b8a1a859adecefdec0e57d65371f792ed8b9440e5a27f363a0dcf8375addbfd9

Analysis

max time kernel
151s
max time network
159s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 21:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
file.exe
Size 75.5MB
Sample260925-zygrpsxake
SHA256 b8a1a859adecefdec0e57d65371f792ed8b9440e5a27f363a0dcf8375addbfd9
MD5 c9381c8e97cb994c5bd01b503f31ed35
SHA1 ea9798758e44b9cbdc3c24ea0d85fb14a9826179
SHA512 3dd2c2c78418a942812790e90e32d6b166a82e0d936c94db7aa3b15c8663d2c11db922a3473b38551cf2c6a100895a62a778f95dc1644b648f24810c467de311
SSDEEP 786432:sbiIVYV7FsKUXTjdJyFV1OH0n5fj5P14Sn7V:sgVFsLGFVHZHZ7V
TLSH
T10A08AE15E3D84B16E27FC27CC2638512E7B1B4421362D7CF0595EA992F63BC1AB36263
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

credential_access defense_evasion discovery persistence stealer

Malware Config

Signatures

Uses browser remote debugging 2 TTPs 35 IoCs

Can be used to control the browser and steal sensitive information such as credentials and session cookies.

credential_access stealer

Steal Web Session Cookie

T1539

Modify Authentication Process

T1556

pid	Process
4972	chrome.exe
4476	chrome.exe
4308	chrome.exe
760	chrome.exe
6036	chrome.exe
4784	chrome.exe
4124	chrome.exe
3052	chrome.exe
2776	chrome.exe
712	chrome.exe
5812	chrome.exe
7000	chrome.exe
3176	chrome.exe
4532	chrome.exe
4268	chrome.exe
5584	chrome.exe
2468	chrome.exe
5244	chrome.exe
1684	chrome.exe
3376	chrome.exe
2352	chrome.exe
3360	chrome.exe
2088	chrome.exe
6684	chrome.exe
6540	chrome.exe
5020	chrome.exe
3120	chrome.exe
2552	chrome.exe
5744	chrome.exe
4340	chrome.exe
6132	chrome.exe
6596	chrome.exe
4292	chrome.exe
1492	chrome.exe
2272	chrome.exe

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-4057491610-3392471755-192832105-1000\Software\Microsoft\Windows\CurrentVersion\Run\PruvaDotNet-63c5640a82204659 = "\"C:\\Users\\Admin\\AppData\\Local\\PruvaDotNet\\installations\\63c5640a82204659\\PruvaLauncher-b8a1a859adecefde.exe\" --supervise --config \"C:\\Users\\Admin\\AppData\\Local\\PruvaDotNet\\installations\\63c5640a82204659\\launcher.json\""	file.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4057491610-3392471755-192832105-1000\Software\Microsoft\Windows\CurrentVersion\Run\PruvaDotNet-63c5640a82204659 = "\"C:\\Users\\Admin\\AppData\\Local\\PruvaDotNet\\installations\\63c5640a82204659\\PruvaLauncher-b8a1a859adecefde.exe\" --supervise --config \"C:\\Users\\Admin\\AppData\\Local\\PruvaDotNet\\installations\\63c5640a82204659\\launcher.json\""	PruvaAgent-2.0.25.exe

Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 51 IoCs

defense_evasion

Debugger Evasion

T1622

pid	Process
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe
6044	chrome.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Executes dropped EXE 3 IoCs

pid	Process
2084	PruvaLauncher-b8a1a859adecefde.exe
2272	PruvaLauncher-b8a1a859adecefde.exe
3820	PruvaAgent-2.0.25.exe

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	PruvaAgent-2.0.25.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	PruvaAgent-2.0.25.exe

System Time Discovery 1 TTPs 16 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6044	chrome.exe
4224	chrome.exe
4892	chrome.exe
1796	chrome.exe
4588	chrome.exe
5340	chrome.exe
4440	chrome.exe
5488	chrome.exe
3736	chrome.exe
4896	chrome.exe
4636	chrome.exe
2900	chrome.exe
5788	chrome.exe
5316	chrome.exe
5344	chrome.exe
3140	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
5584	chrome.exe
5584	chrome.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe
3820	PruvaAgent-2.0.25.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 34 IoCs

pid	Process
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe
5584	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	2084	PruvaLauncher-b8a1a859adecefde.exe
Token: SeDebugPrivilege	3820	PruvaAgent-2.0.25.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe
Token: SeShutdownPrivilege	5584	chrome.exe
Token: SeCreatePagefilePrivilege	5584	chrome.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
5584	chrome.exe
5584	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5164 wrote to memory of 2272	5164	file.exe	92
PID 2084 wrote to memory of 3820	2084	PruvaLauncher-b8a1a859adecefde.exe	93
PID 3820 wrote to memory of 5584	3820	PruvaAgent-2.0.25.exe	95
PID 5584 wrote to memory of 4756	5584	chrome.exe	96
PID 5584 wrote to memory of 1796	5584	chrome.exe	97
PID 5584 wrote to memory of 2900	5584	chrome.exe	98
PID 5584 wrote to memory of 1796	5584	chrome.exe	97
PID 5584 wrote to memory of 4588	5584	chrome.exe	99
PID 5584 wrote to memory of 4588	5584	chrome.exe	99
PID 5584 wrote to memory of 4308	5584	chrome.exe	100
PID 5584 wrote to memory of 4308	5584	chrome.exe	100
PID 5584 wrote to memory of 5020	5584	chrome.exe	101
PID 5584 wrote to memory of 5020	5584	chrome.exe	101
PID 5584 wrote to memory of 6036	5584	chrome.exe	102
PID 5584 wrote to memory of 3120	5584	chrome.exe	103
PID 5584 wrote to memory of 6036	5584	chrome.exe	102
PID 5584 wrote to memory of 3120	5584	chrome.exe	103
PID 5584 wrote to memory of 3376	5584	chrome.exe	104
PID 5584 wrote to memory of 3376	5584	chrome.exe	104
PID 5584 wrote to memory of 5788	5584	chrome.exe	105
PID 5584 wrote to memory of 5788	5584	chrome.exe	105
PID 5584 wrote to memory of 6044	5584	chrome.exe	106
PID 5584 wrote to memory of 6044	5584	chrome.exe	106
PID 5584 wrote to memory of 5316	5584	chrome.exe	107
PID 5584 wrote to memory of 5316	5584	chrome.exe	107
PID 5584 wrote to memory of 2776	5584	chrome.exe	108
PID 5584 wrote to memory of 2776	5584	chrome.exe	108
PID 5584 wrote to memory of 2552	5584	chrome.exe	109
PID 5584 wrote to memory of 2552	5584	chrome.exe	109
PID 5584 wrote to memory of 760	5584	chrome.exe	110
PID 5584 wrote to memory of 760	5584	chrome.exe	110
PID 5584 wrote to memory of 4784	5584	chrome.exe	111
PID 5584 wrote to memory of 4784	5584	chrome.exe	111
PID 5584 wrote to memory of 2352	5584	chrome.exe	112
PID 5584 wrote to memory of 2352	5584	chrome.exe	112
PID 5584 wrote to memory of 1492	5584	chrome.exe	113
PID 5584 wrote to memory of 1492	5584	chrome.exe	113
PID 5584 wrote to memory of 4896	5584	chrome.exe	115
PID 5584 wrote to memory of 5744	5584	chrome.exe	116
PID 5584 wrote to memory of 5340	5584	chrome.exe	118
PID 5584 wrote to memory of 3176	5584	chrome.exe	117
PID 5584 wrote to memory of 5744	5584	chrome.exe	116
PID 5584 wrote to memory of 5340	5584	chrome.exe	118
PID 5584 wrote to memory of 3176	5584	chrome.exe	117
PID 5584 wrote to memory of 5344	5584	chrome.exe	119
PID 5584 wrote to memory of 5344	5584	chrome.exe	119
PID 5584 wrote to memory of 712	5584	chrome.exe	123
PID 5584 wrote to memory of 3140	5584	chrome.exe	124
PID 5584 wrote to memory of 4440	5584	chrome.exe	125
PID 5584 wrote to memory of 712	5584	chrome.exe	123
PID 5584 wrote to memory of 4532	5584	chrome.exe	126
PID 5584 wrote to memory of 3140	5584	chrome.exe	124
PID 5584 wrote to memory of 4440	5584	chrome.exe	125
PID 5584 wrote to memory of 4532	5584	chrome.exe	126
PID 5584 wrote to memory of 5244	5584	chrome.exe	127
PID 5584 wrote to memory of 2468	5584	chrome.exe	128
PID 5584 wrote to memory of 4892	5584	chrome.exe	129
PID 5584 wrote to memory of 4224	5584	chrome.exe	130
PID 5584 wrote to memory of 5244	5584	chrome.exe	127
PID 5584 wrote to memory of 2468	5584	chrome.exe	128
PID 5584 wrote to memory of 4892	5584	chrome.exe	129
PID 5584 wrote to memory of 4224	5584	chrome.exe	130
PID 5584 wrote to memory of 4268	5584	chrome.exe	131
PID 5584 wrote to memory of 4268	5584	chrome.exe	131

C:\Users\Admin\AppData\Local\Temp\file.exe
"C:\Users\Admin\AppData\Local\Temp\file.exe"
1⤵
- Adds Run key to start application
- Suspicious use of WriteProcessMemory
PID:5164
- C:\Users\Admin\AppData\Local\PruvaDotNet\installations\63c5640a82204659\PruvaLauncher-b8a1a859adecefde.exe
  "C:\Users\Admin\AppData\Local\PruvaDotNet\installations\63c5640a82204659\PruvaLauncher-b8a1a859adecefde.exe" --supervise --config C:\Users\Admin\AppData\Local\PruvaDotNet\installations\63c5640a82204659\launcher.json
  2⤵
  - Executes dropped EXE
  PID:2272

