fb83741f29e99b8af74f9e182c3f1eaebeb2f401a5c6886f1c045d406e282c23

Resubmissions

22/08/2026, 02:45

260822-c8rckavtdt7

22/08/2026, 02:44

260822-c8k6jszgng

22/08/2026, 02:41

260822-c6mxcsvtcx7

Analysis

user interaction
yes
max time kernel
150s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/08/2026, 02:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Antares Auto-Tune bundle V9 CE.exe
Size 110.0MB
Sample260822-c6mxcsvtcx
SHA256 fb83741f29e99b8af74f9e182c3f1eaebeb2f401a5c6886f1c045d406e282c23
MD5 cda53632778d1ced63a7c0809b71cb86
SHA1 f7d30963a0d45f35cc015f5c5e5ed58276b0e628
SHA512 8b6cd507fc76d75aa2d96d5546ef1d12f0c25c015bd195cee914d5501ec277b41801f1adb171ba67b164a3e7e68fd3d232ea9f7903cf11443f9a83db0be18b2e
SSDEEP 3145728:8aDfXHRtVR2oE76WDIJZZPlPZrbsAjHMZN1cy:86vHRtVRu7JsnN5ZfsAjsn1H
TLSH
T109483347A255AE3FC069A73556B3E41058FBB35AF84A9D2226F1C5ACDF221C04F3B871
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
4908	Antares Auto-Tune bundle V9 CE.tmp

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops desktop.ini file(s) 2 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares\desktop.ini	Antares Auto-Tune bundle V9 CE.tmp
File opened for modification	C:\Program Files\Common Files\VST3\Antares\desktop.ini	Antares Auto-Tune bundle V9 CE.tmp

Drops file in Program Files directory 44 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares\Auto-Tune_AAX.aaxplugin\is-8DHF9.tmp	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Common Files\VST3\Antares\is-0AS70.tmp	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Antares Audio Technologies\Auto-Tune Pro\is-6C0EO.tmp	Antares Auto-Tune bundle V9 CE.tmp
File opened for modification	C:\Program Files\Antares Audio Technologies\Antares Central.exe	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares\Auto-Tune EFX.aaxplugin\Contents\x64\is-RSP1H.tmp	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares\Auto-Key.aaxplugin\is-BSMNH.tmp	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares\Auto-Tune Artist.aaxplugin\is-H16P5.tmp	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Antares Audio Technologies\is-P0GVH.tmp	Antares Auto-Tune bundle V9 CE.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares\Auto-Key.aaxplugin	Antares Auto-Tune bundle V9 CE.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares\PlugIn.ico	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Common Files\VST3\Antares\is-MJ9IE.tmp	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares\Auto-Tune Access.aaxplugin\Contents\x64\is-LNNLV.tmp	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares\Auto-Tune Access.aaxplugin\is-3VQM3.tmp	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares\Auto-Tune Artist.aaxplugin\Contents\Resources\is-813D2.tmp	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Antares Audio Technologies\Auto-Tune EFX\is-V1EM9.tmp	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Antares Audio Technologies\Auto-Tune Pro\is-4J3S4.tmp	Antares Auto-Tune bundle V9 CE.tmp
File opened for modification	C:\Program Files\Common Files\VST3\Antares	Antares Auto-Tune bundle V9 CE.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares\Auto-Tune Access.aaxplugin	Antares Auto-Tune bundle V9 CE.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares\Auto-Tune Artist.aaxplugin	Antares Auto-Tune bundle V9 CE.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares\desktop.ini	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares\Auto-Key.aaxplugin\Contents\x64\is-QGQLQ.tmp	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares\Auto-Tune_AAX.aaxplugin\Contents\x64\is-H86CB.tmp	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares\Auto-Tune EFX.aaxplugin\is-VJ4RP.tmp	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares\Auto-Tune_AAX.aaxplugin\is-JVB94.tmp	Antares Auto-Tune bundle V9 CE.tmp
File opened for modification	C:\Program Files\Common Files\VST3\Antares\desktop.ini	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares\Auto-Key.aaxplugin\is-DV9TJ.tmp	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares\Auto-Tune EFX.aaxplugin\is-C8CKS.tmp	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Common Files\VST3\Antares\is-8F17S.tmp	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Common Files\VST3\Antares\is-B45PF.tmp	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Common Files\VST3\Antares\is-H9GG2.tmp	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Antares Audio Technologies\Auto-Tune Access\is-ENJFQ.tmp	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares\is-I8GBI.tmp	Antares Auto-Tune bundle V9 CE.tmp
File opened for modification	C:\Program Files\Common Files\VST3\Antares\PlugIn.ico	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares\Auto-Tune Artist.aaxplugin\is-FS2TR.tmp	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Common Files\VST3\Antares\is-MBF8J.tmp	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Common Files\VST3\Antares\is-QURSJ.tmp	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Antares Audio Technologies\Auto-Tune Artist\is-NP6IH.tmp	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Antares Audio Technologies\Auto-Tune Pro\is-8AAOA.tmp	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares\is-NO4RM.tmp	Antares Auto-Tune bundle V9 CE.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares\Auto-Tune EFX.aaxplugin	Antares Auto-Tune bundle V9 CE.tmp
File opened for modification	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares\Auto-Tune_AAX.aaxplugin	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares\Auto-Tune Artist.aaxplugin\Contents\x64\is-EHM31.tmp	Antares Auto-Tune bundle V9 CE.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Antares\Auto-Tune Access.aaxplugin\is-7C7S3.tmp	Antares Auto-Tune bundle V9 CE.tmp

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Antares Auto-Tune bundle V9 CE.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Antares Auto-Tune bundle V9 CE.tmp

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3816	chrome.exe

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral1/memory/5092-1-0x0000000000400000-0x00000000004C8000-memory.dmp	innosetup
behavioral1/memory/5092-26-0x0000000000400000-0x00000000004C8000-memory.dmp	innosetup
behavioral1/memory/5092-2056-0x0000000000400000-0x00000000004C8000-memory.dmp	innosetup

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134318401398664329"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{0F893821-FF86-4E13-AF75-7772FF437909}	chrome.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
4908	Antares Auto-Tune bundle V9 CE.tmp
4908	Antares Auto-Tune bundle V9 CE.tmp
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
2168	chrome.exe
2168	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 17 IoCs

pid	Process
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe

Suspicious use of FindShellTrayWindow 37 IoCs

pid	Process
4908	Antares Auto-Tune bundle V9 CE.tmp
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe

