Analysis

  • user interaction
    yes
  • max time kernel
    900s
  • max time network
    734s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    05/09/2026, 10:29

General

  • Target
    Chimera_tool.zip
  • Size 15.1MB
  • Sample260905-mh85ssdc49
  • SHA256 2b89584d93a7bae0b2d16cc1caf77e59136abcfadef46b853ca174cb4fd9606c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Enumerates VirtualBox registry keys 2 TTPs 5 IoCs
  • Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 4 IoCs
  • Identifies Xen via ACPI registry values (likely anti-VM) 2 TTPs 3 IoCs
  • Looks for VirtualBox Guest Additions in registry 2 TTPs 1 IoCs
  • Looks for VMWare Tools registry key 2 TTPs 1 IoCs
  • Looks for VMWare services registry key. 1 TTPs 4 IoCs
  • Looks for Xen service registry key. 1 TTPs 5 IoCs
  • Manipulates Digital Signatures 1 TTPs 17 IoCs

    Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.

  • Checks BIOS information in registry 2 TTPs 5 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Checks computer location settings 2 TTPs 6 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 15 IoCs
  • Identifies Wine through registry keys 2 TTPs 1 IoCs

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

  • Loads dropped DLL 18 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Checks whether UAC is enabled 1 TTPs 2 IoCs
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

  • Writes to the Master Boot Record (MBR) 1 TTPs 2 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

  • Drops file in System32 directory 22 IoCs
  • Suspicious use of NtSetInformationThreadHideFromDebugger 38 IoCs
  • UPX packed file 11 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Checks for VirtualBox DLLs, possible anti-VM trick 1 TTPs 1 IoCs

    Certain files are specific to VirtualBox VMs and can be used to detect execution in a VM.

