12aa97cc1af4828cb5fffd0379ef762b0bdad64f8958cf07eb89e7f7ce60367e

Analysis

user interaction
yes
max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
19/08/2026, 21:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Prestige Launcher.exe
Size 200KB
Sample260819-z4wstatemf
SHA256 12aa97cc1af4828cb5fffd0379ef762b0bdad64f8958cf07eb89e7f7ce60367e
MD5 c2dd4bd151dc8d78be496f684b6d804b
SHA1 d6473bbe6d73df10c58e5c3facec43771272085e
SHA512 5ea16b004d133118cb37bba24e136595225df2157a689e828702986458e11aa22f09ac0018a44217fa3f860f2a38a6102d3cbd8aea02d9d41e1598f70f7a71bd
SSDEEP 3072:QMTYNSwRexO5i9KWye7LpshhMDbF++++TmbQHB5RWWKuQNUrYnpZi+4MHBsGi:NYNP3i9VkwV++++TLTG/i7MhsGi
TLSH
T13214BE57B7A430F8E6BB823984511B02E776B8320B319BDF07B4065A5F277C58D39B62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
4	3024	Prestige Launcher.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
388	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 8 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	Prestige Launcher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	Prestige Launcher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer	Prestige Launcher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardProduct	Prestige Launcher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	Prestige Launcher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134316478859926440"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 14 IoCs

pid	Process
3024	Prestige Launcher.exe
3024	Prestige Launcher.exe
4748	chrome.exe
4748	chrome.exe
3024	Prestige Launcher.exe
3024	Prestige Launcher.exe
4748	chrome.exe
4748	chrome.exe
3024	Prestige Launcher.exe
3024	Prestige Launcher.exe
3024	Prestige Launcher.exe
3024	Prestige Launcher.exe
3024	Prestige Launcher.exe
3024	Prestige Launcher.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3024	Prestige Launcher.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3024	Prestige Launcher.exe

Suspicious use of WriteProcessMemory 22 IoCs

description	pid	Process	procid_target
PID 4748 wrote to memory of 684	4748	chrome.exe	94
PID 4748 wrote to memory of 3712	4748	chrome.exe	96
PID 4748 wrote to memory of 3712	4748	chrome.exe	96
PID 4748 wrote to memory of 388	4748	chrome.exe	97
PID 4748 wrote to memory of 1708	4748	chrome.exe	99
PID 4748 wrote to memory of 1708	4748	chrome.exe	99
PID 4748 wrote to memory of 4972	4748	chrome.exe	100
PID 4748 wrote to memory of 4972	4748	chrome.exe	100
PID 4748 wrote to memory of 980	4748	chrome.exe	101
PID 4748 wrote to memory of 980	4748	chrome.exe	101
PID 4748 wrote to memory of 2300	4748	chrome.exe	102
PID 4748 wrote to memory of 2300	4748	chrome.exe	102
PID 4748 wrote to memory of 3240	4748	chrome.exe	103
PID 4748 wrote to memory of 3240	4748	chrome.exe	103
PID 4748 wrote to memory of 3776	4748	chrome.exe	108
PID 4748 wrote to memory of 3776	4748	chrome.exe	108
PID 4748 wrote to memory of 3672	4748	chrome.exe	109
PID 4748 wrote to memory of 2532	4748	chrome.exe	113
PID 4748 wrote to memory of 2372	4748	chrome.exe	114
PID 4748 wrote to memory of 3780	4748	chrome.exe	115
PID 4748 wrote to memory of 4356	4748	chrome.exe	116
PID 4748 wrote to memory of 4356	4748	chrome.exe	116

C:\Users\Admin\AppData\Local\Temp\Prestige Launcher.exe
"C:\Users\Admin\AppData\Local\Temp\Prestige Launcher.exe"
1⤵
- Downloads MZ/PE file
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3024