Suspicious use of SendNotifyMessage 34 IoCs

pid	Process
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe

Suspicious use of WriteProcessMemory 59 IoCs

description	pid	Process	procid_target
PID 5092 wrote to memory of 4908	5092	Antares Auto-Tune bundle V9 CE.exe	87
PID 1640 wrote to memory of 3112	1640	chrome.exe	98
PID 1640 wrote to memory of 3816	1640	chrome.exe	99
PID 1640 wrote to memory of 3952	1640	chrome.exe	100
PID 1640 wrote to memory of 3952	1640	chrome.exe	100
PID 1640 wrote to memory of 2692	1640	chrome.exe	101
PID 1640 wrote to memory of 2692	1640	chrome.exe	101
PID 1640 wrote to memory of 3312	1640	chrome.exe	102
PID 1640 wrote to memory of 3312	1640	chrome.exe	102
PID 1640 wrote to memory of 2004	1640	chrome.exe	103
PID 1640 wrote to memory of 2004	1640	chrome.exe	103
PID 1640 wrote to memory of 4224	1640	chrome.exe	105
PID 1640 wrote to memory of 4224	1640	chrome.exe	105
PID 1640 wrote to memory of 2832	1640	chrome.exe	106
PID 1640 wrote to memory of 2832	1640	chrome.exe	106
PID 1640 wrote to memory of 2056	1640	chrome.exe	108
PID 1640 wrote to memory of 536	1640	chrome.exe	109
PID 1640 wrote to memory of 536	1640	chrome.exe	109
PID 1640 wrote to memory of 1632	1640	chrome.exe	111
PID 1640 wrote to memory of 1632	1640	chrome.exe	111
PID 1640 wrote to memory of 2972	1640	chrome.exe	112
PID 1640 wrote to memory of 2972	1640	chrome.exe	112
PID 1640 wrote to memory of 1288	1640	chrome.exe	113
PID 1640 wrote to memory of 1288	1640	chrome.exe	113
PID 1640 wrote to memory of 3876	1640	chrome.exe	114
PID 1640 wrote to memory of 3876	1640	chrome.exe	114
PID 1640 wrote to memory of 2168	1640	chrome.exe	115
PID 1640 wrote to memory of 4812	1640	chrome.exe	116
PID 1640 wrote to memory of 2168	1640	chrome.exe	115
PID 1640 wrote to memory of 4812	1640	chrome.exe	116
PID 1640 wrote to memory of 4196	1640	chrome.exe	121
PID 1640 wrote to memory of 1672	1640	chrome.exe	122
PID 1640 wrote to memory of 2224	1640	chrome.exe	123
PID 1640 wrote to memory of 2652	1640	chrome.exe	124
PID 1640 wrote to memory of 2652	1640	chrome.exe	124
PID 1640 wrote to memory of 1464	1640	chrome.exe	126
PID 1640 wrote to memory of 1464	1640	chrome.exe	126
PID 1640 wrote to memory of 4156	1640	chrome.exe	127
PID 1640 wrote to memory of 4156	1640	chrome.exe	127
PID 1640 wrote to memory of 4988	1640	chrome.exe	128
PID 1640 wrote to memory of 4988	1640	chrome.exe	128
PID 1640 wrote to memory of 4144	1640	chrome.exe	129
PID 1640 wrote to memory of 4144	1640	chrome.exe	129
PID 1640 wrote to memory of 4132	1640	chrome.exe	130
PID 1640 wrote to memory of 1292	1640	chrome.exe	131
PID 1640 wrote to memory of 1292	1640	chrome.exe	131
PID 1640 wrote to memory of 1488	1640	chrome.exe	132
PID 1640 wrote to memory of 1488	1640	chrome.exe	132
PID 1640 wrote to memory of 1912	1640	chrome.exe	133
PID 1640 wrote to memory of 1912	1640	chrome.exe	133
PID 1640 wrote to memory of 464	1640	chrome.exe	134
PID 1640 wrote to memory of 464	1640	chrome.exe	134
PID 1640 wrote to memory of 620	1640	chrome.exe	135
PID 1640 wrote to memory of 620	1640	chrome.exe	135
PID 1640 wrote to memory of 5848	1640	chrome.exe	136
PID 1640 wrote to memory of 5848	1640	chrome.exe	136
PID 1640 wrote to memory of 5872	1640	chrome.exe	137
PID 1640 wrote to memory of 5872	1640	chrome.exe	137
PID 1640 wrote to memory of 2168	1640	chrome.exe	139

C:\Users\Admin\AppData\Local\Temp\Antares Auto-Tune bundle V9 CE.exe
"C:\Users\Admin\AppData\Local\Temp\Antares Auto-Tune bundle V9 CE.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:5092
- C:\Users\Admin\AppData\Local\Temp\is-JH703.tmp\Antares Auto-Tune bundle V9 CE.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-JH703.tmp\Antares Auto-Tune bundle V9 CE.tmp" /SL5="$70236,114584709,763392,C:\Users\Admin\AppData\Local\Temp\Antares Auto-Tune bundle V9 CE.exe"
  2⤵
  - Executes dropped EXE
  - Drops desktop.ini file(s)
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  PID:4908