  • Drops file in Program Files directory 14 IoCs
  • Drops file in Windows directory 8 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 2 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • System Location Discovery: System Language Discovery 1 TTPs 15 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 59 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies data under HKEY_USERS 43 IoCs
  • Modifies system certificate store 2 TTPs 30 IoCs
  • Suspicious behavior: AddClipboardFormatListener 6 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SetWindowsHookEx 29 IoCs
  • Suspicious use of WriteProcessMemory 14 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Chimera_tool.zip
    1⤵
      PID:4012
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:2748
      • C:\Program Files\7-Zip\7zG.exe
        "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\AppData\Local\Temp\Chimera_tool\" -spe -an -ai#7zMap14265:104:7zEvent2949
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        PID:2360
      • C:\Users\Admin\AppData\Local\Temp\Chimera_tool\ChimeraInstaller.exe
        "C:\Users\Admin\AppData\Local\Temp\Chimera_tool\ChimeraInstaller.exe"
        1⤵
        • Manipulates Digital Signatures
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Modifies system certificate store
        • Suspicious behavior: AddClipboardFormatListener
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:468
        • C:\Users\Admin\AppData\Local\Temp\Chimera_tool\ChimeraInstaller.exe
          C:/Users/Admin/AppData/Local/Temp/Chimera_tool/ChimeraInstaller.exe
          2⤵
          • Identifies VirtualBox via ACPI registry values (likely anti-VM)
          • Manipulates Digital Signatures
          • Checks BIOS information in registry
          • Checks computer location settings
          • Executes dropped EXE
          • Checks whether UAC is enabled
          • Writes to the Master Boot Record (MBR)
          • Suspicious use of NtSetInformationThreadHideFromDebugger
          • Drops file in Program Files directory
          • System Location Discovery: System Language Discovery
          • Modifies system certificate store
          • Suspicious behavior: AddClipboardFormatListener
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious behavior: GetForegroundWindowSpam
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:4608
          • C:\Program Files (x86)\Chimera\Drivers\51be9b727f591b18573d40b6fe913a90c5341bfb.exe
            "C:\Program Files (x86)\Chimera\Drivers\51be9b727f591b18573d40b6fe913a90c5341bfb.exe"
            3⤵
            • Checks computer location settings
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:876
            • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
              "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" __IRAOFF:1683890 "__IRAFN:C:\Program Files (x86)\Chimera\Drivers\51be9b727f591b18573d40b6fe913a90c5341bfb.exe" "__IRCT:2" "__IRTSS:0" "__IRSID:S-1-5-21-1788976790-1541110888-1636651838-1000"
              4⤵
              • Manipulates Digital Signatures
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Modifies system certificate store
              • Suspicious use of SetWindowsHookEx
              • Suspicious use of WriteProcessMemory
              PID:5376
              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\dpinst64.exe
                "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\dpinst64.exe" /SW /D /U "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\WIN10\android_winusb.inf"
                5⤵
                • Executes dropped EXE
                • Drops file in Windows directory
                • Suspicious use of SetWindowsHookEx
                PID:8140
              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\dpinst64.exe
                "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\dpinst64.exe" /SW /D /U "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\WIN7\android_winusb.inf"
                5⤵
                • Executes dropped EXE
                • Drops file in Windows directory
                • Suspicious use of SetWindowsHookEx
                PID:5552
              • C:\Windows\SysWOW64\CMD.exe
                CMD.exe /D /A /C FIND /i /c "androidusb.sys" C:\Windows\inf\*oem* > C:\Users\Admin\AppData\Local\Temp\DriverCheck.acd
                5⤵
                • Executes a command shell one-liner
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:1316
                • C:\Windows\SysWOW64\find.exe
                  FIND /i /c "androidusb.sys" C:\Windows\inf\*oem*
                  6⤵
                  • System Location Discovery: System Language Discovery
                  PID:4348
              • C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\dpinst64.exe
                "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\dpinst64.exe" /PATH "C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\WIN10" /SW /F /SA /SE /LM
                5⤵
                • Executes dropped EXE
                • Drops file in System32 directory
                • Drops file in Windows directory
                • Checks SCSI registry key(s)
                • Suspicious use of SetWindowsHookEx
                PID:3620
              • C:\Windows\SysWOW64\CMD.exe
                CMD.exe /D /A /C RMDIR C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0 /S /Q
                5⤵
                • Executes a command shell one-liner
                • System Location Discovery: System Language Discovery
                PID:5132
      • C:\Windows\system32\vssvc.exe
        C:\Windows\system32\vssvc.exe
        1⤵
        • Checks SCSI registry key(s)
        • Suspicious use of AdjustPrivilegeToken
        PID:7516
      • C:\Windows\system32\srtasks.exe
        C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:8052
      • C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall
        1⤵
        • Drops file in Windows directory
        • Checks SCSI registry key(s)
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:3904
        • C:\Windows\system32\DrvInst.exe
          DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{c14ea12e-1da1-8343-9f69-cb296aac36cd}\android_winusb.inf" "9" "4e0faf5eb" "000000000000014C" "WinSta0\Default" "000000000000015C" "208" "c:\users\admin\appdata\local\temp\_ir_sf_temp_0\win10"
          2⤵
          • Manipulates Digital Signatures
          • Drops file in System32 directory
          • Drops file in Windows directory
          • Checks SCSI registry key(s)
          • Modifies data under HKEY_USERS
          PID:3044
      • C:\Users\Admin\AppData\Local\Temp\Chimera_tool\Chimera tool crack.exe
        "C:\Users\Admin\AppData\Local\Temp\Chimera_tool\Chimera tool crack.exe"
        1⤵
        • Manipulates Digital Signatures
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Modifies system certificate store
        • Suspicious behavior: AddClipboardFormatListener
        • Suspicious use of SetWindowsHookEx
        PID:6148
      • C:\Users\Admin\AppData\Local\Temp\Chimera_tool\Chimera tool crack.exe
        "C:\Users\Admin\AppData\Local\Temp\Chimera_tool\Chimera tool crack.exe"
        1⤵
        • Manipulates Digital Signatures
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Modifies system certificate store
        • Suspicious behavior: AddClipboardFormatListener
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of SetWindowsHookEx
        PID:9192
      • C:\Windows\system32\NOTEPAD.EXE
        "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\Chimera_tool\Read Me.txt
        1⤵
          PID:5752
        • C:\Program Files (x86)\Chimera\Chimera.exe
          "C:\Program Files (x86)\Chimera\Chimera.exe"
          1⤵
          • Enumerates VirtualBox registry keys
          • Identifies VirtualBox via ACPI registry values (likely anti-VM)
          • Identifies Xen via ACPI registry values (likely anti-VM)
          • Looks for VirtualBox Guest Additions in registry
          • Looks for VMWare Tools registry key
          • Looks for VMWare services registry key.
          • Looks for Xen service registry key.
          • Checks BIOS information in registry
          • Checks computer location settings
          • Executes dropped EXE
          • Identifies Wine through registry keys
          • Loads dropped DLL
          • Checks whether UAC is enabled
          • Writes to the Master Boot Record (MBR)
          • Suspicious use of NtSetInformationThreadHideFromDebugger
          • Checks for VirtualBox DLLs, possible anti-VM trick
          • Drops file in Program Files directory
          • System Location Discovery: System Language Discovery
          • Checks SCSI registry key(s)
          • Modifies data under HKEY_USERS
          • Suspicious behavior: AddClipboardFormatListener
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious behavior: GetForegroundWindowSpam
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:5288
          • C:\ProgramData\Chimera\chimera_browser.exe
            "C:\ProgramData\Chimera\chimera_browser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --use-angle=swiftshader-webgl --use-gl=angle --locales-dir-path="C:\ProgramData\Chimera\locales" --log-severity=disable --resources-dir-path="C:\ProgramData\Chimera" --user-agent=Chimera_Browser --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --in-process-gpu --disable-speech-api --disable-component-update --disable-notifications --disable-breakpad --disable-background-networking --disable-translate --disable-extensions --disable-print-preview --disable-plugins --disable-features=blinkgenpropertytrees,translateui,translate,site-per-process --windows-job-name=CefView-Job-{f0a3c1e3-ff89-4581-8a45-f0bfd74c4bb0}-5288 --bridge-obj-name=ChimeraQCefInterop --log-file="C:\Program Files (x86)\Chimera\debug.log" --mojo-platform-channel-handle=3784 --field-trial-handle=3788,i,14690500012582962331,18123911332510912119,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion /prefetch:8
            2⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of SetWindowsHookEx
            PID:516
          • C:\ProgramData\Chimera\chimera_browser.exe
            "C:\ProgramData\Chimera\chimera_browser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --use-angle=swiftshader-webgl --use-gl=angle --locales-dir-path="C:\ProgramData\Chimera\locales" --log-severity=disable --resources-dir-path="C:\ProgramData\Chimera" --user-agent=Chimera_Browser --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --in-process-gpu --disable-speech-api --disable-component-update --disable-notifications --disable-breakpad --disable-background-networking --disable-translate --disable-extensions --disable-print-preview --disable-plugins --disable-features=blinkgenpropertytrees,translateui,translate,site-per-process --windows-job-name=CefView-Job-{f0a3c1e3-ff89-4581-8a45-f0bfd74c4bb0}-5288 --bridge-obj-name=ChimeraQCefInterop --log-file="C:\Program Files (x86)\Chimera\debug.log" --mojo-platform-channel-handle=3912 --field-trial-handle=3788,i,14690500012582962331,18123911332510912119,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion /prefetch:8
            2⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of SetWindowsHookEx
            PID:8156
          • C:\ProgramData\Chimera\chimera_browser.exe
            "C:\ProgramData\Chimera\chimera_browser.exe" --type=renderer --locales-dir-path="C:\ProgramData\Chimera\locales" --log-severity=disable --resources-dir-path="C:\ProgramData\Chimera" --user-agent=Chimera_Browser --disable-extensions --disable-print-preview --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --in-process-gpu --disable-speech-api --disable-component-update --disable-notifications --disable-breakpad --disable-background-networking --disable-translate --disable-extensions --disable-print-preview --disable-plugins --disable-features=blinkgenpropertytrees,translateui,translate,site-per-process --windows-job-name=CefView-Job-{f0a3c1e3-ff89-4581-8a45-f0bfd74c4bb0}-5288 --bridge-obj-name=ChimeraQCefInterop --first-renderer-process --no-sandbox --disable-breakpad --disable-notifications --disable-speech-api --log-file="C:\Program Files (x86)\Chimera\debug.log" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=4016 --field-trial-handle=3788,i,14690500012582962331,18123911332510912119,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion /prefetch:1
            2⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of SetWindowsHookEx
            PID:5220
          • C:\ProgramData\Chimera\chimera_browser.exe
            "C:\ProgramData\Chimera\chimera_browser.exe" --type=renderer --locales-dir-path="C:\ProgramData\Chimera\locales" --log-severity=disable --resources-dir-path="C:\ProgramData\Chimera" --user-agent=Chimera_Browser --disable-extensions --disable-print-preview --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --in-process-gpu --disable-speech-api --disable-component-update --disable-notifications --disable-breakpad --disable-background-networking --disable-translate --disable-extensions --disable-print-preview --disable-plugins --disable-features=blinkgenpropertytrees,translateui,translate,site-per-process --windows-job-name=CefView-Job-{f0a3c1e3-ff89-4581-8a45-f0bfd74c4bb0}-5288 --bridge-obj-name=ChimeraQCefInterop --no-sandbox --disable-breakpad --disable-notifications --disable-speech-api --log-file="C:\Program Files (x86)\Chimera\debug.log" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=4048 --field-trial-handle=3788,i,14690500012582962331,18123911332510912119,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion /prefetch:1
            2⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of SetWindowsHookEx
            PID:1360
        • C:\Users\Admin\AppData\Local\Temp\Chimera_tool\Chimera tool crack.exe
          "C:\Users\Admin\AppData\Local\Temp\Chimera_tool\Chimera tool crack.exe"
          1⤵
          • Manipulates Digital Signatures
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Modifies system certificate store
          • Suspicious behavior: AddClipboardFormatListener
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SetWindowsHookEx
          PID:8576

        Network

              MITRE ATT&CK Enterprise v16

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              51be9b727f591b18573d40b6fe913a90c5341bfb.exe

