1ed4d4ec9f8e94af013989631a6a4b11b5ec00d76000bb5f38efcd4a817b3d94

Analysis

user interaction
yes
max time kernel
421s
max time network
399s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 09:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
PANEL SOPRANOS.exe
Size 28.4MB
Sample260910-lf4lvsgd49
SHA256 1ed4d4ec9f8e94af013989631a6a4b11b5ec00d76000bb5f38efcd4a817b3d94
MD5 98c041bd3ebb34ad5678ebec677142f1
SHA1 9236a63e9259c64ebaeed5b1a6d930c749fefc49
SHA512 fba59693c0c82c449989cc82ff7535a472270a2911c4635021a5955ad856fc8717848643c17f528b7ad0f76daca45da896ec46f6a601679b4120572bed86f536
SSDEEP 393216:JzdVAx1T9TaHWsQYHfd5jKu2Ym932SyRl9A:DVA1GRfTKu2j9GSIl9A
TLSH
T13F674A0263ECBDD4E1729634E73783F1CB7DFC259611C20F0594F94A3A7A942B9663A2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation	PANEL SOPRANOS.exe

Executes dropped EXE 1 IoCs

pid	Process
5024	PANEL SOPRANOS.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4944	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335066350471765"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
5012	PANEL SOPRANOS.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
5024	PANEL SOPRANOS.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 22 IoCs

pid	Process
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	5012	PANEL SOPRANOS.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe
Token: SeCreatePagefilePrivilege	4112	chrome.exe
Token: SeShutdownPrivilege	4112	chrome.exe

Suspicious use of FindShellTrayWindow 50 IoCs

pid	Process
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
2820	7zG.exe

Suspicious use of SendNotifyMessage 34 IoCs

pid	Process
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe
4112	chrome.exe

Suspicious use of WriteProcessMemory 55 IoCs

description	pid	Process	procid_target
PID 4112 wrote to memory of 1448	4112	chrome.exe	119
PID 4112 wrote to memory of 3384	4112	chrome.exe	120
PID 4112 wrote to memory of 3384	4112	chrome.exe	120
PID 4112 wrote to memory of 4944	4112	chrome.exe	121
PID 4112 wrote to memory of 912	4112	chrome.exe	123
PID 4112 wrote to memory of 912	4112	chrome.exe	123
PID 4112 wrote to memory of 1032	4112	chrome.exe	124
PID 4112 wrote to memory of 1036	4112	chrome.exe	125
PID 4112 wrote to memory of 1032	4112	chrome.exe	124
PID 4112 wrote to memory of 1036	4112	chrome.exe	125
PID 4112 wrote to memory of 3460	4112	chrome.exe	126
PID 4112 wrote to memory of 3460	4112	chrome.exe	126
PID 4112 wrote to memory of 1724	4112	chrome.exe	128
PID 4112 wrote to memory of 1724	4112	chrome.exe	128
PID 4112 wrote to memory of 760	4112	chrome.exe	129
PID 4112 wrote to memory of 1640	4112	chrome.exe	134
PID 4112 wrote to memory of 1640	4112	chrome.exe	134
PID 4112 wrote to memory of 3116	4112	chrome.exe	135
PID 4112 wrote to memory of 3116	4112	chrome.exe	135
PID 4112 wrote to memory of 228	4112	chrome.exe	136
PID 4112 wrote to memory of 228	4112	chrome.exe	136
PID 4112 wrote to memory of 1432	4112	chrome.exe	137
PID 4112 wrote to memory of 1432	4112	chrome.exe	137
PID 4112 wrote to memory of 4868	4112	chrome.exe	138
PID 4112 wrote to memory of 1440	4112	chrome.exe	139
PID 4112 wrote to memory of 3720	4112	chrome.exe	140
PID 4112 wrote to memory of 2592	4112	chrome.exe	141
PID 4112 wrote to memory of 2592	4112	chrome.exe	141
PID 4112 wrote to memory of 1628	4112	chrome.exe	142
PID 4112 wrote to memory of 1628	4112	chrome.exe	142
PID 4112 wrote to memory of 1608	4112	chrome.exe	143
PID 4112 wrote to memory of 1608	4112	chrome.exe	143
PID 4112 wrote to memory of 3676	4112	chrome.exe	144
PID 4112 wrote to memory of 3676	4112	chrome.exe	144
PID 4112 wrote to memory of 3620	4112	chrome.exe	145
PID 4112 wrote to memory of 3620	4112	chrome.exe	145
PID 4112 wrote to memory of 952	4112	chrome.exe	146
PID 4112 wrote to memory of 952	4112	chrome.exe	146
PID 4112 wrote to memory of 1548	4112	chrome.exe	147
PID 4112 wrote to memory of 1548	4112	chrome.exe	147
PID 4112 wrote to memory of 2320	4112	chrome.exe	148
PID 4112 wrote to memory of 2320	4112	chrome.exe	148
PID 4112 wrote to memory of 4692	4112	chrome.exe	149
PID 4112 wrote to memory of 4692	4112	chrome.exe	149
PID 4112 wrote to memory of 3184	4112	chrome.exe	150
PID 4112 wrote to memory of 3184	4112	chrome.exe	150
PID 4112 wrote to memory of 1252	4112	chrome.exe	151
PID 4112 wrote to memory of 1252	4112	chrome.exe	151
PID 4112 wrote to memory of 4736	4112	chrome.exe	152
PID 4112 wrote to memory of 4736	4112	chrome.exe	152
PID 4112 wrote to memory of 4348	4112	chrome.exe	153
PID 4112 wrote to memory of 3672	4112	chrome.exe	154
PID 4112 wrote to memory of 3672	4112	chrome.exe	154
PID 4112 wrote to memory of 4372	4112	chrome.exe	155
PID 4112 wrote to memory of 4372	4112	chrome.exe	155

