Overview

overview

3

Static

static

3

main.ps1

windows10-2004-x64

3

main.ps1

windows11-ltsc_2024-x64

3

Resubmissions

25/08/2026, 05:54

260825-gl9b3stset3

25/08/2026, 00:52

260825-a778ksfe887

Analysis

  • user interaction
    yes
  • max time kernel
    231s
  • max time network
    229s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    25/08/2026, 05:54

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    main.ps1
  • Size 86KB
  • Sample260825-gl9b3stset
  • SHA256 40f279d419c55682635a9013d2a15495aeb00752c2e92d3536c5e26a6c7ff499
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
discoveryexecution

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

    Using powershell.exe command.

    execution
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 58 IoCs
  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 31 IoCs

Processes

  • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\main.ps1
    1⤵
    • Command and Scripting Interpreter: PowerShell
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3992
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x494 0x498
    1⤵
      PID:1180
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:5944
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe"
        1⤵
        • Checks processor information in registry
        • Enumerates system info in registry
        • Modifies data under HKEY_USERS
        • Modifies registry class
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of WriteProcessMemory
        PID:576
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffc244dc728,0x7ffc244dc734,0x7ffc244dc740
          2⤵
            PID:4228
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1700,i,10106517065405893748,16519005637167323926,262144 --field-trial-handle=1960,i,1399415814381563037,13314561406629450814,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1956 /prefetch:2
            2⤵
              PID:5720
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,10875644060632559067,2588048328544761246,524288 --field-trial-handle=1960,i,1399415814381563037,13314561406629450814,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2268 /prefetch:3
              2⤵
              • System Time Discovery
              PID:5880
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,18207332303682317362,9001106444226117012,524288 --field-trial-handle=1960,i,1399415814381563037,13314561406629450814,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2400 /prefetch:8
              2⤵
                PID:1784
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3260,i,7459502021010743051,9029421040134707679,2097152 --field-trial-handle=1960,i,1399415814381563037,13314561406629450814,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3268 /prefetch:1
                2⤵
                  PID:260
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3496,i,6306043246100852868,3373937815994306862,2097152 --field-trial-handle=1960,i,1399415814381563037,13314561406629450814,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3512 /prefetch:1
                  2⤵
                    PID:228
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3952,i,13059755209862050930,4807631715697334421,2097152 --field-trial-handle=1960,i,1399415814381563037,13314561406629450814,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4376 /prefetch:2
                    2⤵
                      PID:1316
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4728,i,6700198922196722672,18245659654920303432,2097152 --field-trial-handle=1960,i,1399415814381563037,13314561406629450814,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4724 /prefetch:1
                      2⤵
                        PID:5836
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4344,i,2104250153222565317,15653089287285990953,2097152 --field-trial-handle=1960,i,1399415814381563037,13314561406629450814,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4960 /prefetch:1
                        2⤵
                          PID:1416
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5084,i,13466794067161064403,18195397515519963030,2097152 --field-trial-handle=1960,i,1399415814381563037,13314561406629450814,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5092 /prefetch:1
                          2⤵
                            PID:5108
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4660,i,9374704935935858274,795693840175891069,2097152 --field-trial-handle=1960,i,1399415814381563037,13314561406629450814,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3516 /prefetch:1
                            2⤵
                              PID:2300
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5348,i,2341664526882836602,3641473031376852397,524288 --field-trial-handle=1960,i,1399415814381563037,13314561406629450814,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3204 /prefetch:8
                              2⤵
                              • Modifies registry class
                              PID:4588
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3532,i,5031596254180907298,4718309178569105315,524288 --field-trial-handle=1960,i,1399415814381563037,13314561406629450814,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5356 /prefetch:8
                              2⤵
                                PID:4572
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4808,i,8963287490160459207,7040410248477368972,524288 --field-trial-handle=1960,i,1399415814381563037,13314561406629450814,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5300 /prefetch:8
                                2⤵
                                • Modifies registry class
                                • Suspicious use of SetWindowsHookEx
                                PID:3124
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6096,i,16142046433506301969,4605001243271420255,524288 --field-trial-handle=1960,i,1399415814381563037,13314561406629450814,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6092 /prefetch:8
                                2⤵
                                  PID:5928
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6088,i,509495446389064499,12259896443059556195,524288 --field-trial-handle=1960,i,1399415814381563037,13314561406629450814,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5276 /prefetch:8
                                  2⤵
                                    PID:616
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3948,i,11258631416025059010,13130863665918118446,524288 --field-trial-handle=1960,i,1399415814381563037,13314561406629450814,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6236 /prefetch:8
                                    2⤵
                                      PID:1224
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4920,i,1303085987169666073,254306787930412888,524288 --field-trial-handle=1960,i,1399415814381563037,13314561406629450814,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6272 /prefetch:8
                                      2⤵
                                        PID:3456
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6560,i,8636104625537155920,12951756074337082519,262144 --field-trial-handle=1960,i,1399415814381563037,13314561406629450814,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6580 /prefetch:8
                                        2⤵
                                        • Suspicious behavior: EnumeratesProcesses
                                        PID:1788
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6544,i,13214263535274730574,8910514452921291190,524288 --field-trial-handle=1960,i,1399415814381563037,13314561406629450814,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6304 /prefetch:8
                                        2⤵
                                          PID:4420
                                      • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                        "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                        1⤵
                                          PID:5216
                                        • C:\Windows\system32\svchost.exe
                                          C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                          1⤵
                                            PID:4692

                                          Network

                                                MITRE ATT&CK Enterprise v16

                                                Replay Monitor

                                                Loading Replay Monitor...

