,2097152 --field-trial-handle=2064,i,7020873823864436898,7016101549880794141,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4392 /prefetch:2
  2⤵
  PID:1884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4664,i,16564246939763042685,15716091086030906595,2097152 --field-trial-handle=2064,i,7020873823864436898,7016101549880794141,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4728 /prefetch:1
  2⤵
  PID:4708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5532,i,12226530811537530852,13035661978121678634,524288 --field-trial-handle=2064,i,7020873823864436898,7016101549880794141,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5540 /prefetch:8
  2⤵
  PID:3512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5892,i,15072176117863629840,13275495592365065017,2097152 --field-trial-handle=2064,i,7020873823864436898,7016101549880794141,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5908 /prefetch:1
  2⤵
  PID:3848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3676,i,4735282176535771049,13375134553095354137,524288 --field-trial-handle=2064,i,7020873823864436898,7016101549880794141,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3740 /prefetch:8
  2⤵
  PID:3472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3672,i,3514268599297878124,15212076284558605528,524288 --field-trial-handle=2064,i,7020873823864436898,7016101549880794141,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3360 /prefetch:8
  2⤵
  PID:4172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3688,i,624070306508083673,10248639018401184465,524288 --field-trial-handle=2064,i,7020873823864436898,7016101549880794141,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3464 /prefetch:8
  2⤵
  PID:1412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4612,i,9080870194574080199,10908251514924089016,2097152 --field-trial-handle=2064,i,7020873823864436898,7016101549880794141,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4584 /prefetch:1
  2⤵
  PID:3392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=3684,i,7897251067610225082,6761445857136281185,2097152 --field-trial-handle=2064,i,7020873823864436898,7016101549880794141,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:2060

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3472

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1992

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Optimizer.log

Path C:\ProgramData\Optimizer\Optimizer.log
Size 292B
SHA256 27b521e83955863d8bf48b76835813313b2cf11a802f87e55aeee16035e4667c
MD5 9aaa53b743b7ddd285407a14731e7009
SHA1 09dc82592463097a7e3c38bf73b27849e4886b50
SHA512 b8075c072d3db135f1d08d027d135d697bb99dda3add2d89f3d3d92c5b0872b6bfa3017f6e0da0b699bb29efcc5a7ed9277ff6407809be98e01ffd82bb1cb4a1
TLSH
T12BE07D2D105BEA70107128606113651AF754C130F6A691CA304CC8D02941A99072F91E
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 d3c17bced8a48b3ef5cb83adbc3b951a8425b88b1532632e8d9920117f17af4e
MD5 992daa0ce3973199fbccaf72686f3f12
SHA1 d2d308954eeb16c01a9e199c0494ec2c497f9ac0
SHA512 ecf993d16a88b044b2636403115e6e4a8fc0632ab3ce091eb42fb7403a90b09fe9bc176bc1109fd0c4965cc3e1ec68ce3eade562bed60140f136b1ab247b4eba
TLSH
T1BEE02BA9C821AC271EFD5F2824144645E75203167F90C94F3B3DD20C8FB5A3A4566C2C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 335KB
SHA256 510937c81cb1a502119ab143419709b78c971a487406b87287e5d0e818995e9a
MD5 9f9c9ac1a584487d0961c6af2cac057c
SHA1 dbe3f8ded8c2390dbf7263da9aae9c7dda1cd828
SHA512 5fd4adbc586cd8110325eac005eb71792205e8e0f0132971d0758747baa058290e23daa9d1fa4574982f227c4ef0f3eae2055873bdb293fd404cc753bec05421
SSDEEP 6144:1EYK/wn749QJWZHyBE3FQ8Buo3Faz9J0ze/79bZJQ6PXmMo9uLUz:1EYK/wn70h5sE3F4oVaRmzWJT3obz
TLSH
T1F6742325C2DDFB139B531A01147E5975C638E876E4C01FB28B3CE026AF26E2D1468DEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 99c487a31b30ff65452b6068dfd004b381d76ca6015d6a5883d228124a6477aa
MD5 e3dc92a6b027624ec9a33e923b1f6395
SHA1 25089fcd2f500ad8a745402f7f3f8c5fb58c6de9
SHA512 f4dea54da830daf5cdd504f5a46ddfc80e00d142448d2087b0c529cc6d4f86fb890bcdf7392c149ff1ffff3c4c2718360cd9c8b2eaffd7d279a70d533cf0d6bf
TLSH
T1C5C0921894879C21C79D43F084A14494E7A40BFE04C2912A82D43CEDB863FB7A500A51
MD5 SHA1 SHA512 TLSH

