Analysis

  • user interaction
    yes
  • max time kernel
    899s
  • max time network
    887s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    24/09/2026, 02:15

General

  • Target
    isweartofuckinggod.glb
  • Size 2KB
  • Sample260924-cpr5rabh89
  • SHA256 22c01d17027555fac04b797d43ddf2617656542862550a7e674367738b1e2954
  • MD5 SHA1 SHA512 TLSH
Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks SCSI registry key(s) 3 TTPs 36 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 23 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 42 IoCs
  • Suspicious use of SendNotifyMessage 40 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 32 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\isweartofuckinggod.glb
    1⤵
    • Checks computer location settings
    • Executes a command shell one-liner
    PID:4520
  • C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\3DViewer.exe
    "C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\3DViewer.exe" -ServerName:Microsoft.Microsoft3DViewer.AppXee4wbwh7vy3ejyrqsebr3ybk1vd6bkyn.mca
    1⤵
    • Checks SCSI registry key(s)
    • Modifies registry class
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:720
  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe"
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:5072
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffec9ddc728,0x7ffec9ddc734,0x7ffec9ddc740
      2⤵
        PID:1184
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1816,i,6486873542180637256,12861717037870786279,524288 --field-trial-handle=2036,i,2544441596734187048,14478016307922205947,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2172 /prefetch:3
        2⤵
        • System Time Discovery
        PID:4380
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1696,i,13499452013566935467,1554115119337325407,262144 --field-trial-handle=2036,i,2544441596734187048,14478016307922205947,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2032 /prefetch:2
        2⤵
          PID:1592
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,1271974394499015020,4559274883294068916,524288 --field-trial-handle=2036,i,2544441596734187048,14478016307922205947,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2436 /prefetch:8
          2⤵
            PID:2432
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3252,i,6246802195866296879,1962670846578270764,2097152 --field-trial-handle=2036,i,2544441596734187048,14478016307922205947,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3260 /prefetch:1
            2⤵
              PID:1500
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3268,i,12412252099047668947,10222725431239876760,2097152 --field-trial-handle=2036,i,2544441596734187048,14478016307922205947,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3308 /prefetch:1
              2⤵
                PID:3172
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4468,i,940154989221328161,13932371391516617938,2097152 --field-trial-handle=2036,i,2544441596734187048,14478016307922205947,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4476 /prefetch:2
                2⤵
                  PID:4556
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4696,i,7246835385179994015,10096528867704427757,2097152 --field-trial-handle=2036,i,2544441596734187048,14478016307922205947,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4676 /prefetch:1
                  2⤵
                    PID:2688
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5448,i,4181390558312711709,16944168779014257286,2097152 --field-trial-handle=2036,i,2544441596734187048,14478016307922205947,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5456 /prefetch:1
                    2⤵
                      PID:2468
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4684,i,3478005564324441097,17667321302442622833,2097152 --field-trial-handle=2036,i,2544441596734187048,14478016307922205947,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5428 /prefetch:1
                      2⤵
                        PID:748
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3312,i,10551194836255327408,14752949559386714396,2097152 --field-trial-handle=2036,i,2544441596734187048,14478016307922205947,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3484 /prefetch:1
                        2⤵
                          PID:2020
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4688,i,14095392575330713037,9541882437708271769,524288 --field-trial-handle=2036,i,2544441596734187048,14478016307922205947,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3936 /prefetch:8
                          2⤵
                            PID:4828
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5464,i,6696665038488018623,16718652517458071114,524288 --field-trial-handle=2036,i,2544441596734187048,14478016307922205947,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4676 /prefetch:8
                            2⤵
                            • Modifies registry class
                            PID:1704
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4140,i,12243042046864605244,16014564847824025300,524288 --field-trial-handle=2036,i,2544441596734187048,14478016307922205947,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4644 /prefetch:8
                            2⤵
                              PID:1568
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6992,i,10172940055566139027,14512001962905111766,524288 --field-trial-handle=2036,i,2544441596734187048,14478016307922205947,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7000 /prefetch:8
                              2⤵
                                PID:6128
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6380,i,4048293960525185692,17306571540040066703,524288 --field-trial-handle=2036,i,2544441596734187048,14478016307922205947,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6352 /prefetch:8
                                2⤵
                                  PID:2044
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6204,i,5946628762565616450,6218849342334493534,524288 --field-trial-handle=2036,i,2544441596734187048,14478016307922205947,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6296 /prefetch:8
                                  2⤵
                                    PID:3752
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6308,i,159461364238393756,14510608070830664862,524288 --field-trial-handle=2036,i,2544441596734187048,14478016307922205947,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6288 /prefetch:8
                                    2⤵
                                      PID:5720
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6036,i,16380011888682215138,1042765900868959125,262144 --field-trial-handle=2036,i,2544441596734187048,14478016307922205947,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5948 /prefetch:8
                                      2⤵
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:1728
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6360,i,10608635704307852702,10338999204893058442,524288 --field-trial-handle=2036,i,2544441596734187048,14478016307922205947,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6344 /prefetch:8
                                      2⤵
                                        PID:1512
                                    • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                      "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                      1⤵
                                        PID:1728
                                      • C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\View3D.ResourceResolver.exe
                                        "C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\View3D.ResourceResolver.exe" /InvokerPRAID: Microsoft.Microsoft3DViewer
                                        1⤵
                                        • System Location Discovery: System Language Discovery
                                        PID:4672
                                      • C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\3DViewer.exe
                                        "C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\3DViewer.exe" -ServerName:Microsoft.Microsoft3DViewer.AppXee4wbwh7vy3ejyrqsebr3ybk1vd6bkyn.mca
                                        1⤵
                                        • Modifies registry class
                                        • Suspicious use of AdjustPrivilegeToken
                                        PID:4836
                                      • C:\Windows\system32\svchost.exe
                                        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                        1⤵
                                          PID:5260