C:\Windows\system32\notepad.exe
"C:\Windows\system32\notepad.exe"
1⤵
PID:2536

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7ff91068c728,0x7ff91068c734,0x7ff91068c740
  2⤵
  PID:684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1684,i,2304588000683079383,2700594082558362977,262144 --field-trial-handle=2020,i,6575555439417392419,7819205625743783071,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2016 /prefetch:2
  2⤵
  PID:3712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2264,i,765151434089356320,10339340087193472414,524288 --field-trial-handle=2020,i,6575555439417392419,7819205625743783071,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2268 /prefetch:3
  2⤵
  - System Time Discovery
  PID:388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2428,i,27285304967701247,14828370056893511637,524288 --field-trial-handle=2020,i,6575555439417392419,7819205625743783071,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2392 /prefetch:8
  2⤵
  PID:1708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3216,i,5887143461344953328,9141028416348360079,2097152 --field-trial-handle=2020,i,6575555439417392419,7819205625743783071,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:4972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=2904,i,10431478156722834491,17251932993530544329,2097152 --field-trial-handle=2020,i,6575555439417392419,7819205625743783071,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4432,i,9394091841413195593,18013943020507182106,2097152 --field-trial-handle=2020,i,6575555439417392419,7819205625743783071,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4428 /prefetch:2
  2⤵
  PID:2300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4696,i,9652170828665319370,16577459518127106574,2097152 --field-trial-handle=2020,i,6575555439417392419,7819205625743783071,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4728 /prefetch:1
  2⤵
  PID:3240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5736,i,3316082588563162054,15883450301790379310,2097152 --field-trial-handle=2020,i,6575555439417392419,7819205625743783071,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5592 /prefetch:1
  2⤵
  PID:3776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4656,i,10976452330643707879,6563861977381473841,524288 --field-trial-handle=2020,i,6575555439417392419,7819205625743783071,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3936 /prefetch:8
  2⤵
  PID:3672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5668,i,6471881609826196133,18323604702053262691,524288 --field-trial-handle=2020,i,6575555439417392419,7819205625743783071,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5696 /prefetch:8
  2⤵
  PID:2532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5640,i,3371194616892982772,6696044318718758873,524288 --field-trial-handle=2020,i,6575555439417392419,7819205625743783071,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5684 /prefetch:8
  2⤵
  PID:2372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5644,i,2146798624705159900,1325454397211535289,524288 --field-trial-handle=2020,i,6575555439417392419,7819205625743783071,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3232 /prefetch:8
  2⤵
  PID:3780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5708,i,9728244279071141921,12711920202090861115,2097152 --field-trial-handle=2020,i,6575555439417392419,7819205625743783071,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5624 /prefetch:1
  2⤵
  PID:4356