Submit Download

668af94b-e226-4686-ba35-3aae4cdbcf52.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\668af94b-e226-4686-ba35-3aae4cdbcf52.tmp
Size 523B
SHA256 fc7e52d2eccf5a383f0c67644dba8a4fef034c9c2760c6d4d84360571301af00
MD5 5106540bb26b4c6f4f04c822eca863ee
SHA1 0ce63d810ec5551fcb468006e401308a419230ea
SHA512 c0695a08934b83e353e1f9889f2a5bb2fe65237ca6c5e76aa88c6044225da9a4b1f560fae8c1141b992c533270d0408b94690750d435067570d6a5fd4ef572d9
TLSH
T1F5F0596B967D747350F909AF5E04BC0DA5FAB83402C168E5CEABC16DE0E55B32B124A3
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 cc4d037cff306e2a1bce5e3ebc7943294a666a0590613783ab8a4cd6445c762c
MD5 d20c073553527cd443a18b46678adfa1
SHA1 6fe1d28bbb267388a0f54f8bc39993f89329ff03
SHA512 f7dcdcd099c7c02610eacc8f87e46f642bf90b10811e7f02b2d21d057f4ae8599933a3baf9677a22205223de3070e6b0ac5c217cdbfb01bfb4f7ed392bbdf575
TLSH
T110719EF7C7E8C52D895156F4EB256F1FCE290924432C3D66C8D8BE5B93E2872D24064E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 1f395649d4d7cc7e27cf14e20697a68219cd06a25cea00bb9b428a89a2a25a9a
MD5 617c9e462432954d09aa6f7a7ac931d2
SHA1 8cd0884d140fd304856d55a0eadaba9cc167c717
SHA512 af9bce5ed1e00c8238039e9642fecb4374185f3099725e0422d2fe0586f7c88f689e67a32b4bdf35de36ee1608ae75aac1b1fef01bbb299a9b162f526b3205fd
SSDEEP 192:cRftXZdqu3v7cpAPRp2qFua9BHsb+WNnKZ4hu29Scb2HeUxkY+VyIsnAUgtaJ:cRftJlfwUXlPrw8T2wcb2FKY28
TLSH
T16C52D72EA92079BB5DE7C259F9217B57D3F1103235942EC0EAFC992C15E7ACC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 724105fc2d6f0acd79a64302cbb66258668d035199ba7498cd1f96455feb0090
MD5 d076e12c08891da903867a04b6052ca7
SHA1 feb63b9e73c418cabbf03ab1f0deddb9c0a8c0bf
SHA512 50c8ad5c7440e876ad456c3ca813c4dc68ebd3c26d3d4d43402ca3b6a13f8884c99d6fb1fe3070503a20b8bb80bee0ffdaff7a000a12f4477ff429266924d9d2
SSDEEP 192:bRftXZdqu3v7cpaPRpQqFua9BHsb+WNuqGFBeTaMcFScb2HeUxsYMPyIsnAUgraJ:bRftJlfwqX/PrwW2cocb2FGY+e
TLSH
T17C52D72EA96029BB9CE7D259F9157B57E3F1103235942E80EBFC993C15E7ACC2207417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 844d3ec03467232c0b0b31852592e1d5bfd1b998c353219bbfd11d0dd2534c85
MD5 248039e3512518ae98cef47428956f17
SHA1 6b50102f479957e0c5bdc48e63949ea63a96eae7
SHA512 56f6fa2b67411fc0644fb1c73d9ea2b6838fd695e4701b9f0083f58780d47178025347ce2472b1dab91a02f1555f53e8546aeb65ea769478c186dc3b4f42e72a
SSDEEP 384:dXjRs7KxkXqKf/pUZNCgVLH2HfgslKR7pLuLcSjzOXODR0+ErU3DTHGENMAYw:dzRs7KxkXqKf/pUZNCgVLH2Hfgs8R7p4
TLSH
T13872E9676C4C9E770F94C6CCD8267F4FADB5024B66E9886483FA582503D5BCE110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 244565c953b3fca17b15323d239fd3843610af6e6e056c96897f3fda74db8ac6
MD5 a972206c303dae3e2d7dbee2eacf4cb9
SHA1 b46d5568589ccf8117af1b6de034a9d4557ed243
SHA512 aa335388a558eaa3bd7d626e3c8dcc230180c0b67398a461fb930bbc26e84352f8d7590838628e9ebf52fb80637996b0cfc05f78f3efcb08bc4ef73121c6a18a
TLSH
T1B7B0124090025641C10606F41153148CF1349F91A70A170583E479328C251518425050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e5e6.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58e5e6.TMP
Size 96B
