Overview

overview

9

Static

static

1

URLScan

urlscan

1

https://tria.ge/subm...

windows10-2004-x64

9

Analysis

  • geolocation tags

    eueuropelondonukunited-kingdom
  • user interaction
    yes
  • max time kernel
    353s
  • max time network
    355s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-it
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-itlocale:it-itos:windows10-2004-x64systemwindows
  • submitted
    22/09/2026, 17:34

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    https://tria.ge/submit/file
  • Sample260922-v5pcxaxtcx
Score
9/10
defense_evasiondiscoverypersistenceransomwarespywaretrojan

Malware Config

Signatures

  • Renames multiple (6113) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

    ransomware
  • Downloads MZ/PE file 1 IoCs
  • Checks computer location settings 2 TTPs 4 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 28 IoCs
  • Loads dropped DLL 64 IoCs
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in System32 directory 10 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies trusted root certificate store through registry 1 TTPs 2 IoCs

    A root certificate was added, modified, or removed in the trusted certificate store registry paths.

    defense_evasion
  • System Location Discovery: System Language Discovery 1 TTPs 13 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 5 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 7 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 17 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 15 IoCs
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 60 IoCs
  • Modifies system certificate store 2 TTPs 6 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://tria.ge/submit/file
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4260
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffb8a85c728,0x7ffb8a85c734,0x7ffb8a85c740
      2⤵
        PID:8
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1640,i,17395372311059188619,6253600419164570601,262144 --field-trial-handle=2016,i,15735667322016558872,3005017377814037860,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2012 /prefetch:2
        2⤵
          PID:4116
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=it --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1568,i,16752204780683055385,9415137279347479405,524288 --field-trial-handle=2016,i,15735667322016558872,3005017377814037860,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2216 /prefetch:3
          2⤵
          • System Time Discovery
          PID:2560
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=it --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2364,i,1108724700309634118,5174506688783635846,524288 --field-trial-handle=2016,i,15735667322016558872,3005017377814037860,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2272 /prefetch:8
          2⤵
            PID:4332
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3200,i,9243155359460082573,16989077385589656308,2097152 --field-trial-handle=2016,i,15735667322016558872,3005017377814037860,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3228 /prefetch:1
            2⤵
              PID:1436
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3204,i,16851129570772561768,4453403809870392653,2097152 --field-trial-handle=2016,i,15735667322016558872,3005017377814037860,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3284 /prefetch:1
              2⤵
                PID:4216
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4500,i,13146838840421919672,5562028358271361579,2097152 --field-trial-handle=2016,i,15735667322016558872,3005017377814037860,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4456 /prefetch:1
                2⤵
                  PID:4400
              • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                1⤵
                  PID:940
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefaulteab02ad5hf360h459ahac24h5eddadbc740e
                  1⤵
                  • Suspicious use of WriteProcessMemory
                  PID:3956
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefaulteab02ad5hf360h459ahac24h5eddadbc740e --edge-skip-compat-layer-relaunch
                    2⤵
                    • Enumerates system info in registry
                    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                    • Suspicious use of WriteProcessMemory
                    PID:1048
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x238,0x23c,0x230,0x2f0,0x7ffb8802c188,0x7ffb8802c194,0x7ffb8802c1a0
                      3⤵
                        PID:4160
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=it --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1740,i,3304954851920726537,9143012391507020602,524288 --field-trial-handle=2476,i,9457244934429207295,8951200708502409313,262144 --variations-seed-version --mojo-platform-channel-handle=2508 /prefetch:3
                        3⤵
                        • System Time Discovery
                        PID:4200
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=it --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2304,i,10992774750654813989,5274213876588267712,524288 --field-trial-handle=2476,i,9457244934429207295,8951200708502409313,262144 --variations-seed-version --mojo-platform-channel-handle=2516 /prefetch:8
                        3⤵
                          PID:2216
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1612,i,7026261635347550691,877437961688146601,262144 --field-trial-handle=2476,i,9457244934429207295,8951200708502409313,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:2
                          3⤵
                            PID:1592
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3160,i,1209054856239422133,15035304869890947231,2097152 --field-trial-handle=2476,i,9457244934429207295,8951200708502409313,262144 --variations-seed-version --mojo-platform-channel-handle=3384 /prefetch:2
                            3⤵
                              PID:5004
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                          1⤵
                            PID:5476
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --default-search-provider=? --out-pipe-name=MSEdgeDefault55ede88fhe47ch42e2hbfcfhbfb83578b954
                            1⤵
                            • Enumerates system info in registry
                            • Suspicious use of WriteProcessMemory
                            PID:3376
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x254,0x258,0x25c,0x250,0x27c,0x7ffb8802c188,0x7ffb8802c194,0x7ffb8802c1a0
                              2⤵
                                PID:1680
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=it --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1912,i,2692522312288925080,13227719908394766587,524288 --field-trial-handle=2332,i,1649975241984625051,17024992500366557676,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:3
                                2⤵
                                • System Time Discovery
                                PID:5564
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,7923222163182090469,9385134462121920852,262144 --field-trial-handle=2332,i,1649975241984625051,17024992500366557676,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
                                2⤵
                                  PID:5572
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=it --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2220,i,5462325915278134351,4202366449807849160,524288 --field-trial-handle=2332,i,1649975241984625051,17024992500366557676,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:8
                                  2⤵
                                    PID:5620
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                  1⤵
                                    PID:4048
                                  • C:\Windows\system32\taskmgr.exe
                                    "C:\Windows\system32\taskmgr.exe" /4
                                    1⤵
                                    • Checks SCSI registry key(s)
                                    • Checks processor information in registry
                                    • Suspicious behavior: EnumeratesProcesses
                                    • Suspicious use of AdjustPrivilegeToken
                                    • Suspicious use of FindShellTrayWindow
                                    • Suspicious use of SendNotifyMessage
                                    PID:5440
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                    1⤵
                                    • Checks processor information in registry
                                    • Enumerates system info in registry
                                    • Modifies data under HKEY_USERS
                                    • Modifies registry class
                                    • Suspicious behavior: EnumeratesProcesses
                                    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                    • Suspicious use of AdjustPrivilegeToken
                                    • Suspicious use of WriteProcessMemory
                                    PID:6116
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0x9c,0x124,0x7ffb8a85c728,0x7ffb8a85c734,0x7ffb8a85c740
                                      2⤵
                                        PID:2772
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1760,i,581979565082969752,1968416931928492091,262144 --field-trial-handle=1964,i,7323636410674818673,8537911863923984091,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1960 /prefetch:2
                                        2⤵
                                          PID:1272
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=it --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2136,i,16334232896475218247,18082444866036804282,524288 --field-trial-handle=1964,i,7323636410674818673,8537911863923984091,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2132 /prefetch:3
                                          2⤵
                                          • Downloads MZ/PE file
                                          • System Time Discovery
                                          PID:5844
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=it --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2304,i,7086500107520657600,11756650137438860023,524288 --field-trial-handle=1964,i,7323636410674818673,8537911863923984091,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2532 /prefetch:8
                                          2⤵
                                            PID:776
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3248,i,5609640712951534895,8397383537746658754,2097152 --field-trial-handle=1964,i,7323636410674818673,8537911863923984091,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3260 /prefetch:1
                                            2⤵
                                              PID:4212
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3268,i,4039512527390869293,8002246812484812228,2097152 --field-trial-handle=1964,i,7323636410674818673,8537911863923984091,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3300 /prefetch:1
                                              2⤵
                                                PID:5640
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4592,i,15853734592595458501,6637933931504716421,2097152 --field-trial-handle=1964,i,7323636410674818673,8537911863923984091,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4328 /prefetch:1
                                                2⤵
                                                  PID:5912
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4748,i,3175231926822443587,17812834176370985785,524288 --field-trial-handle=1964,i,7323636410674818673,8537911863923984091,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4732 /prefetch:8
                                                  2⤵
                                                    PID:5444
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=it --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5324,i,17560412637831808730,7556679239187469161,524288 --field-trial-handle=1964,i,7323636410674818673,8537911863923984091,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5156 /prefetch:8
                                                    2⤵
                                                      PID:6104
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=it --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5412,i,2050799703298669019,17654071680012627257,524288 --field-trial-handle=1964,i,7323636410674818673,8537911863923984091,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5424 /prefetch:8
                                                      2⤵
                                                        PID:5472
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=it --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5420,i,12797401085268047535,11245481190919049280,524288 --field-trial-handle=1964,i,7323636410674818673,8537911863923984091,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5368 /prefetch:8
                                                        2⤵
                                                          PID:5460
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5372,i,9720252234216669921,3360231214678733843,524288 --field-trial-handle=1964,i,7323636410674818673,8537911863923984091,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5824 /prefetch:8
                                                          2⤵
                                                            PID:312
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5356,i,15872371512556267562,14078901735632315618,2097152 --field-trial-handle=1964,i,7323636410674818673,8537911863923984091,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5896 /prefetch:1
                                                            2⤵
                                                              PID:1252
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5800,i,4923426121466090485,4314088708364915180,2097152 --field-trial-handle=1964,i,7323636410674818673,8537911863923984091,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5796 /prefetch:2
                                                              2⤵
                                                                PID:5176
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5536,i,2647615641921825882,11091283252391415967,2097152 --field-trial-handle=1964,i,7323636410674818673,8537911863923984091,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4460 /prefetch:1
                                                                2⤵
                                                                  PID:4152
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=3400,i,13652658262878171157,3301401072599761118,2097152 --field-trial-handle=1964,i,7323636410674818673,8537911863923984091,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3420 /prefetch:1
                                                                  2⤵
                                                                    PID:5424
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6184,i,17577930321497872661,14352847930440702535,2097152 --field-trial-handle=1964,i,7323636410674818673,8537911863923984091,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3264 /prefetch:1
                                                                    2⤵
                                                                      PID:3764
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6052,i,10856633575990486990,11707090049892494203,2097152 --field-trial-handle=1964,i,7323636410674818673,8537911863923984091,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6080 /prefetch:1
                                                                      2⤵
                                                                        PID:6040
                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=it --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5828,i,9311947376202435845,3267909195564773313,524288 --field-trial-handle=1964,i,7323636410674818673,8537911863923984091,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3316 /prefetch:8
