4032bf5ae412b13e45ce0448d9f861c7193c840c8ada812f7d6e7681a97579ed

Analysis

user interaction
yes
max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/08/2026, 23:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
VideoAIExt/Src/RobloxMemory.js
Size 20KB
Sample260822-3eepsagg55
SHA256 4032bf5ae412b13e45ce0448d9f861c7193c840c8ada812f7d6e7681a97579ed
MD5 029ef7a4107f59904e727bbf8db0e75e
SHA1 c640a6a925ed422d7eee2c4d3e044331992175a8
SHA512 21503bdf83b38bf9bce0f9732c3d5ca59ed5d5c816cf56272c278a6a759a25a8108a644e0e1b6122246e5befcc4894076ce574662580b9a7128e08c6c1147663
SSDEEP 192:Ty9LD0vjnRMUP+qDvJKDYyriOMdXKfxPY8cyU5IFqCu0kpDtO/D/G7F/nB/v:Ty98jnRBlRAYy+O065PYbpQLe7Flv
TLSH
T1C7920D4A5965A5510CB773BAEB226006F9320023836B4620FD4ED3942F7D89F8EB5FD7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1224	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134319147951592394"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{52E9FF24-E02F-4D7E-80E3-391ABBF4C3EB}	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe
Token: SeShutdownPrivilege	1528	chrome.exe
Token: SeCreatePagefilePrivilege	1528	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe
1528	chrome.exe

Suspicious use of WriteProcessMemory 39 IoCs

description	pid	Process	procid_target
PID 1528 wrote to memory of 3164	1528	chrome.exe	99
PID 1528 wrote to memory of 1224	1528	chrome.exe	101
PID 1528 wrote to memory of 1576	1528	chrome.exe	100
PID 1528 wrote to memory of 1576	1528	chrome.exe	100
PID 1528 wrote to memory of 780	1528	chrome.exe	102
PID 1528 wrote to memory of 780	1528	chrome.exe	102
PID 1528 wrote to memory of 3444	1528	chrome.exe	105
PID 1528 wrote to memory of 3444	1528	chrome.exe	105
PID 1528 wrote to memory of 3424	1528	chrome.exe	104
PID 1528 wrote to memory of 3424	1528	chrome.exe	104
PID 1528 wrote to memory of 3964	1528	chrome.exe	106
PID 1528 wrote to memory of 3964	1528	chrome.exe	106
PID 1528 wrote to memory of 5032	1528	chrome.exe	107
PID 1528 wrote to memory of 1276	1528	chrome.exe	113
PID 1528 wrote to memory of 1276	1528	chrome.exe	113
PID 1528 wrote to memory of 988	1528	chrome.exe	114
PID 1528 wrote to memory of 988	1528	chrome.exe	114
PID 1528 wrote to memory of 1728	1528	chrome.exe	115
PID 1528 wrote to memory of 4256	1528	chrome.exe	116
PID 1528 wrote to memory of 4952	1528	chrome.exe	117
PID 1528 wrote to memory of 2060	1528	chrome.exe	118
PID 1528 wrote to memory of 2060	1528	chrome.exe	118
PID 1528 wrote to memory of 1872	1528	chrome.exe	119
PID 1528 wrote to memory of 1872	1528	chrome.exe	119
PID 1528 wrote to memory of 5064	1528	chrome.exe	120
PID 1528 wrote to memory of 4896	1528	chrome.exe	121
PID 1528 wrote to memory of 4896	1528	chrome.exe	121
PID 1528 wrote to memory of 1260	1528	chrome.exe	122
PID 1528 wrote to memory of 1260	1528	chrome.exe	122
PID 1528 wrote to memory of 1588	1528	chrome.exe	123
PID 1528 wrote to memory of 1588	1528	chrome.exe	123
PID 1528 wrote to memory of 232	1528	chrome.exe	124
PID 1528 wrote to memory of 232	1528	chrome.exe	124
PID 1528 wrote to memory of 2960	1528	chrome.exe	125
PID 1528 wrote to memory of 2960	1528	chrome.exe	125
PID 1528 wrote to memory of 3392	1528	chrome.exe	126
PID 1528 wrote to memory of 3392	1528	chrome.exe	126
PID 1528 wrote to memory of 2744	1528	chrome.exe	127
PID 1528 wrote to memory of 2744	1528	chrome.exe	127

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\VideoAIExt\Src\RobloxMemory.js