C:\Users\Admin\AppData\Local\PruvaDotNet\installations\63c5640a82204659\PruvaLauncher-b8a1a859adecefde.exe
"C:\Users\Admin\AppData\Local\PruvaDotNet\installations\63c5640a82204659\PruvaLauncher-b8a1a859adecefde.exe" --supervise --config "C:\Users\Admin\AppData\Local\PruvaDotNet\installations\63c5640a82204659\launcher.json"
1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2084
- C:\Users\Admin\AppData\Local\PruvaDotNet\installations\63c5640a82204659\versions\b8a1a859adecefde\PruvaAgent-2.0.25.exe
  "C:\Users\Admin\AppData\Local\PruvaDotNet\installations\63c5640a82204659\versions\b8a1a859adecefde\PruvaAgent-2.0.25.exe" "--state" "C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\state.json" "--managed-config" "C:\Users\Admin\AppData\Local\PruvaDotNet\installations\63c5640a82204659\launcher.json" "--health-file" "C:\Users\Admin\AppData\Local\PruvaDotNet\installations\63c5640a82204659\health.json" "--health-nonce" "dd79fdefa43691c37a953c1841aff3106a38315d73eeb34d" "--tasks"
  2⤵
  - Adds Run key to start application
  - Executes dropped EXE
  - Reads the TCP/IP host and domain name from the registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:3820
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" "--remote-allow-origins=*" "--no-first-run" "--no-service-autorun" "--no-default-browser-check" "--homepage=about:blank" "--no-pings" "--password-store=basic" "--disable-infobars" "--disable-breakpad" "--disable-dev-shm-usage" "--disable-session-crashed-bubble" "--disable-search-engine-choice-screen" "--remote-debugging-address=127.0.0.1" "--remote-debugging-port=49861" "--window-size=1280,720" "--mute-audio" "--autoplay-policy=no-user-gesture-required" "--disable-features=IsolateOrigins,site-per-process" "--user-data-dir=C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" "--disable-quic" "--force-webrtc-ip-handling-policy=disable_non_proxied_udp" "--proxy-bypass-list=<-loopback>" "--proxy-server=http://127.0.0.1:49862" "--disable-backgrounding-occluded-windows" "--disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding" "--window-position=-32000,-32000" "about:blank"
    3⤵
    - Uses browser remote debugging
    - Enumerates system info in registry
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:5584
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Crashpad --metrics-dir=C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x12c,0x130,0x134,0x108,0x138,0x7ffa416cc728,0x7ffa416cc734,0x7ffa416cc740
      4⤵
      PID:4756
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-breakpad --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1688,i,157183278693607842,16304192410008473471,262144 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=1996 /prefetch:2
      4⤵
      System Time Discovery
      PID:1796
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mute-audio --disable-quic --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1904,i,7609301378809573152,8090181423568913328,524288 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=2064 /prefetch:11
      4⤵
      System Time Discovery
      PID:2900
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mute-audio --disable-quic --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --force-high-res-timeticks=disabled --metrics-shmem-handle=2296,i,5619680228149976219,4917595560238874891,524288 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:13
      4⤵
      System Time Discovery
      PID:4588
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3092,i,14662797608160053275,16566144034625873995,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=3120 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:4308
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3100,i,4209727610830534518,9476719095216557896,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=3140 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:5020
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3896,i,4502757140746054405,3522237411785124021,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=3952 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:6036
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3944,i,4624332652826528886,8127088189617925699,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=3972 /prefetch:9
      4⤵
      Uses browser remote debugging
      PID:3120
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3260,i,16760596058822894751,9368634415999648914,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=4704 /prefetch:9
      4⤵
      Uses browser remote debugging
      PID:3376
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mute-audio --disable-quic --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --force-high-res-timeticks=disabled --metrics-shmem-handle=5144,i,4033949361025990033,4812939257425811594,524288 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:14
      4⤵
      System Time Discovery
      PID:5788
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=media.mojom.CdmServiceBroker --lang=en-US --service-sandbox-type=cdm --mute-audio --disable-quic --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --force-high-res-timeticks=disabled --metrics-shmem-handle=5684,i,2363847021824368837,12021767214392020483,524288 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:14
      4⤵
      Suspicious use of NtSetInformationThreadHideFromDebugger
      System Time Discovery
      PID:6044
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mute-audio --disable-quic --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --force-high-res-timeticks=disabled --metrics-shmem-handle=6168,i,4404897039592740293,10071707897104496336,524288 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:12
      4⤵
      System Time Discovery
      PID:5316
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=6348,i,5504813469616117572,8644336051295058841,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:2776
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6516,i,5058059577616924700,16429833652110875544,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=6496 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:2552
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6508,i,7219300812510744027,8385974308503901003,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=7012 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:760
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=7160,i,15927660918055633284,16680541720089239395,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=7156 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:4784
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=7308,i,9834047799912513533,9441689974150735973,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=7312 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:2352
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=7336,i,2426659095024273823,11674903223295119852,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=7512 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:1492
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mute-audio --disable-quic --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --force-high-res-timeticks=disabled --metrics-shmem-handle=7620,i,5283384324128927095,4940275411251691390,524288 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=7780 /prefetch:14
      4⤵
      System Time Discovery
      PID:4896
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=7604,i,4610668287830062249,11718453804099040906,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=7796 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:5744
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=7616,i,13056698935285120287,514604600714230964,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=7784 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:3176
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mute-audio --disable-quic --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --force-high-res-timeticks=disabled --metrics-shmem-handle=7732,i,13369553036690105197,15154069717548529657,524288 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:14
      4⤵
      System Time Discovery
      PID:5340
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mute-audio --disable-quic --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --force-high-res-timeticks=disabled --metrics-shmem-handle=7692,i,7622025459704921504,4732540854410665484,524288 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:14
      4⤵
      System Time Discovery
      PID:5344
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=8116,i,8922535099555750522,804821633756191539,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=7644 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:712
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mute-audio --disable-quic --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --force-high-res-timeticks=disabled --metrics-shmem-handle=7620,i,12732269524492847439,13534873824414280381,524288 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=8024 /prefetch:14
      4⤵
      System Time Discovery
      PID:3140
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mute-audio --disable-quic --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --force-high-res-timeticks=disabled --metrics-shmem-handle=5936,i,6701385891905132078,18224913541698744897,524288 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=7808 /prefetch:14
      4⤵
      System Time Discovery
      PID:4440
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6984,i,11813816181862775539,4667681333188109540,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=7604 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:4532
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=8304,i,6808487133072678659,8388549105754698636,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=7644 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:5244
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=7800,i,17991311540984555470,11298389424626579909,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=6984 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:2468
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mute-audio --disable-quic --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --force-high-res-timeticks=disabled --metrics-shmem-handle=5612,i,17028446363109680663,5235824919714858898,524288 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=8292 /prefetch:14
      4⤵
      System Time Discovery
      PID:4892
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mute-audio --disable-quic --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --force-high-res-timeticks=disabled --metrics-shmem-handle=7788,i,6677509208035250540,7953594956823327147,524288 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=7876 /prefetch:14
      4⤵
      System Time Discovery
      PID:4224
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=8268,i,8902967389891110271,11813738378749828573,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=8112 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:4268
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=6912,i,1561898225390267349,3031691634683767668,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=7800 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:3360
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=8220,i,1211252957547885545,2237059328650017986,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:2272
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=8500,i,17041934070149110457,2819502700367718316,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=8328 /prefetch:9
      4⤵
      Uses browser remote debugging
      PID:4340
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=5908,i,8054745777861991178,7740620470269847755,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=7808 /prefetch:9
      4⤵
      Uses browser remote debugging
      PID:4124
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mute-audio --disable-quic --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --force-high-res-timeticks=disabled --metrics-shmem-handle=4220,i,5741054872139625582,7390939697066983568,524288 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:14
      4⤵
      System Time Discovery
      PID:5488
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mute-audio --disable-quic --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --force-high-res-timeticks=disabled --metrics-shmem-handle=8060,i,17195315992240912684,7794500119790790740,524288 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:14
      4⤵
      System Time Discovery
      PID:4636
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mute-audio --disable-quic --message-loop-type-ui --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --force-high-res-timeticks=disabled --metrics-shmem-handle=8116,i,16732203487538722143,1519414559082654137,524288 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=8644 /prefetch:14
      4⤵
      System Time Discovery
      PID:3736
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=4472,i,13682776098029895085,8592359998492124137,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=4000 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:4972
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=6328,i,9530059469610005229,12370810005148569577,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=3908 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:2088
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=9024,i,9431602195956220742,15741340321862287778,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=8104 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:6132
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=9040,i,17960885756309071459,13921730453479630991,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=4708 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:5812
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=8852,i,16249690720385561331,15490531596028814608,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:1684
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=6924,i,4217299121784650738,3389476966593445096,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:7000
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=7152,i,7435305354312505849,16276866194378447048,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=9016 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:6684
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=8104,i,2820438078928717804,8811411035626833882,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:6596
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=7172,i,10094239004274721993,6447009427602741947,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=8304 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:4292
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=9196,i,6839273326497015289,2539333891664588868,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=9208 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:6540
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=3632,i,7425975890975788038,14470812715617084131,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=9096 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:4476
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --autoplay-policy=no-user-gesture-required --disable-breakpad --remote-debugging-port=49861 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=7040,i,11856044867071845394,4148385939552650308,2097152 --field-trial-handle=2000,i,15342275043341165273,2475999923278433082,262144 --disable-features=CalculateNativeWinOcclusion,PasswordManagerOnboarding --variations-seed-version --mojo-platform-channel-handle=9080 /prefetch:1
      4⤵
      Uses browser remote debugging
      PID:3052

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:416

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5388

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:5864

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:6096

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Modify Authentication Process

T1556

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Debugger Evasion

T1622

Modify Authentication Process

T1556

Modify Registry

T1112

Credential Access

Modify Authentication Process

T1556

Steal Web Session Cookie

T1539

Discovery

Debugger Evasion

T1622

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432.revision

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\accounts\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432.revision
Size 4B
SHA256 5abdb6175f820f0ac3d8647fbb1f7a0bcc91757a782a8a145570944ca6a00c96
MD5 4d853d9c7197ee7fa81c6535b1f7d655
SHA1 eac3d866e991967b385f3dd22da25e410d8f7f49
SHA512 dc5a09d8586eb9f591f6e00187817c19f693e9328a1b2e5838c61c0b234e9608eecc45bbf7f4a90912e9a456d0ab469ed2503bafb4988b276cec8d5f0b18fda7
MD5 SHA1 SHA512