                                                                        2⤵
                                                                          PID:6080
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=it --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3500,i,13812542787718754068,2053177348054869414,524288 --field-trial-handle=1964,i,7323636410674818673,8537911863923984091,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3944 /prefetch:8
                                                                          2⤵
                                                                            PID:5104
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=it --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3320,i,9323872708412528956,12289160836828923922,524288 --field-trial-handle=1964,i,7323636410674818673,8537911863923984091,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3452 /prefetch:8
                                                                            2⤵
                                                                              PID:5820
                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=it --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3460,i,600102894587796763,9297259757095433633,524288 --field-trial-handle=1964,i,7323636410674818673,8537911863923984091,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3476 /prefetch:8
                                                                              2⤵
                                                                                PID:2324
                                                                              • C:\Users\Admin\Downloads\SteamSetup.exe
                                                                                "C:\Users\Admin\Downloads\SteamSetup.exe"
                                                                                2⤵
                                                                                • Executes dropped EXE
                                                                                • Loads dropped DLL
                                                                                • Adds Run key to start application
                                                                                • System Location Discovery: System Language Discovery
                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                PID:6056
                                                                                • C:\Program Files (x86)\Steam\bin\steamservice.exe
                                                                                  "C:\Program Files (x86)\Steam\bin\steamservice.exe" /Install
                                                                                  3⤵
                                                                                  • Executes dropped EXE
                                                                                  • System Location Discovery: System Language Discovery
                                                                                  • Modifies registry class
                                                                                  PID:5752
                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1272,i,11857669426977374453,43101879130815645,262144 --field-trial-handle=1964,i,7323636410674818673,8537911863923984091,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4900 /prefetch:8
                                                                                2⤵
                                                                                  PID:5688
                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=it --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=3288,i,17268321109633904,6400815598909932564,524288 --field-trial-handle=1964,i,7323636410674818673,8537911863923984091,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4256 /prefetch:8
                                                                                  2⤵
                                                                                    PID:6984
                                                                                • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                  1⤵
                                                                                    PID:3712
                                                                                  • C:\Windows\system32\svchost.exe
                                                                                    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                    1⤵
                                                                                      PID:4392
                                                                                    • C:\Program Files (x86)\Steam\Steam.exe
                                                                                      "C:\Program Files (x86)\Steam\steam.exe" -silent
                                                                                      1⤵
                                                                                      • Executes dropped EXE
                                                                                      • Drops file in Program Files directory
                                                                                      • Modifies trusted root certificate store through registry
                                                                                      • System Location Discovery: System Language Discovery
                                                                                      • Checks processor information in registry
                                                                                      • Modifies system certificate store
                                                                                      PID:3848
                                                                                      • C:\Program Files (x86)\Steam\Steam.exe
                                                                                        "C:\Program Files (x86)\Steam\Steam.exe" -silent
                                                                                        2⤵
                                                                                        • Executes dropped EXE
                                                                                        • Loads dropped DLL
                                                                                        • Drops file in Program Files directory
                                                                                        • System Location Discovery: System Language Discovery
                                                                                        • Checks processor information in registry
                                                                                        PID:7660
                                                                                        • C:\Program Files (x86)\Steam\Steam.exe
                                                                                          "C:\Program Files (x86)\Steam\Steam.exe" -silent
                                                                                          3⤵
                                                                                          • Executes dropped EXE
                                                                                          • Loads dropped DLL
                                                                                          • Drops file in Windows directory
                                                                                          • Checks SCSI registry key(s)
                                                                                          • Checks processor information in registry
                                                                                          • Suspicious behavior: GetForegroundWindowSpam
                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                          PID:7340
                                                                                          • C:\Program Files (x86)\Steam\steamsysinfo.exe
                                                                                            "C:\Program Files (x86)\Steam\steamsysinfo.exe" -steamid 0 -buildid 1788652215 -logdir "C:\Program Files (x86)\Steam\logs" -nocrashdialog -query 1 -out-file C:\Users\Admin\AppData\Local\Temp\7883.tmp
                                                                                            4⤵
                                                                                            • Executes dropped EXE
                                                                                            • Loads dropped DLL
                                                                                            PID:4416
                                                                                          • C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
                                                                                            "C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe" -nocrashdialog "-lang=it_IT" "-cachedir=C:\Users\Admin\AppData\Local\Steam\htmlcache" "-steampid=7340" "-buildid=1788652215" "-steamid=0" "-logdir=C:\Program Files (x86)\Steam\logs" "-uimode=7" "-startcount=0" "-steamuniverse=Public" "-realm=Global" "-clientui=C:\Program Files (x86)\Steam\clientui" "-steampath=C:\Program Files (x86)\Steam\Steam.exe" "-launcher=0" --valve-enable-site-isolation --enable-smooth-scrolling "--log-file=C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-quick-menu --disable-component-update "--gaia-url=http://disabled.invalid" "--enable-features=PlatformHEVCDecoderSupport" "--disable-features=WinRetrieveSuggestionsOnlyOnDemand,SpareRendererForSitePerProcess,DcheckIsFatal,BlockPromptsIfIgnoredOften,WebUsbDeviceDetection,ValveFFmpegAllowLowDelayHEVC"
                                                                                            4⤵
                                                                                            • Checks computer location settings
                                                                                            • Executes dropped EXE
                                                                                            • Loads dropped DLL
                                                                                            • Checks processor information in registry
                                                                                            • Enumerates system info in registry
                                                                                            PID:1948
                                                                                            • C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
                                                                                              "C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe" --type=gpu-process --start-stack-profiler --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --user-agent-product="Valve Steam Client" --buildid=1788652215 --steamid=0 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1892,i,14871622387304019814,3721121774350020793,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BlockPromptsIfIgnoredOften,DcheckIsFatal,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC,WebUsbDeviceDetection,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --enable-logging=handle --log-file=1336 --mojo-platform-channel-handle=1888 /prefetch:2
                                                                                              5⤵
                                                                                              • Executes dropped EXE
                                                                                              • Loads dropped DLL
                                                                                              PID:3108
                                                                                            • C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
                                                                                              "C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=it --service-sandbox-type=none --start-stack-profiler --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --user-agent-product="Valve Steam Client" --buildid=1788652215 --steamid=0 --field-trial-handle=2236,i,14871622387304019814,3721121774350020793,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BlockPromptsIfIgnoredOften,DcheckIsFatal,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC,WebUsbDeviceDetection,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --enable-logging=handle --log-file=2248 --mojo-platform-channel-handle=2244 /prefetch:3
                                                                                              5⤵
                                                                                              • Executes dropped EXE
                                                                                              • Loads dropped DLL
                                                                                              • System Time Discovery
                                                                                              PID:5944
                                                                                            • C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
                                                                                              "C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=it --service-sandbox-type=service --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --user-agent-product="Valve Steam Client" --buildid=1788652215 --steamid=0 --field-trial-handle=2336,i,14871622387304019814,3721121774350020793,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BlockPromptsIfIgnoredOften,DcheckIsFatal,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC,WebUsbDeviceDetection,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --enable-logging=handle --log-file=2352 --mojo-platform-channel-handle=2348 /prefetch:8
                                                                                              5⤵
                                                                                              • Executes dropped EXE
                                                                                              • Loads dropped DLL
                                                                                              PID:7600
                                                                                            • C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
                                                                                              "C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe" --type=renderer --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --user-agent-product="Valve Steam Client" --buildid=1788652215 --steamid=0 --gaia-url=http://disabled.invalid --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=4104,i,14871622387304019814,3721121774350020793,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BlockPromptsIfIgnoredOften,DcheckIsFatal,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC,WebUsbDeviceDetection,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --enable-logging=handle --log-file=4160 --mojo-platform-channel-handle=4156 /prefetch:1
                                                                                              5⤵
                                                                                              • Checks computer location settings
                                                                                              • Executes dropped EXE
