73a668f89d727015962a727cf2d3edc5a446b9da10718cba4dfec6525ed6bc20

Resubmissions

24/09/2026, 16:49

260924-vb2fdayzdx7

24/09/2026, 16:27

260924-tx2slaysfs10

Analysis

user interaction
yes
max time kernel
1473s
max time network
1447s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
24/09/2026, 16:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
AP Biology - Macromolecules.pptx
Size 4.0MB
Sample260924-vb2fdayzdx
SHA256 73a668f89d727015962a727cf2d3edc5a446b9da10718cba4dfec6525ed6bc20
MD5 23d801a803599a3b3a0174158ca0ad68
SHA1 d7077da034c60e91e6349e4e4b69b42db3715a23
SHA512 63b45aa234d211d424489faddb65af5d4cfd954e4b2c8e6a8edc70746009ecce8c90b7591f78db6229b2b77cf32b170a0ec046af092a7955e2db650f37eeff32
SSDEEP 98304:lku3YMCUqv64jzZILKC3o0NEjBoz2K8bmpLPJ6GjvL:lku3RhqS+ILb3o0NE9knPJtvL
TLSH
T19E163349BCCED97DCEB6E1B85C04CE2B3CC052160E5B846A1BDCD8CA016DD9E1297BD9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2660	chrome.exe

Checks processor information in registry 2 TTPs 5 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	POWERPNT.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	POWERPNT.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	POWERPNT.EXE

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	POWERPNT.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	POWERPNT.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	POWERPNT.EXE
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134347423824882357"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4003929486-1233426720-3594832368-1000\{1421CA95-2EE7-4051-AE28-4D9C9A7EA43C}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4003929486-1233426720-3594832368-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4003929486-1233426720-3594832368-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4003929486-1233426720-3594832368-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4003929486-1233426720-3594832368-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: AddClipboardFormatListener 2 IoCs

pid	Process
1544	POWERPNT.EXE
1544	POWERPNT.EXE

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
892	chrome.exe
892	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
892	chrome.exe
892	chrome.exe

Suspicious behavior: GetForegroundWindowSpam 2 IoCs

pid	Process
1544	POWERPNT.EXE
1544	POWERPNT.EXE

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 30 IoCs

pid	Process
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe
Token: SeShutdownPrivilege	4336	chrome.exe
Token: SeCreatePagefilePrivilege	4336	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe
4336	chrome.exe

Suspicious use of SetWindowsHookEx 8 IoCs

pid	Process
1544	POWERPNT.EXE
1544	POWERPNT.EXE
1544	POWERPNT.EXE
1544	POWERPNT.EXE
1544	POWERPNT.EXE
1544	POWERPNT.EXE
1544	POWERPNT.EXE
1544	POWERPNT.EXE