                                                Downloads

                                                BookmarkMergedSurfaceOrdering
                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                • Size 6B
                                                • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                • MD5 SHA1 SHA512
                                                Submit Download

                                                BrowsingTopicsState
                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                • Size 414B
                                                • SHA256 d466b54e78f1545b41b839beb53afcebf10eca43d20ec84f52676bba85777dea
                                                • MD5 SHA1 SHA512 TLSH
                                                Submit Download

                                                the-real-index
                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                • Size 336B
                                                • SHA256 f4682fc24561620bb00521821e8bad9fc3fc93624c6491855e228098babb5d6f
                                                • MD5 SHA1 SHA512 TLSH
                                                Submit Download

                                                the-real-index
                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                • Size 240B
                                                • SHA256 db425e429df86688ca9847172bb755534f4487c1b785adb134a58f8e102ae3e6
                                                • MD5 SHA1 SHA512 TLSH
                                                Submit Download

                                                Network Persistent State
                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                • Size 5KB
                                                • SHA256 37f876b5cf4ae39638f7ad49c6c8c17adbe987a21d814d15116056134c1e1bea
                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                Submit Download

                                                Network Persistent State
                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                • Size 7KB
                                                • SHA256 cafdfb785418f4a00e80ee90fd31fb89e59622dab28a1738bc554251379d9ea7
                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                Submit Download

                                                SCT Auditing Pending Reports
                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                • Size 2B
                                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                • MD5 SHA1 SHA512
                                                Submit Download

                                                Preferences
                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                • Size 13KB
                                                • SHA256 afd25c81b506db1b9a5b0cf8db58fe9eeb4d173cb265cee87e290da18200dac1
                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                Submit Download

                                                Preferences
                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                • Size 12KB
                                                • SHA256 fb7094baa507b2e85593481afe95cd76ed28be33fa129835d8105b1e925bd5b1
                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                Submit Download

                                                Preferences
                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                • Size 13KB
                                                • SHA256 69e94a20cba8642f1e09500954c874f4a4fbd530b442f101380034ee4dccbf4f
                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                Submit Download

                                                Secure Preferences
                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                • Size 17KB
                                                • SHA256 c54836683d23f9fee57c69a9d42002f448a01bbb5b6b38437c5fcac9744adcc4
                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                Submit Download

                                                the-real-index
                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                • Size 120B
                                                • SHA256 3aa17aa2d6ce1dad342769c7aaf8e9aaf22b80f553063172ea71720099f815e0
                                                • MD5 SHA1 SHA512 TLSH
                                                Submit Download

                                                the-real-index~RFe5945aa.TMP
                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5945aa.TMP
                                                • Size 96B
                                                • SHA256 5b02acd69012bd7f0cde7f612d2a94451218b57940d7e347580cdca9f98e1710
                                                • MD5 SHA1 SHA512 TLSH
                                                Submit Download

                                                index.txt
                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
                                                • Size 152B
                                                • SHA256 350b056d757a4f20422112ccb1a093c736937dab51c287fffbb0fb224f3cca90
                                                • MD5 SHA1 SHA512 TLSH
                                                Submit Download

                                                index.txt~RFe5953f2.TMP
                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe5953f2.TMP
                                                • Size 159B
                                                • SHA256 77884faea66d52efeeefb70547cdaf9f76a37606b5c655171d9a3aa07cb2a531
                                                • MD5 SHA1 SHA512 TLSH
                                                Submit Download

                                                Local State
                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                • Size 240KB
                                                • SHA256 7bee190b87fecb344f72de1cd90dd9af3240117de9f7d240227104fb019716eb
                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                Submit Download

                                                Local State
                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                • Size 241KB
                                                • SHA256 3f8ca4b90519991a68f88797d4eb8594f553e82a598aef01465f938973b73af5
                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                Submit Download

                                                Local State
                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                • Size 241KB
                                                • SHA256 0d747d1ae0e7246956617a79e8a947c4a660119ce4789392b41848f20044c2bb
                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                Submit Download

                                                Local State
                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                • Size 115KB
                                                • SHA256 ba5c4b7a2da906745d350fe8990f7aef0da295881f8fb29066512fb76b36e360
                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                Submit Download

                                                Local State
                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                • Size 240KB
                                                • SHA256 cab397c12c8ccb7c1d131eafc5b6303f047f5085624b59765c95d9e4cd9efd52
                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                Submit Download

                                                thumbcache_idx.db
                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db
                                                • Size 28KB
                                                • SHA256 6d25b6dcd67a44fee8401d5d682fa0dcca4697ccd8d7ad1faddb87de541042fa
                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                Submit Download

                                                __PSScriptPolicyTest_t00waoim.uq2.ps1
                                                • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_t00waoim.uq2.ps1
                                                • Size 60B
                                                • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                                                • MD5 SHA1 SHA512 TLSH
                                                Submit Download

                                                memory/3992-10-0x00000212343B0000-0x00000212343C0000-memory.dmp
                                                Download

                                                memory/3992-9-0x0000021236530000-0x0000021236552000-memory.dmp
                                                Download

                                                memory/3992-1-0x00000212343B0000-0x00000212343C0000-memory.dmp
                                                Download

                                                memory/3992-0-0x00000212343B0000-0x00000212343C0000-memory.dmp
                                                Download