SHA256 f98fe1133b8df72ea7875b5a4551723225cf242b2dfaa60144bbe9bcfd28e600
MD5 b4860449e197c434d801b0860e2c91a0
SHA1 8f5721101998d1f9be61c21284ace2d6e9285bb1
SHA512 28e77fcb917748efc9573266840f0ecae1c6158d1b87056038c987ab598b9926bf1bee46752beca8e7fe3638e257850d73b02344e3bfb1b55396ee5044b663a2
TLSH
T199B0220CC0032302C08203B02CA8B0E8B0B0EF30CA032202A2E02A2AEC203320020C20
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 77bdf059679ea3c3e44d71b603510c4a6667447a2a3c0a9b8c7a71a6f077cbd3
MD5 c98168d3826e5f8443090af7872f0234
SHA1 959709e77f00ec20e3cbca2d0a74283fa007138c
SHA512 a285df1760f60d482a6533b21fdc02f6b462ceb5c823eed53727892fb01e96c3ec8659d8455c63e12dc75fd2d47a75349c0784c8ac21c1febbd6f3a9a459490c
SSDEEP 3072:SYFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:ZFmUi21rSm8uUVNSlzY/
TLSH
T1C2C3130076E3E8F2EE5930447BEE2A149D6C4D818191C6415373AD419DEF3C71FAAB39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 c8d05a0797872c88666ecf62775b8dd932dbc0ae78840f522f2405e787f444a9
MD5 f10791b43f1f454970821cd4b289e688
SHA1 e4b07f051bbc9be649e31dac6dbc206d68a26147
SHA512 fcbaf40160c2892f1a74bf7b0beaf3e71878ba1fe5100149846f46bf131f5122768fe430c095aa88a269ab6bcf764619e20c4bfcecf48806196afb451f2d87a3
SSDEEP 6144:ZNmqgFXHid39fWeG/eDu4FmUi21rSm8uUVNSlzYE:Kq9jVDu0fi21b8j8z1
TLSH
T1C2342330EF42AEF2978A619032FF7B346EA045015258CB13C677FE051AE77469BB6538
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 589af789b0906f92cee96dfc4c3ad704399dd99234432621eeeb1e61102d244b
MD5 e098d6cf160fd62f67a4678adbba118b
SHA1 8c6f29f404acb018dd7c3ee947ba0a430a2165cd
SHA512 3087b8bda3bab7b1fe03c0f1ffaeace8d35cf7279a7cf7e8ee7102b08a48de89ac97ac11ef78c8e1633910be04f25b9cd7e7728b496d694c9345c530b216084a
SSDEEP 6144:QNmqgFXHid39fWeG/eDu4FmUi21rSm8uUVNSlzYE:lq9jVDu0fi21b8j8z1
TLSH
T1F3342330EE42AEF2978A619032FF7B346DA045015258CB13C677FE051AE77469BB6538
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 277KB
SHA256 f4c45f9cdded8d1572bf4921254e5c20592a0267e618da4c4255a3bfd5236097
MD5 d48eaaf5435cd8ce7f5ebc2d7cd1bba6
SHA1 caa0eb4727680d62ebc370f17468ca733176ba39
SHA512 e77ce0c29a21d74f63fad7cce802f0397c38ac2e969b7ed2aa6ced00c5d80b3f0ef1d934eea11c15f8209da4a59992dc5697e7fe50de4e869a4b927833b95b78
SSDEEP 6144:EwmCB3rNmqgFXHid39fWeG/eDu4FmUi21rSm8uUVNSlzYE:EwSq9jVDu0fi21b8j8z1
TLSH
T115542231EE46FAF29349A25062FE3B346DE085028B64CF23C867FD421967706AF75578
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 f9ff857a5585b35e01c62bc26c2c45318f85defee9777f1001635a30d7458e24
MD5 2a4352026c1bc37f3f7a610b05933c64
SHA1 76d693bca4908bcc2dfb0f1fb1a4def2ac22e635
SHA512 9188715f4f4acb1f974a66252b9f03ec47714054d99da808f6b7048eee430fcc6e036128a53e1df3af47853612aee68b32478af7c0972d9522f39f254e35478e
SSDEEP 3:MsEllllkEthXllkl2zE/lCt9/:/M/xT02zzt9/
TLSH
T1CB4404447FC10407C5151130D051C374D370DCD0471357C335510C33DCC57410C41040
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__PSScriptPolicyTest_ih5upzda.wfw.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_ih5upzda.wfw.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