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffbd7fac728,0x7ffbd7fac734,0x7ffbd7fac740
  2⤵
  PID:3112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1588,i,8947987088966435940,13763786385864260994,524288 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2096 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1680,i,4659419443460283858,3864853245090894315,262144 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2060 /prefetch:2
  2⤵
  PID:3952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2400,i,2672014462463354657,11375484173563349803,524288 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2428 /prefetch:8
  2⤵
  PID:2692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3216,i,13362833117153932078,4892200573051086697,2097152 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:3312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3240,i,13893874066794890191,800311531736931141,2097152 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:2004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4472,i,11009368189660609919,1761824741823444099,2097152 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4500 /prefetch:1
  2⤵
  PID:4224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3928,i,4928645068950285430,9154366558898997525,524288 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4648 /prefetch:8
  2⤵
  PID:2832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5380,i,16807213176040858303,2872332967775171931,524288 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5384 /prefetch:8
  2⤵
  PID:2056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5468,i,8581015267911646820,5261977197205369044,524288 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5504 /prefetch:8
  2⤵
  PID:536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5620,i,18409857364534077384,13129138577777745311,2097152 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5552 /prefetch:1
  2⤵
  PID:1632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5788,i,2158767333594470671,6912707686641830608,524288 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  PID:2972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4600,i,15983892829709910879,11094886525690869348,2097152 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5420 /prefetch:1
  2⤵
  PID:1288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5384,i,9010238146203178551,5906496770369512543,524288 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3924 /prefetch:8
  2⤵
  PID:3876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=3288,i,8310420145915847186,13320485994956115355,2097152 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4544 /prefetch:1
  2⤵
  PID:2168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=3492,i,4126053827534027113,1133678531197975229,2097152 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3476 /prefetch:2
  2⤵
  PID:4812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5992,i,4501762418415935444,8638301503636954700,524288 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4556 /prefetch:8
  2⤵
  PID:4196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6004,i,9833636686557783420,10941203881178227560,524288 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=240 /prefetch:8
  2⤵
  PID:1672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6128,i,1778855250573091359,2954166561483098033,524288 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4576 /prefetch:8
  2⤵
  PID:2224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3088,i,12410223585323364049,5817667294018535436,524288 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5380 /prefetch:8
  2⤵
  PID:2652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5924,i,3574938736015812111,483487675166881839,2097152 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6172 /prefetch:1
  2⤵
  PID:1464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5812,i,5405954296271290261,3751033634576194858,2097152 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6164 /prefetch:1
  2⤵
  PID:4156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6036,i,11707572215737328022,1905908024481756769,2097152 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6088 /prefetch:1
  2⤵
  PID:4988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6064,i,13641669355233086610,14500012974132178457,2097152 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6376 /prefetch:1
  2⤵
  PID:4144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6052,i,1526307145673578255,2864333638480623660,524288 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6340 /prefetch:8
  2⤵
  - Modifies registry class
  PID:4132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3276,i,4353129208777233223,15934142580531166127,524288 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5984 /prefetch:8
  2⤵
  PID:1292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6692,i,9160416344505854067,5296327162781705560,2097152 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6724 /prefetch:1
  2⤵
  PID:1488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6852,i,5497198772989725171,16890808578614443239,2097152 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6632 /prefetch:1
  2⤵
  PID:1912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=7124,i,10348657871989564689,788765553123444111,2097152 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7104 /prefetch:1
  2⤵
  PID:464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6668,i,17821394743661973462,17860181844463369674,2097152 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7144 /prefetch:1
  2⤵
  PID:620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=6732,i,8771408292042886010,14385633495017125713,2097152 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7120 /prefetch:1
  2⤵
  PID:5848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=6744,i,16255116431035652596,16704040120440195925,2097152 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6820 /prefetch:1
  2⤵
  PID:5872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6780,i,10397610156454540516,8708185658645747194,262144 --field-trial-handle=2068,i,11034970163568425956,8319600205428607277,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6768 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2168

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1952

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2068

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1928

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k UnistackSvcGroup
1⤵
PID:3556

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

is-MJ9IE.tmp

Path C:\Program Files\Common Files\VST3\Antares\is-MJ9IE.tmp
Size 45KB
SHA256 00999004190475604537034d99d9a2cc84355579e4b199045dc6c8c3479e3600
MD5 6e03b680fbee54e69e52a15245989862
SHA1 0136100d693fa2cf4eba38ac0314951b7be22c9b
SHA512 1a2e8770e676bfe9c84f81185584fdf347271897637f18ccbcb1f1dfb7f4afac4cf65ab0d19d7f34044b5f5b304d7b54c9c85c8049fee0a4a3e4cabe3ae7c578
SSDEEP 768:bGZFQoWsxV75P4tkACEv3O7fF9mS0ZPdLwDiQ2lKS:OFQobL5P4tkAZv3wNQFdLw2QCKS
TLSH
T1E123ADD2A4491483E3AE1173C78571FE9CB4F8674273B5A6FB026DF80A6A736D709205
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-QURSJ.tmp

Path C:\Program Files\Common Files\VST3\Antares\is-QURSJ.tmp
Size 126B
SHA256 5526ef6345adee7c693e58354dd72b095df152be62ff7298b4c6f6d0f91e2f83
MD5 798095cd31340606c8e81d0a5107d57e
SHA1 39d058c4d45ef84b188f7ece620106124eb3d74e
SHA512 9ca995c89d3f23cd2a977fb2826da1f75dc4caa4fe965f9aac3a6d486f6558429a44eaeea35217f85d94ba6d7c2c54ab520c9a1786133b2edd103e36159e53a1
TLSH
T190B09B15282F5020D57FC3071990BDCFF2041857985BE804C78287854EE17164FC855C
MD5 SHA1 SHA512 TLSH

Submit Download

store.jfm

Path C:\Users\Admin\AppData\Local\Comms\UnistoreDB\store.jfm
Size 16KB
SHA256 943cdcb6770341366a2c0bf649262ca45f33ed081f080216472a7482db30c744
MD5 5a14d61bc5fa7ab6eb9b85710e6209f4
SHA1 dec06601c6a05a554c0ff51a3eff4d4582f542ba
SHA512 0c8cd854e8a61b212a7231c3c09ad2fa58003066d8be759f4597a6b60bff7760a94555f920cf14dcb9594b34ba4327fc8f70620c096447324cbda34617efab95
SSDEEP 12:clwIpR+mQ5/yiAUx/Ib3iZ/713jjQlVen:cKIbZQ5aiAwg2ZD1Tj
TLSH
T111729A8A2B2C4F42C4882F78DBDA431233ABD8B44300449EEC6F0880EC853A8AC910D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 5e578611f9a9cd9cf373fa463aaf24bc0de4e87fc53713ea1f7d4594fbe5c4a9
MD5 c31dba3c3cebeab1414df8f7433ef0df
SHA1 1e7bb7c2a8a1e50b27d6881792d20bbf6e698e2f
SHA512 bc2240613300ea558c333bdf7e76c10704bc79dc1acf60200f01ce5b65f4f783f8e501b4283085a4a74439a344377314e1d0c6279273920b3ea177cb883aef30
TLSH
T171E02BB9C865FC6B29FE1728A0518746F614135B3A50595B7A3C860C8FF4B3B564A81C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005
Size 72KB
SHA256 0df3c4f39d3f7f318e5e9c31c07d7ff54b52d551ac30ab1c709743167f53a64b
MD5 718bfb329979c646da12fa79376bae76
SHA1 28dacce140caaad9a8492766e18ed92b0c93d2c2
SHA512 cb670c914b72c530362c7df9c2eb5b77bdbbe3c6d10f089be55a01e7534b21042203eff4edf3780b3369942a371aaeb317adb6dc34783dad39fc8f7a681433b5
SSDEEP 1536:GuNC1lRrqCNDEMmaSTJ2ed+oQK7vsmLMv29xy68oaVBOMS5In3N:LMlQCNYZTJkPAvsmz9N8oavOP4N
TLSH
T141730246A7ED93FDB5EC33E31742A406180908A8DC7A9BDFFD1F07AA1C1CA0195D895E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000054