                                                                                              PID:8256
                                                                                            • C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
                                                                                              "C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=it --service-sandbox-type=none --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --user-agent-product="Valve Steam Client" --buildid=1788652215 --steamid=0 --field-trial-handle=4780,i,14871622387304019814,3721121774350020793,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BlockPromptsIfIgnoredOften,DcheckIsFatal,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC,WebUsbDeviceDetection,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --enable-logging=handle --log-file=4852 --mojo-platform-channel-handle=4848 /prefetch:8
                                                                                              5⤵
                                                                                              • Executes dropped EXE
                                                                                              PID:6756
                                                                                            • C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
                                                                                              "C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe" --type=renderer --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --user-agent-product="Valve Steam Client" --buildid=1788652215 --steamid=0 --gaia-url=http://disabled.invalid --disable-gpu-compositing --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=5084,i,14871622387304019814,3721121774350020793,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BlockPromptsIfIgnoredOften,DcheckIsFatal,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC,WebUsbDeviceDetection,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --enable-logging=handle --log-file=4868 --mojo-platform-channel-handle=4816 /prefetch:1
                                                                                              5⤵
                                                                                              • Checks computer location settings
                                                                                              • Executes dropped EXE
                                                                                              PID:5800
                                                                                            • C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
                                                                                              "C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe" --type=renderer --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --user-agent-product="Valve Steam Client" --buildid=1788652215 --steamid=0 --gaia-url=http://disabled.invalid --disable-gpu-compositing --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=5188,i,14871622387304019814,3721121774350020793,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BlockPromptsIfIgnoredOften,DcheckIsFatal,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC,WebUsbDeviceDetection,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --enable-logging=handle --log-file=5088 --mojo-platform-channel-handle=5220 /prefetch:1
                                                                                              5⤵
                                                                                              • Checks computer location settings
                                                                                              • Executes dropped EXE
                                                                                              PID:6228
                                                                                            • C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
                                                                                              "C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=it --service-sandbox-type=audio --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --user-agent-product="Valve Steam Client" --buildid=1788652215 --steamid=0 --field-trial-handle=5384,i,14871622387304019814,3721121774350020793,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BlockPromptsIfIgnoredOften,DcheckIsFatal,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC,WebUsbDeviceDetection,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --enable-logging=handle --log-file=5456 --mojo-platform-channel-handle=5452 /prefetch:8
                                                                                              5⤵
                                                                                              • Executes dropped EXE
                                                                                              PID:6732
                                                                                            • C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
                                                                                              "C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=it --service-sandbox-type=none --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --user-agent-product="Valve Steam Client" --buildid=1788652215 --steamid=0 --field-trial-handle=5424,i,14871622387304019814,3721121774350020793,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BlockPromptsIfIgnoredOften,DcheckIsFatal,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC,WebUsbDeviceDetection,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --enable-logging=handle --log-file=5584 --mojo-platform-channel-handle=5580 /prefetch:8
                                                                                              5⤵
                                                                                              • Executes dropped EXE
                                                                                              • Modifies registry class
                                                                                              PID:6792
                                                                                          • C:\Program Files (x86)\Steam\bin\gldriverquery64.exe
                                                                                            .\bin\gldriverquery64.exe
                                                                                            4⤵
                                                                                            • Executes dropped EXE
                                                                                            PID:8848
                                                                                          • C:\Program Files (x86)\Steam\bin\gldriverquery.exe
                                                                                            .\bin\gldriverquery.exe
                                                                                            4⤵
                                                                                            • Executes dropped EXE
                                                                                            • System Location Discovery: System Language Discovery
                                                                                            PID:8816
                                                                                          • C:\Program Files (x86)\Steam\bin\vulkandriverquery64.exe
                                                                                            .\bin\vulkandriverquery64.exe
                                                                                            4⤵
                                                                                            • Executes dropped EXE
                                                                                            PID:8508
                                                                                          • C:\Program Files (x86)\Steam\bin\vulkandriverquery.exe
                                                                                            .\bin\vulkandriverquery.exe
                                                                                            4⤵
                                                                                            • Executes dropped EXE
                                                                                            • System Location Discovery: System Language Discovery
                                                                                            PID:6288
                                                                                    • C:\Program Files (x86)\Common Files\Steam\steamservice.exe
                                                                                      "C:\Program Files (x86)\Common Files\Steam\steamservice.exe" /RunAsService
                                                                                      1⤵
                                                                                      • Executes dropped EXE
                                                                                      • System Location Discovery: System Language Discovery
                                                                                      PID:5872
                                                                                    • C:\Program Files (x86)\Steam\Steam.exe
                                                                                      "C:\Program Files (x86)\Steam\Steam.exe"
                                                                                      1⤵
                                                                                      • Executes dropped EXE
                                                                                      • System Location Discovery: System Language Discovery
                                                                                      PID:5736
                                                                                    • C:\Program Files (x86)\Steam\Steam.exe
                                                                                      "C:\Program Files (x86)\Steam\Steam.exe"
                                                                                      1⤵
                                                                                      • Executes dropped EXE
                                                                                      • System Location Discovery: System Language Discovery
                                                                                      PID:4320
                                                                                    • C:\Program Files (x86)\Steam\Steam.exe
                                                                                      "C:\Program Files (x86)\Steam\Steam.exe"
                                                                                      1⤵
                                                                                      • Executes dropped EXE
                                                                                      • System Location Discovery: System Language Discovery
                                                                                      PID:3736
                                                                                    • C:\Program Files (x86)\Steam\steam.exe
                                                                                      "C:\Program Files (x86)\Steam\steam.exe"
                                                                                      1⤵
                                                                                      • Executes dropped EXE
                                                                                      • System Location Discovery: System Language Discovery
                                                                                      PID:2208
                                                                                    • C:\Program Files (x86)\Common Files\Steam\steamservice.exe
                                                                                      "C:\Program Files (x86)\Common Files\Steam\steamservice.exe" /RunAsService
                                                                                      1⤵
                                                                                      • Executes dropped EXE
                                                                                      • Drops file in System32 directory
                                                                                      • System Location Discovery: System Language Discovery
                                                                                      • Checks processor information in registry
                                                                                      • Modifies data under HKEY_USERS
                                                                                      • Modifies system certificate store
                                                                                      PID:5628
                                                                                      • C:\Program Files (x86)\Common Files\Steam\SteamServiceTmp.exe
                                                                                        "C:\Program Files (x86)\Common Files\Steam\SteamServiceTmp.exe" /Update
                                                                                        2⤵
                                                                                        • Executes dropped EXE
                                                                                        PID:8020
                                                                                    • C:\Program Files (x86)\Common Files\Steam\steamservice.exe
                                                                                      "C:\Program Files (x86)\Common Files\Steam\steamservice.exe" /RunAsService
                                                                                      1⤵
                                                                                      • Executes dropped EXE
                                                                                      • Loads dropped DLL
                                                                                      • System Location Discovery: System Language Discovery
                                                                                      • Checks processor information in registry
                                                                                      • Modifies data under HKEY_USERS
                                                                                      • Modifies registry class
                                                                                      PID:8060
                                                                                    • C:\Windows\system32\AUDIODG.EXE
                                                                                      C:\Windows\system32\AUDIODG.EXE 0x4e8 0x4a0
                                                                                      1⤵
                                                                                        PID:8348
                                                                                      • C:\Windows\system32\svchost.exe
                                                                                        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                        1⤵
                                                                                          PID:6812