1⤵
PID:4424

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2220

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff81486c728,0x7ff81486c734,0x7ff81486c740
  2⤵
  PID:3164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1764,i,14863605708672303745,10890073987686998079,262144 --field-trial-handle=2080,i,5613967102567305840,14991816501557571017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2076 /prefetch:2
  2⤵
  PID:1576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2112,i,14777567728528016875,9678788944610338723,524288 --field-trial-handle=2080,i,5613967102567305840,14991816501557571017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2164 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2460,i,2353404419806287113,5556587200504395018,524288 --field-trial-handle=2080,i,5613967102567305840,14991816501557571017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3280,i,854516298588471659,4426958886895748253,2097152 --field-trial-handle=2080,i,5613967102567305840,14991816501557571017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:3424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3292,i,13561426644645272268,7466881346994253510,2097152 --field-trial-handle=2080,i,5613967102567305840,14991816501557571017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:3444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4452,i,11285865215574851836,5340091875826967084,2097152 --field-trial-handle=2080,i,5613967102567305840,14991816501557571017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4588 /prefetch:1
  2⤵
  PID:3964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5320,i,14852996118689701901,1804112099103787248,524288 --field-trial-handle=2080,i,5613967102567305840,14991816501557571017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5328 /prefetch:8
  2⤵
  PID:5032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5692,i,8675877765297393845,12289830207423350139,2097152 --field-trial-handle=2080,i,5613967102567305840,14991816501557571017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5752 /prefetch:1
  2⤵
  PID:1276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=3428,i,14228821380980462406,2734426567875916238,2097152 --field-trial-handle=2080,i,5613967102567305840,14991816501557571017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3340 /prefetch:1
  2⤵
  PID:988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5776,i,14285733691717228422,12319733257139265759,524288 --field-trial-handle=2080,i,5613967102567305840,14991816501557571017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5784 /prefetch:8
  2⤵
  PID:1728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5860,i,14079738779329159207,18313217092890634337,524288 --field-trial-handle=2080,i,5613967102567305840,14991816501557571017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5656 /prefetch:8
  2⤵
  PID:4256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5600,i,10275063705393407604,9831716048545241129,524288 --field-trial-handle=2080,i,5613967102567305840,14991816501557571017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5724 /prefetch:8
  2⤵
  PID:4952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=868,i,9008884080837791160,959148636026399337,2097152 --field-trial-handle=2080,i,5613967102567305840,14991816501557571017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5756 /prefetch:1