              • Path C:\Program Files (x86)\Chimera\Drivers\51be9b727f591b18573d40b6fe913a90c5341bfb.exe
              • Size 18.7MB
              • SHA256 2e5e3d4e2e34bd8390f8b374991143fba2a867a990913fd2db04aaf86652c7b8
              • MD5 SHA1 SHA512 SSDEEP TLSH

              dic32u.dll

              • Path C:\Program Files (x86)\Chimera\dic32u.dll
              • Size 116KB
              • SHA256 97c8fc2188c4e124ea73e2fcce0908ecfa46938ed0289b2d822d41c69e990e07
              • MD5 SHA1 SHA512 SSDEEP TLSH

              F0945DEB9235B550DD90E53ADA3D127DCC123D1930732041496D01FDD5979994.zip

              • Path C:\ProgramData\Chimera\F0945DEB9235B550DD90E53ADA3D127DCC123D1930732041496D01FDD5979994.zip
              • Size 488KB
              • SHA256 f0945deb9235b550dd90e53ada3d127dcc123d1930732041496d01fdd5979994
              • MD5 SHA1 SHA512 SSDEEP TLSH

              the-real-index

              • Path C:\ProgramData\Chimera\cache\Code Cache\js\index-dir\the-real-index
              • Size 120B
              • SHA256 c0715e431dbb1d7b1b36fd96f4b7158ae3916fb6a3c598604cfbe02ca5f60396
              • MD5 SHA1 SHA512 TLSH

              the-real-index~RFe5d8b1c.TMP

              • Path C:\ProgramData\Chimera\cache\Code Cache\js\index-dir\the-real-index~RFe5d8b1c.TMP
              • Size 48B
              • SHA256 39c4f996f3fe4c88321e61ac52e8c569fe9f0f5a0913df6b47de7fbf1e9a768d
              • MD5 SHA1 SHA512

              Network Persistent State

              • Path C:\ProgramData\Chimera\cache\Network\Network Persistent State
              • Size 1KB
              • SHA256 d332d5b2bfd7b2628114b7a63c997d66cbb113f58066d274aacf0c525ef4638e
              • MD5 SHA1 SHA512 TLSH

              Network Persistent State~RFe5e4c78.TMP

              • Path C:\ProgramData\Chimera\cache\Network\Network Persistent State~RFe5e4c78.TMP
              • Size 59B
              • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
              • MD5 SHA1 SHA512 TLSH

              CURRENT

              • Path C:\ProgramData\Chimera\cache\Session Storage\CURRENT
              • Size 16B
              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
              • MD5 SHA1 SHA512

              chimera_browser.exe

              • Path C:\ProgramData\Chimera\chimera_browser.exe
              • Size 1.6MB
              • SHA256 0a99465f04b9dd89ce07d7a7da663aaf097a0008145781d7e6d650978025679b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              chrome_100_percent.pak

              • Path C:\ProgramData\Chimera\chrome_100_percent.pak
              • Size 607KB
              • SHA256 80139849d4cf4a9dc8ad429be071229bd7538c41f5af5aed498fd981873bd4cf
              • MD5 SHA1 SHA512 SSDEEP TLSH

              chrome_200_percent.pak

              • Path C:\ProgramData\Chimera\chrome_200_percent.pak
              • Size 915KB
              • SHA256 f2a2c9dd0ec8baf6820b445a1485787c6651d3f0c8d0ec8f58a808b836fa04d0
              • MD5 SHA1 SHA512 SSDEEP TLSH

              chrome_elf.dll

              • Path C:\ProgramData\Chimera\chrome_elf.dll
              • Size 1.1MB
              • SHA256 c8beee9950b3925471ff89084c27eca7254b62a28299f1757d59e585c67bc20c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              d3dcompiler_47.dll

              • Path C:\ProgramData\Chimera\d3dcompiler_47.dll
              • Size 3.9MB
              • SHA256 c2c7ca6505ad10826e6b92319ce7aa355392b0cbd092a0fb8d4381c2d31268bf
              • MD5 SHA1 SHA512 SSDEEP TLSH

              icudtl.dat

              • Path C:\ProgramData\Chimera\icudtl.dat
              • Size 10.1MB
              • SHA256 ee3c8883effd90edfb0ff5b758c560cbca25d1598fcb55b80ef67e990dd19d41
              • MD5 SHA1 SHA512 SSDEEP TLSH

              libEGL.dll

              • Path C:\ProgramData\Chimera\libEGL.dll
              • Size 366KB
              • SHA256 cce43fe8973b5f8b90e08b013f1eb0fa015090ff088f59a096d49a1b5e7a3540
              • MD5 SHA1 SHA512 SSDEEP TLSH

              libGLESv2.dll

              • Path C:\ProgramData\Chimera\libGLESv2.dll
              • Size 6.1MB
              • SHA256 bf6647fbe37dfe836ecceabb5ea53f5aa3aeb0375a8c7aef06e06fcbfcb3b1b1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              libcef.lib

              • Path C:\ProgramData\Chimera\libcef.lib
              • Size 39KB
              • SHA256 e9c55cff925e26812139cdcad6612e0d69e317cb7bb1435c9eb5113d338acce7
              • MD5 SHA1 SHA512 SSDEEP TLSH

              af.pak

              • Path C:\ProgramData\Chimera\locales\af.pak
              • Size 416KB
              • SHA256 4fb9dfed9ac2e6dd68c35bec83041f66ddfc8e5aa4f1eee9dae5aa00df5942b1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              am.pak

              • Path C:\ProgramData\Chimera\locales\am.pak
              • Size 674KB
              • SHA256 757fc53ecb4f5d913d9de0acc06d4bfdd73f36d5aad68fd657f9a612b4dbce13
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ar.pak

              • Path C:\ProgramData\Chimera\locales\ar.pak
              • Size 743KB
              • SHA256 6258ea73b1476f90ba7441cc096322a3e1145e17c475b3351581e464df47cb17
              • MD5 SHA1 SHA512 SSDEEP TLSH

              bg.pak

              • Path C:\ProgramData\Chimera\locales\bg.pak
              • Size 769KB
              • SHA256 ebcf4c4be2cd84d22830541f3112c5f3475938a460cb4605ab20095c8e0e6587
              • MD5 SHA1 SHA512 SSDEEP TLSH

              bn.pak

              • Path C:\ProgramData\Chimera\locales\bn.pak
              • Size 992KB
              • SHA256 5c191e0d941c19e732b7b2a1410ebfd9d88f7bf352316dcce1536213c9a86a17
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ca.pak

              • Path C:\ProgramData\Chimera\locales\ca.pak
              • Size 476KB
              • SHA256 cea499b26690805b28628eb4b1a3146cdbe4425eddfddb1a231b203e2676a87f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              cs.pak

              • Path C:\ProgramData\Chimera\locales\cs.pak
              • Size 483KB
              • SHA256 61c96ca87d0ad3db0435cbe23f0552de86f50488ac91b373dda4b9bf0d08f088
              • MD5 SHA1 SHA512 SSDEEP TLSH

              da.pak

              • Path C:\ProgramData\Chimera\locales\da.pak
              • Size 439KB
              • SHA256 fcf728644873cd91c4d4617036679945626be34cc01ed93eb34818e2d422311b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              de.pak