                                                                                        Network

                                                                                              MITRE ATT&CK Enterprise v16

                                                                                              Replay Monitor

                                                                                              Loading Replay Monitor...

                                                                                              Downloads

                                                                                              SteamService.dll
                                                                                              • Path C:\Program Files (x86)\Common Files\Steam\SteamService.dll
                                                                                              • Size 3.6MB
                                                                                              • SHA256 feaec497b4ba572cd1a9d4ba9c4dd9e1952d3d9c71e50476103f76b2bbff7a82
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              SteamServiceTmp.exe
                                                                                              • Path C:\Program Files (x86)\Common Files\Steam\SteamServiceTmp.exe
                                                                                              • Size 2.8MB
                                                                                              • SHA256 6c451a0cddaf71816c09e268237f8226fe32dfc1e36ce0229c5b1f425fdc8b62
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              cpuidsdk.dll
                                                                                              • Path C:\Program Files (x86)\Common Files\Steam\cpuidsdk.dll
                                                                                              • Size 3.4MB
                                                                                              • SHA256 2c74ce7eae980c664760f0b0cf5e9852de9823e8a7b9dcdb4f6c30a5015755e8
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              crashhandler.dll
                                                                                              • Path C:\Program Files (x86)\Common Files\Steam\crashhandler.dll
                                                                                              • Size 400KB
                                                                                              • SHA256 52c97930f1106e08fe89909ba817992de43949ed3aaaeeec133e34d79748320c
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              drivers.exe
                                                                                              • Path C:\Program Files (x86)\Common Files\Steam\drivers.exe
                                                                                              • Size 7.1MB
                                                                                              • SHA256 06099ff2cd3c07315e1d47d1e6c1bb7caa6166c079af2265674f0dce3a2e8294
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              secure_desktop_capture.exe
                                                                                              • Path C:\Program Files (x86)\Common Files\Steam\secure_desktop_capture.exe
                                                                                              • Size 3.7MB
                                                                                              • SHA256 c533d27c7f93961f42a6b929040d069cf02c63c73e57fbfa7d8eb4167a9adb85
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              service_default_Public_versions.vdf
                                                                                              • Path C:\Program Files (x86)\Common Files\Steam\service_default_Public_versions.vdf
                                                                                              • Size 808B
                                                                                              • SHA256 54210727dcdbd91379e4126f6b335f807b2c85d78f26821267eee6250d66bfdd
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              service_minimum_versions.vdf
                                                                                              • Path C:\Program Files (x86)\Common Files\Steam\service_minimum_versions.vdf
                                                                                              • Size 727B
                                                                                              • SHA256 a75ecb06d45017d2289ec27dac9f418c6ef82a9352e012670a0c67161c25c52c
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              steamerrorreporter.exe
                                                                                              • Path C:\Program Files (x86)\Common Files\Steam\steamerrorreporter.exe
                                                                                              • Size 690KB
                                                                                              • SHA256 d3b3410479139d0d0dfac0d8dfa4fb21a3da071bd4f9b8c8325f1a03ff48d237
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              steamxboxutil64.exe
                                                                                              • Path C:\Program Files (x86)\Common Files\Steam\steamxboxutil64.exe
                                                                                              • Size 751KB
                                                                                              • SHA256 4a09ae928c12cb291bd23e1dc4700f69462f64416fc4d05a48092cb4554a25f5
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              Steam.exe
                                                                                              • Path C:\Program Files (x86)\Steam\Steam.exe
                                                                                              • Size 4.2MB
                                                                                              • SHA256 12222b0908eb69581985f7e04aa6240e928fb08aa5a3ec36acae3440633c9eb1
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              config.vdf
                                                                                              • Path C:\Program Files (x86)\Steam\config\config.vdf
                                                                                              • Size 20KB
                                                                                              • SHA256 b9e58599197408ef6c22579d49f866d4f98514008effcc4f3728815e63c4600b
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              config.vdf
                                                                                              • Path C:\Program Files (x86)\Steam\config\config.vdf
                                                                                              • Size 18KB
                                                                                              • SHA256 a97956b3d02f0742cd92460fcf17a2326dd1146723a345b3987440337a868789
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              config.vdf
                                                                                              • Path C:\Program Files (x86)\Steam\config\config.vdf
                                                                                              • Size 1KB
                                                                                              • SHA256 8f9f970835f133258a7f740126012439385bbaa5a1d6a9d0d967a390977441c3
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              config.vdf~RFe5c9998.TMP
                                                                                              • Path C:\Program Files (x86)\Steam\config\config.vdf~RFe5c9998.TMP
                                                                                              • Size 1KB
                                                                                              • SHA256 f3847b5e4a40d9cf76df35398bb555117dfe3626c00a91f2babdedb619d6ad53
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              btnOvrOffBottom.tga_
                                                                                              • Path C:\Program Files (x86)\Steam\package\tmp\graphics\btnOvrOffBottom.tga_
                                                                                              • Size 444B
                                                                                              • SHA256 ecd13153d9d438809a38de30f3abbb0f6f92837a7e3cacb442a9a9309bcd78d9
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              [email protected]_
                                                                                              • Path C:\Program Files (x86)\Steam\package\tmp\graphics\[email protected]_
                                                                                              • Size 6KB
                                                                                              • SHA256 5afc5816946e0d7b6d57a99a60be71d9e88670d9a63c18e249c9266d8e95cd2f
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              cloud_localfiles.tga_
                                                                                              • Path C:\Program Files (x86)\Steam\package\tmp\graphics\cloud_localfiles.tga_
                                                                                              • Size 14KB
                                                                                              • SHA256 c7a1b0021d1f943e497c592d83050ac85a3b93aff732f9b94cd26d9c41b37ca3
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              [email protected]_
                                                                                              • Path C:\Program Files (x86)\Steam\package\tmp\graphics\[email protected]_
                                                                                              • Size 15KB
                                                                                              • SHA256 983aa3928f15f5154266be7063a75e1fce87238bbe81a910219dea01d5376824
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              [email protected]_
                                                                                              • Path C:\Program Files (x86)\Steam\package\tmp\graphics\[email protected]_
                                                                                              • Size 92KB
                                                                                              • SHA256 e0ce36b93ae67846424364085ad79ee24fe5c036e5f6a78a4acbe1583f22daab
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              icon_button_news_mousedown.tga_
                                                                                              • Path C:\Program Files (x86)\Steam\package\tmp\graphics\icon_button_news_mousedown.tga_
                                                                                              • Size 20KB
                                                                                              • SHA256 cab3a68b64d8bf22c44080f12d7eab5b281102a8761f804224074ab1f6130fe2
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              tabStdBottom.tga_
                                                                                              • Path C:\Program Files (x86)\Steam\package\tmp\graphics\tabStdBottom.tga_
                                                                                              • Size 48B
                                                                                              • SHA256 5caa5fa3e79dcd8ec5ec20256ed7c77efaae77e0ae8d89e4a974c484cb177d84
                                                                                              • MD5 SHA1 SHA512
                                                                                              Submit Download