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4336

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4472

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

8f3c25fb-dbb5-4129-8e84-6fc8ded8b0de.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\8f3c25fb-dbb5-4129-8e84-6fc8ded8b0de.tmp
Size 16KB
SHA256 02c350f2797cef3abcbd01174589eb3f77e1f116c6b262051119a6b04129b70e
MD5 bf8570b876e66ddbb6deea0c1036738d
SHA1 8b7bac93cc87b0076c8718468e11d052ee384d07
SHA512 95851cdd76d6c8577ae7d42550a13dd57f1b6cb23a750c4efd53b940f14ee9c4d4bc63ff1789b6d9a8de88bdcd6ea0ab7c7cb57e0c939b77f7c7baac86c936c0
SSDEEP 384:Kkj+F7KxkXqKf/pUZNCgVLH2HfgsloD7pLuLcMsNXOD+F+ErU3qsHGZ45hseHkL:Ko+F7KxkXqKf/pUZNCgVLH2HfgsuD7pv
TLSH
T19172F9677C4C9A770F94C6CCEC277B4FADB6024B65E9886542FA581503D5ACF010A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 8abc112ffa2d2d40d2bd6097b697a75b8c8a43c089a51437ada870964eacd50f
MD5 15deba7f35f45b76f493cc6c29a06d2c
SHA1 8c166f1555c625509da7162270aabd8f12ace283
SHA512 05b9f03fb5e1bbbcc6cb48d30fe6a2f32ceccb2ece711567c731ad9b2521a5e5435439ed64219bee0624f6df89d68d7b7f59f101558d63ca330285a36df777f4
TLSH
T1A2E02BAACC61EC3728FD171850914706EB5613162A919A2F3B3CD20CCFB062A4196C5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 335KB
SHA256 510937c81cb1a502119ab143419709b78c971a487406b87287e5d0e818995e9a
MD5 9f9c9ac1a584487d0961c6af2cac057c
SHA1 dbe3f8ded8c2390dbf7263da9aae9c7dda1cd828
SHA512 5fd4adbc586cd8110325eac005eb71792205e8e0f0132971d0758747baa058290e23daa9d1fa4574982f227c4ef0f3eae2055873bdb293fd404cc753bec05421
SSDEEP 6144:1EYK/wn749QJWZHyBE3FQ8Buo3Faz9J0ze/79bZJQ6PXmMo9uLUz:1EYK/wn70h5sE3F4oVaRmzWJT3obz
TLSH
T1F6742325C2DDFB139B531A01147E5975C638E876E4C01FB28B3CE026AF26E2D1468DEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002a
Size 429KB
SHA256 e5db76bab88421786b1f6555625e8550ef405451ae100f6241aab2fe2ff91ffa
MD5 c9eb17c327eabe27769e584215925d7b
SHA1 edf3fbe79960d3db0a924a09927c6f8605492689
SHA512 6bc365f610565e18eb1c766613095c3367620b2046aaf544642df214e14a732186267ade27f4fab8f439583f5773b60e8b09acd4c7ac90cacba523c5acb0f13f
SSDEEP 6144:EpUQqarf7FtqorVdz1ADvqMF1SfGRvje9hJi98Fd50P7+YO5csN1IED0ij:iIu7KiVdgzsSvSPJAZ72G2GU0ij
TLSH
T17E942328B2EEF27326FBC37715787112A7925635048DA906119907E9A3CC5F4F79860E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 b69ea713cac7f688eeff8fd3a9cf6f6611b37981fb59fd50bb4eb0937472ff42
MD5 07542a646da3b033fa6e04b8731b991e
SHA1 a6dbc32221bfbb6ba5d6a301626d1b3f963ab21f
SHA512 eafbd74a18ca82c1d946f0a2dff4526eb164c707e10e3e90628ea3b48b3b49a636f0f2806e773440e820defd537f25721243d8f2ed6edc2db806e5074bc63c8d
TLSH
T1F341FDC73DE49093CBF5213537E5C914C23251D54BCC228928E086EEBD6FFB98986A32
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 91b7c1d975da137b1aa2de6d134253a6cd92d355a92300f472eecb99b56be266
MD5 69c12c1e450b0a0a982f4f00e3fe688f
SHA1 5d8c7e0aae6b7d5ec80b46eaa1b2c5e27641cb3c
SHA512 f4074b4d6ccfc97ace0e11d395d057af075bede1e01eec18a1a24d8f2dd5b0454246762f05696f18642dccb998812c8266e3d9f5bc56ce9ba14d2f438bc490bd
SSDEEP 192:D78B8tCpLL0JRxRaIrq2rbj2qIJUIJIfaPNIw88Lvi0fPGl1NPl:D78B8tCpLL0JRxRaIrq2rbj2qIJUIJIZ
TLSH
T1FB02ACF7C3D8C62D894156F89B156F1ECE290A28432C3D26C8D8BF5B93E2471E21565F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b3593b1b-a3a7-45a7-9512-300a3c2bc9d4.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\b3593b1b-a3a7-45a7-9512-300a3c2bc9d4.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 6a2eadbf78bee1f01bc621e36eb0206a22dec2b8326b24edcfc2623920c46a79