              • Path C:\ProgramData\Chimera\locales\de.pak
              • Size 475KB
              • SHA256 991f3ad76ea4659a12e920d5c4300dbc4221d3ca665216f94a1b393657170c81
              • MD5 SHA1 SHA512 SSDEEP TLSH

              el.pak

              • Path C:\ProgramData\Chimera\locales\el.pak
              • Size 843KB
              • SHA256 ef4cfd37c7fa18f2f6d70a9f1e41bc85e783ac3d25d357904cb7c338993800f7
              • MD5 SHA1 SHA512 SSDEEP TLSH

              en-GB.pak

              • Path C:\ProgramData\Chimera\locales\en-GB.pak
              • Size 380KB
              • SHA256 d7b75984f0ab3531d4313428eb60f3db8aaa68ed746f1fccfe8c50f6a33cd6eb
              • MD5 SHA1 SHA512 SSDEEP TLSH

              en-US.pak

              • Path C:\ProgramData\Chimera\locales\en-US.pak
              • Size 384KB
              • SHA256 18b68d00be426a4f7acd4efc1e45ae296720ade13ca66d3cf768e48d814b6a25
              • MD5 SHA1 SHA512 SSDEEP TLSH

              es-419.pak

              • Path C:\ProgramData\Chimera\locales\es-419.pak
              • Size 465KB
              • SHA256 f77575044a56dbbb4028313df0871914e1c5edc018b54335ece31c7a9c2b25e9
              • MD5 SHA1 SHA512 SSDEEP TLSH

              es.pak

              • Path C:\ProgramData\Chimera\locales\es.pak
              • Size 464KB
              • SHA256 e3e9f85180b65b1574a47fa22b2f2d30fc0afb59199464af0064874487a7c1d0
              • MD5 SHA1 SHA512 SSDEEP TLSH

              et.pak

              • Path C:\ProgramData\Chimera\locales\et.pak
              • Size 421KB
              • SHA256 e2502464e4b05373adb129ca24cd1b04363ab58ee9f074d58eba3daec2fe3763
              • MD5 SHA1 SHA512 SSDEEP TLSH

              fa.pak

              • Path C:\ProgramData\Chimera\locales\fa.pak
              • Size 686KB
              • SHA256 71e0cbfcb334fe6830517e0131caca602ad31f4b853dfab55d852844987139fe
              • MD5 SHA1 SHA512 SSDEEP TLSH

              fi.pak

              • Path C:\ProgramData\Chimera\locales\fi.pak
              • Size 428KB
              • SHA256 35f28344c4758eae428d322d6f72dff32fab7be51cf2e4fac990e894e690a0ad
              • MD5 SHA1 SHA512 SSDEEP TLSH

              fil.pak

              • Path C:\ProgramData\Chimera\locales\fil.pak
              • Size 483KB
              • SHA256 6e831fec12173421aa1ee390927c6322c604c57d0f6dd848cb98cfc6b13f7310
              • MD5 SHA1 SHA512 SSDEEP TLSH

              fr.pak

              • Path C:\ProgramData\Chimera\locales\fr.pak
              • Size 505KB
              • SHA256 3de246f60f1ff3801edc4a5c8e12a7219bb97d90afdb8595673db09bed1261b6
              • MD5 SHA1 SHA512 SSDEEP TLSH

              gu.pak

              • Path C:\ProgramData\Chimera\locales\gu.pak
              • Size 973KB
              • SHA256 fd3cf66a25e7651debffbe9ee7b748f29a937460fe559179bbfd502085177ae8
              • MD5 SHA1 SHA512 SSDEEP TLSH

              he.pak

              • Path C:\ProgramData\Chimera\locales\he.pak
              • Size 603KB
              • SHA256 4d15cb1054eb3274503a35300914823e0c23f3f0c2c384ffd671a87d98a09753
              • MD5 SHA1 SHA512 SSDEEP TLSH

              hi.pak

              • Path C:\ProgramData\Chimera\locales\hi.pak
              • Size 1.0MB
              • SHA256 766ffabc715a7ee131aa2ab4419ed7814af63a356c0119a0b13743a4e77db389
              • MD5 SHA1 SHA512 SSDEEP TLSH

              hr.pak

              • Path C:\ProgramData\Chimera\locales\hr.pak
              • Size 467KB
              • SHA256 eb4562e2e6fbdb037e1678c1c2fab359c288fbb8bfd692c2d5525ca5baea7c45
              • MD5 SHA1 SHA512 SSDEEP TLSH

              hu.pak

              • Path C:\ProgramData\Chimera\locales\hu.pak
              • Size 502KB
              • SHA256 2eb64bd39b09fcfb1ccd6a6297a6446319379a29de1254d2311e8bb5f846a46e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              id.pak

              • Path C:\ProgramData\Chimera\locales\id.pak
              • Size 412KB
              • SHA256 b052cd4a017c45ef7973471c23b988a9cc01f7b80af3e3434457ca68383d9fd5
              • MD5 SHA1 SHA512 SSDEEP TLSH

              it.pak

              • Path C:\ProgramData\Chimera\locales\it.pak
              • Size 463KB
              • SHA256 88948c75519e681ef15bee3a26e159556e329baa2cedf334bb6d7c674b0b0416
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ja.pak

              • Path C:\ProgramData\Chimera\locales\ja.pak
              • Size 562KB
              • SHA256 95bf7e0cb0b3ec51e151aef9e5653969fbfa29f52a6f3db2d84bf2f017d9f53b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              kn.pak

              • Path C:\ProgramData\Chimera\locales\kn.pak
              • Size 1.1MB
              • SHA256 397f1e8f20071367c36056b15fce206ee906968630ffd5b0171e41a821fa1657
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ko.pak

              • Path C:\ProgramData\Chimera\locales\ko.pak
              • Size 471KB
              • SHA256 8f9db13aa225812047f5e106c3ed3dd87b70f20846bb523e9d844c29b2d23519
              • MD5 SHA1 SHA512 SSDEEP TLSH

              lt.pak

              • Path C:\ProgramData\Chimera\locales\lt.pak
              • Size 507KB
              • SHA256 048c2ea9a5252fe1c6c94a12cc70b3a94a1ded4eb0bfb13d2cb885d8d4728a4a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              lv.pak

              • Path C:\ProgramData\Chimera\locales\lv.pak
              • Size 505KB
              • SHA256 095d894c1b1d8f4461297f6124604d165fe7936583ded2482f6d5188100c1283
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ml.pak

              • Path C:\ProgramData\Chimera\locales\ml.pak
              • Size 1.1MB
              • SHA256 273aad7fa5b0cb0a48dcb0a8170ecd5c1d3ef833f0fc0e5834630ae869e5081f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mr.pak

              • Path C:\ProgramData\Chimera\locales\mr.pak
              • Size 948KB
              • SHA256 83ab733b19bfa52427c6a5c6342be6b6e8e863ec7c8b22287f2d2b433c258203
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ms.pak