C:\Users\Admin\AppData\Local\Temp\PANEL SOPRANOS.exe
"C:\Users\Admin\AppData\Local\Temp\PANEL SOPRANOS.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:5012

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1164

C:\Program Files\BlueStacks_nxt\HD-Player.exe
"C:\Program Files\BlueStacks_nxt\HD-Player.exe"
1⤵
PID:4284

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffd00b1c728,0x7ffd00b1c734,0x7ffd00b1c740
  2⤵
  PID:1448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1748,i,12315668930023075753,14799056727540293981,262144 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2004 /prefetch:2
  2⤵
  PID:3384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2140,i,3155656125887040587,4285847948206873994,524288 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2424,i,1762444126836865534,3576585191927330168,524288 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2572 /prefetch:8
  2⤵
  PID:912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3272,i,18185626757858484614,7341375652040833418,2097152 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:1032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3308,i,9303011123587881119,2017282717205838544,2097152 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:1036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4512,i,5949225816040757948,9021559745640015123,2097152 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4556 /prefetch:2
  2⤵
  PID:3460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4744,i,777512356565799002,3030976126536444361,2097152 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4776 /prefetch:1
  2⤵
  PID:1724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5504,i,2679441080866634230,7356645911510311328,524288 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5508 /prefetch:8
  2⤵
  PID:760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5944,i,5856490913526119211,9191764202070320597,2097152 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5932 /prefetch:1
  2⤵
  PID:1640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3320,i,4728052750973086817,18107505317357648173,2097152 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:3116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3228,i,14002509370070296943,2495299329497473598,2097152 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3420 /prefetch:1
  2⤵
  PID:228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5956,i,16953771389830790234,3687266974175610402,2097152 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5524 /prefetch:1
  2⤵
  PID:1432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6212,i,10672855579131458982,2749560988551032680,524288 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3460 /prefetch:8
  2⤵
  PID:4868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6216,i,18169349943503861827,2025516303608024037,524288 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6196 /prefetch:8
  2⤵
  PID:1440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6116,i,13137821398685631878,2154073067177866359,524288 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6092 /prefetch:8
  2⤵
  PID:3720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4616,i,12095705431772967136,12751716287528237951,2097152 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4588 /prefetch:1
  2⤵
  PID:2592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=3428,i,13521034687223446561,8287618526226488442,2097152 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4552 /prefetch:1
  2⤵
  PID:1628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6876,i,14565499154118259534,15554777233506836973,2097152 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6620 /prefetch:1
  2⤵
  PID:1608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6556,i,86392158648159209,5384104635112894179,2097152 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6568 /prefetch:1
  2⤵
  PID:3676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6620,i,15831579061169887774,10987802158771696994,2097152 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6580 /prefetch:1
  2⤵
  PID:3620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6880,i,8490012668626487235,4580925443073073164,2097152 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7016 /prefetch:1
  2⤵
  PID:952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=7144,i,1415100402918702058,7439295750861795031,2097152 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7136 /prefetch:1
  2⤵
  PID:1548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=7008,i,1584460727985024223,4257427135834471506,2097152 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4556 /prefetch:1
  2⤵
  PID:2320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6684,i,5989789552171623089,5950397516842969876,2097152 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6664 /prefetch:1
  2⤵
  PID:4692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=7292,i,12141961514569345661,17165666070899566895,2097152 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7340 /prefetch:1
  2⤵
  PID:3184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=7480,i,5372436972032066613,13585880825769397188,2097152 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7436 /prefetch:1
  2⤵
  PID:1252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=7756,i,6860075930059638607,15758605416349377292,2097152 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7764 /prefetch:1
  2⤵
  PID:4736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=7944,i,8105606057868720550,4755060911367333303,524288 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7728 /prefetch:8
  2⤵
  PID:4348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=7964,i,13891321403017248816,13898040381524653625,2097152 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7980 /prefetch:1
  2⤵
  PID:3672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=8156,i,17434518104311066048,13201280040338012185,2097152 --field-trial-handle=2028,i,1649246664693337969,9055675881100887189,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8152 /prefetch:1
  2⤵
  PID:4372