                                                                                              steam_cloudsync.ico_
                                                                                              • Path C:\Program Files (x86)\Steam\package\tmp\public\steam_cloudsync.ico_
                                                                                              • Size 47KB
                                                                                              • SHA256 5aaca90948de8f7d11264ed608a2f96acba061e6463d337d658b00ed1c552449
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              steam_cloudsync_posix.tga_
                                                                                              • Path C:\Program Files (x86)\Steam\package\tmp\public\steam_cloudsync_posix.tga_
                                                                                              • Size 64KB
                                                                                              • SHA256 fd2abb8945c06a6b9c5444baf6ea523b52bf7a03a58b34ebe0a6a110630ed5f8
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              steam_tray.tga_
                                                                                              • Path C:\Program Files (x86)\Steam\package\tmp\public\steam_tray.tga_
                                                                                              • Size 1KB
                                                                                              • SHA256 f747d5fd27e74412be05bb376c0ff12fcebb7f39c158eaa89ab6a0a9d92ef3b6
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              filter_clean_bulgarian.txt.gz_
                                                                                              • Path C:\Program Files (x86)\Steam\package\tmp\resource\filter_clean_bulgarian.txt.gz_
                                                                                              • Size 23B
                                                                                              • SHA256 6feb83ca306745d634903cf09274b7baf0ac38e43c6b3fab1a608be344c3ef64
                                                                                              • MD5 SHA1 SHA512
                                                                                              Submit Download

                                                                                              filter_clean_schinese.txt.gz_
                                                                                              • Path C:\Program Files (x86)\Steam\package\tmp\resource\filter_clean_schinese.txt.gz_
                                                                                              • Size 33B
                                                                                              • SHA256 77f0055faba992867817c485930c5f60cf64e65c65b410128426dc35fd8d862b
                                                                                              • MD5 SHA1 SHA512
                                                                                              Submit Download

                                                                                              game_details_header_green.tga_
                                                                                              • Path C:\Program Files (x86)\Steam\package\tmp\steam\cached\game_details_header_green.tga_
                                                                                              • Size 2.1MB
                                                                                              • SHA256 a24832de8b80e206143170a899ab91e76e85685aed74963fe2f490344bbf6427
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              settings.dat
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                                                                              • Size 40B
                                                                                              • SHA256 a6249f26f37b42a8aab1c42bcd8d2d1ed0465e9642dfcd70d03e3935cdfab2ce
                                                                                              • MD5 SHA1 SHA512
                                                                                              Submit Download

                                                                                              1687378f-f2a2-4e32-a861-cc3bd362121a.tmp
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\1687378f-f2a2-4e32-a861-cc3bd362121a.tmp
                                                                                              • Size 12KB
                                                                                              • SHA256 a8878cc9a76918193c3de1b1bf880480371fd0dc53bdbac9a16ece8b1327f3ca
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              BookmarkMergedSurfaceOrdering
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                              • Size 6B
                                                                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                              • MD5 SHA1 SHA512
                                                                                              Submit Download

                                                                                              BrowsingTopicsState
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                              • Size 649B
                                                                                              • SHA256 c190264e8f6f9776839ab1b5fbdfc9d60205060baa2c4c32542f3c848a3333c9
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              the-real-index
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                              • Size 2KB
                                                                                              • SHA256 86cd0342f30b2d228fdc98c3c8d8917079b22bcb2fad35e20f81ae8b76611551
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              the-real-index
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                              • Size 240B
                                                                                              • SHA256 ee0a6996207bf596b6b2629eded23f2693a5a2116a6af20281a3905a18c047f0
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              data_1
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnGraphiteCache\data_1
                                                                                              • Size 264KB
                                                                                              • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                              Submit Download