  2⤵
  PID:2060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5932,i,5648479177903474394,12571297815210887591,2097152 --field-trial-handle=2080,i,5613967102567305840,14991816501557571017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5936 /prefetch:1
  2⤵
  PID:1872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6100,i,15162553051198779914,2682742602239617335,524288 --field-trial-handle=2080,i,5613967102567305840,14991816501557571017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6104 /prefetch:8
  2⤵
  - Modifies registry class
  PID:5064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3452,i,11976203370784079458,6228857899514008382,524288 --field-trial-handle=2080,i,5613967102567305840,14991816501557571017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:4896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3480,i,4312116943480995852,4890912147104343382,2097152 --field-trial-handle=2080,i,5613967102567305840,14991816501557571017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5852 /prefetch:1
  2⤵
  PID:1260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=3940,i,1381277413419522892,16710289715186350271,2097152 --field-trial-handle=2080,i,5613967102567305840,14991816501557571017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5628 /prefetch:1
  2⤵
  PID:1588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6208,i,10664793817248991565,12557673765932597055,2097152 --field-trial-handle=2080,i,5613967102567305840,14991816501557571017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6184 /prefetch:1
  2⤵
  PID:232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6012,i,16679961088655002789,1373072265499098352,2097152 --field-trial-handle=2080,i,5613967102567305840,14991816501557571017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6044 /prefetch:1
  2⤵
  PID:2960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6384,i,418340277219914482,9510609416561354043,2097152 --field-trial-handle=2080,i,5613967102567305840,14991816501557571017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:3392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6020,i,5273981882260713346,2501063095379232964,2097152 --field-trial-handle=2080,i,5613967102567305840,14991816501557571017,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6224 /prefetch:1
  2⤵
  PID:2744

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2872

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1656

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 d71f8d8b7e05c163a94ae2e0114b1d578cd7acbbc7ddd3ec22669c393c7f6f3a
MD5 709cdc56e6a9b1d47ff44c2eb30a1614
SHA1 3af4e8c789b23d12daba3fe28f279de6cbc12938
SHA512 eed3c63b00eceeaa8b883ea2a4ed2434e420832d28d47acb1505a660a27162744a92f7906965a8d75df8b80bfeb143860a5ddda29ef1a592aabec3ab65ab7a73
TLSH
T17CE0E5AAD961A8275CFD572C50404746D64013573A40894F3A3D810ECFB56764549C2C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b
Size 436KB
SHA256 0b320d2cf00e9215763a5377904e2301b2edb7a5d299bd319259714cf8bcd9a9
MD5 38e965609b7e0769e6754549cfa3c2fd
SHA1 8ef9e62fa3ae6d8b371f5a9e9344a6cdf31515fe
SHA512 18cff962b979abf3e3d06261422f35502463a0e196aa0cf801cadcff8833a83f20c9e9f22fb3133041e406fdf2304088a0a5eaa4bbb8aff07ab15a0c1b46b0e4
SSDEEP 6144:HT+7EhQjYpz+XUGr9+7Km54TxcjJJEWv6p0qOJ7kuKtAiDL6GnkES7+S8HBWzDi2:6vj0iUI9EKFEJdU0p7riDxw7L8oviJ3c