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4336 wrote to memory of 4148	4336	chrome.exe	101
PID 4336 wrote to memory of 3896	4336	chrome.exe	102
PID 4336 wrote to memory of 3896	4336	chrome.exe	102
PID 4336 wrote to memory of 2660	4336	chrome.exe	103
PID 4336 wrote to memory of 4016	4336	chrome.exe	104
PID 4336 wrote to memory of 4016	4336	chrome.exe	104
PID 4336 wrote to memory of 3832	4336	chrome.exe	106
PID 4336 wrote to memory of 5088	4336	chrome.exe	107
PID 4336 wrote to memory of 3832	4336	chrome.exe	106
PID 4336 wrote to memory of 5088	4336	chrome.exe	107
PID 4336 wrote to memory of 5008	4336	chrome.exe	108
PID 4336 wrote to memory of 5008	4336	chrome.exe	108
PID 4336 wrote to memory of 4544	4336	chrome.exe	109
PID 4336 wrote to memory of 4544	4336	chrome.exe	109
PID 4336 wrote to memory of 932	4336	chrome.exe	110
PID 4336 wrote to memory of 4348	4336	chrome.exe	112
PID 4336 wrote to memory of 4348	4336	chrome.exe	112
PID 4336 wrote to memory of 4704	4336	chrome.exe	114
PID 4336 wrote to memory of 4704	4336	chrome.exe	114
PID 4336 wrote to memory of 1240	4336	chrome.exe	115
PID 4336 wrote to memory of 1240	4336	chrome.exe	115
PID 4336 wrote to memory of 1504	4336	chrome.exe	116
PID 4336 wrote to memory of 3864	4336	chrome.exe	117
PID 4336 wrote to memory of 1504	4336	chrome.exe	116
PID 4336 wrote to memory of 3864	4336	chrome.exe	117
PID 4336 wrote to memory of 1244	4336	chrome.exe	118
PID 4336 wrote to memory of 1244	4336	chrome.exe	118
PID 4336 wrote to memory of 4872	4336	chrome.exe	119
PID 4336 wrote to memory of 4872	4336	chrome.exe	119
PID 4336 wrote to memory of 2196	4336	chrome.exe	120
PID 4336 wrote to memory of 1776	4336	chrome.exe	121
PID 4336 wrote to memory of 2196	4336	chrome.exe	120
PID 4336 wrote to memory of 1020	4336	chrome.exe	122
PID 4336 wrote to memory of 1020	4336	chrome.exe	122
PID 4336 wrote to memory of 1472	4336	chrome.exe	123
PID 4336 wrote to memory of 4420	4336	chrome.exe	124
PID 4336 wrote to memory of 2152	4336	chrome.exe	125
PID 4336 wrote to memory of 3236	4336	chrome.exe	126
PID 4336 wrote to memory of 3236	4336	chrome.exe	126
PID 4336 wrote to memory of 2416	4336	chrome.exe	127
PID 4336 wrote to memory of 2416	4336	chrome.exe	127
PID 4336 wrote to memory of 3912	4336	chrome.exe	128
PID 4336 wrote to memory of 3912	4336	chrome.exe	128
PID 4336 wrote to memory of 4708	4336	chrome.exe	129
PID 4336 wrote to memory of 4708	4336	chrome.exe	129
PID 4336 wrote to memory of 2420	4336	chrome.exe	130
PID 4336 wrote to memory of 2420	4336	chrome.exe	130
PID 4336 wrote to memory of 1912	4336	chrome.exe	131
PID 4336 wrote to memory of 1912	4336	chrome.exe	131
PID 4336 wrote to memory of 4608	4336	chrome.exe	132
PID 4336 wrote to memory of 4608	4336	chrome.exe	132
PID 4336 wrote to memory of 892	4336	chrome.exe	133
PID 4336 wrote to memory of 4308	4336	chrome.exe	134
PID 4336 wrote to memory of 4308	4336	chrome.exe	134
PID 4336 wrote to memory of 4148	4336	chrome.exe	101
PID 4336 wrote to memory of 3896	4336	chrome.exe	102
PID 4336 wrote to memory of 3896	4336	chrome.exe	102
PID 4336 wrote to memory of 2660	4336	chrome.exe	103
PID 4336 wrote to memory of 4016	4336	chrome.exe	104
PID 4336 wrote to memory of 4016	4336	chrome.exe	104
PID 4336 wrote to memory of 3832	4336	chrome.exe	106
PID 4336 wrote to memory of 5088	4336	chrome.exe	107
PID 4336 wrote to memory of 3832	4336	chrome.exe	106
PID 4336 wrote to memory of 5088	4336	chrome.exe	107

C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE
"C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE" "C:\Users\Admin\AppData\Local\Temp\AP Biology - Macromolecules.pptx" /ou ""
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1544