              • Path C:\ProgramData\Chimera\locales\ms.pak
              • Size 431KB
              • SHA256 0fbd6c36305bc105386674effb79f921ca7aaba9d3ef4e585a9970812f0ae975
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb.pak

              • Path C:\ProgramData\Chimera\locales\nb.pak
              • Size 421KB
              • SHA256 cf93325eb9c95c54b4c6d6449709bb77906f56c014c10d8d3587adaa28598e45
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nl.pak

              • Path C:\ProgramData\Chimera\locales\nl.pak
              • Size 435KB
              • SHA256 a6c435fd650e8e63287167623697bcc056d7234251bf5f8a45a01ea4c05cfd31
              • MD5 SHA1 SHA512 SSDEEP TLSH

              pl.pak

              • Path C:\ProgramData\Chimera\locales\pl.pak
              • Size 487KB
              • SHA256 973cdb62afd56de9ae67154b1a0fc55ce19c901e59ea26a57088ffaade7a7704
              • MD5 SHA1 SHA512 SSDEEP TLSH

              pt-BR.pak

              • Path C:\ProgramData\Chimera\locales\pt-BR.pak
              • Size 458KB
              • SHA256 2a8cd67a9150206b371388a9bdbc6cc91c2fba9c55a0d1b235c36a990627beb3
              • MD5 SHA1 SHA512 SSDEEP TLSH

              pt-PT.pak

              • Path C:\ProgramData\Chimera\locales\pt-PT.pak
              • Size 460KB
              • SHA256 0092e627e213a069c54c0d948ed7a25578a0f3611f2cad545d7554aac32c8efb
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ro.pak

              • Path C:\ProgramData\Chimera\locales\ro.pak
              • Size 474KB
              • SHA256 2572b68ff916a96392f9f44c36f57071862a3a94a88688effafc23d06ecba39c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ru.pak

              • Path C:\ProgramData\Chimera\locales\ru.pak
              • Size 777KB
              • SHA256 427e8b52e52f3de45392ccc5b356baaa2561f17f5361b8fb35ecfbd857c54dac
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sk.pak

              • Path C:\ProgramData\Chimera\locales\sk.pak
              • Size 490KB
              • SHA256 a25deaebeee7e1838fd95f8fb3be88b752f67e73904321f57e5c60908a77d527
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sl.pak

              • Path C:\ProgramData\Chimera\locales\sl.pak
              • Size 471KB
              • SHA256 9f954e3bfdc03ecf01871a3ae9851d5cbb7c16b15f61ddfc57d54bb2cbbadec8
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sr.pak

              • Path C:\ProgramData\Chimera\locales\sr.pak
              • Size 724KB
              • SHA256 635abf8fcadc7d49a68a7b63aaacce4254ec4552c54a66c69de0d025142fd9e2
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sv.pak

              • Path C:\ProgramData\Chimera\locales\sv.pak
              • Size 425KB
              • SHA256 20491d9158bf12b41f4755e0c6d0b18a67768c7c3922a1d865e7fddfad5a094f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sw.pak

              • Path C:\ProgramData\Chimera\locales\sw.pak
              • Size 445KB
              • SHA256 01695ce48426c001e209a06802e6254e7f80064e0d6ac7c2869b704c4f581cca
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ta.pak

              • Path C:\ProgramData\Chimera\locales\ta.pak
              • Size 1.1MB
              • SHA256 11fd5c80ea2ae479cccbd081d2db40368b201bbd7d69dc64ec22e0b945dd6708
              • MD5 SHA1 SHA512 SSDEEP TLSH

              te.pak

              • Path C:\ProgramData\Chimera\locales\te.pak
              • Size 1.0MB
              • SHA256 5931f7e3215ccc8d666ff8092f2b3f271352b034abc623c7da7c15052f367607
              • MD5 SHA1 SHA512 SSDEEP TLSH

              th.pak

              • Path C:\ProgramData\Chimera\locales\th.pak
              • Size 888KB
              • SHA256 def4457cd0cb1440f197329b3bafff8467da80e609e15f66b04566063e006848
              • MD5 SHA1 SHA512 SSDEEP TLSH

              tr.pak

              • Path C:\ProgramData\Chimera\locales\tr.pak
              • Size 454KB
              • SHA256 5b9b785b191af3cfd13f4d95605b4d4c2cb81d7cd84a3c6d32a2b1b1163dda86
              • MD5 SHA1 SHA512 SSDEEP TLSH

              uk.pak

              • Path C:\ProgramData\Chimera\locales\uk.pak
              • Size 776KB
              • SHA256 917a8e66f18c6c594e62a7ab62381012511e6773b042e97856bc128fcf18d79a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ur.pak

              • Path C:\ProgramData\Chimera\locales\ur.pak
              • Size 677KB
              • SHA256 a7d02ce4f84f43adc4afb969791f65792c103e9573419980e5a8e577f62d0d01
              • MD5 SHA1 SHA512 SSDEEP TLSH

              vi.pak

              • Path C:\ProgramData\Chimera\locales\vi.pak
              • Size 538KB
              • SHA256 8ced7a3a5112bd1aa06b7466304c8bda2bd0223c6588717f814c615ade1bd3fe
              • MD5 SHA1 SHA512 SSDEEP TLSH

              zh-CN.pak

              • Path C:\ProgramData\Chimera\locales\zh-CN.pak
              • Size 391KB
              • SHA256 2f089dced9aeb1c05d3691a7c699a674c5ac93debf3a62e6084990d903eb1ddb
              • MD5 SHA1 SHA512 SSDEEP TLSH

              zh-TW.pak

              • Path C:\ProgramData\Chimera\locales\zh-TW.pak
              • Size 390KB
              • SHA256 b96ab49ba7b3cb01fb9f0704e5bd69ad9acfef23edf951cc0a684b7c95c2767e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              resources.pak

              • Path C:\ProgramData\Chimera\resources.pak
              • Size 7.4MB
              • SHA256 bcf2ce7f32afada76f3be041493a2ebd598078fd26586bf03f91c3806ee4e76b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              snapshot_blob.bin

              • Path C:\ProgramData\Chimera\snapshot_blob.bin
              • Size 222KB
              • SHA256 429589268abf40039e274921cddd6e8ffc751aa40515816ef57138256033927d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              v8_context_snapshot.bin

              • Path C:\ProgramData\Chimera\v8_context_snapshot.bin
              • Size 518KB
              • SHA256 76fe9406057665a75d39afd9abd96ab4ed8d3b9075073489eff12a5647f35eac
              • MD5 SHA1 SHA512 SSDEEP TLSH

              vk_swiftshader.dll

              • Path C:\ProgramData\Chimera\vk_swiftshader.dll
              • Size 4.3MB
              • SHA256 1c502c5224ad9ae8386dcbcbaf3c37cad7da5e11a14a429e0a02c50262af10ed
              • MD5 SHA1 SHA512 SSDEEP TLSH

              vulkan-1.dll

              • Path C:\ProgramData\Chimera\vulkan-1.dll
              • Size 783KB
              • SHA256 cc675ab9f4a5890b354fb1674cb02b2e65b2870f87bf1fa33289f9a5bef9b336
              • MD5 SHA1 SHA512 SSDEEP TLSH