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2216

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3316

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
PID:4552

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Desktop\" -an -ai#7zMap7940:86:7zEvent16633
1⤵
- Suspicious use of FindShellTrayWindow
PID:2820

C:\Users\Admin\Desktop\PANEL SOPRANOS.exe
"C:\Users\Admin\Desktop\PANEL SOPRANOS.exe"
1⤵
- Checks computer location settings
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
PID:5024
- C:\Program Files\BlueStacks_nxt\HD-Player.exe
  "C:\Program Files\BlueStacks_nxt\HD-Player.exe"
  2⤵
  PID:1132

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 9218ece111fd7ff74a91644cada428358010583f7d85a50d1bdbef3b50efc442
MD5 3e641733b1a52c94b6e46b29c94e9f4f
SHA1 9659d61cd39a026d85a1deac797c6b01638b489c
SHA512 3fa76eae69ae74d841926a27e0424de807b23d89d422264957daa69fa5b2a395eee61edaa0154f5cc9cc7d27b3fd53c6eb0a8d6edfc8fc7a1c1f19ceb5d8a542
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 536e4f583400e7c5cd2e8d96fd41e2dab58d82ddcafaecb93123aedad08ae22e
MD5 d982e8de73d4652d2a0209cdd4720dc8
SHA1 dee34797984edc4532205c9669b8deecabca9e1c
SHA512 5f42d63dc123e178d0413fb9c942986d0c659a0543a4d9a8284d1a8f8fbf3d61009aab346a69bcb85d90d6de102898c4aacb97249da87a5540bce53e7c7cf53d
TLSH
T19AE0E599CC21B8270CFD5B1950540A49EA1113671760845E363D82188FB56A70585CAC
MD5 SHA1 SHA512 TLSH