TLSH
T147942367DF08D99BDA158361EA30EBDD1158EB6EE00A3CC844BB462CE54C0F9F6913C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b
Size 21KB
SHA256 2613156d2238148dd896af4abd9bfb3c7d4800d2db1a3f919f570f55f3ed2c63
MD5 db2e225a9ab76fe404b715887805f9f9
SHA1 fd05395a97ab4e231e4bd05e75c540d354d32e1d
SHA512 4757edc8f0532ea33fb1f0be22a494022ced88e302582dcddc6288e8115ea2274232897da7ebfedb438008a78eb27837bb370632bbead92ed78cb7c46664c98b
SSDEEP 384:9RgNsrH2qE7kqf9rYbuHfAq5jyuYWSIzyxnjb2V0dCtzUBMrBRgu0pesIdzqGVo7:9RgOH2qEhtHfHjKsmtb2ydCt4BM10DGE
TLSH
T12FA2D0F4B46AB670E70CA329650DB1F1FFDF9229E0DC59B9C9D110F0C8AE18214B8679
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 792B
SHA256 fc39a4429c5a5b8db5f37f4a267e7e5b0f65dbbe00df1bfb9030818b833b8e05
MD5 7551bfbdcac0e2756ebe0a871742861f
SHA1 ece4f8569df296b019c9746b349633bd1f8880b5
SHA512 a1b3c9f7e0d7fdc38fb9527b50f4af6f972476552ab06d17ee0a4e6d0e8d9811ee1a6c165436e66b75a30e82a0494e721ab3b61e31f01088741db2e793d09327
TLSH
T1770146C9B2584805FFA87F3325B65C7690721ECDBA8A472C6C81C6ED53927BD315340E
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
Size 248KB
SHA256 1de4411b1210f32354886f9b960d4fa7d56527daadc8aedd33b48a344b754fd8
MD5 b11f818004dee0f9dbfcb7dc133a7519
SHA1 de43e52b3fdb85f10d0f03647fa8113ef0f39f04
SHA512 83edb496d906171898c8afb671920fe334a18c4df2d6d4bca7b0b2deaa884a8f0f705aa1f0113df0497d52cbcf107e24bf095feddd0a0ae41662ea9a31d0cf7c
SSDEEP 3072:7PbLP/PFjxRA0ybci6fa3aGbs1waiUohErafJ3aGbsXPp:Vh
TLSH
T1B844D728729233D5B06E433F5A128C17E37A9AC8E9097049AA727F0C27F7B453794779
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 351B
SHA256 da3fdf47eac9af17e6253c4d9bba9142012cf995f1b53f3cc7014b49b99a32e9
MD5 6251bfba492c2f7464a42693a776a33b
SHA1 e417ea2726909715210ca1da3d040b4a834a8d68
SHA512 b39f700994fc6afdd2ad3541493c8f5021551eed377314e8610da8a3dce7f8f923a4af7d3d20dd146da25e479971f30c8ecf348b67dd41ca87f4a84d3ffc8c14
TLSH
T121E0202C94D9C29F1094C0AB3930770FD9E6550DE7CDEC954F07D41470CA84C546C660
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 ea9878e515567adbd387f223a43b16d81bd8e30f356b5f04d4c8a0f7dbeba5a4
MD5 6a9e3b8c9ebc64c1b4c537159208719b
SHA1 4973304db84512759547eecd06d736f58d8a51c1
SHA512 2e5e1dafb0ec3465528da98d122ab1938dbf8977b14660a9bd02d2f9bad23cf9232251f7651bd194eb779ceeb8ba6e00b4cee9809cce03a2efb4f48216fd679f
SSDEEP 192:DJzIiRxJeJwTaIpsRZAcYDr/aPYmvafPzNPPFNIfE:DJzIiRxJeJwTaIpsRZAcYDr/aQmSfbNH
TLSH
T1AFD1AFFBC3E9952D885156F89B256F1ECE2A0A18031C3D26C8D8BF5B93E2471D21525E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 fe27ea24692d7c097d3d453baf2f3f6e18a86f99b663cf9affe6f2ad81f94963
MD5 95d49f24b0e72ec039ec911ee3e552d6
SHA1 6955d61f592457317cc985006010fb8b843c15cd
SHA512 01e18a16098e9d138cfcb75945ec2a591909ad3efa71323da27f0192330a821c52e51511e5e339a5cc7b1d2a216fe95e0a882603f1a595897268ba1b14471d58
SSDEEP 192:tRecBhCJx5waBdv7FhMPRpGiBuW9DHsb+WNwf8Drf0EK2e8IaJVyIsnAUgraJ:tRemhCJTwaBdhsXj5wBgEuave
TLSH
T1CB52D62EA92029775CDBE319F9617B57E3F6202260D42E94EBFC892C04D76CC321B517
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 5ea142750abb5b65ca6347160d6c0871d28e9b992eabf327bb53edceb2a4f29b
MD5 feef418c9aa9190fe1d0cd6c1a613f08
SHA1 01fed32953032297ccf1cdc6cebd254964198bcf
SHA512 ac943c0470fb73d19ebdf2fab3151aa912c728af771269a72b3ad68f91e4f18779114df49e86dc731f0d8e9c25546433b9e9aaa511b829d6592e486e5e120029