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x7ff98e94c728,0x7ff98e94c734,0x7ff98e94c740
  2⤵
  PID:4148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1704,i,1219010289809342385,480778779841659007,262144 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2016 /prefetch:2
  2⤵
  PID:3896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1636,i,9132845316704868812,3364018640121720427,524288 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2264 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2380,i,1326706268386039624,8558719787761998040,524288 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2504 /prefetch:8
  2⤵
  PID:4016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3240,i,10987201909071120876,8526548412399387905,2097152 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:3832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3268,i,5760239070274378717,4401953826869111067,2097152 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:5088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3832,i,7258624765741370788,11067355948245884189,2097152 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4448 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4492,i,6274011592399334122,10353151371227974062,524288 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4592 /prefetch:8
  2⤵
  PID:4544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5240,i,16576743109484816673,5785379785155995834,524288 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4956 /prefetch:8
  2⤵
  PID:932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5352,i,14804661986733898206,17284219896077537572,524288 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5340 /prefetch:8
  2⤵
  PID:4348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5504,i,7078318628251158024,16636531694700192070,524288 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5296 /prefetch:8
  2⤵
  PID:4704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5332,i,16078016544736018310,2213443446112972189,524288 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4956 /prefetch:8
  2⤵
  PID:1240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5320,i,13487707402829287919,15083321314617883426,2097152 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5340 /prefetch:1
  2⤵
  PID:1504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5188,i,9288377664661636926,2955876466237449474,2097152 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4596 /prefetch:2
  2⤵
  PID:3864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6108,i,16030894792515113013,13682439634401000989,2097152 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5404 /prefetch:1
  2⤵
  PID:1244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5868,i,15677215354934248804,16412965546054630474,2097152 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5872 /prefetch:1
  2⤵
  PID:4872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6012,i,7702909499979892371,1653680389653183477,524288 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  PID:2196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4496,i,1071129743128340221,18429953998859216985,524288 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  - Modifies registry class
  PID:1776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5356,i,7250809377984125158,1344965682146817449,2097152 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:1020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5440,i,14772971224670474885,14620961860585009698,524288 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  PID:1472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4556,i,12079087715170651504,6510515373786007055,524288 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3244 /prefetch:8
  2⤵
  PID:4420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5480,i,847691147488920450,14653394582426994312,524288 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:2152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=3488,i,13295599241528735634,10611400750633593855,2097152 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4484 /prefetch:1
  2⤵
  PID:3236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=5860,i,8897723303092252302,12127555043521574760,2097152 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6100 /prefetch:1
  2⤵
  PID:2416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=4440,i,18328948416886197475,13432669104286952866,2097152 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6056 /prefetch:1
  2⤵
  PID:3912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=5992,i,1979017533488273309,4796191551959069893,2097152 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6052 /prefetch:1
  2⤵
  PID:4708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=5892,i,2281063731819746415,14837068953167278906,2097152 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6020 /prefetch:1
  2⤵
  PID:2420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=3256,i,1592297959389803760,13354245807199955723,2097152 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5896 /prefetch:1
  2⤵
  PID:1912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=6104,i,7271488968928786442,17629960108111481532,2097152 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5504 /prefetch:1
  2⤵
  PID:4608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5636,i,1763800381178362,12166445319487394337,262144 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=1200 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=3128,i,17395877292595917960,17842249197848977694,524288 --field-trial-handle=2020,i,3133860726672851326,16139241826743259350,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5720 /prefetch:8
  2⤵
  PID:4308

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4420

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4860

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 47b8ee74ee8fb060a2ea16c28a6dad6a8b4cca6da8447bf7bf713794b6b50f87
MD5 01e1369c12b425b06cc54b2dfc1dc09e
SHA1 931247fc97e8fe90d47ce359495e888fb73bea80
SHA512 cf46494fea0b4314fe22aa0f934e3cb5072ea7b19bb70a55cc8fad80d5c526970d9c44aa377d85690d3562b53faec7a23e224d4df38b3e8c4ea0fb247f6d4e77
TLSH
T122F044A9C921EC2B08FC075870A44B06EB50136B2B90894B3A3D820C8FB4A7B868582C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
Size 437KB
SHA256 a451b8791f9183f16a2b30959f9f69e20f35117f8ca6e34e463916869328f3c8
MD5 15d9ce7fe8b446c91cc0598983dde50a
SHA1 b2ad1e9b11a41f5176e3cc495dac68aa26e0955f
SHA512 39e14f23bbde8278b586057eeb648777afc1e6d11b71f3e5529688341f7868b61d0d7ef43cc925189a70def4a6b53e863a06fc8d36e7551c9a50745be6607529
SSDEEP 12288:9SyJNj5Vy52pw6eyroMIW3/dJhlzOH7pVUa0Uiku:9vJzV1pw/yroMfCIUfu
TLSH
T10B9423CFDB2108E7FE76C411CDAD9FE8049BA554056D8CB35BB6066D825A0808636FEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 90284e65ee8f5daa28f5cadadef8fee1d38dd4a66ad88d7350fa3ff43c5e4f9d
MD5 1148a771a6c40733eaa4470ca1740b04
SHA1 1d69a7e396d317b66dc9aa6c1dc605df0abbd1d0
SHA512 181a82218fa82e281763374a0d6c0b41e5ea1864fde4bea426ad9898d39ec63e15791365e950180b4d5a62cecc151a81f6af8305f4c80b3ca31098670f536cde
TLSH
T12F31D76C9B80CC72CF977D7061BED70BB14C094EDE43BA0A848AACD027D42BC110AE5B
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_1\_locales\en\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
TLSH
T109F09C8CD050E86F02B2411AB1647314FB51037A0751A59F393CDC0D9FB6DA751C6F4D
MD5 SHA1 SHA512 TLSH