Submit Download

f_000001

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000001
Size 46KB
SHA256 a066179a350981de1c9f547d9e34f029f1494829ee406f0a964fb3cfa03d1149
MD5 80cc27747fd4e77cbe82a5f68bf9cbdf
SHA1 a183a8e9d6818726c6fa098645e03f3200665e93
SHA512 dc0140487b1360ea0f94de8aee2ca1ddabaaacd5f24e93ef07f1fc134e534aeca8c64f640beb4b49a39971fbc894f609f25ab1c01ef8e1f5aa1b2679cd868af6
SSDEEP 768:Ea8re9RhGfk5IkKc2oyZKCZ6wxI9dsajxn4n7vG2HYZlagBvUJd6j/cK:EfefUk5Ik2r4Rn46r/agOnK
TLSH
T18723F275C3EF89905F8F32B5FAB34DE50DE522FEAA31B995F94C00A07080EC6B958545
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000002

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000002
Size 47KB
SHA256 c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4
MD5 65850a373e258f1c897a2b3d75eb74de
SHA1 1dc044f4824fd5af6bfed67fee48be70fa069f3f
SHA512 df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b
SSDEEP 768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA
TLSH
T156230251F5F8624A7FC3003FBC317BD862909FE5996EE5D91288F30225611DD29EE017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000003

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000003
Size 58KB
SHA256 34614d3ffbf4dbaf42a310f3ae5f0a3f1408a3a3dfd558e9a941b3421402aac9
MD5 b96bc8c1ea514d69bc918baa03ffc8bf
SHA1 896f89e450652e9e239bec59879743c62bd5e9c1
SHA512 2b3c20f29fc830c80b93409f54e7f9eac5eb5ca5233ba85fb86fbb625c12c11e850d3683b0e4bcf3ccd2df9e96759d40198bfec83c53542d093c3855b6351595
SSDEEP 1536:zLzzigET9HG/lvaHljlcQXsYpCrZ1yQaVpIf1BkvoKr:qRBHG/sZXsPZYhIQvoKr
TLSH
T10D43F166396C49A38857C425F117C3FBE77295D8EC07C29E81BB4869909885832FAFDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000004

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000004
Size 19KB
SHA256 fdac49686095a59e0786903eac4df058e8e548865218d9f6d5d87b0625ab50b5
MD5 cbc1cdd7b6c184e93cb51f95b48b9592
SHA1 23732ded875c7a6e5ded94216762fc4623f1c878
SHA512 aee7981feab697fa163b97032e660c204b831eff450360a5cdf7344db64752f068c2c2742d4fe525f7c29aff0ab3bf09849028bfa4c9a239a5030d55dca9f149
SSDEEP 384:2E6ZJlaw3RuR2u0j22V1HaNSiTep7uOF9ZfuRUS+k7C2ePGY53InwZvE:2E6ZvFY2tX6NSi69PFzfuRe173dM
TLSH
T19592D0EDA66B5310D04EDBE0DE0A85D700AE2779E3572347388EFCD45B6F44646D18AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000005
Size 54KB
SHA256 09cdb6910430b67827195e633d01d0ffe886b42a5b1b0dc928520c88831b3950
MD5 f2c550050a9e696827fa73af8a63e5ca
SHA1 aba4a06801c1849f26588c5777041debc46dd3b4
SHA512 099ee500ca5ec0b3ef38f26bac67408bcb775735bca53bb24e55aed148461d92ec653e5e2541466d36e011976670abe8ab096abc73dcdffd19313179e31abe66
SSDEEP 1536:cVRbHYwz02UQjKimDiTqHfBej4rfbSIBsF70lZIcgC:czNQ2U6ADPejMvaAn
TLSH
T11A4302F223212BA7C9D6D0EEE705E4871F528BF9C9593F3938756EB470A5484D8F0980
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000006
Size 54KB
SHA256 ac25c74d617aac1c0d5e3a32f1f94c8c707c9e6d81e6e85c0e3faab75f2734e3
MD5 7cef32dd78b2495d828d48e21adc2681
SHA1 077e498ba9b3c74cad26effaffad4097c299c02d
SHA512 0f0bfdfac77a7db933de17b32beb5e10b2e01c2146f7e0dcdb92669dda13dc8fd578169f67196f36049e6526de16e0d58d99af4d307f7495b207a0fd2dce32da
SSDEEP 1536:JZ2u0EO/hdhVFY/HmLLROJUlhiFrAECl0L:X41uGRDhimEVL
TLSH
T13F43F26E739A1F8093C558E230A4E2183AA942F7F5C5D47F584D594AFC340C94E8E7BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000007
Size 190KB
SHA256 e19c03c8b56589b6e248965d803c49751d6c8f639e48f4bc718026d33a3f9a5f
MD5 c1c5c52c28de4cae1ad73fc2df033e7c
SHA1 617a6be2b218e14a4225158d6eb08064563a9399
SHA512 0665e7745acd565d78c655dabc75bc3d67352e0a6526454275bb79ad86445332a368184d43251e3a436d7f073b00732cf2d973ef464b9b0489770bf936ae8e19
SSDEEP 3072:uuc5VyPHYHcshk5YG3PkE6FAhSi+Wn++KJ1+OG+7YAMMEF+s+OW1lO6SFib08W4J:w5UvY8sh5APQihSiyfa+E8EF+skZtZW+
TLSH
T1CB1412ECFA0E7D65855800FE628A8B3D5B8E8C10D1C900E9DED501F179ECE88B5BB795
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000008
Size 26KB
SHA256 b7c8fad03af9459a3fc0b09fa1c61aff6acea8335c7a0b91130550cecbfe4ca6
MD5 d162b7a9ab164b6abb13f5a45b0ab811
SHA1 af5e8b9f4d398ab47dbc3217521cf63abe264470
SHA512 7b155bae06350aa1134662aa8362907fe4d558de430018e3868c7484f558aecb45376f79bb98f0a474ce3c03f063e892f107961927315999e93069c30dc703ee
SSDEEP 384:yj472h5pndCxV2HBbtSvSc5T9qJjsBTwNzlwfn8VDnGJyGh1DZPuVRVBJe64egT:yLDRdeAT/StwNJRDSnzZW34egT
TLSH
T197C2F25EE90B975F39EE72F8B16FE5E590EED602145809F506AE003620E10FB8544FDB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000009

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000009
Size 31KB
SHA256 fe0a668082ab6c3acfda75f8003b2ee9e25a1e82759a10368ed8e43630a8f911
MD5 87b07ab0471527dfb154c08cd1aec792
SHA1 9f381732dccc684e59d88885b3d71f0d6e4ee687
SHA512 ece31bb2d26df480c45e919019d013ecf38966a8d4f769dd64065cd318d5add8f90cda30e18b77b1a6aac9a3748fd8fb952d307851de322813f5147de0aa1f49
SSDEEP 768:BWZRvghPelyyKg19sorp3/I9r3AS0jF/s:ThWl4g19XV3Q9r3P0x/s
TLSH
T1B9E2F1F48EDDE3692C1B3F21D4069E521C8E2A9C81264E071D6FEE0EB424E94B65D9D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_00000a
Size 34KB
SHA256 250ad4a9fb4c8ecbb2eaf975af3e2ea1115a490114d14924cb06f9d61fe2fdb8
MD5 000528327aac0b4e0e4b8525fa7a0912
SHA1 2865c0d14f66c1c571726949695a907d6da7afce
SHA512 aa9e73c31b769488ca3b18da2e92e845264a9231c397b9bdee299dce5e34cba9d7e109c0d6bc2eb9e9927e6aad81adfa9dfac775eb829b26ffc93940e842c757
SSDEEP 768:GcssgJ2tL/EakDdGRWxfJWXCLyn4+mzVwi/lJuTAJ:A/QhIUIxWYy3mGi/8w
TLSH
T1DAF2F129D358EE0E39AADEF2D8D529691F08FF4B77A850580C3151840913BD5AC3C376
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_00000b
Size 25KB
SHA256 6be41d529a3a9d4e0105a312d441e478e6733f5779f498e93438e45ac3676734
MD5 e9cd64c698c2ad28eaabf8e383b4bae8
SHA1 82bcb9f0f2bad2eb5cc0886f20adba85a821c77b
SHA512 e86d52d0786493d772cfde9de0a5c5afec57c2be68a880c4499d46e50238f0450c86c7480e158e7838dd5e7dbf8de40099d5ef962686cf2dd5aacd61d0830c47
SSDEEP 384:bXz5/+Zoc/g2Wv7zhW+xwI0VFVz20wxRDmHQ/De5BtNErAPO7:bD5/+WB2mdWQX0VFoPCQ/De5TNiA2
TLSH
T1F1C2E10A7EB527A876BAD10BD3D9625573FD6086BB4BAD598004D08338102DC367BF39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_00000c
Size 71KB
SHA256 93f821e37a090098a13a4294740de1a53c227cc213e6c9d2bbdc0318f4e90bcb
MD5 ba3d69129f6e3c5ad8836ad59d5cbbd1
SHA1 e387e7cd947a052933f4852c8d28301b1a1ff0ed
SHA512 24de35ec3a0e2ed81f15ae2fba1c645e48eb595c4aacc320e4fda85fb854d3b85ba2f0c06dcf7e9440c6b75e6429505dd2b4f004c1a6780dc4437bd6e4ad23ad
SSDEEP 1536:DqFE6TNs/ntHZVWFXbwQmrbTtex1LZNOTs5t0jTb9HPerM744Gdgd2b1TZ5v:MC/nhZV8LwQ4TqXNOTsUvb9vHfEjF
TLSH
T1C86302CF175C397382C161DDA189782AAB41F1217E1ADCEAA94793F4D0C7886C5CB7CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000d