              0c2d95c87a236693664d20d984984588e966f794.qmlc

              • Path C:\Users\Admin\AppData\Local\Chimera tool crack\cache\qmlcache\0c2d95c87a236693664d20d984984588e966f794.qmlc
              • Size 556B
              • SHA256 c1ce55fe455aaac27af37224d11447ea7c59f3510168de06465b19eb33a63c14
              • MD5 SHA1 SHA512 TLSH

              0df77bcf9db78de009ca6a4ba8805cab3259583c.qmlc

              • Path C:\Users\Admin\AppData\Local\Chimera tool crack\cache\qmlcache\0df77bcf9db78de009ca6a4ba8805cab3259583c.qmlc
              • Size 40KB
              • SHA256 52ad8bccb3749178642570bd15a5b6f80c89d14bb5b21f4b3be143e6f5c9e418
              • MD5 SHA1 SHA512 SSDEEP TLSH

              0df77bcf9db78de009ca6a4ba8805cab3259583c.qmlc

              • Path C:\Users\Admin\AppData\Local\Chimera tool crack\cache\qmlcache\0df77bcf9db78de009ca6a4ba8805cab3259583c.qmlc
              • Size 40KB
              • SHA256 f616662968779cea515f8a96a89312f775d3340d0dfc9cb6d887e049eb8b23fb
              • MD5 SHA1 SHA512 SSDEEP TLSH

              55e6ffc1e4b70a46c4deed01abb9cb1d3d1cb920.qmlc

              • Path C:\Users\Admin\AppData\Local\Chimera tool crack\cache\qmlcache\55e6ffc1e4b70a46c4deed01abb9cb1d3d1cb920.qmlc
              • Size 11KB
              • SHA256 d8848a46eb1bf33302837953ba5e07dd7a38e6183cbe5bff26dadf29d086e6b9
              • MD5 SHA1 SHA512 SSDEEP TLSH

              55e6ffc1e4b70a46c4deed01abb9cb1d3d1cb920.qmlc

              • Path C:\Users\Admin\AppData\Local\Chimera tool crack\cache\qmlcache\55e6ffc1e4b70a46c4deed01abb9cb1d3d1cb920.qmlc
              • Size 11KB
              • SHA256 ec139c341d2553b1675701bc3fdc4d290e38350660065da5a16287077af443d3
              • MD5 SHA1 SHA512 SSDEEP TLSH

              60275f5f6e33c334fc27395521c9281b31d7c5ab.qmlc

              • Path C:\Users\Admin\AppData\Local\Chimera tool crack\cache\qmlcache\60275f5f6e33c334fc27395521c9281b31d7c5ab.qmlc
              • Size 8KB
              • SHA256 a0921364ec8f57c3d22ee326a871a5c05edd6c0a95fba5d93f86b75dc12da4fe
              • MD5 SHA1 SHA512 SSDEEP TLSH

              619572f4c59c16656b0e91e66eead08b0e301f06.jsc

              • Path C:\Users\Admin\AppData\Local\Chimera tool crack\cache\qmlcache\619572f4c59c16656b0e91e66eead08b0e301f06.jsc
              • Size 17KB
              • SHA256 7aa619ce794df002be497acfd020df5af2815b9bb773f31af1ccbc89ae53fc15
              • MD5 SHA1 SHA512 SSDEEP TLSH

              7225451fcacc3b7ad282a5fc4489dd7ad6f3e571.qmlc

              • Path C:\Users\Admin\AppData\Local\Chimera tool crack\cache\qmlcache\7225451fcacc3b7ad282a5fc4489dd7ad6f3e571.qmlc
              • Size 1KB
              • SHA256 bf4cbaa99e9879e1a1ca82a379c45714cbb9cfbb470d71abe834e2b174a32f54
              • MD5 SHA1 SHA512 TLSH

              74d68ec5b649e559a06b9b9d5e1a5dd963191e95.qmlc

              • Path C:\Users\Admin\AppData\Local\Chimera tool crack\cache\qmlcache\74d68ec5b649e559a06b9b9d5e1a5dd963191e95.qmlc
              • Size 59KB
              • SHA256 ce1eaaabb51fec4d35b047f7a3c10570587312ffc72998345d0a977be98b9478
              • MD5 SHA1 SHA512 SSDEEP TLSH

              855acbb4b69d22bf866f679258381bd20317f9d6.qmlc

              • Path C:\Users\Admin\AppData\Local\Chimera tool crack\cache\qmlcache\855acbb4b69d22bf866f679258381bd20317f9d6.qmlc
              • Size 5KB
              • SHA256 7f640811b489bcf46b511147aa4627ae8c287b9adc505bedd44f640318b098b2
              • MD5 SHA1 SHA512 SSDEEP TLSH

              9764a0cf7398d05f1f046dc0c358adf765f28657.jsc

              • Path C:\Users\Admin\AppData\Local\Chimera tool crack\cache\qmlcache\9764a0cf7398d05f1f046dc0c358adf765f28657.jsc
              • Size 3KB
              • SHA256 d3a545baf01f600ad77d32927ebfb4826c861259639659f8e6b9647815c1ca5c
              • MD5 SHA1 SHA512 TLSH

              9779a7429fce2510e47ce1a9b32b01bfc446a599.jsc

              • Path C:\Users\Admin\AppData\Local\Chimera tool crack\cache\qmlcache\9779a7429fce2510e47ce1a9b32b01bfc446a599.jsc
              • Size 10KB
              • SHA256 ae51a54d816821bac6cd245d0642e9383d6a724fd421fc01b44d6045db8e7cef
              • MD5 SHA1 SHA512 SSDEEP TLSH

              9d0039b0fe340d9cfb3825d2bb6919d970b2c9d4.qmlc

              • Path C:\Users\Admin\AppData\Local\Chimera tool crack\cache\qmlcache\9d0039b0fe340d9cfb3825d2bb6919d970b2c9d4.qmlc
              • Size 28KB
              • SHA256 fe2ff5caedd3d77c318f48b8eac15befd04301ead2090df3f093cc17daafee3c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              a71b4e93e2d222e3e2b674d5ab81791387b77822.qmlc

              • Path C:\Users\Admin\AppData\Local\Chimera tool crack\cache\qmlcache\a71b4e93e2d222e3e2b674d5ab81791387b77822.qmlc
              • Size 26KB
              • SHA256 fe6658340b1b39808647dc0a87924a4400b15fb0fc2e861f6d238167790def22
              • MD5 SHA1 SHA512 SSDEEP TLSH

              a71b4e93e2d222e3e2b674d5ab81791387b77822.qmlc

              • Path C:\Users\Admin\AppData\Local\Chimera tool crack\cache\qmlcache\a71b4e93e2d222e3e2b674d5ab81791387b77822.qmlc
              • Size 26KB
              • SHA256 1b62fcaacf5405ac1293e399b1cd27203f9a228bfdaf80aa1d7ca1858df64ba2
              • MD5 SHA1 SHA512 SSDEEP TLSH

              b34462f8ca5a1fbd077748e2779097689f9300f2.qmlc

              • Path C:\Users\Admin\AppData\Local\Chimera tool crack\cache\qmlcache\b34462f8ca5a1fbd077748e2779097689f9300f2.qmlc
              • Size 54KB
              • SHA256 38c48886879400d164ac7992969398ccf2a71123e26e7b84abaec49edd1f815c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              b34462f8ca5a1fbd077748e2779097689f9300f2.qmlc