Submit Download

craw_background.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_1\craw_background.js
Size 531KB
SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
MD5 6eebed29e6a6301e92a9b8b347807f5f
SHA1 65dfb69b650560551110b33dcba50b25e5b876de
SHA512 fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2
SSDEEP 6144:abyfBNC2FRdjiRXqbe5Dq31IVlMqX+wd5/CcMMJcRULt0NjyTOEzZQ+h72W3GB0n:Ft/g
TLSH
T1B5C4F74C34C2E8CD6A623DA5247B9085A2319266F4479ED9F0EDECF21AF44641937F3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 3e7331729a8e414ef990c035610046a1d5aed68f6725a4a5c72f9e844668453c
MD5 afe54e72184c4330512a5688b030e482
SHA1 2d354025609a3dc67034c3a0575cfa34b0a41e3f
SHA512 c61b655c37ffeb241fb5bf5063f7bdfe55e27174fc3c1679287c3c78486784232adf13db4438657484d939587b5196a0ee08ceb0c38a36b31df2658ede950367
SSDEEP 192:DkBh1itqJJAZyJH9JmTrTEcDgzYKUkaPiSqvqfPiNPiImIzZmNEd7mjhGK:DkBh1itqJJAZyJHLmTrTEcDgzYKUkaq0
TLSH
T162E1BDF783E5C62DD91056F49B15AF2ECE291628032C3C7688D8BE57D3E2472E21935E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 17a7642e81ea4f2704b227a667059fd17124f4788c6353447f5e4266462977d8
MD5 f7fbd892bec1f59228e870305d516a7c
SHA1 3c18d0bbae9adce2820ec4618d99d1c88bd005f6
SHA512 358dd42d18a5e4ee5b0b8ced88f16cc82312d66b5cdbdd9189c3f26c2fd3ac2145fa1564726bf6ec98a28ac3bc2f41922dfa68314e269f77b64dc469f913c9d2
SSDEEP 192:DzAZb9o0+EJiXwJDkJsJBNwDgzYdBkaPeUSvSfPfNPvIwZIPIdIRn6Bl3ZrsW:DzAZb9o0+EJiXwJDAsJBNwDgzYdBka20
TLSH
T16112BEF7C3D8C62DD91156F49B25AF1ECE1A1A28422C3C27C8D8AE5B93E1471E21974E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 71935dd49010d62e50f5ddc633cc9da4a6cb8d667eb2fa275be4f4672f621f50
MD5 fbfa980648256d422ce0a3124399cbf0
SHA1 10bf368dcd3b027e7cbfc0fbe557ce7598438165
SHA512 af247f46459f0f82e44065de06e3cfc1b543bb98c1d30d74d076f2f6d9054ac3101fc6fc0a9d6fed84ce6b373804aee9d01d8fabf4046ddd2b2617fd5a5c9a86
SSDEEP 192:DkBh1HitqJJAZyJH9JmTrTZDgzYKUkaPiSqvqfPiNPiImIzZmNEd7BK:DkBh1HitqJJAZyJHLmTrTZDgzYKUkaqm
TLSH
T147E1ACF793E5C62D991056F49B15AF2ECE291628031C3C72C8D8BE16D3E2472E21935E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 dfa1998021f75d0bb9947a6e710346ceb01e5ee15497c6d750eb0dd8e84e20a7
MD5 cd1b3632d3f0dccfad40295c19e9c104
SHA1 fab51c6efbecbee8793faa970be25a6ee5d01a95
SHA512 87379d312264114dc5342f17387dafcd50242a1df510d558a5eae517ba125ed864628df00bdd2b1d54c5f8b589ea4f2796e33a3af53dc4efe629477199cbdfeb
SSDEEP 192:DzAZb9o0+EJiXwJDkJsJBUD4xlJlzYdz2kaPeUSvSfPfNPvIwZIPIdIRnJE:DzAZb9o0+EJiXwJDAsJBUD4xlJlzYdz6
TLSH
T1FF12CFF7C3D8C62DD91156F49B25AF1ECE1A1A2C422C3C27C8D8AE5B93E1471E21974E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 523B
SHA256 0344f15a4dcb9fab58fa35b303b1cf3d3d6869d298d0265d769c6a57b481b705
MD5 9988d65d887f69e9a35787e1bba30fb6
SHA1 24af2802511ef46f3e0448e9fd150038acba7912
SHA512 964f9a157e732d013033d16b69d9f9cb5279bac1ddc769f337ca82f26e75421cf372d0a757594551548735779bf2a175c4f3963d704f56252a3c611299766861