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000054
Size 61KB
SHA256 faa04655afde0a2002cb3f0f1e25de9d75ec7615280834d335183c036a43dd11
MD5 dc1d5a52cdb4f0bdd99e25a83e8f1be0
SHA1 73c8a81d9432c2b07db31452db5442a97c466cc1
SHA512 4b76ea8d048a4b64d465e4c09f55c15570810481c0fa7ca5006cdd10a17aa35fa35b3195f10a5c294de69a675c97e11449172582589cf17eb9948fb039bb348b
SSDEEP 1536:+iOOznFGbM22gr6cqltNBWnJfNReLXQMiu8/e:++ooQ7q7NBWnJFReLAwye
TLSH
T12C53F2A5DA851CFBE01860FC4D0C69C24B97919E20304B56C33B654D3B1E7A26CEBDAF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000056

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000056
Size 83KB
SHA256 62c953b0c47f502b406152472dc4c1bdfb367c3b9b259ed2b2981f2841f52410
MD5 543e32b60e0c932a9e670e4f498f038b
SHA1 9d735d5262b17f073e2fdd9b9ff001ea767bc448
SHA512 515eee57d3c918c1979bef8047bee44129ab68ebd33cda95d47ba25c3fb02442270fc772a7e215a798e021db349cb99b3d8a823010f5d4c237d28edf6f5fd747
SSDEEP 1536:B8CYXjTYH0e4zFXAo0inECtc69eENITzLCpAcOHvjunYC45uQkd8:B9YJeEfk/TzLCpAcxYb48
TLSH
T1AC831241980484FDE41165FBDB6BF29756F2AA4019C5212E81DAB52B838FDF6BF31037
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000057

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000057
Size 78KB
SHA256 0dc6b2bddbbaaa8f1bcea461325e7bc8df0fded8260faaf2aa3a0206f723ee70
MD5 929c859782b1b7e5053e28e1ac86d936
SHA1 fdd7f1cfd7736a25204ac5ad06e4c31d1c395fba
SHA512 df125be34cf279e852ec1c18c4bebe2be358bcf94650b4a51fcd2add3d223bd9e252f9ffc1bb21bbbe9e670f67b1143cd482eff498ede1341debba72d48b9973
SSDEEP 1536:liVuTYlHLcBq4PmXigMuUAeGLHGCscYQ7TnSNHvd/N:lioSkPBPLAe2nc6aPn
TLSH
T1537302865AF8A95FCDC8B37D82770DC59E03062F1FF6508B588E30254A31B99A4BC696
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000058

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000058
Size 103KB
SHA256 8f7ce082c62ebf194c910cb5770b397da792d1a9ccea830a48db1477fefd2e19
MD5 978b7fc5ad6cff21dd9aa3a4a41bf029
SHA1 09bc946005a617d281b04086a0ddbda1d6b3a8f3
SHA512 4fd7d2f469fce0ff666233da3dcab40f8497f8ca0bfd4690ef0abbdadb5684a0d6b3b7bcd84f124f4d34279d36232d4064b37555a7d20c97972aecd45e2ab0fe
SSDEEP 1536:7BQxXj0ZLvtxoqR19Op9kPq5ls3gSSNd/db6xipmeuhDpkfn2C60oigYR1oUEwG:iWZbvoqRnOUq5O3gv3/ZiWB6OJR0H
TLSH
T1C8A312147D1CAC47DD29CFF43EEA1C58C5850D62CE0ACF56C68895B91D1882AFBDF628
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00005a
Size 94KB
SHA256 84ad4782fa03452dcb8b684904ba69ea19fdadb45de1608a79b9fa073caf11d0
MD5 b959d152cfedad43499eb9f92c28ff05
SHA1 a8400157e36d53410ce54901fb5ad2c28e4e2725
SHA512 71dd6a91014971f8b8f4e4ad187e25af6628e11e45344672d30b03f4233dce7831b9fb7a2a2dcbeeeb481ce29ff7daa444c757347117119249739674201b125b
SSDEEP 1536:jFwaM8v0DD0K5ACTcnoeIACN3z2cvoJb9xfaZsuTGaoKfu0Q5xtnG2xfbImkNyrN:jCD8oIK5AM4oeINDjCvfTGjffQ5HpVs6
TLSH
T1D09302791E075A42F82AA871463EEF1F53AE53CA98C754A2E9FC7470DB72063E147C06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000fc

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000fc
Size 51KB
SHA256 935823dd0b51972c270ddab522dfbde9dd1a7e49595176cb13dc89474a10ae4b
MD5 55eeb85c090f4e93d9b6045957c2c5f4
SHA1 8dc4abac6762f326b9a40b266ebdb0d2612cbfd2
SHA512 9e35e65893217f7fee2edbdbf32e62b1d58a53bd4bbff6fbbf6aaee87ba0ddababf311d759e06bc7ee42b5bc08304aba2b70e85ebbb56976fd8055541c18ba51
SSDEEP 1536:4mg1qm42OVS0pWe8ncy7a2sutKwYPYo923jaW:4mg1qmm0nPe2sCYPYo92TaW
TLSH
T1753302F8D9F3B577C79520350C8EBC50918F7D7504564B34626C268ABF8960B5C9BF90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ff

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000ff
Size 54KB
SHA256 13005d46812d2e7dcded3bec5ba3a5f2ad25f21f499d05647c0c6611a8b5f2fb
MD5 9042f2db2bb4775aeaed185d1309002d
SHA1 f6b5066ec7c8bc0c8ae969e637948d209f212eec
SHA512 344462c687399a29a8c899fec1f460cbc03a49b020c258c4095856a4f798f2a3d8c63b956a456e5e4312262eb17661255e2d01be8e3ac5ec6ca6620dd16c847e
SSDEEP 768:X8i/LDK+LBn/bs4GJT+M2sI8bpjuHQvYV+Sjiuq9QpldHCQo4y8D4MY1N/muoJ3m:XjLDKkZ/WLs8VjuqSeZkHCMy+QyvX0
TLSH
T1DD4301910223F83FDBF7DA6C08490B066744E0543A77CC9A2599193E4DEDE27C968FA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000103