                                                                                              messages.json
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en_GB\messages.json
                                                                                              • Size 593B
                                                                                              • SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              craw_background.js
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
                                                                                              • Size 531KB
                                                                                              • SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              Favicons
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Favicons
                                                                                              • Size 20KB
                                                                                              • SHA256 b212e48632a25d0628310b988ed9d7f391e43a1da434f1f92250d44e57803311
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              History
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History
                                                                                              • Size 160KB
                                                                                              • SHA256 f893e333ca723de5ea2f1db61007d918ef98ef9cee644572aeda3a2856d9bf88
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              000003.log
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
                                                                                              • Size 146B
                                                                                              • SHA256 551cde4ab32ff260ae726409c97514eb412396abe572b92a23b5e6cd23b9a1bb
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              LOG
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
                                                                                              • Size 329B
                                                                                              • SHA256 9e2bfecf38126d95b28aeb53b2174291164d34564787f96bb86940858b56c743
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              Network Persistent State
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                              • Size 7KB
                                                                                              • SHA256 6e1e0cd591b46ac54a28b807198e3aedc156ed18639f6ea85abd47529e315fb5
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              Network Persistent State
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                              • Size 2KB
                                                                                              • SHA256 2e33f419c04ded18283621660d03b55718d78c22b59efa1b43ebce155fb744f1
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              SCT Auditing Pending Reports
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                              • Size 2B
                                                                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                              • MD5 SHA1 SHA512
                                                                                              Submit Download

                                                                                              TransportSecurity
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                              • Size 691B
                                                                                              • SHA256 4761e435468e4e46cdd646a379dd0d9ad0f1d47797c544d79e7e21b1a75193fc
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              Preferences
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                              • Size 10KB
                                                                                              • SHA256 b8ab097060d55b041efa7c28f1ac3ad0f3abdb250b2dcc8d01b7bb4f759a78e6
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              Preferences
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                              • Size 13KB
                                                                                              • SHA256 a5aa1ea345162ce0ba7e66982de2363ec2d82daa02fba0e715600e8071fd5777
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              Preferences
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                              • Size 13KB
                                                                                              • SHA256 8f8087cfc3cb7710882403d4d714e9657fee63b77f271d2dae4f3cfd2c79dda5
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              Preferences
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                              • Size 13KB
                                                                                              • SHA256 351c67a5a5abf97f893c85076a8939aace8e7b2252a8f1d3cf804fc3680ca27e
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              Preferences
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                              • Size 12KB
                                                                                              • SHA256 a208a9f44a839d4ac8d3879d83cb0178d08de2a8c1aae7f7df3c8318a74e56ee
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              Secure Preferences
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                              • Size 11KB
                                                                                              • SHA256 69de6dc15114076d475e4d2dcbd4f54f468751981803dff78752531ab5ac90ad
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              LOG
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG
                                                                                              • Size 333B
                                                                                              • SHA256 062e6431cda8143158c37ef03c7312ee7bfbab8ec48af3f164bd95f361a779b3
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              Tabs_13434572103111381
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Tabs_13434572103111381
                                                                                              • Size 996B
                                                                                              • SHA256 5d9fad558466bf1eeef76965d39280866667361bcbe72a2c6b304e438b5527ec
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              the-real-index
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                              • Size 72B
                                                                                              • SHA256 57ab46a1c17ebfeb04c37ab1e702d7b7d833d8ac342a44daf33f9785782043ef
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              LOG
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
                                                                                              • Size 345B
                                                                                              • SHA256 ace6d94c4d25d5b48c5094d234670fec6fe676f621519b31cc6f6ea2769647fd
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              the-real-index
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
                                                                                              • Size 48B
                                                                                              • SHA256 e18e2b156d76e5834c07ed7bf0098006643b8f58c7eecca96326fe1a48802ba3
                                                                                              • MD5 SHA1 SHA512
                                                                                              Submit Download

                                                                                              the-real-index
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
                                                                                              • Size 72B
                                                                                              • SHA256 2a7fe6eaea0e2084f1fae277d92d8183da1c35ada0eaea676a443564560080ce
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              index
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnGraphiteCache\index
                                                                                              • Size 256KB
                                                                                              • SHA256 b59d45a2c5705db2d79d2d734c8c884bb348f50c028273e7e4fec17dfc84101c
                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                              Submit Download

                                                                                              data_0
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_0
                                                                                              • Size 8KB
                                                                                              • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                              Submit Download

                                                                                              data_2
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_2
                                                                                              • Size 8KB
                                                                                              • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                              Submit Download

                                                                                              data_3
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_3
                                                                                              • Size 8KB
                                                                                              • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                              Submit Download

                                                                                              CURRENT
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\CURRENT
                                                                                              • Size 16B
                                                                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                              • MD5 SHA1 SHA512
                                                                                              Submit Download

                                                                                              MANIFEST-000001
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\MANIFEST-000001
                                                                                              • Size 41B
                                                                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                              • MD5 SHA1 SHA512
                                                                                              Submit Download

                                                                                              LOG
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
                                                                                              • Size 321B
                                                                                              • SHA256 a10c3d9566de3c8d0005b3733c50d4af00087e37b419aa1fb25a93fd235a12d8
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              QuotaManager
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager
                                                                                              • Size 40KB
                                                                                              • SHA256 cfc1134fa775531fd4e8dc9ea1d90ce856068af86959d8089e12d37ed346a325
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              Last Version
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
                                                                                              • Size 13B
                                                                                              • SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
                                                                                              • MD5 SHA1 SHA512
                                                                                              Submit Download

                                                                                              Local State
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                              • Size 261KB
                                                                                              • SHA256 3180872dd50c42bbe7b26e6b0d71a06146600b4330f53e0780df73b82167728f
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              Local State
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                              • Size 131KB
                                                                                              • SHA256 40354441aee4c1c5c884e3162391b194103a1626202066b807c781952ba102b0
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              Local State
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                              • Size 130KB
                                                                                              • SHA256 42d0e667fa9f945bd2fd3a0227cd78f9d73881e95d614b2c324461c54362c5ea
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              Local State
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                              • Size 334KB
                                                                                              • SHA256 3017de8f5b1da679e2c4f8d612fdb559098992c11a5cb350f56e00e8c7d32c86
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              Local State
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                              • Size 262KB
                                                                                              • SHA256 37a24443f813cc712452381fad5f47d9a182332223f9af2a273cef73fc27b605
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              Variations
                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
                                                                                              • Size 86B
                                                                                              • SHA256 2741df9ee9e9d9883397078f94480e9bc1d9c76996eec5cfe4e77929337cbe93
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              settings.dat
                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                              • Size 280B
                                                                                              • SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              the-real-index
                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                              • Size 2KB
                                                                                              • SHA256 d20806fbfdd8581e56d8cdc13096f774401e62876d6c6b60a9475df84b2ecf96
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              SiteList-Enterprise.json
                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                              • Size 2B
                                                                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                              • MD5 SHA1 SHA512
                                                                                              Submit Download

                                                                                              Edge Profile.ico
                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                              • Size 70KB
                                                                                              • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              LOG
                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
                                                                                              • Size 346B
                                                                                              • SHA256 e791d0f33f6b28f2577b3527b402746e1adf4447e1c7e38984f4562300f87912
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              000003.log
                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
                                                                                              • Size 456B
                                                                                              • SHA256 c5ce9aaf8ffdcb8a00463a7bf24001885e0a792f110c8db74a1e2f4392cb0e31
                                                                                              • MD5 SHA1 SHA512
                                                                                              Submit Download