TLSH
T10BF0597BD7FDB87710BE04E76D08BC0569B9A431068168F4CEDA423C90D25E31B06523
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 c563fc5dbe22dce6ce8d2d7ed22b80a3e986fd7d78062658835b6c2f97ee94ea
MD5 048ec6dd1a0334a527afb10413c1ef57
SHA1 b323227d9aab9eb3776f84924cc0a00da42b23c1
SHA512 9ff0d90d170669cd302f9eb73e44f470b5102db7d37c6c7ffc533424b57ab142760e01e0e8d03c1406acbdc527737eacb8fba7778462983f94cb76391b5f1525
SSDEEP 192:7RIoL4iy+v7YcNpAPRp2M9YHsb+WNnWp/0dpAepQ7VyIsnAUge:7RIoL26NNUXPWww0Hee
TLSH
T14C32942EAE60753B9CDBD21AFA213B53E7F5103231942E80D6FC896C20D75CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 1db986bcd1ff63bf012eca1efc4167e3f11dd0300dcebc17eeca16055efafdb9
MD5 f61f655795510bb12dc65487b2d624e2
SHA1 b00a0c39beedc5c2bc372881f1d3ec53ac2b1088
SHA512 77cb6b7b471a75404eaec9fcb6a214e7dd0c8e0c213f48d372eeac15c1e77c3dec6f879d4010469ec7dcbe642a0716031cd64804ea0d746147ce20910b1939a9
SSDEEP 192:7RIAcBzL4iS+v7YcNpAPRp2RGw6l9YHsb+WNnWp/4jpC2GpAepQ7VyIsnAUge:7RIAmzL+6NNUXFWwwb2Cee
TLSH
T1FF42952EAE60793B8CDBD21AFA217B57E7F5103271951E84E6FC896D20D79CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 974c1d76c141726fd926c498383c822de59cce9a03f744ebaf271dcc579ab396
MD5 19a3726a9e92761c9e8fbfc1ab3c91cf
SHA1 649cfa129e86d479e2c6d2eb591e9c10de7448ca
SHA512 7eb4c45aa06878a20e7b63ce72fbff326de212d2b07b8e2359d37652041db2d9be9000fe8b63fa54c0fcead919cba88e8d4edc5751479c993d0649b0903f3003
SSDEEP 192:7RIAcBhL4iC+v7ccNpAPRp2R3wtl9YHsb+WNnWp/4+pPWrpAepQrVyIsnAUgE:7RIAmhLm6hNUX5WwwPW16E
TLSH
T10542952EAE60797B9CEBD21AFA217B57E7F5103271951E80E6FC892D20D79CC2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 b281e05d77bc9d6fe154e6516152c95ab6364b8043cfc848d88cb74b2a612ae7
MD5 16314120b1e4070edc77a2bcd40b972f
SHA1 41d7016cf39a7678a9a2dce3c9c505c27b3905f2
SHA512 a3036476703f4157fb1f4301e0eb950822cc2ee76c34b6489175605bc89bcc1327c5d69b189046031cf77389b9a45e3ca337949a21adec2dd7b8de23f279f788
SSDEEP 192:7RIAcBhL4ib+v7ccNpAPRp2RnwGl9YHsb+WNnWp/41pQYQpAepQrVyIsnAUgE:7RIAmhLn6hNUXIWwwLYs6E
TLSH
T18742952EAE60753B9CDBD21AFA253B53E7F5103271951E84E6FC892D21D79CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 d35b145e6004f783f2d03fb94db7d27ea3213485b83e7c83a7f2f291001314f1
MD5 09049432b368e09cd86040ee5ef4cb4b
SHA1 6ee285ae28eec898796831c8b120a513538413db
SHA512 260aa95001c7a5228b23fe249e06de3536f53f47ae933a1007579eadfc3823dddc3964c0e79e25d0efde33925ef35dd7016bf4a26e7cb1139804870646b2945b
SSDEEP 192:7RIAcBhL4iG+v7ccNpAPRp2RnwGl9YHsb+WNnWp/41pQYQpAepQrVyIsnAUgE:7RIAmhLa6hNUXIWwwLYs6E
TLSH
T16442952EAE60753B9CDBD21AFA253B53E7F5103271951E84E6FC892D21D79CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f3ad9775424de9e10249a176a7695144f46ccf72d135aa1617b755b393cf7fac
MD5 28c61a42d11135a92cefc352c99d956d
SHA1 772e337279d47067856259ca96f04899a5e3b9ac
SHA512 8036a1c4c36a572e1f941e9bc8061570995e72b5cffbba751b042e7eb4d1297a62c7a9e6b81ccf893ac0b5a16737c80544aa4874995cf42c02a3b8ce04faae73