SSDEEP 192:tRGCJxYwaBdv78hAPRp209DHsb+WNnqx0M2e8IaVVyIsnAUgtaJ:tRGCJGwaBd48XD5wU0kaD8
TLSH
T10642B62EA920693B5CDBD319FD657753E7F6102261E42E94EAF8892C14DB5CC322B01B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a94c4e880b6ada82387c60756cee596740fffde196fe9c54435185be6f1eea1a
MD5 2727831d395bee1abda545e9fc30eaf4
SHA1 ee0c78fd25c917f43d82602bad4f633aead7d75b
SHA512 99f0c48a96f79d15d079b9c5e56752742a9551fa95ad930efcc65459111381fc7ccde6e959d89ec93e034371a096f1b9202d143502c07319989916298dabf93f
SSDEEP 192:tRecBzCJx5waBdv78hAPRp2ZvR9DHsb+WNn8Drzo212e8IaVVyIsnAUgtaJ:tRemzCJTwaBd48XS5wU42RaD8
TLSH
T16A42C62EAA20293B1CDBE319FD667757E3F6102261D42E94EAFC892C14D75CC321B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 012d5ed20155b03fa2b8e4cef97818f97843c03195096e05d525275782e0f770
MD5 ad835beb7846787c98d8508d557aa65e
SHA1 18f4357f5e5a116a4e74f7c30409d24872c01926
SHA512 ec81aaf514f3fc30549467a6ae0543e18f50afa5ee22eea4e7e99cabbdd328e5a4606c26f8ab9358e05d82df98c06ff9a2c3f7bfda17ba1a20fa6160c8003120
SSDEEP 192:+RecBzCJxRwaBdv7FhMPRpGiBwhZZ9DHsb+WN643MWkN+R2e8IaJVyIsnAUgraJ:+RemzCJHwaBdhsXA5wkT+Vave
TLSH
T11152D62EA92029775CEBE319F9617B57E3F61022A1D41E94FAFC892C14D76CC322B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 13KB
SHA256 3426e293396fa1424a09f9423424627a398157ab7bfc3ec06964ae1df493a1c5
MD5 be6f9d6a2cbcb56c02708e735863c266
SHA1 974f8ac2aeecd275c490a6e72bf1549cc608ea18
SHA512 5d06f958f136237f1a30c847cff1a2af158baf7b8f8804d6c444ebc126d222c22c946442ed853f321e6823a9c6894841dac031de891b36a87a920630130e9eec
SSDEEP 384:6QjOp7KxkXqKf/pUZNCgVLH2Hfgsl9RXODOB+ErU3ymHG/5Ut4vtEp:6UOp7KxkXqKf/pUZNCgVLH2HfgsL1OSK
TLSH
T1EE52E867648D9A3B0FC8D58DDC16BF4FADB6015766780C7452FA5C0803A97CB124A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e79fcffa-9d6b-45bb-9b53-01a0d9730d5b\index-dir\the-real-index
Size 2KB
SHA256 72a64eaa7c9266ca9ca1d06e2c4eb0be8e7b67a63645e31ecb3b80b879f3cd02
MD5 ab3bfe731f97c7d08eb7ef809d1819ba
SHA1 1ce45e475be8dd62476b377818b19f3cc390edf7
SHA512 4f44496f01a4dfaa1839aa9f9e6330458bd42755b99d9a36236fe82a3eae02ef84895c554f46b0e8b657121fc85fc72c965c9040f6ba74e94c8315a6ca68a812
TLSH
T11C51654CC880AB9DEC7561FE1E9414F253793C38FC5CC3928194B5A53413A681B9B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5acca8.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e79fcffa-9d6b-45bb-9b53-01a0d9730d5b\index-dir\the-real-index~RFe5acca8.TMP
Size 48B
SHA256 86a703647119180961fbc468cd8bd3dc5c435564c6275a1c4a78f61d10af86ea
MD5 25c0e41a8884bf1319c8efe84d643b5f
SHA1 004aeb368071cc5b77f372f94490689af6c49564
SHA512 bcda57577bc44d314694a7055effe85a199d7db16d7af3df2805d73cfb6e47f015068c0897f63aab075c2afdf0d635bc145b1e2b1d99164e89ccdf7f338fcb75
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 a525f1797814f8bb711f097ce4be65fa765774d8a193bd8f5d146bc5f9636fd6
MD5 5e70c2d9511e2194fea9307d467f917a
SHA1 ef68d45765e62cb5f66536e93d279049ccfbfe58
SHA512 2ca8a38c76faa2a6526e7d469795b292b197fc5330b55d9e8767d14e76665b79b722df4eb5fd2fec7d634b5f88b0f311cd4e83c6d6a24877f1e86d413f44f1b9
TLSH
T114D0A7E7112089972621AA845438315D862F4D16C88498F8D409B09334B8203C801AB2
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 183660eb320b8d974c49429df24144a48e7b0f15354a6bf672112427275b4c90
MD5 a38b515bacd9e04e0f454578bf98196d
SHA1 305edbec474f618055a25da5ea074ac2afe69b31
SHA512 071a8a0d8f3bf1b8237c8e73ca1bd9fa2831fe38ed9bfe09ab66a1d68b81fd076ee39f8d98d5773995e3eacff320f73656bddaed79728b9a6ba5c140696b5de9