                                                                                              LOG
                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
                                                                                              • Size 319B
                                                                                              • SHA256 6054a50c03006fcac50622d8b619fd43434e79bdb6a4ab5042c7bc3997e4d49e
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              LOG
                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
                                                                                              • Size 334B
                                                                                              • SHA256 5eb9fadc2e795c28ed674bc2fa7327a18e292103ed420889d214617f958c75b8
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              Network Persistent State
                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                              • Size 61B
                                                                                              • SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              Preferences
                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                              • Size 6KB
                                                                                              • SHA256 0407349d64b914e84f844135be1e75d6243a399ed484f26f0871794f31b4a913
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              Preferences
                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                              • Size 7KB
                                                                                              • SHA256 9201520dd484d2e0be5de6ea6b24b802bfeedf45fefe1b90113d52258ee40c10
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              Secure Preferences
                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                              • Size 26KB
                                                                                              • SHA256 16fbfcd78fba38c9deabc5a1a2d663e9fc78aae3f5de953a02e2d7e380f086f3
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              LOG
                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
                                                                                              • Size 335B
                                                                                              • SHA256 bfadd41d99a4abce89e0dd621b7493e1af0b3938649818392bc30a5a8a9c1949
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              LOG
                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
                                                                                              • Size 347B
                                                                                              • SHA256 2e153c0add1986e11df21a8936dd0f60cc6efeae929dfc763572c58dce660144
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              LOG
                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
                                                                                              • Size 323B
                                                                                              • SHA256 cdeb20f8be7e47e527c973c0de57792eed54b3f8cac012825f88beecad141a01
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              LOG
                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
                                                                                              • Size 319B
                                                                                              • SHA256 a005759c0b54cf6f6f6a7021ed81d0a69bccb5d4d8b9251f090c69459d8cc143
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              000003.log
                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
                                                                                              • Size 610B
                                                                                              • SHA256 e7117c97f0dd22ee39b778a65bf9428c153e328bdf6ed67210273b27cc7f0e78
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              LOG
                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
                                                                                              • Size 337B
                                                                                              • SHA256 a7a8eb5e3f6c4e5449ad8b99723c72c9ae3fa4c8238abf4e872abd86235e5296
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              Last Version
                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
                                                                                              • Size 14B
                                                                                              • SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
                                                                                              • MD5 SHA1 SHA512
                                                                                              Submit Download

                                                                                              Local State
                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                              • Size 9KB
                                                                                              • SHA256 3e8e3925254a8636a50b479b7e9b7e75006f0536ea038b99628480a57efa097f
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              Local State
                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                              • Size 8KB
                                                                                              • SHA256 6682b49cddf5cc14a441f6bc52e5f1ecd441a026c20ffc3f2415e251f571396d
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              Local State
                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                              • Size 9KB
                                                                                              • SHA256 acd882137b3d2e4012dc9ee02f189811e63bf73963ab33867b7284c7e15b696f
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              Local State
                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                              • Size 8KB
                                                                                              • SHA256 37454c83b7646e686016c8ae3e6b26944dd038b2ce561066c1f4a74982127fb3
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              Local State
                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                              • Size 9KB
                                                                                              • SHA256 a1f887eb997c4f260a072bb7ff80389e4f717ba27a5c64f184042bfd811f6fbc
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              Variations
                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
                                                                                              • Size 86B
                                                                                              • SHA256 5cd2c4d9f13524923046198c92213691539407e04fa520cdae9eade1bad3d91d
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              index
                                                                                              • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Code Cache\js\index
                                                                                              • Size 24B
                                                                                              • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                              • MD5 SHA1 SHA512
                                                                                              Submit Download

                                                                                              the-real-index
                                                                                              • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Code Cache\js\index-dir\the-real-index
                                                                                              • Size 48B
                                                                                              • SHA256 7529652f058aae7415a2c9747aa968ba94609915a29e6d32d9b6f61cf7ef6e73
                                                                                              • MD5 SHA1 SHA512
                                                                                              Submit Download

                                                                                              the-real-index
                                                                                              • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Code Cache\js\index-dir\the-real-index
                                                                                              • Size 1KB
                                                                                              • SHA256 ec2c7857c4e8ad1d6628195e572c4aa8b44cae60a88cc1db24a3fa01717ac9c5
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              Network Persistent State
                                                                                              • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Network\Network Persistent State
                                                                                              • Size 59B
                                                                                              • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              Network Persistent State
                                                                                              • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Network\Network Persistent State
                                                                                              • Size 2KB
                                                                                              • SHA256 50aadb2ba3d6a569198a678f2f37e3cf7b4b1e0662700aa8de49a17b0de5d96b
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              TransportSecurity
                                                                                              • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Network\TransportSecurity
                                                                                              • Size 1KB
                                                                                              • SHA256 90c7de84d4dbfe389c4b3ff4700d85cdf0520058b22425556c5dc51b9c5219e7
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              TransportSecurity
                                                                                              • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Network\TransportSecurity
                                                                                              • Size 1KB
                                                                                              • SHA256 7b9a0e8f836d8fa14ac7368ef82d9bd5f1a0ab2e698e58bc645fde3c73dc61de
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              TransportSecurity
                                                                                              • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Network\TransportSecurity
                                                                                              • Size 1KB
                                                                                              • SHA256 79d977e09e53d594a764135db1d98268241c3356030ac148355db1c9192c02f6
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              TransportSecurity
                                                                                              • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Network\TransportSecurity
                                                                                              • Size 1KB
                                                                                              • SHA256 dfb9e13e5491e021f35a48e039c6b63ceb69bc736b5881ce35dbd51d382fec7c
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              TransportSecurity
                                                                                              • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Network\TransportSecurity
                                                                                              • Size 1KB
                                                                                              • SHA256 d71ddf066200c89a497aa6ce73ac31cb241234b5065ad7297d793a79ead3f4fd
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              TransportSecurity
                                                                                              • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Network\TransportSecurity
                                                                                              • Size 1KB
                                                                                              • SHA256 b557cdce0af60f6b2a953551761901eb290a425c39222791badb0b7ca6f4c76d
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              TransportSecurity
                                                                                              • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Network\TransportSecurity
                                                                                              • Size 1KB
                                                                                              • SHA256 63884770e39c068d85b64b2b088f570c650245acec4f89201f10730feaac692e
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              TransportSecurity~RFe5ce259.TMP
                                                                                              • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Network\TransportSecurity~RFe5ce259.TMP
                                                                                              • Size 188B
                                                                                              • SHA256 f24c427b335f942d8026aeff15e681449b36132ce9d7126dd59c0b1f4f504471
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              Preferences
                                                                                              • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Preferences
                                                                                              • Size 7KB
                                                                                              • SHA256 ecd36499e2636a5a6754e8de4e7aaf94ae75fd46369399e43a846ff10d26e330
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              Preferences
                                                                                              • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Preferences
                                                                                              • Size 7KB
                                                                                              • SHA256 10189f2d65a3f0f78a8fec0bf7377a12a4a46a677ccb156e4bbbc8c08cf64499
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              Preferences~RFe5ce0f1.TMP
                                                                                              • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Preferences~RFe5ce0f1.TMP
                                                                                              • Size 7KB
                                                                                              • SHA256 72fe8680c22167468c11f0c916b01c1202090fb249706fcc85d5e7805b004b76
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              d0641f9f-ebc0-41a0-9d6d-ca8cb1e43ea2.tmp
                                                                                              • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\d0641f9f-ebc0-41a0-9d6d-ca8cb1e43ea2.tmp
                                                                                              • Size 1B
                                                                                              • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                              • MD5 SHA1 SHA512
                                                                                              Submit Download