SSDEEP 192:vRIAcBhLziGqv7ccNpuPRpNRnTWGl9YHaZ7b+WNo+oMi1Z+1pQYApAepQ/VyIsnv:vRIAmhL/mhNCXJWOHeRYcAE
TLSH
T16C52A42EAE60797B9CDBD21AFA257B57E7F5102270911E84E6FC893D20D7ACC2213057
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 7b8e95b4ffc331c92f05b5cdf79023171cef0dac1f5917994e811e7ff225aa52
MD5 0f71cf828d46fca9485f54cede9e3b5b
SHA1 3806ba1530015b0f318e33b22af6928d7468b34b
SHA512 4e47d1019e104d2c706f5a8f980d21625879104ed25787399d801a67275f41cdf645778b0d83f6707234e5b67b4d191383ad004242d38a8241c6df235538d806
SSDEEP 192:vRIAcBhL4iG+v7ccNpuPRpNRnTWGl9YHaZ7b+WNo+oMi1Z+1pQYApAepQ/VyIsnv:vRIAmhLa6hNCXJWOHeRYcAE
TLSH
T1FB52A42EAA60797B9CDAD21AFA217B57E7F5102270911E84E6FC893D20D7ACC2213057
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 13KB
SHA256 5680b1ca05caebcb36632dc61ada052e4f785b36bdf958046adf8dca7fa5a98e
MD5 7b7aa166b7ec0419bff4cb6b226722e8
SHA1 b2c07e5c922a8fa3fde5193c063b331db9140315
SHA512 6cf1ad986f5526ef2f8f0f57832571b8ca338f710d4a98f18d7eacded9a55f79ba1a54371f53c02ddc1499bee08300234169643d4c6ad4f57c7e7505e69413e6
SSDEEP 384:QijUn7KxkXqKf/pUZNCgVLH2HfgslJjXODUL+ErU3AcHGucXvEH/:QiUn7KxkXqKf/pUZNCgVLH2HfgsrrOY6
TLSH
T109520967588CAA3F4FD8D58DDC237F4FACB5015766680D2452FB5C0903A96CB124A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 c92d02b4d944b8d73f3d7615309d2f268e30ce3215eadb45b6d097bc948f4ed2
MD5 77dd41f0d821b158e838ebc63f02d2eb
SHA1 e8cc9add3f221e9458a530b7741adae222fea910
SHA512 54eb9ab60b2ad688e4cef491fa41732078a287a486d42c4851cf16b02bb91543236ff602fec09bb3072743ebbb50ffe5decd04027392c9e1917ecf2b293bd08f
TLSH
T1D7B011203282AA02F8080B3022C382C032A23F2C0383AA2208A20822C2A32030A00A38
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 5702dc0339791f6277feb4e07513d8ba46bdda38d4f98787d479630fede68fd9
MD5 97c1d03642fccdc17b6cb6a49daa9284
SHA1 3c9c073bdd7edd595183e5ee490058743bfafac5
SHA512 86971c1d5d64d3af15a5d1bb8d90b4449d56da417def945ecb03613216ab4eccea7f45a8f5c164e66a468e83ee2f0e4772e16280816e63e54d62819162ba73ee
TLSH
T1A7B01251C7810477E75053F0A1A408947B34081C0F02130E189D6190CB47289300120E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b948c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index~RFe5b948c.TMP
Size 72B
SHA256 b5364a72f0126b72a47f08e394472a9933db4fc2daa17788e87a18d8fbdc78bc
MD5 5103482257fb459ecf54fcb991948ae4
SHA1 7483ec2d84cdc33657ac92e743e73382ead6b2c4
SHA512 1af822b5c5eb035b3ab5673575d0e12b9ab1e50361189795d111fa7032f6af02697564b323cc0e3e99d6b556f3b007fc76d6953c097f8f89e7d8150e40e376ce
TLSH
T1C1A002D2A3841831D501877872A242623EB5CC543F524B0B94958874CE6B2C58A21550
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 265KB
SHA256 424ad3ab2ceb71908ff9ea7d4c853fcc201591d1b8754c03a0d0524b70895cd1
MD5 de7e95f113ca599f231b39b3c861aa05
SHA1 d7de38ef9f02875ce3c974b7d4ee0822707fd089
SHA512 c489d36a784d74442c823a27e6e23a2508a1a33cdbc2ed3a595c44f36289426500e72c72be3373a0f4623206941209844353401f88f4432b9dd5bc163aa3a873