MD5 428cdb621c6af6b1c57faf6b3ac8d092
SHA1 668f6652a850675fa66b53e42e4e62aa652fb8fe
SHA512 f12b329cc77d18b1911243739ffd08cee5fdb93e6dcd2a2084195e8fd8ee1e61ac5c6aa479e673a827bb93dbfe4f276472a1abf7f706a781f7b8ca2863dd27ae
SSDEEP 192:RRocBzeLUDj2+/7y+v7hpAPRp2Hv595Hsb+WNnAf42F2YkEZi3tgkwUi8VyIsnA4:RRomzIU2+m69UXUrw0n2BEZ4arY8
TLSH
T11152C63EBA10753B5DC6D215FD227757E7F6102125A12E84EAFC892C29EB9CC2227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a1182089eb26ced2cd351aea356f158dd390724896e09b584e1bd78498bb5d56
MD5 70a407dfb071a803ef8540292ed21b1d
SHA1 f522f4360f9016d3c02fe0d4f3ecbbeec11863e1
SHA512 927dfc5d726af4095fa5ade6f10068505cbbcc8c9065fcdf85f2aa51a22a3e2cb34518b7102e620aafd883f71849664653c36d24b6e26539e056c63a2bc11e88
SSDEEP 192:RRAeLUDj2+/7R+v7hpAPRp2W95Hsb+WNnAf0OkEZi3tgkwUi8VyIsnAUgtaJ:RRAIU2+N69UXtrw00nEZ4arY8
TLSH
T1C642D73EBE14743B5CCAD229FD227757D7F6102125A12E84EAFC896C19EB5CC222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f0fd5633d577c0435bf045ec814cc7cbc6c1493a8d95e062805256114780b17c
MD5 368cff0d352bc521bc9fc234a59f741b
SHA1 0205e45e40835939aa4ba5790e4500cb05cdb366
SHA512 fe4a6167ad2922ef540f9f7a06b3d93d57b8ae357a2d2bcd7c3a14c275b0320168e7b43afb97cb70995355fa8bca67f6c1b53d7df1a6bf1687d72de2526c7f55
SSDEEP 192:RRocBheLUDj2+/7y+v7hpAPRp2H8295Hsb+WNnAf42F24kEZi3tgkwU088yIsnA4:RRomhIU2+m69UXKrw0n2hEZ4aJn8
TLSH
T1C252C73EB910753B5DCAD219FD227757E7F6102125A12E84EAFC892C29EB9CC2227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 16361d664c6411923be1f153528c51371632d5ca7ff7bb400ce72c6648b3ef0b
MD5 b791b09a2ffd861a4af095df7cd22eab
SHA1 36b0ee52a679d03450d65a0e9c25a1e3d636c7ab
SHA512 ab452a5d85d9d5d3eda7744c146cd22806bfe98c6e3db5b86b689ea9a3973889fa2f49b3b2a2ed8362b9433633c77304463263e449abc00270e728bc10eb3972
TLSH
T11DB01271C081F252C04903702DA488CC3314FF29D6430303B1EC1702DC356A20519341
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 ca7d7dcd91b2f245e0d1728a8bda4411d6ea35af5383e8bc617986309772b866
MD5 5edbc32e0ce18a4b5bc0a08c9ba76665
SHA1 da362a97a1289cb02966a955d5cd4b862230d4d1
SHA512 d811937edaebef20b108a2d11a92922444db6d6d7ff451eaedec1abd5e6cc02bf43fb6f0e8841897b574246e739d16051d186d2924cb621090fb746f885ab1fe
TLSH
T17CB01220C0015212C05307B412862888B1555F64EA0A1B4143E06973C8255A18514151
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595385.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe595385.TMP
Size 96B
SHA256 38ea9542a85c278c156cecc3238ff7cf7e4291bad2e9368667b7dcccd96fdc39
MD5 620fafaed8c5d3039228f92339404522
SHA1 7002992d903d180137cc6b3647f81192b2f06110
SHA512 a104795afb376bc4a0504c417eb9e1d624a29e3e5f371b8aaaac24b19fd2e230cc61cfe115bec15595eb649a46d0b51012b748b58db4548ae9e82116fd968da4
TLSH
T122B00295C1026212D04337B425A596D87161DF7AC64F121692E45B66DC3BA754525360
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 120B
SHA256 b071fd6ccc9430f30e61ab2eecd8debbe5726d403f9d7c78a3ba75f1675c4bd3
MD5 8dce94068efd5f094ecc1f17acf60bf8
SHA1 ef27821154ea843268fc35d23f6c597f8fdc9a0a
SHA512 b8f71ef9db77261b6d3cf7ad0e69a31f1f75f42d0f6abbf70340d023955e28e286a0844f37f38a987a84da470e0de65394383991253e09877046fcd0172e13ba
TLSH
T165B012A652620113CC30557602C2420050A456123189034328A4004B44506878A01407