TLSH
T162C09BD7141085970575FEC81534765D9B1F8749C8D4CCF4A009A1037478713C802676
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5ab76a.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5ab76a.TMP
Size 137B
SHA256 72ab0b1111ffa6425b403e4aa1090f112bcd70583e378289378ee555a99cb7ac
MD5 ae2cdbea22fa1b85baa651fe1bcace0f
SHA1 71053ee5193b52f358fb4ac2d7dfebd1ec98fd9e
SHA512 6be373fdd9b7b314b6b671980d0e742d26b05e47ad3c1cca4f227aaf257fc24cd80f27bb82bab9663070f6d046cc4e2668a88e56ecd3d54244d61f5a6399cfb8
TLSH
T11DC09BD7081045A70772F9C51434765D972F8D59CCC4CCF4A00A71037078713CD05666
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 f2c8527cc0de40fda6fcc98f4f953c0eb2cfb9ff72c229e7ecb2574d663311e8
MD5 ccefc7f15d9f021dfc8a47bef6eba318
SHA1 0e26f220add03e449ed7d970ee9386c2ebc58b8a
SHA512 797f718146cfc5fd67f3ddbb8027a2f2e38fb5e011bcd1dd62d7547cfde08dcbfb2ee9e33851f49ae812f5f8c1b22d584713b0e3d47f6d5699ac3442475bdb72
TLSH
T1F9B0222080082023FC082BF220C3A020F33C0E020303003088BF0000A200FC2202300B
MD5 SHA1 SHA512 TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir1528_1420889896\Shortcuts Menu Icons\Monochrome\0\512.png
Size 4KB
SHA256 d345d2dbe2efd56ff9494cb31cae0e28cde5bdf176a22bca9aee27465b117c88
MD5 97193e4d969021cb6e6ad1b25bb7499a
SHA1 69cb3acd8bc0b31b63791efc9dc47d5657bbf40b
SHA512 1df06713846ea152089ea40434f3fcff250ba2d2c0b5afcbc546b82a65b68f3ad1cf503dbc4e8246765c01f191b4f8389c4c55efb7da507f443d858a8dfd704b
SSDEEP 96:TTcYKfambSQTNpzzBOWUjfRVS/TFm9BfyKhnaBS8ZP9jeLWfbOGp:SbSQTNh9gD+mLfB49ZILWfCW
TLSH
T1B0A1968E8CB5488E66658747D48538A2C5B030A7A7BFC3BE719D174851E32C6FF29B06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir1528_1420889896\Shortcuts Menu Icons\Monochrome\1\512.png
Size 7KB
SHA256 1e0b1b2e4dac49da1e2ce91a72e01f77fdb3bbb26ed3422e5d4037745cc307a4
MD5 cc525d60c0dc9696ddfe9524dc9abe82
SHA1 fc94cbd2a45bf2ff0fbe411f57a7cafa31126bfd
SHA512 09ab42f7dc3d6a08b9635ef229539a5c4c240506378a9de4eccf1f69d52b266222cdf084e9a567c6d21f19e61c4da7ccd98928870d6f10cd74e9158c64a4142e
SSDEEP 192:U3/tgbWgm8Xl2X+xqWwB3kUXPmv9rCywxAQU:2/rgXXExWKdXPa+txrU
TLSH
T159F1AF6F639B59EA3AF8493D4BD7A21FD62E108A2F275B71C5101045628A1C1FC69F0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir1528_1420889896\Shortcuts Menu Icons\Monochrome\2\512.png
Size 9KB
SHA256 ad08077126e7106674e4219f5f9cfac2305e8b3f627247c1d3e72136399e6fd2
MD5 660ae59d489be5b5e1e9036b88b4a033
SHA1 b1ebdb9421bf14b5c43a399b4dbd92288d91a604
SHA512 3bf52f4d1e92ececb7691bedf1f53dea75041615447eac2c1ec9f99d07417a571e08fbd2db58896506350e8af831e8fc943d35e35747a8cb6db9a03d880331f9
SSDEEP 192:uJTyU9sUZdxl59pfNK8EliT9Tjx/t0xM6LwZx4nwBmJH/Rr6O:g9sUxXM8iiJKMfcTJIO
TLSH
T1F022BE9744E4E7A3427CAEBF4684D914DF4E1B7384366E10020B199F0D7AA8268E8B93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

16.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir1528_1749002200\Icons Monochrome\16.png
Size 257B
SHA256 d52376c8b210b8003f5aed9f4555a7916b4640d4c42a36cc81d9864991c87a8b
MD5 6cc922565abd761f4039c816d86018c4
SHA1 05393c91529467f8ddec22a121fe482701365d6f
SHA512 8732f24ea85ab3fa845b3cfa2a354a85cab63a507947fb61bd8119c623e31c87d6f0735ce7f06119db597ec4fce4ad44c15046859b574cb11fb1306e489cf995
TLSH
T1ADD095F2E311DD34C52E96900533C473F433171B1DD56055664491DA4D9E90533C8D59
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 150B