SSDEEP 6144:4U+j0Q9wMY/WByrhHJDGAzXceG0z9R2Ptbmf1K49XLWbEPi4NTKlLzD:w9ZWtyAzX7G0z+ofM49s4NTK9H
TLSH
T1C84412723D46BDA418AE862290549E01DEF4D44FCA29BFF996DF3FCC0666AE58304C13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 497fb4356770235c3c808065851b8f22a3c6fd7215d06be2c5948cbd135cc65b
MD5 ea15225f9c5e1a026c9bb683fd523907
SHA1 09f6e1910eb5ce09debd68f326181261024ac37a
SHA512 91f9a0d03a58bfa96618d0c75c28543a24cbafd4d593cc17686bc723768441ffe7fdb6e62d94d710fab5b8346d5da07be2a06906b27567a08a95596008f30014
SSDEEP 3072:oIvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzt:EPtbmf1K49XLWbEPi4NTKlLzt
TLSH
T1DCD312613E01BCB8E9EEDB21A1901A15EAB8D94B953D7BE61CDE3F4C05A36D9C304C53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 265KB
SHA256 a57fd43cb34f6a782accb3dc01fec15c956cbd761c2810f4f4a206b8fa615610
MD5 c049abd91d6ca26d2ae31370f1a8b56f
SHA1 de4130b206411c60b6f3bd3e6b0523e7f71fe163
SHA512 1bdc9f2e57e295d07dd0bb61609581dda285b8f3debe123a2d1e33045fc80b8101f0613d07c61d1dbda58d93169a85f67e666117c94915ebcc143f8a498aec6b
SSDEEP 6144:0U+j0Q9wMY/WByrhHJDGAzXceG0z9R2Ptbmf1K49XLWbEPi4NTKlLzD:s9ZWtyAzX7G0z+ofM49s4NTK9H
TLSH
T1424412723D46BDA418AE862290549E01DEF4D44FCA29BFF996DF3FCC0666AE58304C13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 264KB
SHA256 cbe31abc48c8bdcadbe514d258b960f5abd0abc85011cca5a758bba99218d35a
MD5 ddc9d2fddc9d56078203e5fd8e3667c1
SHA1 06ec219490281d236bba158879bb2b5a41bc4d91
SHA512 ea3ac660c9c4fb0d3d8cf9a43eb3a1470cb5c2bd6609c6dcb187283bd815c42a1b50d1c26656180dc59b767dd4762e7e3243ffe18d3eb5261df5eec444884ee9
SSDEEP 6144:tU+j0Q9wMY/WByrhHJDGAzXceG0z9R2Ptbmf1K49XLWbEPi4NTKlLzD:X9ZWtyAzX7G0z+ofM49s4NTK9H
TLSH
T1694422623D46BDA418EE8732A0549A05DAF4D44EC67ABFF596DF3FCC0666AE58304C03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 264KB
SHA256 adb365edcc8935e2466c8db51484961c3e8d46b196028c3e825444619357a994
MD5 4a0b2b250473df183d19ed2137fd2f9c
SHA1 94a7ac2c67bf7c484f7a411bb13d35c761534090
SHA512 217f778a2611c76ad4c73c60497bba89ad05f404a0991cc604a9addb100704a5f41bd2fcce34a3b3b5b021bc76cbc21cce3b3c781bf1f6f973112701cbf89c19
SSDEEP 6144:wU+j0Q9wMY/WByrhHJDGAzXceG0z9R2Ptbmf1K49XLWbEPi4NTKlLzD:I9ZWtyAzX7G0z+ofM49s4NTK9H
TLSH
T16C4422623D46BDA518EE8732A0549A01DAF4D44EC67ABFF596DF3FCC0666AE58304C03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4336_665476048\CRX_INSTALL\_locales\en\messages.json
Size 450B
SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
MD5 dbedf86fa9afb3a23dbb126674f166d2
SHA1 5628affbcf6f897b9d7fd9c17deb9aa75036f1cc
SHA512 931d7ba6da84d4bb073815540f35126f2f035a71bfe460f3ccaed25ad7c1b1792ab36cd7207b99fddf5eaf8872250b54a8958cf5827608f0640e8aafe11e0071
TLSH
T1D3F055CB9000FC5E538BC00EB10072282BA603E01AD1726724EC1C0E67DFDAEB143F9A
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1544-11-0x00007FF970090000-0x00007FF9700A0000-memory.dmp