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000103
Size 61KB
SHA256 25d854b309e305444a5d509da796e7fa75be66267bfa7ac7c11571e2670836d6
MD5 7f2668cb387c0f76dffd52e401950536
SHA1 bf9426627ff47bf0ac84ac9d80888d6220f64deb
SHA512 290ac17e2b996d10d08d05239ca78ded5b367a237ea455384592f1171db115e60417af5ab587c4a976fd59b6c3b22a57ce7aebdd2ff549429f7017ef63894ae2
SSDEEP 1536:7f3jLKZw5Ls02rv6MFUpCseNunVvVBpmlqcvHw:zjLvVWmMy9eNOjpmo4Q
TLSH
T1B453028F7AD81EC1D170737CBE21394DD2064353C82E6142ABE63EB38A61D56985FDB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 5KB
SHA256 af05429bb6852489322b1f9c90447bf0e63df938e48e864cc60030e2c5af6e77
MD5 b96db6651f22abcd9bb4b7d4d2977dd9
SHA1 3c2d56ab7e79474d6f3b3d3ea6f0ce6d063730b9
SHA512 870e32a508e56024f58b9201c429b19e821bde2692b2d3e88ceca6f009fb0d634285649a7265f9ad346570d6b42cb182fdf2a030791b94312d5564bf5cdf498f
SSDEEP 96:v0ulQnl55a/NRzNfU/Rd1lgukOuXQc1kdJRsgsvZIBXL6FTZYUYmesM:Hl255UdNfUj1lQQ9bKvZIBXL6FyUYhsM
TLSH
T1F2B1D80E7AFA9691EF907DB31DD24C17BF391C62A1369FB32909963C84533C45A329A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 6194986817eacee10890f001461bd38421b8cf34a65b5094275521796fcf2da8
MD5 1362a931c225ca705f9c675265083675
SHA1 3acad7e6c06f3184b93d1979a1c0ec67b9f7b5bb
SHA512 27c51b292a9528898da491bd016deaa198a7cc74a3c82873493dcb5f6419578ac71c3a82fbb155582281a6307e686b8db6635c591dcf900b2553726d43830aa7
SSDEEP 192:zhdZY755JozeUsBuK8aeKb5+ZFtG4LfF5/MfPcL52sR:Vki/9YPgj
TLSH
T1D1E1FA0A69FAB5B1DF502DB31D924C077B382872E23A7FB31814923894533F54A339A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
TLSH
T109F09C8CD050E86F02B2411AB1647314FB51037A0751A59F393CDC0D9FB6DA751C6F4D
MD5 SHA1 SHA512 TLSH