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_00000d
Size 19KB
SHA256 3e90e49cdbfd6c87374f9f61faa514e72b3a62b09486e573ace3c34938e84952
MD5 f7eb8edfbf744e16546bc1ad4db8b822
SHA1 a4ee1a5b298a7bbbf8982933916dc11a7cf54840
SHA512 efd9b46744e269963ad4299526c7a9c584b2ab6d074b7a5cbb9047894e0d6cf77fb9e1d390111de12f6bb4b72c724517cbdacb8ac757471c01b28628b6f0fca4
SSDEEP 384:Q40CxCdBjywfn0IeFCQa2BiGbtNffd4DiEyJoOdYHGkIuZO:AP1foh3bznMTUIGkIuM
TLSH
T16592D1BE1F45EB5532DB0CF608A7306D667C518E4BB927487202152FDBA2396CA3C41D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_00000e
Size 23KB
SHA256 d992e26ab898308e5cfede7275e9f522923e5cb11730d4a7e2f5acec70d7368f
MD5 4d5c3a3fd798d9749fcf49191abf639a
SHA1 71286f908f8a05c665fa17550f4e4b3be6ee3127
SHA512 0959b9f60d206faa37520745d21c4e9a8b42655295d6dd6bc453063d1a6eb8f212a402c99b0055ff99f2f2d777672c85e9c2f6f40ed86eb7afabb1683036ba07
SSDEEP 384:KcMMn5KnoY4bEXts9ynvJA4CoMV0XqCzjicqZyCnJpKdVgAtzqiMkfC5hGg:KqnkGbEXmYnvJrei9icqZhBAKn5
TLSH
T157B2E1F1C2869A5B6484EA4A56A2C458C1775E21FC876ACEFBC607330407C52E13CBFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_00000f
Size 44KB
SHA256 89a565d572264de76eebea7ecbf2e656dfcb6b9903046a4d40dbf7859503357f
MD5 6b11f56f3b425dacc8d885491dfd8e55
SHA1 427f61320a2d231d831c06be48672f756438dd91
SHA512 499e24747e6292ec4bd27712ed185007ad6c7e4be9b1b870b0cf697e24289025a55794c4402194b1abf22bc453bab8862ea77c951dff142f07e618588f1206e6
SSDEEP 768:MjqQcobhfOYTtc1KQwSW6Lyca0bnhydkfzt+O5vtiwrlm3652UcHmk0WcXl:MXxb1Omtc1f4ca0bc2fzthpm65AGk0P1
TLSH
T12713028C492837D7EDDD2F0598E1327E792144F5492BEB6F8DBA0150B5B2E03C8C5D8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000010

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000010
Size 40KB
SHA256 4905d6e19037ea212b68198964eeb559f986a2223c8a5c3039b0ed4c5b6b5e9b
MD5 088322d97438b6aeb28f04616cf5efe3
SHA1 66452a21f36a808048356e55620f0a0f6c0b182e
SHA512 07502d3a2004dfae11a0225fbb4399b4a28de3cf120feaa08dd2e1de4e0f788ce65acdc07f5df9f00124c63cfd4f033a7d9a18d7036ad408a40dae0c9fc58104
SSDEEP 768:84s00YkCORKkyJzhBY7Gi1adY7/wqUFrFFMon1qWnexiaf8wNvjI0G96k4:600YyK9RhBY7xT7viFFM+qWeooJNb2m
TLSH
T1B41302B4C88CBE8FD5CD56719762BEBB07450BCAB1FC2ACD513A48198B8446B2F35631
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000011

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000011
Size 116KB
SHA256 9f2d1f0518f6675e8cf3e352ef9147de7b0c87d52085933c9616270c53314db2
MD5 bdbf2fbfc047cbed65e5ea0eeb6788d2
SHA1 bd84c6c2413bf478baf24d5688b69642db9dcdb5
SHA512 27b00ecd1cd9b9b401ba1a75dc6aa4ca651ccbde707dd16c41d6084789363c4a55b24f6a165b11dfde06336386448e26a8269e9f2972beca2fd201191cd19508
SSDEEP 3072:A0/0aT+jS1wOAuY1kxBhpVf8VAo4G2juWysy5nVrwJX0p:xsfS1W1k/LhGA5GfNkS
TLSH
T118C31279969BF5B9EE4C81CE77C88C1DA4046145ACD34B80C0A1ABEB31D3DCA0E7C6D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000012

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000012
Size 19KB
SHA256 e2ae70b420eb355da3e8557935457d88085453e189b9462be32d20de57f3f7f1
MD5 144b93a8429b49e95aeb41b9e14a9cc8
SHA1 89439ebd73f00f6ecd5777089189e0129fd5ddfa
SHA512 5bdacd7082ab82d724853db07dac58c13f13ddc38772f4e7dc4d6b07e3c2182316aadeac1bded82304947b2784918756b2576beec07a140f0fd9d9520b19ad6d
SSDEEP 384:6Vx5TtjoaFxc0gRShxTD8LYUE2Lx+tiX+xpGNxzRvMp+yCNmbhRHJuy:gxbjoaFxnNTyYU1LxEi+4xzRH9mzHJX
TLSH
T10292E1C47823AFF45D2BE6A9E615EF40B310F5942E233272A9442C56F94B077E9ED438
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000013

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000013
Size 42KB
SHA256 c2e0c8c63be7d33341e4620ac04ad8714e11f1db6e4787e826a8c41fc9b00c4b
MD5 b19fd9671b506923649632fea36e75d6
SHA1 e705e3907fabc3f9334c0911dac896c9865af898
SHA512 a60f619c00c6915e8581f310a0e93b4837f9df8532962b5cfb106b61e2cd9ce21ba11d3ba6f8d29915f8c87083a32b31d5e6cf92bc5ae16623f6a3f578a155e7
SSDEEP 768:65W8fXUnEs3V3g+RwdbIVdn2rzcq6UqMm4vGpmfnb5akF/lRc7rFLf7q89NYKX5u:CPPrsFyUIlCMmjpqxF/rcVLfbgKCg6qw
TLSH
T1CE130250607D788653BD24E19AEAD2B3A08C492B42C53A56C3FCE0B58A9C3EF5D1D13A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000014

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000014
Size 64KB
SHA256 7c47571f689ea41e1318c451d0fdc326ee69ea452b021a6b6a530b02d47d52f8
MD5 109062a693505959829e01adb25a7aee
SHA1 41135c34b834c8e24832ec8327776bdd335ff64c
SHA512 cb1555a934cf8b7646f351d0e8c5145d58f4e94f5b64fc0d4f69a23bb5a4277d6c3119b18cc4003da71e36be082d10557418e460be37e38f8d3063f4e3bdf010
SSDEEP 1536:R0QtIP4+fe04443uPdSwjoxbgZqh6p5USGh7/Z+WCabWOSz90vUe:HtIPC58SLgs6pODYWCK5S8Ue
TLSH
T1A153021104DB3D4033A333DF7A398C75274AC55AECAAB4B167A48FDA724A527F788139
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000015

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000015
Size 84KB
SHA256 d30f27a03bcc6c1e4ef0b25e2ee81046bd3f00e632c44bee53a3dca2efc496c7
MD5 396bb86fda6e239bd728c64b3ad376df
SHA1 9bbb4e1e76e2c932d6b1d19ea70c3785bf60e142
SHA512 0384e7b54534b9801c73a7e1edaf517c7b7eef3e93f22dcdfc73c4062d6f38857f70a5f6d5e0dac07f9fb27edb571f62e83fe84b74083cc88c8d402a1d1f47ca
SSDEEP 1536:oZwtCmkTx0Zlhg0tWdRL/meDsQTExxVSQZejiOrhJae80OPSBVEk4Y:oD3TCZltWdZ/mAwNSMqiIhJaeCP1K
TLSH
T1E68302D3D90A92B650E3B4881AD267FDCB0DE3F798C12796645F7CAA5A4C37C0839712
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000016

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000016
Size 38KB
SHA256 b135e893aee9fe1af5fc844b8188915d7818f5d37985f9121367fc1d735dcc76
MD5 baba9d728e31637363405f2de959ed06
SHA1 9b88dd78445d8512fc509390b5875da449d058cf
SHA512 1a8334a3c7e8f03f664617246bf6896522a2fa8e61fd5bdde26a6b13e51065eeca943075b144b2d4cd84263ad336a2d967f381fc642f3268d23aaefdddd94578
SSDEEP 768:kWnmQkJuEprzfb7PAsFkrOpLrIcwyYuOnN0sUQZCLqtJjddoX5cBrg7:/RkUEprDJFDLrTyJNUQZHnjddoXuo
TLSH
T15703F2CE293BBC06C7AB1104E5AFDA98543DD41F307A0D907A875E11A7D269E2D5F60C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000017

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000017
Size 34KB
SHA256 57d59509e19a8626b6abf89c83c5604f8fbbc0509dfbe9ad85c3c9d6335bd69c
MD5 c83e6bf09e4a754e865e3eddae362228
SHA1 5522bfdc924ed9bf7d0f327d18269e65a50ce90e
SHA512 deae1bd934aa9bd14665c8de39b8cc3614dc9c756cacfdbe625f67f86b5b5cf34199166806128f04a86019cf3ab7bd3d42a0a2068d7137b9a78c9751d7d47865
SSDEEP 768:J4lxZFvr/dvLH1urSRiTdhHyVbF1pD+nRmHMaTSD0a22ZgBI7hqZsQdb+:ap/ud4b/pDYRMSKB/ZTJ+
TLSH
T1F2F201280F58482134702D24052A9DF52203182EF71BDB7F609DBF87169B6DE4332BEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000018

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000018
Size 19KB
SHA256 4c7e248646613b0b09312cc554357f3c0023ee3a9b5f47edf4a6c46160612711
MD5 7f9dee960f69540b3e9d3a512644a0fa
SHA1 b382d2202565ed7140d7704411ac90d100dc86b0
SHA512 ffa7159c3164c9b692912df0548e4deb4cb6487328eb06ecc514df739825cd311b1710213666d9fe4a9d759bd35b973156f295708cb34dfbe13a77de35ab6b2f
SSDEEP 384:Ygy9jMjthQJCo9lyU6bM+SauuGVOU9MeE1nTqSiPCPx0O0IhgRu4A/50:YgqMPQsoTyU6grauuGVMf1nmjCP2jIgd
TLSH
T15092E0289FD874D2453BA07A2508C9FE133111817F2B5DED3973FE660E36869BE408B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000019

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000019
Size 60KB
SHA256 95c3c097297f519a17b4f4f46ebedb8e3c61c24b93be342ac6b8d01f97e10584
MD5 c745dd772a1e0d5a4041783244f525fe
SHA1 1d9d8899066c840e3e27e7ea755766a1ed972bd5
SHA512 34fe3a9cbd81c1695e593572137344e315d6f7235aa6a75806bba940905cf9c52c97d0fb6d2b0037eb934c8954202f684a0e722b8a0f793b7641761ffd2faeb5
SSDEEP 1536:QLgzUDmOHMe+howeD4KimRrKYesZaZXIP0T5/yUz2K/Cd:FimE4KbrKY1IXIP0d/bzf/Cd
TLSH
T1CF5302D546CF8EAC7334D4F32CF0D421BDBCBAAD828E2D9D64D5802A4756A14163FA16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001a