                                        Network

                                              MITRE ATT&CK Enterprise v16

                                              Replay Monitor

                                              Loading Replay Monitor...

                                              Downloads

                                              BookmarkMergedSurfaceOrdering

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                              • Size 6B
                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                              • MD5 SHA1 SHA512

                                              BrowsingTopicsState

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                              • Size 649B
                                              • SHA256 4efe85709501dcb891150e8bd7fd57c7235fb6960577149a2edefca0a3b05650
                                              • MD5 SHA1 SHA512 TLSH

                                              f_00000c

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c
                                              • Size 57KB
                                              • SHA256 2168e40addf9b9a8cd53f709085ac9949ad58e37c7807a7964b30be6a1553d7d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              f_00000d

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d
                                              • Size 683KB
                                              • SHA256 f9aa23eedb29a689518030c8e5e04c14921e0d2a3ecb187070c4840dc6f6e2b2
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              f_00000e

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e
                                              • Size 23KB
                                              • SHA256 341c22fc174b582c63126aa5549e8e7dfdf2a222d7a1cc3a3d2ae6d7e9fecab4
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              f_00000f

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f
                                              • Size 34KB
                                              • SHA256 7ce775d50d00c90dfa5b055d18fa9ed1b44a597389951770a982b7f1f841a157
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              the-real-index

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                              • Size 744B
                                              • SHA256 3e0a636f8e70155a5b937327a0282b020f1c46457d0bd032e8b1c1d0e6813fbe
                                              • MD5 SHA1 SHA512 TLSH

                                              000003.log

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
                                              • Size 304KB
                                              • SHA256 e66008ab41abed3cebc71a5204f56ba7eaa438704a748dd53dd502dd27c0f16d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              000008.ldb

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000008.ldb
                                              • Size 17KB
                                              • SHA256 6c06aba2a174337ddf684144add1f972399cb3d1615bffc17f9e17c9ab5bb3e6
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              000009.log

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000009.log
                                              • Size 159KB
                                              • SHA256 e54062cab5cead8e08268f33f74f07092c0fb51e5eace8c7142055ea427e7685
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              000011.ldb

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000011.ldb
                                              • Size 12KB
                                              • SHA256 94fbbea8741561a54b462b7cc9d7566f152629ad84e1b49977797d41145e3269
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              LOG

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
                                              • Size 3KB
                                              • SHA256 69c480e94c63489876dad10c6efbb22dfd18b7f97ca86557bd167de0cc4f4a21
                                              • MD5 SHA1 SHA512 TLSH

                                              MANIFEST-000001

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
                                              • Size 23B
                                              • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                              • MD5 SHA1 SHA512

                                              MANIFEST-000001

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
                                              • Size 519B
                                              • SHA256 7326873fc804bb561389b52c57bc5a6c91a1226ca804f1ebbba153592f7d2a8b
                                              • MD5 SHA1 SHA512 TLSH

                                              Network Persistent State

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                              • Size 13KB
                                              • SHA256 491baae86a3d6b125d8603a2eef271b6be00713c612e6f7b14035db61de5ea56
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Network Persistent State

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                              • Size 11KB
                                              • SHA256 5d68aa80786745878178699f2440f5a6ee061788232c22fa4fb4a9f76ddb7ad6
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Network Persistent State

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                              • Size 11KB
                                              • SHA256 74b06e39dd8040df008744cceda27f66119bc2c3590dd602867d31fdf2d07b76
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Network Persistent State

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                              • Size 11KB
                                              • SHA256 6984f294980c08ba7bffa51d5016d22ed02850996a6a9b2f3e30e4b17497c465
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              SCT Auditing Pending Reports