Submit Download

craw_background.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
Size 531KB
SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
MD5 6eebed29e6a6301e92a9b8b347807f5f
SHA1 65dfb69b650560551110b33dcba50b25e5b876de
SHA512 fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2
SSDEEP 6144:abyfBNC2FRdjiRXqbe5Dq31IVlMqX+wd5/CcMMJcRULt0NjyTOEzZQ+h72W3GB0n:Ft/g
TLSH
T1B5C4F74C34C2E8CD6A623DA5247B9085A2319266F4479ED9F0EDECF21AF44641937F3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 18KB
SHA256 34f6b5a587e034c850faf7682b907b7d803eb2c57265621fc295e752262e0b0b
MD5 184902efa98caaadf818c47a98be52d8
SHA1 425a33634450ce67644be992e87879146d044307
SHA512 3be39e30a0053ca0097e25400f7789b16f8062b7f2fe9ec551e72748dce9a8074a118bcc405b3f5190abc92e4ccc2176a49fa2f4fff3509d3cf5597b2f5882ae
SSDEEP 384:DCOTRwSDKpMK+evLHA+qLWgeFadrDI5Sa7y/SGI0Gw3UGXG6PGV2S/k5E9Z/o8oa:gI+229DV6b8Mg
TLSH
T176829BB383E48A6DD91162F49B646D1BCE6D0928A72C3C27C8D5BE4B53D24B2E34174F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 58923381135fc3be138df27566bee036072192dd16ba1a3a16ba22e9ee0f58b7
MD5 c02f51c783f1e85ad70efadb0933042f
SHA1 9e943d37c4f2ab0bc79e722b055eab57d7eeb704
SHA512 163f1ca5299e7ab0844231b9363de0eb064ad1341e460d9f748db8223b97d0ef94cd145b0d8a4acb51eff7cb68a1732d7908be802692c45efa43cf9a23041d08
SSDEEP 192:/R7IHT5v72vAPRp2gOb4K9THsb+WNnYhbQZ2Ni2neMbHpa8cVyIsnAUge:/R7IzZC6X+FwQE2M2DJa1e
TLSH
T1C242C72EA924757B5DDBD219FA617B27D7F5003225D42E80EAFC892C11EB6CC222741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 ea761c0cc909079eaee05be9ebb51b4c9c7a8dbdf6613ce643812f6bfd5d4cea
MD5 eff780fe46efef80f86a5a5fbba4a2a1
SHA1 5ddad3c567c3099e44f205efa718539770b3783f
SHA512 ffec6d0be37414bf0902c5355d2d6c82e2f01fc025169feceec861e823fe9b322d8f1fb93c28aa0c3f541cfaa2ebfef5322c23ca81c1a61a0b23d8ad5ea239ee
SSDEEP 192:kR7IHZAv72sAPRp2gObHR9THsb+WNnTb4IlSECi2neMbHpa88VyIsnAUgE:kR7I5cCNXsFw34hEJ2DJatE
TLSH
T14942B72AA924397B5DDBD219FA617B27D7F5103225D52E40EEFC892C11EB6CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 1764d7649d1cf2b358138cc6523ea5220f2dae4a531d314fe7f08b3ec8785209
MD5 ecfdb61a41356cfe891be5aaedfda551
SHA1 9456f15249f8a95e6b807f6774ffbc15afa3e62f
SHA512 efcabe8093e61d93cc879511fb45ccb2ca5b5790d5800d62fa90069121994365bbcb575b0abc55181656238749924aa493854d752b8ab60c4444692379d8b5a9
SSDEEP 192:/R7IHTFv72vAPRp2gObHR9THsb+WNnYhboxezi2neMbHpa88VyIsnAUgE:/R7Iz1C6XsFwQke+2DJatE
TLSH
T1F542B72EA924357B5DDBD219FA617B27E7F5103265D52F80EAFC892C10EB6CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 e8e0a4ad950e7c2db4e7ed195414e2aa3e2ebb6ac04b83f1c23fce163cf891d2
MD5 961ac2ec2d8dfc4b5a7e2e8105760f97
SHA1 2d7bbfb533b8d595230f5f83b3ebd770c351d12d
SHA512 06a281e91cf54e8faaacba9ce1799ead1ed43f3ef77f72a0860437875c6a23d8b6d21e9f65023a4823ff6955b27cbe296f9c1baaf459ade70f9b045f4a6707a1
SSDEEP 192:NR7IHZYv7Od4PRpLdWObH8529THsb+WNndis1aNLU1qn2si2neMbHpa88VyIsnAI:NR7I5ECIXVFwAhy22X2DJatE
TLSH
T11852B66AA424797B5DDBD215F9617B27E7F6103265A12E80EEFC892C10EB6CC321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 ee00551b248e99b302e94b7415c6e61269dc66f03087dca71c097b23a95bc662
MD5 41481516fa89297bd9fd390dbbbb2dae
SHA1 e4287bc7ede8ec9fabf73cb8c636a9bf4b77bd61
SHA512 10aee960bfacf1309b86170164214c8ba9821a141e74e6c991d647c9373f115f6792dd44d88b03dd53e52c6ed48e8f43fec0c4040ba2630081e50868e80f8b46
SSDEEP 192:NR7IHmrv7Od4PRpLdWObH8m29THsb+WNndis1aNPNJ5nEZi2neMbHpa8WVyIsnAI:NR7IGTCIXQFwAhD7EI2DJaZE
TLSH
T1E052B72AA924397B5DDBD219F9617B37E7F5103265A12E84EEFC892C10DB6CC321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 c1ef12115c4d728046731a83276904cfbfed696ffe38d7d60fd519d48a9fdfa8
MD5 6fdf4d7b1ca187fb9e61b15bce0e0457
SHA1 33a1beeba4085a410ad5ec06a61352e63897193e
SHA512 06187549e3f9904865a43c6461f3dd686c18ed1cf1cf87f4a3e18f7af907cab673199d2bfcae7ce1eea92090d239cc7b4dfdb9e02b4c4c51a3aacda5a47402f9
SSDEEP 192:wRmIHmrv7Ob4PRpLdWObH8m29THsb+WNnnto1aNMCvcS8yi2neMbHpa8WVyIsnAI:wRmIGTCOXQFwt9zF852DJaZE
TLSH
T1D152C72AA920797B5DDBD219F9617B37E7F5103265E12E84EEFC892C10DB6CC221700B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 7db076185e33901b55c7413588a59791d10ce4765d85eed23e445f982c7737bf
MD5 9d83d1880607917ba48ad2bf0897a62c
SHA1 9fee50980f1b1ef442a360ffe8184ff71371f5ab
SHA512 a39d1587477408326ff06f19644130862ac4cfe481a8f0f3ffa91f57bfcf1d6fc0929520d2684209ee2cf969bd5acb54041aed9686757ded6c3fde7fa3d61d8b
SSDEEP 192:NR7IHmtv7Od4PRpLdWObH8529THsb+WNndis1aNCIduUkki2neMbHpa8WVyIsnAI:NR7IGNCIXVFwAhzbkv2DJaZE
TLSH
T12052C82AA924797B5DDBD119F9617B37E7F5103265A12E84EEFC892C10EB6CC321700B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 11KB
SHA256 b50b315756b0e00dc1e88d60912b63598777d8d81266f2b9bd97d8d93411d0c9
MD5 44547a9bb31d51026451dbf496508b25
SHA1 45166be673da2f3d3ec3bdbed0ef017a779f2713
SHA512 e8b41323a693828e425c51fc771513cdac1e7fd93c533a5366ddfda2145207af32c2a714f9a12a0fd73c639dbf460bded86b7b0d4ee558cba47253293b63443f
SSDEEP 192:ee14K6IW7KxkXqK4I40pUZNCgVLHrKHfFKslEK2cXzKD/Ty+ErUkKN9pIB3Wh/+G:/1jbW7KxkXqKf/pUZNCgVLH2Hfgslqcm
TLSH
T14232C727948D9A3F4FECD55CDC526F4F6DB501A272780C2896FB9C0403AA7CE115A1AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\3ee6de3563d833b2fb341c8239a59d7a4a0767be\51145800-0dfb-4831-a92e-49c2b3848cad\index-dir\the-real-index
Size 96B
SHA256 221d079ac50eaf541c0a26319f902947924be1605a88a95a8b1a59ab1bafb70e
MD5 1cee54057558f3ab99fa992b569e4904
SHA1 3f8644b59a39af4f23c998b051fc8d9e9b6f45e4
SHA512 1c53f2ea2e093e179458f8cf1fbabbaab42e00519cde181b6759560b5dd7cdcda581c00e251e9421949b4ef5e38e2561bc9184cf4131d256cd802173ed3678ba
TLSH
T14CB0112888288003CC80B3322EE000823A328C220AA200A380E000ABB00E3C08302202
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59b145.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\3ee6de3563d833b2fb341c8239a59d7a4a0767be\51145800-0dfb-4831-a92e-49c2b3848cad\index-dir\the-real-index~RFe59b145.TMP
Size 48B
SHA256 9f742297a0b69be996fff29c73aa5b17554b117213ad2b14d236040eeb42cc84
MD5 41cf83e43412e7210e6d0ea97df41d25
SHA1 2a71abf454a0724a16b30414ffd5b9123577c6ff
SHA512 c50730d36096fef265816e0c19f0b90ff4fddc0cfba2b8c10084573688823a2645ee37fb1e5b6d2d0835ce50de3f649494e22aa9a854bc122561ac4a71965dec
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\3ee6de3563d833b2fb341c8239a59d7a4a0767be\index.txt
Size 127B
SHA256 3bee4f0c919ae30c2aaa8309c2b58051233b71dd53086c8b1efb55ea14f609e5
MD5 9a47c02ab5b09851a1a43c0b782f9584
SHA1 22db89665fcdd479ef7a9eb7d3e8c61ddde44f93
SHA512 fc6698ef9429756239552b6d2db48cb1711d552ba22f7214fb05d31c992f48c0e17fe409ba64909511791a7b89a3e7842b103c9de17fbca8b5c91f4f6175d03a
TLSH
T1EBB09BBF745393D8FF8755E454511318881744DC1D99E5C8A50204C02704DD30181EF1
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe59b145.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\3ee6de3563d833b2fb341c8239a59d7a4a0767be\index.txt~RFe59b145.TMP
Size 132B
SHA256 900ff41f4b6955758c9c3ab2c511e5212fcb54549afb1f9c891c4cd547d1d1c3
MD5 e65cfb229f8c79c9eccf96c7fc39c5f5
SHA1 50815f76bd7eb6bf74d11b046ae6247039f4fb49
SHA512 b760a2b5c76ee2bab55d6d1c3190fae957e24cc12ba1216ee837d0e6f08ce70e5edadbb8cf660a200a6095906b0246b75f0993cc241214d9a7e50754e8d0e091
TLSH
T1C8C04C6F64629398FF8655E554511205891A4CDC195AE188A50224802734D934281ED1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 a5793da54e34e4494e42f0343ea878db22530117c388c9f7292e4359251ece3b
MD5 4800014f142db1e99a3278fe473f0b74
SHA1 9aa68302afeb7729d88b86c976803228b81f287b
SHA512 24455df579130b024235204660db57d28e63981f7855755eb775a6adc3c33d1eb13c2bd28b6d2351bc3ef3dd6bedc80cd151a855e6024d529762b55fedb18f8c
TLSH
T1FDC01252D0CF65E2CC4041B09585604C3333EE37C9007157D3F1BAB5ECD31D042A5610
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 3175dc6c3b45a694f467f8d6c1df4bb2f977a79ded2d2b13be7dc90dccdaaa6d
MD5 d8703ee44a2a3978a3a4488d07ba3e8b
SHA1 ed6a9a493485b9ae52ebcb5dcbe5b34e0170ea81
SHA512 d10e9bdf123222d36b5f89eb9207ecce9c53e85bf8c048deaf97b915dd0262005c47d6362ae6df5d5b9161a4691fb31f9a71847ad09d9b41406ea6b1267a776b
TLSH
T1ECA0029836920481D00112B07181925433107C280F814311E4E51A678EE05904196526
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 08febcf7a4b72bddc20f937cc6d0008f6ff2a35805ba4e7ee62bb40fe450251f
MD5 dd20be5d42a3ad018f55a35c33852eaa
SHA1 72c5a9174f973c2cfcdc59ab7802f6e1afa31046
SHA512 72e9c85ca421e9896fbb1e60965126c567fda42d612c45c726562c503cbecffe15ed7bb025b7c871d1f66cb85bade2639f7dd5368b40f7979fd48c358205558d
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 294ba0cde82964ca95cbe037af83afa38e0d98bb7acf2d216dc8250f3fe5037e
MD5 f43b83a92558988e803ca147baa15b3c
SHA1 266cd7066d9760e2756524a6e1493d34c12a137f
SHA512 57130dd60471a7dac265a701d584df3975f45b4609c2df203de43df9c5e1c63467c6abe3627b3eb71348f4e25a980acbbe8158196ba34e299b6fcbdaf5a50cad
TLSH
T180A0025042E44A61DD7452B06471058163E388345552873B5CD64544896B1C14D13104
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 17f34e52d895230cff034353ec22e1cddf185a8a355c431dbc393aae439153b7
MD5 7703de4279f0c5f7bf6ae8c0aba63692
SHA1 3e5e6ef69bfd62c2eeee94b3154aa124ede9865f
SHA512 302002f823323c7cc9680e7ed67f0db573947d20a6aaf00a29cf7e7cb7f2be350c1f2bf4a3cddbcffd94bbf9008ae13e844908fa284fdb9254784289016e0d55
SSDEEP 3072:jKsG6MwV5UsoVllY8WdjboTxW4fGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMr:GsGZLsoV5TxW4Om7Rkm1tYpBeh2BAor
TLSH
T17E34123B9C64CC324A2CBB0A755A1F5F4CF089738529CB9499EDAF0473AA6CD1E58934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 a1cdea06ef9558ac9847453bc880edb0a3a4ad5781048d403684c2ee30d6e227
MD5 3b16f5010692487f1753a34fc6eb691e
SHA1 eec422f3ecddb921fb2d68255116e3ede33234ee
SHA512 8fbd23c0acb3d10bcbd5f800492470119358ba932f7a91f9ef64976c8b8ed79b180367162612bd464a9129cae48687f40b7467671a847c080ee861fe181b37dc
SSDEEP 3072:wZUG6MwV5UsoVllY8WdjboTxW4fGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMr:aUGZLsoV5TxW4Om7Rkm1tYpBeh2BAor
TLSH
T1AB34123BDC64CC324A2CBB0A755A1F1F4CF089338529CA949DEDAF0473AA6CD5E58934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 f4ddced1d7cb72e5c328aa61df1bc111b2e8767e73fe40f776cd1c5fe2ccc1e3
MD5 0aefe852cafe24e1a5f5be641971a939
SHA1 2ce1f16b69e786d038cfde71c5d021bcde3496b8
SHA512 c3755e7eaa95db1409552c4e387585f64f8b5ea3cd3e3d31f1253142fe58832946b207f63f9b0e1ae83593ff6671c12b23173314dbf5f86aac9ede1357576fbd
SSDEEP 3072:nGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:Gm7Rkm1tYpBeh2BAom
TLSH
T150C3123B5E70E97659B9B74EB08E0B1F1EF14AA2C930DA42C8D85A0437FA7CC1A05D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 6314fa37aa9ed3a25a484b52d9ad7559573ba87be92049f39da3b233e8d3de19
MD5 45838af2a74a80b9dbacd2e76396a81b
SHA1 a49779bd8619994477b0dc0488c8ef0628c3d8cb
SHA512 51fb039f85f8ef0d230664df4744091a9cbe47ab034b531c7fd740400a3a3c9d3b1698dfcaecb901a0eda5bf4081f2fe0ca53c50130507e92ee217098a164c52
SSDEEP 3072:GBG6MwV5UsoVllY8WdjboTxW4fGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMr:GBGZLsoV5TxW4Om7Rkm1tYpBeh2BAor
TLSH
T14934123BDD64CC364A1CBB0A755E5F5F48F0883345298BE499EDAB0873AA7CD1E48934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 22c64170a8a92ad546c0a6a86e56e1e0cc21d07b57a2da1210a970a9d43484a0
MD5 3cb3e565dbd8cb4ee8e61d504570be88
SHA1 10509e1bbc92b82b9d3bf9964e6b89b3db749412
SHA512 667a3907b573633aedbc6bc61670e505099e29dcf6efa296ba1c88c404515cc54e5731ca21d15f8094453ef789d0e89d1607f9bcbee5a8723550955355169ca2
SSDEEP 3072:fBG6MwV5UsoVllY8WdjboTxW4fGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMr:fBGZLsoV5TxW4Om7Rkm1tYpBeh2BAor
TLSH
T11034123BDD64CC364A1CBB0A755E5F5F48F0883345298BE499EDAB0873AA7CD1E48934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 240KB
SHA256 c8811086907ca4cb23293dd2a0d0e20b2644384e43de9c0cbcaa46f5c2def07f
MD5 1ae2efb3457f91c958ac18f5344c6f7d
SHA1 0e683a9076a730fa96ad2598bda5d8233afb5ce8
SHA512 1bd0078d960064c9b3b5cfdf9152ccab4dbe7242c8afb723c9a59a306ec3ef419d6f3f08bf72df72d286a00b5258b0aa27f0d4ae75fc7cbee4aa710d38a878dd
SSDEEP 3072:RBG6MwV5UsoVllY8WdjboTxW4fGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMr:RBGZLsoV5TxW4Om7Rkm1tYpBeh2BAor
TLSH
T15C34123BDD64CC364A1CBB0A755E5F5F48F0883345298BE499EDAB0873AA7CD1E48934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 6f0bffe9e56564b8166f45c2dfb5c316fc5677d0512a428755fe7643d4efee7f
MD5 19cfa338ae28177056cbc29c1bb15e11
SHA1 71dfc09f10bfb2ecadd8846c17d9e73b3ad2f1c0
SHA512 2d614b86cfb9a5a67b3f7af986e627089c2fd6733445f944ba089daf7412049320a3f1274b733032b56cba099f26686cb6c2af5bac8d5f1a12070753cfd29364
SSDEEP 3072:7ZUG6MwV5UsoVllY8WdjboTxW4fGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMr:1UGZLsoV5TxW4Om7Rkm1tYpBeh2BAor
TLSH
T1FC34123BDC64CC324A2CBB0A755A1F1F4CF089738529CA949DEDAF0473AA6CD5E58934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Antares Auto-Tune bundle V9 CE.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-JH703.tmp\Antares Auto-Tune bundle V9 CE.tmp
Size 2.5MB
SHA256 4cfcbcffe82bc6943890fa818ded2708f46c4f85ec368de00836ac708acdb080
MD5 ebbb655a85d61e4adad34d9ade0ea184
SHA1 41d3a5ab6de2cd4c45bd9545906c53ba9eaf345d
SHA512 a84a4104356c23fa5a618368fa4ba2793435832f3eefb6b243d1513d7ac586002449f127abc6bbb3cf199a930bdd718c6d1ec273738e1d9796d423ddb312eb50
SSDEEP 49152:3g2qPtc1e5OS7bPGoUl+x/grN4azvchYk2C4:3vqPCnrN4azvSY9
TLSH
T14AC54A12B285713ED06B2B36493FC6909937BE6179368D5A6BF40D0C8F355802F3BB66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