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_00001a
Size 201KB
SHA256 4c2f4ab3324a85467642aacce9f5df8ce84b049552158723ea173bffed5fabbe
MD5 140830862732ac9f5c6d9346a8c0a226
SHA1 2c990ba633047c764822f10ca683e8bcb6739efc
SHA512 c52f519344b03c0addb0b663434bcba53427e6189e589477a3019cb652cda798210f323936d63ac5729cb1e0b5d28d53e773efb8738fb4671fe2edfcd652a37f
SSDEEP 6144:XB/mSp4t9IO85pXbFKhdI3H6xgpr9ojw0zs68:XcS6tqO859bFKjyUdo68
TLSH
T12D141399C90919B537BB3F84B739FAC90A5E801D89334977F87023442FC4A8BC99D5A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001b

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_00001b
Size 26KB
SHA256 b4f6b9702836de77bc084af1499ca0970e64d695a345dc46a3fbc2b271d7010c
MD5 499b639914c7ea804cc86c48dbbea95c
SHA1 04ea55cdcaf0d636603e4cc5af9ab6978bcd234b
SHA512 04d4e048f7cbde42e1a084457c6ee6e59e2495a37ece329deae7568958d55a557ab19ef32b5e3a95ee91c8bdad5f3ac7e044a3140cb2a8c98df697facc19debb
SSDEEP 768:NBgV9S8oP2V5KmXgpZ8nhNrxpOM/vF6R9SN/R:NBgV98W5Kirn7rTOM/MW/R
TLSH
T199C2E186AFBA063292C2C07D4B4698762C967D3BC543EA55A0ADAD00CC3885F793D2C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001c

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_00001c
Size 78KB
SHA256 d7406b3f6383a036750822a1944563549308c12572156e88f3c7943bf9ac878e
MD5 63c60e10d4a8d22acd792c82e7d9464f
SHA1 4e33ce009712876087179f2a813532d62e1f6a47
SHA512 d7842512f574dc5bc634bf458f932065f4d370476b02e2413c68c98bc036fa91574f2b0d7c8216d57fe6da12108f9ba736f6eb08e1541abf89d2e23617d58db4
SSDEEP 1536:D3xfAtCv/Q9bJwJUdVY4p0rybqikimw/kQ+Q/dnJk3bQZDxkjnr63z5:Dhj3Q9b8A0mbxkimuxj/NWLNPYz5
TLSH
T1837302479D300C6253B01C2B26BC7A0372EE24DD59925B313294F7A7DEB6FF66924C62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001d

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_00001d
Size 55KB
SHA256 25a6e3287dc72f5be2d95a60e3bc9dea77f2e316c252b55db9053a47783a0ad5
MD5 e03d39bc9c157812a5a28e079fb5694d
SHA1 1030d6051db65cd0a16cb517e4f4be0af9f080d8
SHA512 8460e67bedf4292a3bac167e1412eefc8d530710dd8e6f0ce3c2da300bcd6c745c09129eb7ec6bada3bce88e8ac4c6634384d22efa45906998caa4c14a5b30a7
SSDEEP 1536:VhRxVVsdqkwhbvYiV9McvLtT6yCs4eGXaXS:3RxVVsdqkwhbP9Zv5tA3Xai
TLSH
T1B4430257BE897A5648FADCCC0E34B1B561BE187AF073526622709206CA5A4BD1FDC520
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001f

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_00001f
Size 59KB
SHA256 66a6c3982f551c1a0705d11956806341beaa0cd2efadb07dca7d3e9cfa502f45
MD5 0aca1abdbe2076eb5511367a6a6a2acb
SHA1 00aa8281a3a3471b6fb6cebe48fcd535b210c06d
SHA512 594a255ff44ced312bfa1765467f4bcd12e521c9af7db00726a721260a40d9f8f20893e87c9aecfdf3cf79bbbe1536a6c18ff8b44dac4e1d416d37aa68b72c05
SSDEEP 1536:GHX9dJrbZy0bq7UJafWWY92RZQITokWbws1U5/zkfKgF:E/Jg0bq7DkcXrWkNBPgF
TLSH
T15F5302C3E183631D65BE2E0D51315428CAE7A2C25AC0F56A5E4F3A89EDF36F4F919207
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000020

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000020
Size 136KB
SHA256 8efdb51c1909660846d05a6885e5602ed622dcf4fc8cc40a62b64718a34ec124
MD5 d63bc90bf9ae4845031db4719db8903d
SHA1 6ed42e959c2b7c38bb768557887d881764ddda35
SHA512 0fd2baa923c54e3792892ede26bccf6ef05da1d844bc8fa6e2b9d62a7998db03734ff0ea62d9066ea3459b652c5e30a675fc3cbb5c995b71892ef76b95a6e5b2
SSDEEP 3072:LbB0sm+4I6RnnxuthgKizSBLMi1Um95wgnyRU1IVG75PCtl9soI9q+9:Z0P+4TnY8Fz2MqbbLyRUBNsep9
TLSH
T1EED312B6F963437A13DB829724B2D486C7C7B34B24685BEC11289C58925C4DFDABCC98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000022

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000022
Size 17KB
SHA256 b5ab36f1cacb74e9bbe27497f690338c055ea0c130f79f5e5139c8d1016a9849
MD5 6e8c64e8b01e9f447ffe6399c0d005cf
SHA1 830708d72d9944dcc8d00b891a9d221a7aed396c
SHA512 00fd85e3766fbf7648b263c809c3d8400aa46fea355e055d7e99b81669da77c41c92e421b0d69c70aac1261094a544aebae278d3e62803444b58e814f7c1c32a
SSDEEP 384:mKkBulXA6i8Ft/ZGpXpbKWN41rnLwcmv7JMO:qclQ6i8zipbKe4BnL2X
TLSH
T16972D04BAFB1278B24433DF350409C2B1B2E8E27D947D64851DF927D28917E0F5A4AD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000023

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000023
Size 449KB
SHA256 78bdfe89c7140235d86fa4cd6e86168487b16d3e76c7a2b91c505505eb01c90a
MD5 df94509b57de347a3285e6dcc78e6c11
SHA1 2c495fd59a5c33826faf67a7e652a1de65085de8
SHA512 5814905afd4f81691bdd300afbe245f95f8335927a099f8dcea477d98173c4c79af302cc2a726a146a8837361f674445c28120f5a302a356ae813b05474a76a3
SSDEEP 12288:e3fSYEJ+4bBlAHMMGGDYB9ypSONN1fb4uKiRAcyHq6tqhznz41:e3fS7T3SRDc9SrfMuZAfttYy
TLSH
T1E0A423F39CBB788360BE345B6D63CEC4796605814302947C5E9FFE90EB297C4B19A225
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000024

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000024
Size 346KB
SHA256 9be344d8aab52c80881980d24ba1435146143794aebbeb98bcae9a4b41f0bd16
MD5 fc31feb6dbd996017ba0751ebf1a2be0
SHA1 d5e54654c86bcbfc7aeed4377e9183421b5f63f4
SHA512 21a4c7e4b3c8f42a8886bcac34a50ae30e61efd3c0443b66fd3cffc54caaf4265d4ee65521051cc530e2e1dccbfb877a303a119768406da737c3249ab577b0e5
SSDEEP 6144:r6PyntaVKs+9xeKjohEc1avaW5Id9Veu22qVTvHodWVjaVrQXcx81E+/SnCCKCDC:uPynjs+9QEcyIfcN2YTvHo0VjaV2Z/SO
TLSH
T1FF7423717998940FD4622800765A6FF51C403FAFC52AE6E3677B10B34D9E4A7347CA38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000025

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000025
Size 88KB
SHA256 bf9ee2907a9b2b59c06c909998b09582726fc4536d208ab303fe3bf48d6a0d4c
MD5 80c1888e2ff18603ec23d10b3ac52195
SHA1 8e1d25de56d98600cd5dc7695eb321a31583f690
SHA512 91a76fb2d2ced3c09dda0d63c6699df3b7714d8fbc6fb1d6a898bb58d2b6dc17ef1f28bdde0eafb18923dc5ce59f67639b8b381b103a2f8785628533a47a77e8
SSDEEP 1536:9PgfZp3lgH39VuHVYxPn1mX5AOxONFv/EBxVG81Mgfh/H3TiKKtEIKcFjtA6UaK8:5sSeVY11mdCFv/6z1MgfhOccFj69aK1e
TLSH
T11893123DC82387324076596FDF8251890D89C5C36CD7188D1C8721AB92CE96860FBEFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000026

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000026
Size 23KB
SHA256 63186e1685a8a2b1196ec61190a930bca4645724e4f05f25e254bbbf84507b1e
MD5 95da31c572cd10bf7fc87bdebec6c48d
SHA1 3a1a3a25535bfaaa836071ac2bded72f9ff9c953
SHA512 d016e62aaadd9635c34cdd745336ea6efc20cc6288a1644a2e31cb4d19b394e7f0cb22419d5f1d692685f364fd3587ee4ddd0af11a33935fb5497406b8ec8324
SSDEEP 384:o67n1WHPIoXNneGC5f7KxZtDBdihQ7y4zCBadDdUF8/e3cgUPwE1W9uNflsBW79o:eHgoXNnexgxLWhQ7XeQMR+w9siW7G
TLSH
T1EDB2E170E997197F28DA2108F69343978B48769DF8EE05B9C39DE827B8045EDD36C821
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000027

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000027
Size 17KB
SHA256 2f588b6ba32bbf16833a7ae27ee6637d560eac1c662f3679701e8f7eb1457eda
MD5 311a46527a006e2a5d57cd9de33ec27f
SHA1 5b891113f20b9c91fa90b67f67ed7e262e3261a9
SHA512 3ad684875ff5098e9c93772a0e7e544167c9c11cef24f2f5e73c954ea11143e00a0b3474a3bbd906e57650d2bd5f3eb1187a70e8e7e4a8100560b0e5165748da
SSDEEP 384:Kmt0ni1SLO0Vu4Bpi734ZCDFj8KLLktSKI2QlpN1D9Ah:v2i8LvbpWCcjvL6D6pN1m
TLSH
T14482E194EECF11D04D766EA3BB07D3826B2E261FB6149A52B410FE91187F2C98C750C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000028