                                                                                              it-IT-3-0.bdic
                                                                                              • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Dictionaries\it-IT-3-0.bdic
                                                                                              • Size 960KB
                                                                                              • SHA256 8b83a0d4bba4cfcd4a4e7ee89b703014a00a5c08e721e568a5c552a732827fff
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              Local State
                                                                                              • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Local State
                                                                                              • Size 1KB
                                                                                              • SHA256 a3bd38fe81850e81c4559747e7b7c80f8099d90562dd1d9525e7472ab3a9ed69
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              Local State
                                                                                              • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Local State
                                                                                              • Size 2KB
                                                                                              • SHA256 a516b4e469599250a06fbf7d442791b6404915abffc3435648ae7bf0dbf396bf
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              Local State
                                                                                              • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Local State
                                                                                              • Size 2KB
                                                                                              • SHA256 0d9091bbf3ed8803b4276b9a74cd8add4019cfc5b67c601d70988405728fd2ed
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              Local State~RFe5c7ab6.TMP
                                                                                              • Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Local State~RFe5c7ab6.TMP
                                                                                              • Size 890B
                                                                                              • SHA256 d16c386e45d6b6455f477f91626748fb2b697a1ae32d0abec9cd5bc6c8407e8a
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              StdUtils.dll
                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nslB4BD.tmp\StdUtils.dll
                                                                                              • Size 110KB
                                                                                              • SHA256 c602c44a4d4088dbf5a659f36ba1c3a9d81f8367577de0cb940c0b8afee5c376
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              System.dll
                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nslB4BD.tmp\System.dll
                                                                                              • Size 22KB
                                                                                              • SHA256 fa367ae36bfbe7c989c24c7abbb13482fc20bc35e7812dc377aa1c281ee14cc0
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              modern-wizard.bmp
                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nslB4BD.tmp\modern-wizard.bmp
                                                                                              • Size 150KB
                                                                                              • SHA256 16e0edc9f47e6e95a9bcad15adbdc46be774fbcd045dd526fc16fc38fdc8d49b
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              nsDialogs.dll
                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nslB4BD.tmp\nsDialogs.dll
                                                                                              • Size 20KB
                                                                                              • SHA256 91a484dc79be64dd11bf5acb62c893e57505fcd8809483aa92b04f10d81f9de0
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              nsExec.dll
                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nslB4BD.tmp\nsExec.dll
                                                                                              • Size 17KB
                                                                                              • SHA256 3e2399ae5ce16dd69f7e2c71d928cf54a1024afced8155f1fd663a3e123d9226
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              nsProcess.dll
                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\nslB4BD.tmp\nsProcess.dll
                                                                                              • Size 15KB
                                                                                              • SHA256 bb6ce83ddaad4f530a66a1048fac868dfc3b86f5e7b8e240d84d1633e385aee8
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              messages.json
                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6116_2072141136\CRX_INSTALL\_locales\en_GB\messages.json
                                                                                              • Size 450B
                                                                                              • SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                              Submit Download

                                                                                              d0477477-7c0a-4c72-91d5-090deff23c38.tmp
                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6116_2072141136\d0477477-7c0a-4c72-91d5-090deff23c38.tmp
                                                                                              • Size 242KB
                                                                                              • SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              default.dic
                                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\it-IT\default.dic
                                                                                              • Size 2B
                                                                                              • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                              • MD5 SHA1 SHA512
                                                                                              Submit Download

                                                                                              Non confermato 229630.crdownload
                                                                                              • Path C:\Users\Admin\Downloads\Non confermato 229630.crdownload
                                                                                              • Size 2.3MB
                                                                                              • SHA256 7d3654531c32d941b8cae81c4137fc542172bfa9635f169cb392f245a0a12bcb
                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                              Submit Download

                                                                                              memory/3108-14860-0x0000025D97FC0000-0x0000025D97FC3000-memory.dmp
                                                                                              Download

                                                                                              memory/3108-14861-0x0000025D96FE0000-0x0000025D96FE5000-memory.dmp
                                                                                              Download

                                                                                              memory/3108-14857-0x0000025D97A50000-0x0000025D97A52000-memory.dmp
                                                                                              Download

                                                                                              memory/3108-14855-0x0000025D96FF0000-0x0000025D96FF2000-memory.dmp
                                                                                              Download

                                                                                              memory/3108-14854-0x0000025D96FE0000-0x0000025D96FE1000-memory.dmp
                                                                                              Download

                                                                                              memory/3848-7714-0x0000000000B60000-0x0000000001012000-memory.dmp
                                                                                              Download

                                                                                              memory/5440-365-0x000001BA9AE40000-0x000001BA9AE41000-memory.dmp
                                                                                              Download

                                                                                              memory/5440-366-0x000001BA9AE40000-0x000001BA9AE41000-memory.dmp
                                                                                              Download

                                                                                              memory/5440-357-0x000001BA9AE40000-0x000001BA9AE41000-memory.dmp
                                                                                              Download

                                                                                              memory/5440-369-0x000001BA9AE40000-0x000001BA9AE41000-memory.dmp
                                                                                              Download

                                                                                              memory/5440-364-0x000001BA9AE40000-0x000001BA9AE41000-memory.dmp
                                                                                              Download

                                                                                              memory/5440-359-0x000001BA9AE40000-0x000001BA9AE41000-memory.dmp
                                                                                              Download

                                                                                              memory/5440-373-0x000001BA98430000-0x000001BA985FE000-memory.dmp
                                                                                              Download

                                                                                              memory/5440-363-0x000001BA9AE40000-0x000001BA9AE41000-memory.dmp
                                                                                              Download

                                                                                              memory/5440-368-0x000001BA9AE40000-0x000001BA9AE41000-memory.dmp
                                                                                              Download

                                                                                              memory/5440-370-0x000001BA98430000-0x000001BA985FE000-memory.dmp
                                                                                              Download

                                                                                              memory/5440-367-0x000001BA9AE40000-0x000001BA9AE41000-memory.dmp
                                                                                              Download

                                                                                              memory/5440-358-0x000001BA9AE40000-0x000001BA9AE41000-memory.dmp
                                                                                              Download

                                                                                              memory/5800-14890-0x000002B331020000-0x000002B3310CD000-memory.dmp
                                                                                              Download

                                                                                              memory/6228-14923-0x0000018B43B30000-0x0000018B43BDD000-memory.dmp
                                                                                              Download

                                                                                              memory/7600-14715-0x000001CC95910000-0x000001CC959BD000-memory.dmp
                                                                                              Download

                                                                                              memory/7600-14410-0x00007FFBA68F0000-0x00007FFBA68F1000-memory.dmp
                                                                                              Download

                                                                                              memory/7600-14411-0x00007FFBA60A0000-0x00007FFBA60A1000-memory.dmp
                                                                                              Download

                                                                                              memory/7660-14352-0x0000000000010000-0x0000000000519000-memory.dmp
                                                                                              Download

                                                                                              memory/7660-14353-0x0000000074160000-0x000000007420B000-memory.dmp
                                                                                              Download

                                                                                              memory/7660-14358-0x0000000000010000-0x0000000000519000-memory.dmp
                                                                                              Download

                                                                                              memory/8256-14751-0x000002296EF20000-0x000002296EFCD000-memory.dmp
                                                                                              Download