859623d3-9575-4241-89f4-580b2cab7924.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1640_1938302959\859623d3-9575-4241-89f4-580b2cab7924.tmp
Size 242KB
SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
MD5 541f52e24fe1ef9f8e12377a6ccae0c0
SHA1 189898bb2dcae7d5a6057bc2d98b8b450afaebb6
SHA512 d779d78a15c5efca51ebd6b96a7ccb6d718741bdf7d9a37f53b2eb4b98aa1a78bc4cfa57d6e763aab97276c8f9088940ac0476690d4d46023ff4bf52f3326c88
SSDEEP 3072:r+nmRykNgoldZ8GjJCiUXZSk+QSVh85PxEalRVHmcld9R6yYfEp4ABUGDcaKklrv:k3oF4Z4h45P99Fld9RBQYBVcaxlnfL
TLSH
T1F63402BD7D8AE686D006A17676C0B48BE1199F4E41CB7C0F668A89010D70F8C57B9DEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1640_1938302959\CRX_INSTALL\_locales\en\messages.json
Size 450B
SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
MD5 dbedf86fa9afb3a23dbb126674f166d2
SHA1 5628affbcf6f897b9d7fd9c17deb9aa75036f1cc
SHA512 931d7ba6da84d4bb073815540f35126f2f035a71bfe460f3ccaed25ad7c1b1792ab36cd7207b99fddf5eaf8872250b54a8958cf5827608f0640e8aafe11e0071
TLSH
T1D3F055CB9000FC5E538BC00EB10072282BA603E01AD1726724EC1C0E67DFDAEB143F9A
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3556-2137-0x000002165C4F0000-0x000002165C4F1000-memory.dmp