Submit Download

f_00004b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004b
Size 158KB
SHA256 60072b4eb6fc5f1f1214a34fcd55b3cbd1d05eddf778f85611f9b352c4c6452d
MD5 83266658f29f5cb762001d5d9f6985a7
SHA1 9ff52157193e1e798944e6a3172d938183f5e550
SHA512 60b2a8749bb597b71c6cb7113c4ea6c430ab90c6f6a5f78a36ab5fbd2676fbc173ade236be939e862569c786fbdc8e0aa984f1ae4263e91de2ba681cc8ce5d66
SSDEEP 3072:pqj6fcYjfI87fn/NWUEu+Y4rwgnWSPrrGh9SC2VRvkQdv45cf+Fg:pTvjg87fnVTEu+W3rSC2VRpBf+y
TLSH
T196F3232CABB1EF2298ADD32D789EF491C870553AC097303BB84FDF8575154348A7684E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 b4cfd891fdae265c523572961ebd765b2d2ca1111f31b53489d985ecd9014990
MD5 886c4fc7fa15d25a6980c01a9b57c78d
SHA1 95929015abd61d0b60846b615d92e813903caf5f
SHA512 f4cde371c2638ea9d6ca23d67dffa21f675c7e3df7751c5a5d8c54a32d9b9f26df31834bab10a8f2ee91eeab64dd1be187fa25fba5d7d78a07a4c64cc9238b41
TLSH
T11D21CB511212ECEDEFB70B3309EBD23F3935C109122F5F5A92B0D536ACB57A2A65102A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 1c01b412115a9eb68bff249df41ccd8efc966534e18d90d92296c2d8f6847ffc
MD5 282b61f359a3bf45626cb000f9bfc058
SHA1 0744e0e4654de7ac0b5fced0ff7623f680e75c4c
SHA512 159afd8db302d8ab66393c6e4b07e3fd512185f539cd7774150271fbcde1df374434aca6638e9cb2f361a086c2f21a2718953942a0bc64734e6eb77b9d6534e9
SSDEEP 48:rvnU1MVrmAiFQtq0YDh6usbbbSIvkSXN2LvYthp2zvEu+r4NDVo+rF:L1VaA6QODhLsbb2Ivj4LFEu+r4dVoa
TLSH
T1FE91BA625810F4A5EF4BCA37A5E7C82F7133C5CD549B1F0A0154FC322CAA7AFA62126D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 34KB
SHA256 23839950073ed7758b2dd936632d23c700f1f16d7b0736d10743f6ab775c15b3
MD5 99652b5ac9ca7d70f03be555ba5f8b87
SHA1 6aa95354e8271e591656ee5b11e4e7870fe441c0
SHA512 81423c87dd9c83dbf9b9e5e60b6ce3328112bf4bdf114e9010dfeb90b862fe2cc44803bfffb1d53b6a71b7e0837dd312627c909db1f6432b2fa5cbb0c50e4da3
SSDEEP 384:Dt6uUhwHqJJ83zj/QFd4YXeAehb1aZ+J8b+AaICc495QLWiKOKRNYacRfNc5AJIJ:yw53CjXU9+cvEZe8XHXZCsgJxsh6
TLSH
T1F7F29CF383E5D62E89115AF89B156E1BCF1C0B15432C3C1688D5AE4BE3E3472E16A64F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 4KB
SHA256 12ee19e89f37d900403ff33cc26f11a695a0d7b3be78eec3b04d93a02441a12f
MD5 ccd3f7da0b24746545ebcfeb06923368
SHA1 dbd6bdd84fff40874c0ac7691eb45aa86cf45be7
SHA512 c0948b72e108b63b2ffe22970c89c3bf02ede2d1c44dffbe5c81a1033ef7f6b1c5c8301b186da54255f3783c719c914d337cd52b2a9dc4a749bef771c8389ca8
SSDEEP 96:HUXURAUXUiUFieUIleU37UQUiUHUWsUcuuUyU+UjU1UPUasUxKUVUjjUWUGbU9U2:HUXURAUXUiUbUIkULUQUiUHUWsU7uUyq
TLSH
T193B1BDA7C27FBD2B106D487B1F99B84559BAFC31224164F8DF6683AC70854F70B67026
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 bef5a8ba3df9179e3d423aa9087ce56c87e79a3da182dfb74d82ad7d7f7bd8cf
MD5 4deba104ee2f76234e462ad1043c67e1
SHA1 35432af8530ee5253b2f797c2e058510541f53e4
SHA512 922e50e09add6a40e7785deb5de062f67ddaab8e7f4591ce130fd1aa449748f4e9e47aa9ce8279ffe72857d8115b78d569124e2e59b9fc5de882eec0ee58fa31