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                              • Size 2B
                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                              • MD5 SHA1 SHA512

                                              TransportSecurity

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                              • Size 1KB
                                              • SHA256 b7aef258018c46c01ce81ea0dbb90eeb72057b63d3ecf29be726e0e12f726294
                                              • MD5 SHA1 SHA512 TLSH

                                              CURRENT

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\CURRENT
                                              • Size 16B
                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                              • MD5 SHA1 SHA512

                                              Preferences

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                              • Size 12KB
                                              • SHA256 5de4190635ca8b240b0d579fd84beb445fa7004b9102b41c97debe562e997993
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Preferences

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                              • Size 12KB
                                              • SHA256 9db242db68f56cfeb3d0893381a911e167d90d4eaed6f56c1c7e65ab0ccb1ee6
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Preferences

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                              • Size 13KB
                                              • SHA256 1fd04872530850f448d1f29bdcc59ebedfad5080c6696ce9c708ec58dc484978
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Preferences

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                              • Size 14KB
                                              • SHA256 3fa1c57ee457db499b64cf61462d5e9768194baf55d9bce1aedfd985038e80b8
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Secure Preferences

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                              • Size 17KB
                                              • SHA256 1f54a63591e6dde1b69486f2c8df6aaa98f633d0dd8c27d42b25af96f2f70962
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              index

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\2e3752d4-8139-4a3e-8b29-597882022f27\index
                                              • Size 24B
                                              • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                              • MD5 SHA1 SHA512

                                              the-real-index

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\2e3752d4-8139-4a3e-8b29-597882022f27\index-dir\the-real-index
                                              • Size 576B
                                              • SHA256 533fbc6b7b3a1dc77243c491d2aad95ab7690d4cf8aa9a44b1f2faafa48f304f
                                              • MD5 SHA1 SHA512 TLSH

                                              the-real-index~RFe596b72.TMP

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\2e3752d4-8139-4a3e-8b29-597882022f27\index-dir\the-real-index~RFe596b72.TMP
                                              • Size 48B
                                              • SHA256 33c9093fd6344f6477bd335e4f32f696b9f609a3224ebc58028aecfc9058c1e5
                                              • MD5 SHA1 SHA512

                                              the-real-index

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\7539d4db-c9e7-4c65-9aae-30fa6f3f8787\index-dir\the-real-index
                                              • Size 2KB
                                              • SHA256 b56da4a01c19c9fca99372401d8d142aef413b0f33f09bdd2d65df728ae2c052
                                              • MD5 SHA1 SHA512 TLSH

                                              the-real-index

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\7539d4db-c9e7-4c65-9aae-30fa6f3f8787\index-dir\the-real-index
                                              • Size 2KB
                                              • SHA256 6a894e6e8003c83f9e5bacdde8eff38ecedb7dfa03e10b080c284f0fb148bd30
                                              • MD5 SHA1 SHA512 TLSH

                                              the-real-index~RFe590d93.TMP

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\7539d4db-c9e7-4c65-9aae-30fa6f3f8787\index-dir\the-real-index~RFe590d93.TMP
                                              • Size 48B
                                              • SHA256 7a3149061a34fdce7f766d0890761ed0c0ed52b6e8bf552f58d1cdcafcf5c027
                                              • MD5 SHA1 SHA512

                                              index.txt

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                              • Size 214B
                                              • SHA256 574ffdd608d03ca9b7f95cca18c0de57f75272623b0c1ef1a7031b15332b303a
                                              • MD5 SHA1 SHA512 TLSH

                                              index.txt

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                              • Size 216B
                                              • SHA256 58927ac7e24fb8a4bf1692e91a6b5dbfb5c74d24e19e840448542780c83c2564
                                              • MD5 SHA1 SHA512 TLSH

                                              index.txt

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                              • Size 132B
                                              • SHA256 a34a37e9e866966725db187d36103dcd8c5a593131de3d0b496881573ba0d7d7
                                              • MD5 SHA1 SHA512 TLSH

                                              index.txt

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                              • Size 243B
                                              • SHA256 a93b032e7b4e2a574f59d34817c30037de8f202066bfa9f70a67121d65dd882e
                                              • MD5 SHA1 SHA512 TLSH

                                              index.txt

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                              • Size 130B
                                              • SHA256 5a166a1fa154ac3755a4de7e0b6861e4a02990e9acc68f7a220ebce99a2968c5
                                              • MD5 SHA1 SHA512 TLSH

                                              index.txt

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                              • Size 390B
                                              • SHA256 f7b9391cb0c0e3ae9a67129e338fe45e9dbde06e9dcb317190ef61baa4dda979
                                              • MD5 SHA1 SHA512 TLSH