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000028
Size 48KB
SHA256 a5c96c992061356279e85b4a5b742d74383f8bee1c1b6be7257e78e4e3ee06a8
MD5 23ba5df86f9695dd0d4fa45d6e1d09c2
SHA1 d82da2c1726ed47bb315050377476326c69a3755
SHA512 3a9dbc5bd346963e2155c02b416caf9e48c2b889644295f19175db2411a994a6d4bb60dfff5bf8549fa16e5c24a39a993c1d4cfa28e046daed12d735a1cfe610
SSDEEP 1536:v+vaA9JEcPSoQHhB0pwLBnf2afgHMmPp3K:LiOcP00onfJyNh6
TLSH
T1132302BB5013D3CA882332646DEAA14C48DCC6E3F8494D12ADDC6E594E587C79E4BF36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000029

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000029
Size 154KB
SHA256 ee04d75b7a47f064f8295826655dc5d2d5703132e2e724115d1a1d7a78a8f2c0
MD5 9fc889cbb3692aee229d282fce238482
SHA1 ba7aab2ac3abe9c7ffbdfe4f0beebfe0a48988f9
SHA512 9a93dc43b015567ac91260b1e262bba7f657575fd9e42c5332aca0f3b18e96e9afff9c09cd0d8be13c5bac552db124cff851328e570006a6a44472b90d7f5a39
SSDEEP 3072:MrizP7TgImM7u9IVt0BCvd8q+RW684XVU8nm0TOQaxQzVpps4:MEPBYIG5vRntznNIQzVpp7
TLSH
T1D6F323616FFC932686716D290035BB60B7AFE60D0AB103137E75136FB42751ED2B26E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002a

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_00002a
Size 33KB
SHA256 99de1a869fd1829bb5a4d14833006aab29e1ae553ebd327e42e2854c2868ab83
MD5 c9c8c5ee4959d092b26d3f341e256604
SHA1 92e19aa46db942422b068c33fb208741ea378196
SHA512 0044004a7b5b0e6981ff4e8983bde194aa98dec14240024edefceaf89e220e6c9bb65f92da26cd34273851c0d5109a81db072ee435b71c764a5278dce502ce17
SSDEEP 768:aVpypLdjzBtaZ9gmd11nigo6hhLgEWTKdrJ9pNPlGGya:aHglzBNi11rh4GxbLP1
TLSH
T14AF2F114AAFB001AA09DF20A95D3CFB9534DE7704CF2456CD92A05E8457D7A70BEAB83
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002c

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_00002c
Size 71KB
SHA256 d5816b96085fe830b0355576d39ac367f200a5235dd0df554b2343fc69d23502
MD5 a1276bc0a21a315847b429eab17cc33d
SHA1 7bbddf66b7a2e9bdbb459c5a4d62381ff2c08e26
SHA512 d13f94af792d4f1088e5ed45890c758c60767b2fcd9b95cd6410e64934d003b77fb0b416bbbb5dd92595e52f037065a1cbd7a574dfe9d6db1705aa538a6a1033
SSDEEP 1536:yUPru08goYIWRYAKO69ntW9dOIxHX5lxzaTZfi4/SQUx0D14q8Gf7uDxA:yGufgojGbKT9ntwdOM33ZaTZfPSQUx0v
TLSH
T1E86302FD0E0372317C917F8BA44DF36A1A97873B009A1E3DBC1ED34A65638607225762
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000035

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_000035
Size 23KB
SHA256 1f36ad45926f9e126a24fb5a0f0e385c000f86f1796abf4419d50d4adc1d3c5e
MD5 189d0bb4dd23f44c0c3105080d2d924d
SHA1 a54db09b76e03d36a09c7222704c3da91fb1ec1e
SHA512 b6a3e34e3795e6d8298a18ee9815ca0e62015da034edad8f9b4e720ff17026ca7d2d712bd7b2c104d0d719618271675bd2a7c044806cf327a7a93838761c4811
SSDEEP 384:X9f7PQLk8zwGWUDeY6zhVkb+AYARxo3bZkqAdrNPddQWQYFlhMbL4CREpenc0QpW:X9f7QzwUeYggDYALIbZkqmdQXYPhMICp
TLSH
T165B2E145CE1BB93C5CEBBE9502563A0C9144BD2E3DD9A8D0A2CC184C82C34EB1CB6D57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000aa

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Cache\Cache_Data\f_0000aa
Size 22KB
SHA256 41ff297af9fc6347b4738f041bd7b31684b9ffed294eb228ea42897a89060630
MD5 56a0153a341374d731a11b201c10e0e3
SHA1 64584caed35fc9d8607384244b603975e52447fc
SHA512 eba6be3e9b3455e239725654328d5d4524b384959801d1098a9a7a4ac4ea386b0ebde7fe1faf4c1005ac55e3e9bfee7d201206a7617f95fbdae6e0a023f1b4f2
SSDEEP 384:XhMZ0uXuRL6T03YN5rjFxWqEuvRGKdaYsIwXNs1HR+Oz9IYCJqN8NqWXx3KLDyvc:x8HsK53DWqEaGK7sdXNsFwOz99CJz0Q2
TLSH
T172A2F2B46FF1DE10B849452FD6042D6EF243C3622F6A0410199EA4E7A5D6B8E774D337
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 d8c2052fbfeab45aad73a4e821487542090bed91710aa8f9a86eae6b1d44944f
MD5 1024254d6ed038b1f42be328b7b8ad22
SHA1 21b48d951c39490360d72bee947507cdb3d7c4a5
SHA512 5993ae7c50c3516cddb62716dc5ddc787db6887003bcc9d51a4db08c5188b564e4775093e553cdae9d1e565ee24e80bd268dea0011204b2aeb11b895aef1720f
SSDEEP 96:xMJdrKCwt8ZnVqByuHGOwAKmJkvEPjISJA:2JkCwt8NUeOVKmjISi
TLSH
T189A1939991EF0143FB0435B574FD18633EB89D0F2EF32EEA307B287258DA3AA5550A50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 b98eb111de3c672565555f9cbad43c7efb1c328ae23292cdd3f4fe21d42a99c7
MD5 6a41df472fcde4c18a5c3b8faf258fb3
SHA1 7ec6ae06a2478ea35e96eea46ec03e07eeb27754
SHA512 88a4e1ab6f1cab7f4aa8f80d21fe8bc7776f6016b85e00757fc7e862b688f5ebfc6652caa05a2fc876375438374f3cb5b4d80c452aa89879b4ab1c318aa9c3d6
TLSH
T14B51B75D91E71042DF0876B818D16C6B7C70AD0C0DF36F3B365B68B8A8CB7E52550E90
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a8d4d.TMP

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Code Cache\js\index-dir\the-real-index~RFe5a8d4d.TMP
Size 48B
SHA256 12476088fdf90d864ed5f27fa3b9ac7dfcee8eef11e4fa318728944806767f6f
MD5 52d1f0888c153d7fa72dac9fa3be4f46
SHA1 ab15be5205b97f628a840cade4dc6a7968e9374b
SHA512 356b72ceeaff38fadc3e5749b1060148515c288b50b5960144bd6955b49851c978105d63d3788b3742882ec644564b94676da393a4d561464052c1e338b84646
MD5 SHA1 SHA512

Submit Download

2b1b9f4850e76397_0

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Code Cache\wasm\2b1b9f4850e76397_0
Size 19KB
SHA256 7c0e270ecdffe13660c678fd661c4fbd2e6eb7b73dea26e7653e1a9cc471a3f4
MD5 ac7dd9fbb50234bb19ef5d0c7d4514b8
SHA1 798506a8c58bd25ae20cdee71414ddb11e7888bc
SHA512 79274e33a3e2bf9c605b9ccd1fefdf38b5959069d1caf9d32e6a541c51b53ed0b6416bf543f78ecd141da25b4ea6a0c0b459a75f82907b0d416efd59ae985125
SSDEEP 192:wzXQQaZIMtU2s5Dy5W5IUqQTIrEfGr4kdl:YhY5W5IUqiGx
TLSH
T182923F84D2737BDEC2021530B5901E407E6D774E7E12D5FA82B880FEAA73EE70726466
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ee89f30d59ab9403_0

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Code Cache\wasm\ee89f30d59ab9403_0
Size 261B
SHA256 a0997014accb0358f9890e17aeef7cad6746dd0ff0063ea5ca79e83f8952ef06
MD5 c56a7d928916427ff396ba42fbe519ae
SHA1 8caba01f2d244a084e08df3e0abd7ad427788753
SHA512 e3e4c2bcfe7370da2aa699abd9065e19045c9019d4b53373207417c3b27b38392d78bcb8c7c1575767ff473c15530ece47c3e9c55cbdcc6327a9980b14353a90
TLSH
T110D02BDB0DE75818E86D0BB0C25233550F635081106DF2E0000111462797AD18B9E612
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Code Cache\wasm\index-dir\the-real-index
Size 96B
SHA256 80f25dd3a2a020119e3780b639f7d4eebb544596e21966a981dffbf86f987abe
MD5 3049682ffe2c0e44da755e74147f5f44
SHA1 0b1ea47734e61be48ac78fca923ec54aa7f6ce2f
SHA512 f6fadc05f9a16a77c89135db1bbf0555fb46ec51e2b3267c372a04c1bdc4c45753e6c978581444f474efb3a0544f6de4cd3d977bf4697800cb554f9699e8ec1b
TLSH
T178B0022621DD43C3E316BFB035D74364BF320C2E8B1BEE2686E64CA8D6D17915AB3000
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Code Cache\wasm\index-dir\the-real-index
Size 96B
SHA256 de3191a470413250d0e0d93dd0aabf2176c7946149abd7b546e443b4d66642de
MD5 f41f73c53e9ab968de2c7dd5260d67b6
SHA1 49b0721818923b084ba5e05a4421a5ebe4c6e8d5
SHA512 9c075fee3ad4d6fc2c084535be9db3b7f9a8b6fe5954594ab555b2ebf6199c8c95fa4f92bd9402e21699b78beef6538bc23167ca0a43d5b3743f13c1fa3a191b
TLSH
T1E5B0013A00ED5393E3217FB174D782597E610C2D8A57D91696A148A8A6A16419AA2404
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Code Cache\wasm\index-dir\the-real-index
Size 96B
SHA256 79290c20bbced7763a6c9c242a36edadbc3c0d581b36ad3ac3310e509f6d2b9f
MD5 05ee0e7217f009eec974ba1949716ae4
SHA1 e088e3ebc6c64d98e43fe0a3bdc02c6efb574ef1
SHA512 132163fbe18b56012188ec46f352bedccb8ec3d913e643d8e791503425e4f6a3e94965192748f2bc86da233eb7002d5a01da72b93563b909b889267fbd211357
TLSH
T11CB0112208CC0383E302BBB020E302003E200E2CAB03C802828008A88A8230022B2800
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a67b4.TMP