SSDEEP 192:rR7cBzQIL8sy/v7AhAPRp2Go+lN9qHsb+WNx1HmbZ40j2/fS236BCZwkwssyVyII:rR7mzQ3Xk8XBkwoX2i236BhI8
TLSH
T1A852B62AFE20693B9CDBC319F9217B67D7F9202521942E84EAFC892C15E75CC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 63c10c7ff4da2396a06b6f3437c28a688d115636341a17660165317feb5d43d3
MD5 97d1110a8e5087d0b373e826b11dc9e3
SHA1 b1691eb86203b701b46c9eb670e070376640c6a0
SHA512 b4cacf7bf0dffab1c97b0fc508fcea378c94ec4359642b69544f260a7b9784b99998132fe6d4d97b55d61e56ff1107c1b542e53af65c2ccabd2271f355d064e2
SSDEEP 192:rRnQIL8sy/v7AhAPRp2l9qHsb+WNnHmbZ0AsfS236BCZwkwssyVyIsnAUgtaJ:rRnQ3Xk8XmkwY0o236BhI8
TLSH
T13742952EEE10793BACDBD319FA257B63D7F5202521942E84EAF8892C19E75CC3217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 7f20415b8e11eb1c47aa2f461a26a95e5ec7cf1cc6224df5448827010835439d
MD5 dac11a6b32048877cc870a909bee84fe
SHA1 8fe87b0cc1ac11fe114703d072866ed9ddf828ca
SHA512 e8c37b05d9aff2cd566667240c27a84397537852ecabd5250f360dce75addb90d2e5f5609f4b81b0df082d026c8d275090238ba6fe01f2e860faf06c1d8e4fdd
SSDEEP 192:rR7cBzQIL8sOL/v7AhAPRp2Go+lN9qHsb+WNx1HmbZ40j2mfS236BCZwkwssCVyr:rR7mzQ9Xk8XBkwoX21236Bhke
TLSH
T10152B62AFD20693BACD7D319F9227B67E7F9202521842E84EAFC892C15E75CC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f967c0623f697d1a6a49ae4f3e600d1801993d48b921419ca9116e2b0a6db3aa
MD5 41570a96ad521b6aa837951e42e246d7
SHA1 a1da5491cd70673fad26cf75ff4f9e99a7df52d7
SHA512 7e5728bf0de5127c83b1287375bc7867b2bdc611c2a8cc6cf68f76168fa4e647308c47b6fb94d767cdee06a488d9b5b162acbca960974446bb4be6bda23fa69c
SSDEEP 192:rR7cBzQIL8sMX/v7AhAPRp2Go+lh9qHsb+WNx1HmbZfli+0j2rfS236BCZwkwssn:rR7mzQHXk8XVkwoIV2+236Bhke
TLSH
T17352C72AF9206A3B9CE7D319F9217B67E7F9203561842E84EAFC892C15E75CC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 d10f946baae4bc35ce044bb358e21a3d24ec35c025fc2ac99ab9c203b6319a87
MD5 11ac80e6efd67b17fc9e2f0619623e9c
SHA1 94337274d3a41788ff97140b7435e29c5a0d443e
SHA512 3cd4ea154172917e430fd846a08060fa5e89c67bee415def1ac359b094262062e5da467bac4ba2c6e1a05be19c0639ad040355dcaae35a5f149f3c2c50e2340b
SSDEEP 192:rRNcBzEIL8sMX/v7AhAPRp2BEoxXbyNlh9qHsb+WNiN1HmbZfli+0j2rfS236BCm:rRNmzEHXk8XRkwbIV2+236Bhke
TLSH
T17062B56BE9202A7B9CE7C31AF9117B67E7F9203521842E84EAFC892C15E75CC3217457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 1db62a6944ff18266bd765045332a460de27eb843229fbf1981065cb90adb2f0
MD5 0cdbd66b9bda91cb3f1787f46bcb11e4
SHA1 ce0dcd64dee37a0e4dccc5849f53610d97af83c7
SHA512 2bf8d03d965ec4d8089d8c34aa2f2f83af25fdf540f1db7012f60b59ad7428e4c761e1fa08e5ba8d6a917d699b5dd7ab5129a810f3e31b9f7a763fb9fea765f1
SSDEEP 192:rRacBzEIL8sMX/v7AhZPRpRBEoxXbyNlh9qHsb+WNiNT9PHmbZfli+0j2KfS236X:rRamzEHXkPXGkwlIV2p236BhSe
TLSH
T11462C56BE9202A7B9CE7C329F9117B67E7F9203521942E84EAFC892C14E75DC3207457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 13805701603dbbca9403b94e006c712edafb4f98a8e0ae4ce0ad1b025b835f93