              • Path C:\Users\Admin\AppData\Local\Chimera tool crack\cache\qmlcache\b34462f8ca5a1fbd077748e2779097689f9300f2.qmlc
              • Size 54KB
              • SHA256 835e00b2dc8f4f84807282c0dc5ec3c3e0b8dd5494f58d2e4374890f8e1029c7
              • MD5 SHA1 SHA512 SSDEEP TLSH

              c45e0a706eb6ccbb094e556ff56d02266ca8f60c.qmlc

              • Path C:\Users\Admin\AppData\Local\Chimera tool crack\cache\qmlcache\c45e0a706eb6ccbb094e556ff56d02266ca8f60c.qmlc
              • Size 10KB
              • SHA256 dcd80e79500d4cef71ef8a6feb3f8f1db31cafd631e365dc4030df1eb6044c7f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              e4ef80837691d5be54fee0047ddf51951a963467.jsc

              • Path C:\Users\Admin\AppData\Local\Chimera tool crack\cache\qmlcache\e4ef80837691d5be54fee0047ddf51951a963467.jsc
              • Size 3KB
              • SHA256 2d4689ab71f2844615a7b9cb116617f6c27a89106723fdffbde46ce6bc716915
              • MD5 SHA1 SHA512 TLSH

              f7faf2a6f38c4ddc3148b50cb1a2194b24a5b388.qmlc

              • Path C:\Users\Admin\AppData\Local\Chimera tool crack\cache\qmlcache\f7faf2a6f38c4ddc3148b50cb1a2194b24a5b388.qmlc
              • Size 10KB
              • SHA256 18406bfda427546f7663ee111831abb0eec467599ee5371679ac1b61096fe701
              • MD5 SHA1 SHA512 SSDEEP TLSH

              f7faf2a6f38c4ddc3148b50cb1a2194b24a5b388.qmlc

              • Path C:\Users\Admin\AppData\Local\Chimera tool crack\cache\qmlcache\f7faf2a6f38c4ddc3148b50cb1a2194b24a5b388.qmlc
              • Size 10KB
              • SHA256 b33be747d5297567d85f9a05b45027421b534e1cd2f1aef1ec309e6da56c2fab
              • MD5 SHA1 SHA512 SSDEEP TLSH

              vk_swiftshader_icd.json

              • Path C:\Users\Admin\AppData\Local\Temp\CHIMERA_vWobmD\cef_binary_113.3.1+g525fa10+chromium-113.0.5672.128_windows32_minimal\Release\vk_swiftshader_icd.json
              • Size 106B
              • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
              • MD5 SHA1 SHA512 TLSH

              Chimera tool crack.exe

              • Path C:\Users\Admin\AppData\Local\Temp\Chimera_tool\Chimera tool crack.exe
              • Size 7.6MB
              • SHA256 1eab59a25b98415e4c42d1ab929951725c9bfcde096709d5a39400fde505d7c6
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ChimeraInstaller.exe

              • Path C:\Users\Admin\AppData\Local\Temp\Chimera_tool\ChimeraInstaller.exe
              • Size 7.6MB
              • SHA256 6d73c3abdd030c817c1179ba345ef5663455688a487bff20794206df2c365296
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ChimeraInstaller.exe

              • Path C:\Users\Admin\AppData\Local\Temp\Chimera_tool\ChimeraInstaller.exe
              • Size 14.5MB
              • SHA256 6a8b7df69be2bf2ba0bbdbc6c27898800bd362d5707888325b239d6f668938bc
              • MD5 SHA1 SHA512 SSDEEP TLSH

              DriverCheck.acd

              • Path C:\Users\Admin\AppData\Local\Temp\DriverCheck.acd
              • Size 123B
              • SHA256 045702dff73a269a99eb013c23c22e8750dfb5ec3b26ae11a4a41b6ad26d0cf9
              • MD5 SHA1 SHA512 TLSH

              Chimera.ico

              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Chimera.ico
              • Size 32KB
              • SHA256 9216a46311c9375b1bfaf86b89b1b93998dd0404ee6b15a62c7a62983af63d88
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ANDROI~1.CAT

              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\WIN10\ANDROI~1.CAT
              • Size 11KB
              • SHA256 b8efc0f34ff86763508df2448fe84f9e485febeabf09628ff6f1d211a799df79
              • MD5 SHA1 SHA512 SSDEEP TLSH

              android_winusb.inf

              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\WIN10\android_winusb.inf
              • Size 2KB
              • SHA256 b229457c5bf4d7e1984c4c18e3e538008cf2cf716a172d97350592894e2b4671
              • MD5 SHA1 SHA512 TLSH

              ANDROI~1.CAT

              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\WIN7\ANDROI~1.CAT
              • Size 9KB
              • SHA256 b066ba0d433e7b90fe3c76856ed8c877e8347771139a063a3d4b904eeb619ecc
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ANDROI~2.CAT

              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\WIN7\ANDROI~2.CAT
              • Size 9KB
              • SHA256 3b7f299df785c5e9467e9983b2baab596e6e6bafd66fe335dbf9dac08405629c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              WUDFUP~1.DLL

              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\WIN7\amd64\WUDFUP~1.DLL
              • Size 2.1MB
              • SHA256 015f26bbcd619a0b67b5eaa985b69582bac27d5cbca99ce747a76532fcde4aff
              • MD5 SHA1 SHA512 SSDEEP TLSH

              android_winusb.inf

              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\WIN7\android_winusb.inf
              • Size 2KB
              • SHA256 70abebac4909dc294eeee25d5acc2bb09569dfcbbd39f97e3dc24136318e6646
              • MD5 SHA1 SHA512 TLSH

              WDFCOI~1.DLL

              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\WIN7\i386\WDFCOI~1.DLL
              • Size 1.4MB
              • SHA256 7a6bf1f950684381205c717a51af2d9c81b203cb1f3db0006a4602e2df675c77
              • MD5 SHA1 SHA512 SSDEEP TLSH

              WINUSB~1.DLL

              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\WIN7\i386\WINUSB~1.DLL
              • Size 831KB
              • SHA256 ebe3b7708dd974ee87efed3113028d266af87ca8dbae77c47c6f7612824d3d6c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              WUDFUP~1.DLL

              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\WIN7\i386\WUDFUP~1.DLL
              • Size 1.8MB
              • SHA256 a902bb3bff785faaeb6432be76f798627a80b2cc45441e16440e46e6d7340f2c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              dpinst.exe

              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\dpinst.exe
              • Size 899KB
              • SHA256 c74ee5145de7e8c9d3d725bc9de38d59d6b1c5c1f5f6e52dbefeadda72dc5b0c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              dpinst64.exe