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Code Cache\wasm\index-dir\the-real-index~RFe5a67b4.TMP
Size 48B
SHA256 aa6719a8e9046986679b696cfed69d9e0c4cb7f0aa7f8492fcf6ef675a9073df
MD5 01793e144ce60bc1ee57a9341b8652d9
SHA1 d8361e3b6f4ac3ec12df722d11cc99d1ece3fa65
SHA512 521833c49991f294c014ceefee0f3093b91647a393853ace83168774697470cdac8a29a92e9eec858b1b7b0c03a2f4f67450348959af0b0f7936ef00205d3da0
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

service_worker_bin_prod.js

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\service_worker_bin_prod.js
Size 136KB
SHA256 3d98261dc84b114d5b0f29f2c47fc08ae9ba13b177f100d740e413d5716f5c1e
MD5 9d82da2d26e815161b54d9e21e5448c2
SHA1 8a00f666e1baffdeb5ce0fde0e109bcf111ff724
SHA512 5520ab30df09a3582e7d3ac3fd756b257d0dcc75bf4007b28151f063883046caa4f459125106d46ad99f5bb7f0bfc557affa5750aa51b5d99e43e73cd11c5926
SSDEEP 3072:eR3MbbdKe2KTOtBth8CyOMGL2y6GDiwYxyrxygCpYK:eR3MLRRA2y6GDiwJxlCpYK
TLSH
T1DBD3D9CCF6A5B0124363A5F5402F000BB23AB8B9E44C85A8F288D9E97D7556D8277F7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
TLSH
T109F09C8CD050E86F02B2411AB1647314FB51037A0751A59F393CDC0D9FB6DA751C6F4D
MD5 SHA1 SHA512 TLSH

Submit Download

craw_background.js

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
Size 531KB
SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
MD5 6eebed29e6a6301e92a9b8b347807f5f
SHA1 65dfb69b650560551110b33dcba50b25e5b876de
SHA512 fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2
SSDEEP 6144:abyfBNC2FRdjiRXqbe5Dq31IVlMqX+wd5/CcMMJcRULt0NjyTOEzZQ+h72W3GB0n:Ft/g
TLSH
T1B5C4F74C34C2E8CD6A623DA5247B9085A2319266F4479ED9F0EDECF21AF44641937F3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

11dbe12f-cdb7-4ede-a78d-5452517b859b.tmp

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Network\11dbe12f-cdb7-4ede-a78d-5452517b859b.tmp
Size 8KB
SHA256 3e1fae5da6ff2635437bd36c4e9ab1205f53e84c1136007c558bf7285404ae2c
MD5 d6c84705507cee8f997076fdd3f4e6cd
SHA1 23cc978f95f9fde8b467e9432ddce427e2679462
SHA512 52f94b0024bedda090ea9411522502ef4eb6e71d41510b357573c4e64976db1548cd456cd091b5d4efca492770d9d6bb6369ee684f1c2331d627493067fe64ae
SSDEEP 192:FaNaWsVRODLG+Ks81qR7XmqolRivOQGnsKVKOUkBRb0q+Pi8qOWaRtqsIXsMXES5:FaNaWsVRODLG+Ks88R7XholRivOQGns2
TLSH
T1D112C4FB27704A6EFA2292F5EE097F1B4F680153036C749981E45D3697F68A0E0C1B4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Preferences
Size 9KB
SHA256 a25c61623c533141a1d94382cb92b242c274c146182151795e5c8012cf9386b8
MD5 918e59250dd0767a0629f4bb0249beb8
SHA1 e5cfe9f79146b315c1af0e2158ffbcac70b5001b
SHA512 20b1403a2d4c118ec44e84ef052e5744a11d3e9a1a1e4c8a1725020c029a29457bdec4d19a39ee72fd00618aba945fa8039bc23033447a2f6db66e3d749e8094
SSDEEP 192:zRxOhqMJYEfv7K3tAPRp29MXsb+WNK4vO35xyIsnAUgE:zRxCqROGIXvXwdObE
TLSH
T12412A31DAD14B53B5CCAE31DF9257E42E6F9202632942D44EBFCCA2D24EB6CD2227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Preferences
Size 8KB
SHA256 3ebe1ae6996b6226de4216a4640d1f56d48d2505ede62ea8ce1072ba7ad96719
MD5 cf07f3f85e6adf592cd1e2de7e9c3e18
SHA1 1108a0617026a7cc4f83d303e810f3baf96e06ff
SHA512 c73e7d3e2e45d9e6bdf45362a8a56b72f5505ebd67651f536357b15d3a132a1b76b9e0bf1515573729b697a51e10c0589597214a69b1cfb3eff3dca762544b22
SSDEEP 192:zRxOhqyv7K3tAPRp29aXsb+WNK1i2otiyIsnAUgR:zRxCqeGIXxXwR2xR
TLSH
T12402962EAD24753B5CDAD319F9217B42E2F9103675E42D48E7FC892C24E76CD2227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Preferences
Size 9KB
SHA256 a5088fe557a80a83bce8a8911b511c1af438d6941c0fb449e592bec0396c6c2f
MD5 135b28864f01aaf52973206a3a2e5000
SHA1 bb040088a4750033f1a207001544a4b7311ec88d
SHA512 1ef41f1f1ae1f27472f1e383555eae4ab99ae479d6eb0b30db051b354228842607886a3450f46cc11ec96786258f595453e1462a58a40c7ae930c9369cd76bd6
SSDEEP 192:zRxOhqMJYEfv7K3tfPRpj9MXsb+WNKMLaq5xyIsnAUgE:zRxCqROGdXWXwFaaE
TLSH
T1BF22B51DAC14B57B5CCAE21DF9257F42E2F8202635A42D44EBFCCA2D24EB6CD2227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Preferences
Size 9KB
SHA256 48fcbff2c06c0bdb50a442b4a8da80f7b743350c808de33a3ca249967ea597f0
MD5 5a156ac827c7908311460a705e2c3c9c
SHA1 0d8f0f7d504ad6d81fd6a7cbf8b77afdbdc947a5
SHA512 7a4752771045836bf43cf94fb5d410d476bde2f47ac2bf2aa35d1dd0143fc5bcc5d24ef712cab2328188609afc37678975ea3735e309d10f3ab408e7d8018ead
SSDEEP 192:zRxOhqMJYEfv7K3tAPRp29aXsb+WNKahEBtxyIsnAUge:zRxCqROGIXxXw5EVe
TLSH
T13812A51DAD14B93B5CDAE319F9257B42E6F9102631942D44EBFCCA2C24EBACD2227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe5a4cf8.TMP

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Preferences~RFe5a4cf8.TMP
Size 8KB
SHA256 05a8c1760285325d69f5ad03cabeaf30de82a7331bab7d93a5e8e49f9c84df3f
MD5 934159a2735697aca68b6f48b6d2dedf
SHA1 cabbe7d1ec1e07b95f3935e8de915471b5bb7ec4
SHA512 a23772161cd18e8f669e630298206d13cc1bf8120656f3784d97ab156ef995154d77e441d4c658b146104088aecb1ff5904f430b88edb4caca1b69b1abedfc6b
SSDEEP 192:zRxOhqyv7K3YAPRp29aXsb+WNK1i2otiyIsnAUgR:zRxCqeG5XxXwR2xR
TLSH
T14F02A51EAD24B53B5CDAD31AF9217B42E3F9102675E42D48E7FC8A2C24E76CD2227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 09803bfa55136497d02debdcf4d5edf07978262030e6006b3745e2d72bc6aa4f
MD5 bd5128f6de7006ed8ae9ef3cf11470ba
SHA1 e2068096ee202c1ac60c28229a9ab1b85897b4fa
SHA512 289186ac7e2ee4cc402fd26c86ae385748024381b9709053548b262f1bf328b5b6c720145e9680b925bc4fbd9826c840430526378fdb7bc25a84b67b12bb411b
TLSH
T108B0121C80CA1711C80041F4111990442A505E2D9410071682D05F858C530E0935A296
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5aab45.TMP

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5aab45.TMP
Size 72B
SHA256 8c0dc7618464c9bf49d24d99153154c41d3398b9170401ffccb8a90777311a7d
MD5 439ce687c0bc8890bac72d6821ad5c36
SHA1 82821c301569c4d6838b91ee91bf627db6bdafcd
SHA512 4b07080d998454079936989a2c675379237bd262859ee8ec82bb1fcd600e1384132dc2115cddcb2525ce61a4a53850c42f7d488a8b3271b7a8c6ee7f2678fa93
TLSH
T162A0021602819558C70082F02801C3881704FA7D800402177AE4174A8CA20915A99254
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 da9ad17841f59de5e6183feaaba89d14eea2ede37d987a2288ef50254e6e4624
MD5 b53bbd376414783bb2d0f39eedc21a4e
SHA1 e39720debaad08ea35a6f97455f2bc63bea74a5e
SHA512 abba36fcd422f814f0feb07ab639f6af2eff49fb198b87b59ac2a20eb4dc52bc01f7537ac08a03168638e19e23cfc4befcd1c43a51a2b90ffadb12caebd650cf
TLSH
T157B002155B4A5A03C0454BB1B1D113963F75CD290B4BFB4790A014658FF0BC1AF11210
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 083955f33453d99c330139df4972296762d607e937f91c993a0403bc868272b6
MD5 6c5289c9f72b911513ce0e77e3b2ebcf
SHA1 935bd07c08df601996ab39552ddbdffeb827e34b
SHA512 344ce46b951967d0c92c007715930bd5714067e9d6b308c24abe2b7f3f1390bb47cf9e27e0e68ca4fedb8d8fc661e1baade75fe167119e092181b916f818c3fe
TLSH
T19EA002554BC06501C0811F71A0E527513752CC190205130754D410448DD17C15D03120
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a8379.TMP