MD5 28aca1b912d001e337a9e715a111a353
SHA1 177a8b35a6fa74a15deedffd79dc9066169fc496
SHA512 0e554b40f873ea651a22f9b91cf52ad45cc99b35e2db0e34845d695aa13aaf61497b6646f39f5b0ba26fc4a43100e92a0aff8ad949d0289fb397cfe00b0cede5
SSDEEP 384:V7jxY7KxkXqKf/pUZNCgVLH2HfgsluX7pLuLcSjvKXODx4+ErU31PHG0pdpS8gfp:V3xY7KxkXqKf/pUZNCgVLH2HfgskX7pf
TLSH
T1A4720967AC0C9E374F94D6CCDC277B4FADB5015B61E9886483FA981903D5BCA110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 64a6988a7161d119e0a6b999facf9cd69602e4d0c0c8bfa7e781a30414422725
MD5 8a4c5134566ae60d81e663aadb50a267
SHA1 a1c82477d15fa8bc7db4e57136002f9aab04c061
SHA512 0cedfe92f7468bca69ba7d21e2fef4b72725b569c42dc79f19e24faa3e882deb591fce9b6f586902bd0d7d92be388b8c4639a6ad591c4fdb44bad920cfef6607
TLSH
T1D1B012A184016601C00302F51152148C71159F10A70A370943E4E9B3CC29562C015061
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cce54.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5cce54.TMP
Size 96B
SHA256 1bd41617703d2a4ccc804ce2e9cf2702642952c4557d9263ad3cba92b8f2c403
MD5 d909dc22d8d8050fa4f88eb388f7bf71
SHA1 38ef49933108d49ddac147e8aeb151f3ad18f138
SHA512 4956c77cda4f02af52eba8c407d93cec7a8a26054e9efec40fbb3c08e00feb3198ed254b5fe58c8506f973379470f00d3384e4f24689a5aabd00d61851a624b4
TLSH
T19EB00257C9036316C04343F0299D96EC7169DF25C603161692F05E67DC396654A3A970
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 e832c2a109aed1348ea28bd73aa5dae9f37d89f90aec17bc8b941e0b8f80b4ed
MD5 763bad16f77e2418c90349e4fdd3caba
SHA1 c518f2621470dd5261f9ec72e5f4613cba746881
SHA512 24cad399a6400db1b778043f63e394a4ab3f3df9b6bfbbcd5ec7e6f90e6903b03f2d511171548f156ce99e4b63c4c9c097f1c504badfccb4d3750db54a2d9a78
TLSH
T1CBB0220020000AE2EA033FF2ABC30CC83FB22C222383CA3B80E00800E8832838303200
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 120B
SHA256 3386aff1fe6f6f45bce223261f77b9f6b161cbd427e4ef41241f61b5ec6208cd
MD5 e872034af00f105ac9e5b75fda6a1e65
SHA1 cd25b6190b7093d14e7b1f4a55ae937e2cd994eb
SHA512 9552a001663406780535b255e650727b761fdcaf3a3139e9869ef36687ed09d26972a32fc3f28e1189cd8ecbf384982eb472b359c503636ff145dc890c7a65a1
TLSH
T198B0121015480E68DC0163F4C7C481C0230018B50307470700909444C4424C24601600
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 0c45e674dbbec8c60b0875327bd309b026b1536c57284d448ec4c7b18bcea6a4
MD5 739328eea2924801a49679915d8af383
SHA1 74984e11c9c2236ac25a2ec59f09647472fe112a
SHA512 42864ebb1696bbbb57b441cbec410593d8d89ebaf1934d9dbab9009460bfe71e1d092aac14464e801e87ebd009eb0483f603d2d9f668d1afa34e75ecb98d17d3
SSDEEP 6144:i77nFpWcl54fx2BIUm7Rkm1tYpBeh2BAoH:i3FBlSJC49oBGcAoH
TLSH
T1E63412169D36AC3AD8FFDB0BE05F196A0EF08FA39954DD61C8D0594672F6A8D0E00E35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 e662e77c81b25b841b6b96ad659521d20f86c7ea283ac28e919d85a994d6188c
MD5 b8f82fb3b3cf512bdae74d3c43512101