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 3eb96e6a0676ef2e672c9cf94ed4a745d129f621cbf6da1c9fbb3bd5ccdb40cb
MD5 b4554fb4c502813a4a55751d09014b8d
SHA1 100787fdf0a1e65222bf04fbf3b2baa1c320679f
SHA512 ca57460709d3e6d011a9012b13bc266a153975337c2a5019a75631e83f775e02f5c457e87fb71e30d3b5347018f65d67020863814c96466e197b2a9b23c91ded
SSDEEP 1536:hC9yD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjH:sjqfd7NtZL8cHQRZEQ6SpsY
TLSH
T14FC30237AFC21E335E92DB70BA130FD797B544AA9034D301ABBD2BFB6883455658246C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 42cc74128b77268e94b36b69096c2d5427bfa10d09f8c638267403678bfe0958
MD5 0f213f97942594ad61b838334c2969eb
SHA1 02c6b432ca3e6fbc65e40be9705c9b6c7be93970
SHA512 f0154f1c94959af5547b7446a93533af4cfe4075128eca766b25723911574d7cb8051bb52118b5fabca5c843eeb973105e9d991246aa101a0795637bfd45b182
SSDEEP 6144:AOIO7ESq1wZOXS235yldRXwV1rUPqZ/ZLW3ExN:Hx6iZy5yXRXwV1APqZ/piQN
TLSH
T15B3412B7EBC81F331A85D768B3132E5F17B9C48790A4672247997B4F64CBC694182CAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 2b4fc2cad0050c4b846b6055d3a98d29807fd0d00377bc806292bc91c6f2b521
MD5 b819944bc3ac65c496d388cc55cf8104
SHA1 c28ee3200e2d8f64b5174986fd60f84b7e81b1c2
SHA512 95ff5f85cd24216857d9dbfd17f929df1148787fe545d2dddca4fc71fd1bfb8c1607d8123cbb09d431a72966668650f6f6529b8b68fcedd926d7a4d80b65ee99
SSDEEP 1536:6LyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:Aqfd7NtZL8cHQRZEQ6Sps9
TLSH
T156C30237EBC21F375D82CB647A534FD697B644A99030D301AABD3BFB6C93451644249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 210b9a166e5f70de62bdf85ac2fbbd34790216fe841ef74990a866cd07eb01d2
MD5 2cc472a228adf7c58d44a1545508f099
SHA1 47acd61d128f0087eea3264344be5512d4ef76ac
SHA512 9d740f27d40c22661e9d602da37036d11a82c61a20b5c5074c56dfaeec8bf8661e2a723a596ce65463bf4f60f8d1e6ff4fb745d00db48e9c6198a691936916fb
SSDEEP 6144:EVOIO7ESq1wZOXS235yldRXwV1rUPqZ/ZLW3ExN:xx6iZy5yXRXwV1APqZ/piQN
TLSH
T1F33412B3EF841F331A85DB64B7032F5B1AF9C48B8064671647997B4F28CBC695182CAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 41cb57d6cc1698592d161b51404a6ab102ed1ded8539fa7c45628672eb8f9d3c
MD5 0a6ca1e212f70cec3dbfdf2e24454662
SHA1 9efcb7d3ed2ba4b6c9535bea027627508174674b
SHA512 c5f04b247b8ac911f0464546baba3e1b14a3d3907eee12a9d8fc446c93ea4eeb31099a0146b61a3354d422f5c54140fd6838fee4dc5433633e0a308ee39058c1
SSDEEP 6144:RkOIO7ESq1wZOXS235yldRXwV1rUPqZ/ZLW3ExN:dx6iZy5yXRXwV1APqZ/piQN
TLSH
T1003412B7EBC41F331A85DB64B7032F5B1AF9C48B8064671687997B4F28CBC695142CAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

memory/3024-10-0x0000000180000000-0x000000018047D000-memory.dmp

Download

memory/3024-401-0x0000000180000000-0x000000018047D000-memory.dmp

Download

memory/3024-9-0x0000000180000000-0x000000018047D000-memory.dmp

Download

memory/3024-0-0x0000000180000000-0x000000018047D000-memory.dmp

Download

memory/3024-426-0x0000000180000000-0x000000018047D000-memory.dmp

Download

memory/3024-8-0x0000000180000000-0x000000018047D000-memory.dmp

Download

memory/3024-7-0x0000000180000000-0x000000018047D000-memory.dmp

Download

memory/3024-437-0x0000000180000000-0x000000018047D000-memory.dmp

Download

memory/3024-438-0x0000000180000000-0x000000018047D000-memory.dmp

Download

memory/3024-439-0x0000000180000000-0x000000018047D000-memory.dmp

Download

memory/3024-440-0x0000000180000000-0x000000018047D000-memory.dmp

Download