Download

memory/1544-1-0x00007FF972310000-0x00007FF972320000-memory.dmp

Download

memory/1544-10-0x00007FF9B2290000-0x00007FF9B2488000-memory.dmp

Download

memory/1544-9-0x00007FF9B2290000-0x00007FF9B2488000-memory.dmp

Download

memory/1544-8-0x00007FF9B2290000-0x00007FF9B2488000-memory.dmp

Download

memory/1544-7-0x00007FF972310000-0x00007FF972320000-memory.dmp

Download

memory/1544-29-0x00007FF9B2290000-0x00007FF9B2488000-memory.dmp

Download

memory/1544-5-0x00007FF9B2290000-0x00007FF9B2488000-memory.dmp

Download

memory/1544-6-0x00007FF9B2290000-0x00007FF9B2488000-memory.dmp

Download

memory/1544-0-0x00007FF972310000-0x00007FF972320000-memory.dmp

Download

memory/1544-4-0x00007FF972310000-0x00007FF972320000-memory.dmp

Download

memory/1544-3-0x00007FF9B232D000-0x00007FF9B232E000-memory.dmp

Download

memory/1544-2-0x00007FF972310000-0x00007FF972320000-memory.dmp

Download

memory/1544-12-0x00007FF970090000-0x00007FF9700A0000-memory.dmp

Download

memory/1544-0-0x00007FF972310000-0x00007FF972320000-memory.dmp

Download

memory/1544-1-0x00007FF972310000-0x00007FF972320000-memory.dmp

Download

memory/1544-2-0x00007FF972310000-0x00007FF972320000-memory.dmp

Download

memory/1544-3-0x00007FF9B232D000-0x00007FF9B232E000-memory.dmp

Download

memory/1544-4-0x00007FF972310000-0x00007FF972320000-memory.dmp

Download

memory/1544-6-0x00007FF9B2290000-0x00007FF9B2488000-memory.dmp

Download

memory/1544-5-0x00007FF9B2290000-0x00007FF9B2488000-memory.dmp

Download

memory/1544-7-0x00007FF972310000-0x00007FF972320000-memory.dmp

Download

memory/1544-8-0x00007FF9B2290000-0x00007FF9B2488000-memory.dmp

Download

memory/1544-9-0x00007FF9B2290000-0x00007FF9B2488000-memory.dmp

Download

memory/1544-10-0x00007FF9B2290000-0x00007FF9B2488000-memory.dmp

Download

memory/1544-11-0x00007FF970090000-0x00007FF9700A0000-memory.dmp

Download

memory/1544-12-0x00007FF970090000-0x00007FF9700A0000-memory.dmp

Download

memory/1544-29-0x00007FF9B2290000-0x00007FF9B2488000-memory.dmp

Download