SHA1 bc77d090334f5cf3fad600114f6eca364fb65728
SHA512 441d8a0497ff35688cbae3b4e0d68abb0fe1498d11278133dfdadf6966dd56ab027260a01ca137fcbd3b6124a9c97cc14b211e1a581592cecc4170a122a4ce6e
SSDEEP 6144:h77nFpWcl54fx2BIUm7Rkm1tYpBeh2BAoH:h3FBlSJC49oBGcAoH
TLSH
T1603412169D36AC3AD8FFDB0BE05F186A0EF08FA399549D61C8D0594672F6A8D0E00E35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 462b6dbef34dfccc4cb8e219511cf164eef97919f6cab4de468ef9355fd81495
MD5 ef313dfe1164735778b1670932446002
SHA1 5e29e4eec193ce397fe2d12470ce54ee35c2d000
SHA512 a596400f2a0a095df2df1c1f27bd2cf199f9693d1e00bdc7ef442ad89304b354ef758513a1e5b9b30b86bb095d19dd82e18ef0ba2c936499e9e0346f0e2bcd81
SSDEEP 3072:ACGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:Sm7Rkm1tYpBeh2BAog
TLSH
T12FC3123B5E75EC3B5CB5A74EB48E0B1E2EF149A6C920DE92C8D85A0437F97CD0A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 242KB
SHA256 cc3b46e87eaf37dff7adf52e4e015565c90225c6678124c30bc969683f44ae70
MD5 a0d8e69cbf2503e8ac2dc4e2a8a9005d
SHA1 ca4b56b2eff03bf4ffdbc6085dc7d5edf9d15023
SHA512 d9f41092aa442745d7c4675e6cbb7e9e2b0f93d683b2253bfba44a9ffac24bb3979f7b4a8f449c02afd54cad5061e61390adc331caac5cd2789c40f9d31fa1d5
SSDEEP 6144:+777nFpWcl54fx2BIUm7Rkm1tYpBeh2BAoH:E3FBlSJC49oBGcAoH
TLSH
T13A3412269C36AC3AD9FFDF0FA01B182A0EF09B639954DD61D8D4594672FBA9D0E01D30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 241KB
SHA256 defc8f59cdfe3237528bffc07edc28ed06784293effd32ece8c40cc11ca444ef
MD5 23db5035ef528f60ec47f8d0c2c98d61
SHA1 546c8142af0a882a7d2c266f99bd79787af71201
SHA512 b0cf43018874199fbe9a023c9f9d1191add949f91a94c54e864a18d6e686998793bc42b6da0279392324c3c153dc29dc8f703baa0bfd309179d78b6cbe6f6905
SSDEEP 6144:u77nFpWcl54fx2BIUm7Rkm1tYpBeh2BAoH:u3FBlSJC49oBGcAoH
TLSH
T1763412169D36AC3AD8FFDB0BE05F186A0EF08FA399549D61C8D0594672F6A8D0E00E35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 242KB
SHA256 dcd4444c475fb835deabba43dbfaa180b786de376b1d7866d26fcfdb8aac262f
MD5 e9282fb363ce952d6a28b2a91c4ca2ba
SHA1 33551631a4b1e206fffc775c854f733bac3a2ad0
SHA512 b0f4d34e3cad7dcad9d0f124545d84b2943bc2a387dd983ac4403130f01636a7c79066a9df4fd82b43d9a2515fffd0e4b399b4b0dbd9e6f7e72ea56ab7660e9d
SSDEEP 6144:DK77nFpWcl54fx2BIUm7Rkm1tYpBeh2BAoH:m3FBlSJC49oBGcAoH
TLSH
T1B53412269C36AC3AD9FFDF0FA00B182A0EF09B639954DD61D8D4594672FBA9D0E01D30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 a0041dc3ce9cfb55262386f2c5481fcb16730c2945a126ffce5e2337f5a8c8b1
MD5 7c5e1b06d1abd45c8fef34918446a5eb
SHA1 79797d6a861a244ab35d7423bec0fb6ad8273dd7
SHA512 029b81453d313682a798322e5153dfb72362cc54ba4a6ca3db01a8c8d662457e7807184f4c64bc89283f6dc9d31843aa70004b5aeec56994a63f965958ef8407
SSDEEP 3:MsEllllkEthXllkl2zE/lJll:/M/xT02zEll
TLSH
T1804404047FC0140FCD0011344551D3503771D5104713D75734717C335CC5740CD05000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PANEL SOPRANOS.exe.log

Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\PANEL SOPRANOS.exe.log
Size 425B
SHA256 b8f7e4ed81764db56b9c09050f68c5a26af78d8a5e2443e75e0e1aa7cd2ccd76
MD5 fff5cbccb6b31b40f834b8f4778a779a
SHA1 899ed0377e89f1ed434cfeecc5bc0163ebdf0454
SHA512 1a188a14c667bc31d2651b220aa762be9cce4a75713217846fbe472a307c7bbc6e3c27617f75f489902a534d9184648d204d03ee956ac57b11aa90551248b8f9
TLSH
T15CE0AB702261E2D449023F54280D2A8443BF4729A620DE083494629FD8311230F212E7
MD5 SHA1 SHA512 TLSH

Submit Download

LOADER_PANEL.log

Path C:\Users\Admin\AppData\Local\Temp\LOADER_PANEL.log
Size 246B
SHA256 07438a1a97c09c04114ae649237ba3bd803fac598a7a1359ac4c29edf1ef6521
MD5 05cc828ffff198a183ce5eaeca6f2fe4
SHA1 02ce9b1cf7ef2ea0b158ca8931ae84b2fe9c57ee
SHA512 ed8c4fd99dc898ac64747619fea0ed1cae209f48bdcac53d8d07d6224d1bbf720225774c0156890019e7a462bb6d65535d031598016e84c78c396ac52233c033
TLSH
T150D0952C5160D3CC1473007D507146F00141D557753BC527217603CFF7257374B57859
MD5 SHA1 SHA512 TLSH

Submit Download

PANEL SOPRANOS.exe

Path C:\Users\Admin\Desktop\PANEL SOPRANOS.exe
Size 28.4MB
SHA256 1ed4d4ec9f8e94af013989631a6a4b11b5ec00d76000bb5f38efcd4a817b3d94
MD5 98c041bd3ebb34ad5678ebec677142f1
SHA1 9236a63e9259c64ebaeed5b1a6d930c749fefc49
SHA512 fba59693c0c82c449989cc82ff7535a472270a2911c4635021a5955ad856fc8717848643c17f528b7ad0f76daca45da896ec46f6a601679b4120572bed86f536
SSDEEP 393216:JzdVAx1T9TaHWsQYHfd5jKu2Ym932SyRl9A:DVA1GRfTKu2j9GSIl9A
TLSH
T13F674A0263ECBDD4E1729634E73783F1CB7DFC259611C20F0594F94A3A7A942B9663A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PANEL SOPRANOS.rar

Path C:\Users\Admin\Desktop\PANEL SOPRANOS.rar
Size 9.1MB
SHA256 61ae95b4159713b5266c2bd485215a41a7692c8e0ec15064bff5084e0f8b9ec1
MD5 7766d476fb5e9e43b8112664df0dd1f1
SHA1 36c6fabd2e6849e83d0ceb371130fabb2910e2cb
SHA512 b0512fad2778c21dc3fc99f97139f3ee4573f05ca57b7fb67d339ea4acb2adf4a53c23b449153d495f44ec5da0080f5d623d59ee9e4f9e53460bed5f58f4676a
SSDEEP 196608:jcXwse94fMZfyUmewG4/UZ3g64+uIAORa/IvWhYKhCLdyyruv:jcXwsgp4/aQ64+u/ORuIvcTyK
TLSH
T1B1A6332352BC445D94250BA4DE017597FB7BE4446C0E359FCB2C233BAF3A9610AD98AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/5012-3-0x000002848FE10000-0x000002848FE20000-memory.dmp

Download

memory/5012-0-0x000002848C590000-0x000002848E202000-memory.dmp

Download