              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\dpinst64.exe
              • Size 1022KB
              • SHA256 11ec2ba6a62b443457424ae93cc66382d630d488147dafcfc16b7876bedc2db9
              • MD5 SHA1 SHA512 SSDEEP TLSH

              irsetup.exe

              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
              • Size 1.2MB
              • SHA256 d6656414e56377065c602547151b0020469e43c0dcd83b5477f6a2e2d0eec768
              • MD5 SHA1 SHA512 SSDEEP TLSH

              lua5.1.dll

              • Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.1.dll
              • Size 326KB
              • SHA256 e6cb42ce5a0245dcaf635cd2950b2811ae5f4990cbc11126e2e8e769556144ab
              • MD5 SHA1 SHA512 SSDEEP TLSH

              DPINST.LOG

              • Path C:\Windows\DPINST.LOG
              • Size 4KB
              • SHA256 6c5947ffd1ce158cf2201673e8731d0a2fa053c3a07969b0aa30524875653b0d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              DPINST.LOG

              • Path C:\Windows\DPINST.LOG
              • Size 6KB
              • SHA256 cdf0e8239721a56f01a3ee517320e5b61754a1538e4ab5a8b991a64c34089155
              • MD5 SHA1 SHA512 SSDEEP TLSH

              dberr.txt

              • Path C:\Windows\System32\CatRoot2\dberr.txt
              • Size 37KB
              • SHA256 50b2f93e145cd3f76f5dd22994a3c68e1f031d2854a8f31eb5ba5d5e7bf751b7
              • MD5 SHA1 SHA512 SSDEEP TLSH

              WdfCoInstaller01009.dll

              • Path \??\c:\users\admin\appdata\local\temp\_IR_SF~1\win10\amd64\WdfCoInstaller01009.dll
              • Size 1.6MB
              • SHA256 18487b4ff94edccc98ed59d9fca662d4a1331c5f1e14df8db3093256dd9f1c3e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              WinUSBCoInstaller2.dll

              • Path \??\c:\users\admin\appdata\local\temp\_IR_SF~1\win10\amd64\WinUSBCoInstaller2.dll
              • Size 979KB
              • SHA256 981a17effddbc20377512ddaec9f22c2b7067e17a3e2a8ccf82bb7bb7b2420b6
              • MD5 SHA1 SHA512 SSDEEP TLSH

              androidwinusba64.cat

              • Path \??\c:\users\admin\appdata\local\temp\_IR_SF~1\win10\androidwinusba64.cat
              • Size 11KB
              • SHA256 d76972472b9a3d070774cb3fdaa0079dff17ee8437d61aef6f8e5a115905bfcc
              • MD5 SHA1 SHA512 SSDEEP TLSH

              memory/468-40-0x0000000003C80000-0x0000000003C81000-memory.dmp

              memory/468-64-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-14-0x0000000000400000-0x0000000001F0A000-memory.dmp

              memory/468-17-0x00000000023D0000-0x00000000023D1000-memory.dmp

              memory/468-16-0x0000000004810000-0x0000000005010000-memory.dmp

              memory/468-68-0x0000000005420000-0x0000000005421000-memory.dmp

              memory/468-18-0x00000000023D0000-0x00000000023D1000-memory.dmp

              memory/468-51-0x0000000005420000-0x0000000005421000-memory.dmp

              memory/468-19-0x00000000023F0000-0x00000000023F3000-memory.dmp

              memory/468-20-0x00000000023F0000-0x00000000023F3000-memory.dmp

              memory/468-23-0x00000000023F0000-0x00000000023F3000-memory.dmp

              memory/468-24-0x0000000003C70000-0x0000000003C72000-memory.dmp

              memory/468-25-0x0000000003C70000-0x0000000003C72000-memory.dmp

              memory/468-26-0x0000000003C70000-0x0000000003C72000-memory.dmp

              memory/468-27-0x0000000003C70000-0x0000000003C72000-memory.dmp

              memory/468-30-0x0000000003C70000-0x0000000003C72000-memory.dmp

              memory/468-32-0x0000000003C80000-0x0000000003C81000-memory.dmp

              memory/468-33-0x0000000003C80000-0x0000000003C81000-memory.dmp

              memory/468-34-0x0000000003C80000-0x0000000003C81000-memory.dmp

              memory/468-37-0x0000000003C80000-0x0000000003C81000-memory.dmp

              memory/468-38-0x0000000003C80000-0x0000000003C81000-memory.dmp

              memory/468-39-0x0000000003C80000-0x0000000003C81000-memory.dmp

              memory/468-41-0x0000000003C80000-0x0000000003C81000-memory.dmp

              memory/468-42-0x0000000003C80000-0x0000000003C81000-memory.dmp

              memory/468-48-0x0000000003C70000-0x0000000003C72000-memory.dmp

              memory/468-50-0x0000000005420000-0x0000000005421000-memory.dmp

              memory/468-52-0x0000000005420000-0x0000000005421000-memory.dmp

              memory/468-53-0x0000000005420000-0x0000000005421000-memory.dmp

              memory/468-54-0x0000000005420000-0x0000000005421000-memory.dmp

              memory/468-55-0x0000000005420000-0x0000000005421000-memory.dmp

              memory/468-56-0x0000000005420000-0x0000000005421000-memory.dmp

              memory/468-57-0x0000000005420000-0x0000000005421000-memory.dmp

              memory/468-59-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-60-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-61-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-62-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-63-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-4164-0x0000000000400000-0x0000000001F0A000-memory.dmp

              memory/468-65-0x00000000023F0000-0x00000000023F3000-memory.dmp

              memory/468-66-0x0000000005420000-0x0000000005421000-memory.dmp

              memory/468-67-0x0000000005420000-0x0000000005421000-memory.dmp

              memory/468-79-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-80-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-81-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-82-0x00000000023F0000-0x00000000023F3000-memory.dmp

              memory/468-83-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-84-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-85-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-86-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-87-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-88-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-89-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-90-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-91-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-92-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-98-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-99-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-100-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-101-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-103-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-104-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-105-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-106-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-107-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-108-0x0000000005430000-0x0000000005431000-memory.dmp

              memory/468-73-0x00000000023F0000-0x00000000023F3000-memory.dmp

              memory/4608-4162-0x0000000000400000-0x000000000282B000-memory.dmp

              memory/4608-4171-0x0000000000400000-0x000000000282B000-memory.dmp

              memory/4608-4383-0x0000000000400000-0x000000000282B000-memory.dmp

              memory/5376-4364-0x0000000000C10000-0x0000000000FFA000-memory.dmp

              memory/5376-4244-0x0000000000C10000-0x0000000000FFA000-memory.dmp

              memory/5376-4193-0x0000000000C10000-0x0000000000FFA000-memory.dmp

              memory/6148-8518-0x0000000000400000-0x0000000001EF7000-memory.dmp

              memory/6148-8514-0x0000000000400000-0x0000000001EF7000-memory.dmp

              memory/6148-4386-0x0000000000400000-0x0000000001EF7000-memory.dmp