                                              index.txt

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                              • Size 383B
                                              • SHA256 37a9752cbaba3995efba60c8ad1069bcb113221b657eacff9324c6ef55be2e8d
                                              • MD5 SHA1 SHA512 TLSH

                                              index.txt~RFe58fe50.TMP

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe58fe50.TMP
                                              • Size 137B
                                              • SHA256 369d74db258c1e804c2a4d3f2ac72fe547faba85d6f0fe20c5db43ed6b11660e
                                              • MD5 SHA1 SHA512 TLSH

                                              013888a1cda32b90_0

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\013888a1cda32b90_0
                                              • Size 193KB
                                              • SHA256 5eb24434b7611336f9851ab8a1d5b09940aa3a5cf543a03cb0243c508b8d585a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              b6c28cea6ed9dfc1_0

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\b6c28cea6ed9dfc1_0
                                              • Size 20KB
                                              • SHA256 0a754de5617accf9ca08751bfe3d3bd80d8ac82002bc01bc69d15a689a44eeb6
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              the-real-index

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                              • Size 168B
                                              • SHA256 311f7f117579d1c346dfff41b3cbdadbeca0cc18194788e0328d519dd7d577d7
                                              • MD5 SHA1 SHA512 TLSH

                                              the-real-index~RFe5961dd.TMP

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5961dd.TMP
                                              • Size 96B
                                              • SHA256 efc94fc8322aa5aa04aad1c1e80ae70d562d98cc9be1459a313c31036e0faada
                                              • MD5 SHA1 SHA512 TLSH

                                              32.png

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\32.png
                                              • Size 1KB
                                              • SHA256 bf77e0c65df7ce83532308d1acbf333098e1f4089672b67a9514a56144b1f1d8
                                              • MD5 SHA1 SHA512 TLSH

                                              16.png

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5072_1476628645\Icons Monochrome\16.png
                                              • Size 257B
                                              • SHA256 d52376c8b210b8003f5aed9f4555a7916b4640d4c42a36cc81d9864991c87a8b
                                              • MD5 SHA1 SHA512 TLSH

                                              512.png

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5072_507182022\Shortcuts Menu Icons\Monochrome\0\512.png
                                              • Size 4KB
                                              • SHA256 d345d2dbe2efd56ff9494cb31cae0e28cde5bdf176a22bca9aee27465b117c88
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              512.png

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5072_507182022\Shortcuts Menu Icons\Monochrome\1\512.png
                                              • Size 7KB
                                              • SHA256 1e0b1b2e4dac49da1e2ce91a72e01f77fdb3bbb26ed3422e5d4037745cc307a4
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              512.png

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5072_507182022\Shortcuts Menu Icons\Monochrome\2\512.png
                                              • Size 9KB
                                              • SHA256 ad08077126e7106674e4219f5f9cfac2305e8b3f627247c1d3e72136399e6fd2
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                              • Size 130KB
                                              • SHA256 41c62fc09528ad0a68536e1c296358657725654b09854e17964d26dd39a968c3
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                              • Size 263KB
                                              • SHA256 bd314c4c27473507bc8c7b368ebb286799c9aaa243c4b859a00b689ffcb3c9aa
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                              • Size 264KB
                                              • SHA256 24416baddc77a52c12bb5981b476a6ea9c6c5664c50a2116b4a5d5b40d9ca087
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                              • Size 131KB
                                              • SHA256 2d611251a85f2f164c49f6131c1a7b964504ca44e6b0faf015094eada0153e37
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                              • Size 263KB
                                              • SHA256 5283d5861b73a1e580803e9fdb1d0f6f7920040828062a47d33d5440184e9e85
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              SessionSummaryCache.json

                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\LocalCache\SessionSummaryCache.json
                                              • Size 4KB
                                              • SHA256 ea90c967fe9c0b0cca60542778f24b3ad7acbe3aa983b873835b59cec8e3f3ab
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              SessionSummaryCache.json

                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\LocalCache\SessionSummaryCache.json
                                              • Size 6KB
                                              • SHA256 982353579781cd5946ff90fe7701b30bd27c4d21894bb1b0c0f1d4f869b1452f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              OneSettingsCache_6_1908_2042_0.json

                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\TempState\Settings\OneSettingsCache_6_1908_2042_0.json
                                              • Size 525B
                                              • SHA256 14f310b4ec64b37965ccd02cc492b9eb9665d92425c2fec6deed44108e123472
                                              • MD5 SHA1 SHA512 TLSH

                                              memory/4672-22-0x0000000004F20000-0x0000000004F28000-memory.dmp

                                              memory/4672-21-0x0000000004F00000-0x0000000004F0A000-memory.dmp

                                              memory/4672-20-0x0000000000220000-0x000000000022A000-memory.dmp

                                              memory/4672-23-0x0000000005070000-0x0000000005096000-memory.dmp