Download

memory/3556-2142-0x000002165C520000-0x000002165C521000-memory.dmp

Download

memory/3556-2173-0x000002165C390000-0x000002165C391000-memory.dmp

Download

memory/3556-2172-0x000002165C280000-0x000002165C281000-memory.dmp

Download

memory/3556-2171-0x000002165C280000-0x000002165C281000-memory.dmp

Download

memory/3556-2169-0x000002165C270000-0x000002165C271000-memory.dmp

Download

memory/3556-2157-0x000002165C070000-0x000002165C071000-memory.dmp

Download

memory/3556-2154-0x000002165C130000-0x000002165C131000-memory.dmp

Download

memory/3556-2105-0x000002164BE40000-0x000002164BE50000-memory.dmp

Download

memory/3556-2121-0x000002164BF40000-0x000002164BF50000-memory.dmp

Download

memory/3556-2151-0x000002165C140000-0x000002165C141000-memory.dmp

Download

memory/3556-2138-0x000002165C520000-0x000002165C521000-memory.dmp

Download

memory/3556-2139-0x000002165C520000-0x000002165C521000-memory.dmp

Download

memory/3556-2140-0x000002165C520000-0x000002165C521000-memory.dmp

Download

memory/3556-2141-0x000002165C520000-0x000002165C521000-memory.dmp

Download

memory/3556-2149-0x000002165C130000-0x000002165C131000-memory.dmp

Download

memory/3556-2143-0x000002165C520000-0x000002165C521000-memory.dmp

Download

memory/3556-2144-0x000002165C520000-0x000002165C521000-memory.dmp

Download

memory/3556-2145-0x000002165C520000-0x000002165C521000-memory.dmp

Download

memory/3556-2146-0x000002165C520000-0x000002165C521000-memory.dmp

Download

memory/3556-2147-0x000002165C520000-0x000002165C521000-memory.dmp

Download

memory/3556-2148-0x000002165C140000-0x000002165C141000-memory.dmp

Download

memory/4908-109-0x0000000000400000-0x0000000000683000-memory.dmp

Download

memory/4908-746-0x0000000000400000-0x0000000000683000-memory.dmp

Download

memory/4908-5-0x0000000002550000-0x0000000002551000-memory.dmp

Download

memory/4908-27-0x0000000000400000-0x0000000000683000-memory.dmp

Download

memory/4908-28-0x0000000002550000-0x0000000002551000-memory.dmp

Download

memory/4908-2055-0x0000000000400000-0x0000000000683000-memory.dmp

Download

memory/5092-26-0x0000000000400000-0x00000000004C8000-memory.dmp

Download

memory/5092-1-0x0000000000400000-0x00000000004C8000-memory.dmp

Download

memory/5092-2056-0x0000000000400000-0x00000000004C8000-memory.dmp

Download