SHA256 9434bd87aa946c37cfd5a4fb379a1fdfdea9eb641d5eb39edcd673a564e20e03
MD5 13102600442d8c73ddd025ef8eb26003
SHA1 8c2a6b96ef12080743081f91543d57b07a9bcb80
SHA512 7923b464daa00b8b4392d8f74748a95d4df778215f041d1507bd6fe23c69c1bf1a748332ed34341d86a817a03122830689cc4cb3916a2a8dfb23b936436edf1b
TLSH
T128C04CE7192065DB8FB5AEE91158791DE66782489CCCCDE8944441032479B324405DA9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5aad39.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe5aad39.TMP
Size 157B
SHA256 f0b3112352c7af57f5373cf0963da7b4dcd1e799dfa259f0c852943320624fa6
MD5 a49406a264a7ef1b36377fc393f87b59
SHA1 662fa617dab43a27e4ed4506d0b66163394c35bb
SHA512 fdde07b0256207079800e4d7d1f97127e69d25ec4ced4b32b730f69f62e7d13a29b1a61cb42ebec5c50dde5b05d23adb88a194194985cfa21a5dce874a9936fd
TLSH
T1E1C08CE3183090C78BB1A9E91128390CE6378D088CCCCDE8940570032038B334400D69
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 25af7d355a1d24071fdd966b248848f07c5ee141cf41c8825c7be6cbed3bfa52
MD5 f461597fbb0edc8c546a59c376c0992d
SHA1 f03857df4514781ac0d82f7ec30632d66e356117
SHA512 a8ea8b0e6a4939f6e799467b963bd082df0c3007bae07e7f7d5cd959ea275b39184f5772c75a89d38ce9fb5246626b90c3a3aff9bed86a37545db2d729982e3a
SSDEEP 3072:FGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:Mm7Rkm1tYpBeh2BAoO
TLSH
T1F6C3123B5D65E9375D78B70EB48E0B1E1EF249A6C920DE42C8D86A0437FA7CC1A04A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 f73a60c0adf9b804c7aff461c7c83528ffa665df6340ab199709f6172300f423
MD5 1b0b65e0f85e9af39a8e49bcd9fce563
SHA1 a661b72ba7eeeb0fc34368c4eec67d3e7a6f5faa
SHA512 a1bb2fa7d3b2796435e57e2127f611f5f3684d4ca2be047fe4a8873258d96c404e6804364299d36714fd7bd6b98249573220534add1951285173db9f19ce0d07
SSDEEP 6144:v1J5PoycD6S3l/31Xksp91xGm7Rkm1tYpBeh2BAof:9Jhoy5s1Xke1T9oBGcAof
TLSH
T1C23412366C74E93A4F6BE71D804F180F0CF3C896CD24ED6E9ED9AE44B1DA5D80A16670
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 be49dad1997244adc620bb9d6184158f63f327150d220768c5c40ebd96fbe93c
MD5 928ad737fd871f72ee001e3519b21194
SHA1 6aa9310d80ba6e9eb041d376932bdcab71c0e9e9
SHA512 e7af1480fee624579a812e216d5bac1eaebb6c7363c0f07471d4992dcbb2f639fc3dd8523d1d7b2c5f391d701039b9d131eeeeed7ff4348cc015883562e92b17
SSDEEP 6144:O1J5PoycD6S3l/31Xksp91xGm7Rkm1tYpBeh2BAof:SJhoy5s1Xke1T9oBGcAof
TLSH
T14A3412366C74E93A4F6BE71D804F280F0CF2C896CD24ED6E9ED9AE4471DA5D80A16670
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 fece7823dccae28cecf9da93a0b8b09553cf008c172f5f1a9540a1752e734ca8
MD5 15636a9b54c2eee0e78e478c2fd43292
SHA1 5fb83b47a96e3ad1e5cb10c9476817c6694a2b87
SHA512 654934680c9439b9a375a26ee89c1caaa411f3bd675032533716b530ef5916026db8f90b50ffb3eacaa2b88e36e289ace810a0167dee482df941408c16d67654
SSDEEP 6144:8T5PoycD6S3l/31Xksp91xGm7Rkm1tYpBeh2BAof:8Thoy5s1Xke1T9oBGcAof
TLSH
T1AD3413267C74EA3A4E6BE719804F180F48B3C892CD24FDBA8ED6EE4471D66D80716671
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 c91b7052896b87e423b196d4eb4e933165962668cfe54fa7a98d5170a91f2182
MD5 537f38c3a44004a24f058061d46be537
SHA1 dee3f87e0ef863e2d67dfbdcb9f283ab4017f387
SHA512 b7e0fedaa823b6afaaa7863cea58207943c6b26b127b99546820d72267318af012f67a6b3603599bb54b86e0c31c507ee0063bde986446da28c2480045843902
SSDEEP 6144:HT5PoycD6S3l/31Xksp91xGm7Rkm1tYpBeh2BAof:HThoy5s1Xke1T9oBGcAof
TLSH
T1293423267C74EA3A4E6BE71D804F080F08B3C892CD24FDBA8ED6EE4471D66D80716671
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download