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Shared Dictionary\cache\index-dir\the-real-index~RFe5a8379.TMP
Size 48B
SHA256 658c4d235506cb9bf5ef56036de4cdbd2d0c224f8987ed27b021fc55a340b43e
MD5 56bf34f632920995fcef454367d3b7a8
SHA1 ab854e93a730e6f7eedf8bcb03225e73984238a9
SHA512 7d63cd75b620f090de94e11555592a2b86a0ac2d957e8629daed276756f9ac13c468b7a7b403c4c75a62f66d69ec24d33ca962ca94a2b16403efbc79656309f8
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

e5aa3b3

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\e5aa3b3
Size 48B
SHA256 6fd77ca85458fcab638fa245dc89bfd8b0415e2bd460a6b662ba0e73b98908da
MD5 1a9fec260fc03ca465d7618870b09215
SHA1 1649a07e8e190fb2e62345cf5d5d8ea411c16c09
SHA512 2da6dfcdb5a8443726ef1c39a27ff94caaad8ce0a1fceb1728b27b4b57e8a4cadd0dc3d8b1e239cc4659427e17d60ac63c188c93844070b4e805ffaba66c3a1c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 94d13144a28134d69fe44389866326e821afa1f5c1b820148dbb29df54acc2b3
MD5 707aacc62306c1f2c84eff96b1100484
SHA1 381ab8855d25c21d63ad043cb5398af34f013d47
SHA512 46af37a5ccea7ebe2273a6389298376f6cc448b5039f199a9c9fbc70a545503c18748bf966022db747d812e58c49c7d6d29e3f3a5b2bdf97fda86199d7a0d856
TLSH
T1C6A0026AC5D10513CE0152F071E105412A61792D5759870364A20585A96B2D2C211D05
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\Network Persistent State
Size 59B
SHA256 c257f929cff0e4380bf08d9f36f310753f7b1ccb5cb2ab811b52760dd8cb9572
MD5 78bfcecb05ed1904edce3b60cb5c7e62
SHA1 bf77a7461de9d41d12aa88fba056ba758793d9ce
SHA512 2420dff6eb853f5e1856cdab99561a896ea0743fcff3e04b37cb87eddf063770608a30c6ffb0319e5d353b0132c5f8135b7082488e425666b2c22b753a6a4d73
TLSH
T1D2A0026ADA612D881B4A839026187553807B0445130982FDE43877A841561AE582C865
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\WebStorage\5\IndexedDB\indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

e89efb5b-6830-4b18-b990-a42b64b640c5.tmp

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Default\e89efb5b-6830-4b18-b990-a42b64b640c5.tmp
Size 17KB
SHA256 c0170f9d21db475bf5af3facda0d26e12dfb842b021d407e1d36d2acea7cdb21
MD5 69ab2bc210808d352426ea395af92afb
SHA1 b40881025d4bba7e5a723f982b927dc56d2197f1
SHA512 0684bb59fe9515119a4a25e98b1671d33c25d08a021436e62f9a6edac7b530b015fbc7aeb60c18e82bb1f05882dfe8201e61ea48478c584b505967a6e466e803
SSDEEP 384:Nnjjm7KxkXqKf/pUZNCgVLH2HfgsluA7pLuLceSjeXODBk+ErU3cIHGYr4UbFPjK:Njjm7KxkXqKf/pUZNCgVLH2HfgsgA7pY
TLSH
T12472FA676C4C9A7B4F98C9CCDC16BF4F9CB5015B65E9886483FA582A03D4BCF11062EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Local State
Size 138KB
SHA256 0d3bbf45844527c22a858d2e3160341196dc5598b0bbeb8e2f17942169cfb735
MD5 537443c726153ae3320b23abf822f5b2
SHA1 7acf7f2b9c3d7e3c30936587aed763034cd4490a
SHA512 19b5fb4aee9c7a531e5984e13ff0a818a2cc0009bcd191ad05111a5c813996cc961a76e5c0ac231124f39ae0bbbd3c827e8952b6401995369eb62483537e2e74
SSDEEP 3072:u0CEEV5iwT4eAag5CCmJ89A7tNABEco3gNVxlczaQ1RYIzpcYV1NCn8Za:u0tEVjEfT5CCL9A7taB1o3wxluaQpp3g
TLSH
T10BD312B1FC05FC5608BA446535062D174FB7E139889E74899DA1ADC2AEF7EC18F27039
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Local State
Size 137KB
SHA256 b087608dd48b6fc7cc2b8d74f47f64915e25670a3cd51c277ec003af77bdcbc6
MD5 7d46fa911f30e4ae11044c4a6e744276
SHA1 55509dc231d4e0945b186fe1222291edc41bb0ac
SHA512 c26830f42695df33dc85f05f55b4977d0a6b5d75051d95111fc3da358c9608e5ad70c0d6cc89e918168b933d4ee47e23277508c680120c5e2d5cb201186590a5
SSDEEP 3072:u/CEEV5iwT4eAag5CCmJ89A7tNABEco3gNVxlczaQ1RYIzpcYV1NCn8Za:u/tEVjEfT5CCL9A7taB1o3wxluaQpp3g
TLSH
T145D312B1EC05FC9608BA445535092D174FB6E135849EB0C99EA1ADC2AEF7EC18F37039
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Local State
Size 3KB
SHA256 307d0f45a3c84793ad9b3c3e96bb52a93a0828fe29058ed60922792b7cc3a78b
MD5 a14615ae9410a1a95c089edf1be07829
SHA1 298cad569ee51874102785eccfb265bca297e7d3
SHA512 18f7443a10377cf77ee59c5200c0c07ac40806e3511e86dcdd3b750167a173c20dc5d5691b6200622716a184b8f7b0142bf38d280bfe2add41df8b352676ba07
TLSH
T13781F761B478AC7328FA9845B0023E43DAB8219FE011AE90DAD80F2D04EB1DD1343913
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Local State
Size 136KB
SHA256 e92eaa422612b7aee9dc6600c3c06d7cc2cc1296d55bccfa991f539b6a123275
MD5 993142f76dfb4c80ad66ab6b7f04ff0f
SHA1 72292074e24ed0964db3a40ddbe4826195a63bc8
SHA512 7e3c4f0831ffe7cff15131b30dd423c4fa8dc0c447f81c0cbec11ea2291c2cf013a6a8c5bb84d36d80320683a86a338f5191452987b43f1075f49f65c1fcbb8c
SSDEEP 3072:uxCEEV5iwT4eAag5CCmJ89A7tNABEco3gNVxlczaQ1RYIzpcYV1NCn8Za:uxtEVjEfT5CCL9A7taB1o3wxluaQpp3g
TLSH
T1B1D32391EC45FC6614AD446539092C274FA7E038849B70DA9AE2B9D3AEF3EC14F37439
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe5a254c.TMP

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\profiles\39791bf6d923ee35b9a697f2cb55de2b9bed9e53c41c053f4b0936243a35a432-9760f32eed91bfbd\Local State~RFe5a254c.TMP
Size 1KB
SHA256 2d8bcdfd40e9cdd93a7eb7023cc8a17c12ae95091f36f0f08883f231224c048f
MD5 5ee3aa00f723a758684a150fda37b45d
SHA1 ab95a1f2455e3188e75cc8eb3d16f91df07dd387
SHA512 b1e4bd53a53027de83f9b5bb9e9d9642065a00474e6719c80d06b07bf99ae9fa5d12276231f0b810a46a5ef47db0e7377e69f87a87a2ccb03cc844d11a683086
TLSH
T14E117574753C3E7068D74D4D91808F936E75636BC0228D4666CD562609BE2DCB306C38
MD5 SHA1 SHA512 TLSH

Submit Download

state.json

Path C:\Users\Admin\AppData\Local\PruvaDotNet\data\63c5640a82204659\state.json
Size 1KB
SHA256 73ecd097943abfe759d840d7e385c04f798508f24db68d244464d19105a26d02
MD5 58c04e4728e466366138dfcac2d59579
SHA1 64058a33946e2058d9678822ecc2d160b1828b58
SHA512 a329663538be4696ec53361cbe8fe986cf104451e8528cf52e7f8c29ef689e4d46ac304ff80fdfb3056af6df6d1c361a3c4870a3ed11ab5c2062102898180457
TLSH
T1602189FE0888AECF879F5630DC322D9CAE99224F0B0A12085DF4D01C5199D03CF2BCA5
MD5 SHA1 SHA512 TLSH

Submit Download

launcher.json

Path C:\Users\Admin\AppData\Local\PruvaDotNet\installations\63c5640a82204659\launcher.json
Size 577B
SHA256 fb59e91b37cbefd3dc97c84755b8a273f2beecb9739fa18f630699dbd3a1ea6a
MD5 cc6f85bdcece6af1da722380df61d603
SHA1 2250f6e2e5158d555e046f45a0d3141cae09e2a1
SHA512 474f5ad956332fad61028ea1ad68e24f2261ca17b6c673f0b10bc61324c8006e2fa15c369528a9472dcefdfb78d49ac1de3f4329192b344b94be19007e24b497
TLSH
T15FF04C9B5041EB7AD969011AA1B5392AC07241AE7FD40F5EC6B04C6506D704634AB416
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5584_2029038029\CRX_INSTALL\_locales\en\messages.json
Size 450B
SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
MD5 dbedf86fa9afb3a23dbb126674f166d2
SHA1 5628affbcf6f897b9d7fd9c17deb9aa75036f1cc
SHA512 931d7ba6da84d4bb073815540f35126f2f035a71bfe460f3ccaed25ad7c1b1792ab36cd7207b99fddf5eaf8872250b54a8958cf5827608f0640e8aafe11e0071
TLSH
T1D3F055CB9000FC5E538BC00EB10072282BA603E01AD1726724EC1C0E67DFDAEB143F9A
MD5 SHA1 SHA512 TLSH

Submit Download

default.exc

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download