memory/2524-116-0x000001EF5C700000-0x000001EF5C710000-memory.dmp

Download

memory/2524-28-0x000001EF5C700000-0x000001EF5C710000-memory.dmp

Download

memory/2524-41-0x000001EF60A30000-0x000001EF60A3A000-memory.dmp

Download

memory/2524-40-0x000001EF60A10000-0x000001EF60A26000-memory.dmp

Download

memory/2524-104-0x000001EF5C700000-0x000001EF5C710000-memory.dmp

Download

memory/2524-39-0x000001EF5C700000-0x000001EF5C710000-memory.dmp

Download

memory/2524-42-0x000001EF60AA0000-0x000001EF60AC6000-memory.dmp

Download

memory/2524-117-0x000001EF5C700000-0x000001EF5C710000-memory.dmp

Download

memory/2524-62-0x000001EF5C700000-0x000001EF5C710000-memory.dmp

Download

memory/2524-63-0x000001EF5C700000-0x000001EF5C710000-memory.dmp

Download

memory/2524-29-0x000001EF5C700000-0x000001EF5C710000-memory.dmp

Download

memory/2524-0-0x000001EF41E50000-0x000001EF420CA000-memory.dmp

Download

memory/2524-27-0x000001EF5C700000-0x000001EF5C710000-memory.dmp

Download

memory/2524-26-0x000001EF5E2F0000-0x000001EF5E30E000-memory.dmp

Download

memory/2524-24-0x000001EF43EF0000-0x000001EF43F12000-memory.dmp

Download

memory/2524-60-0x000001EF5C700000-0x000001EF5C710000-memory.dmp

Download

memory/2524-59-0x000001EF5C700000-0x000001EF5C710000-memory.dmp

Download

memory/2524-23-0x000001EF5C810000-0x000001EF5C886000-memory.dmp

Download

memory/2524-2-0x000001EF5C700000-0x000001EF5C710000-memory.dmp

Download

memory/2524-1-0x000001EF43DC0000-0x000001EF43E72000-memory.dmp

Download

memory/2524-58-0x000001EF61760000-0x000001EF61772000-memory.dmp

Download