c9358c03160d904b7d837dbc0120b02d65491a62a1f3ff6fd7ebe58af83d59d3

Resubmissions

30/09/2026, 23:07

260930-233wva1v7m8

30/09/2026, 23:05

260930-2228xstvft7

Analysis

user interaction
yes
max time kernel
1800s
max time network
1803s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 23:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
pgsetup_7.2.9.exe
Size 53.6MB
Sample260930-233wva1v7m
SHA256 c9358c03160d904b7d837dbc0120b02d65491a62a1f3ff6fd7ebe58af83d59d3
MD5 59003f5e461b51a12cbb4cf21069510d
SHA1 9fd483862b4b037a4b06e4f1c3654168644c87de
SHA512 151322d31d74222fe320ae1b51686784cf4009ab4c993ae7ba3c37ab158d47684629188decb37309c6213160ff987ab39928f9d862fa42bdd5b52943a9bdee75
SSDEEP 1572864:r9/uC1nv/e7AJSKddUZ7tgxiqM3VOsFpiodDrcqm5sXbe1XSAXH:rVv1nNpyax9Q9FpiodEqm5sreRSAXH
TLSH
T159C7333BB14BA93DF0278B367676A150A43BBA6529524C5696F4CC0CCF680711A3F7E3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
5568	pgsetup_7.2.9.tmp
5612	Pleasuregram.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops desktop.ini file(s) 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\desktop.ini	Pleasuregram.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Pleasuregram.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Pleasuregram.exe

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	pgsetup_7.2.9.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	pgsetup_7.2.9.tmp

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3580	chrome.exe

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral1/memory/5512-0-0x0000000000020000-0x000000000010E000-memory.dmp	innosetup
behavioral1/memory/5512-7-0x0000000000020000-0x000000000010E000-memory.dmp	innosetup
behavioral1/memory/5512-36-0x0000000000020000-0x000000000010E000-memory.dmp	innosetup

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	Pleasuregram.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\	Pleasuregram.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	Pleasuregram.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	Pleasuregram.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	Pleasuregram.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardProduct	Pleasuregram.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\tonsite\DefaultIcon	Pleasuregram.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\tonsite\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Pleasuregram Desktop\\Pleasuregram.exe,1\""	Pleasuregram.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}	Pleasuregram.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Mode = "4"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\tdesktop.tg\shell\open	Pleasuregram.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 00000000ffffffff	Pleasuregram.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\IconSize = "16"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\tg\shell	Pleasuregram.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\tdesktop.tonsite\shell	Pleasuregram.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\tonsite\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Pleasuregram Desktop\\Pleasuregram.exe\" -- \"%1\""	Pleasuregram.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	Pleasuregram.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupView = "4294967295"	Pleasuregram.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Mode = "4"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\tonsite\URL Protocol	Pleasuregram.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\LogicalViewMode = "1"	Pleasuregram.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\LogicalViewMode = "1"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\SniffedFolderType = "Downloads"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\tdesktop.tg\shell\open\command	Pleasuregram.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\tg\shell\open	Pleasuregram.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	Pleasuregram.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 = 14001f50e04fd020ea3a6910a2d808002b30309d0000	Pleasuregram.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\tg\ = "URL:Pleasuregram Link"	Pleasuregram.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0	Pleasuregram.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	Pleasuregram.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\SniffedFolderType = "Pictures"	Pleasuregram.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:FMTID = "{B725F130-47EF-101A-A5F1-02608C9EEBAC}"	Pleasuregram.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:PID = "14"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:PID = "14"	Pleasuregram.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\IconSize = "16"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\tdesktop.tonsite	Pleasuregram.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupView = "4294967295"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Version = "1"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings	Pleasuregram.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\tdesktop.tg	Pleasuregram.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\tg\URL Protocol	Pleasuregram.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\tdesktop.tonsite\shell\open	Pleasuregram.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	Pleasuregram.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\tdesktop.tonsite\DefaultIcon	Pleasuregram.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	Pleasuregram.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\SniffedFolderType = "Downloads"	Pleasuregram.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:FMTID = "{B725F130-47EF-101A-A5F1-02608C9EEBAC}"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\tonsite\shell\open	Pleasuregram.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	Pleasuregram.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:PID = "14"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\tdesktop.tg\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Roaming\\Pleasuregram Desktop\\Pleasuregram.exe\" -- \"%1\""	Pleasuregram.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0 = 14002e8005398e082303024b98265d99428e115f0000	Pleasuregram.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\SniffedFolderType = "Downloads"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\tdesktop.tg\DefaultIcon	Pleasuregram.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
5612	Pleasuregram.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
5568	pgsetup_7.2.9.tmp
5568	pgsetup_7.2.9.tmp
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3320	chrome.exe
3320	chrome.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5612	Pleasuregram.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe
Token: SeShutdownPrivilege	3056	chrome.exe
Token: SeCreatePagefilePrivilege	3056	chrome.exe

Suspicious use of FindShellTrayWindow 58 IoCs

pid	Process
5568	pgsetup_7.2.9.tmp
5612	Pleasuregram.exe
5612	Pleasuregram.exe
5612	Pleasuregram.exe
5612	Pleasuregram.exe
5612	Pleasuregram.exe
5612	Pleasuregram.exe
5612	Pleasuregram.exe
5612	Pleasuregram.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
5612	Pleasuregram.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe

Suspicious use of SendNotifyMessage 40 IoCs

pid	Process
5612	Pleasuregram.exe
5612	Pleasuregram.exe
5612	Pleasuregram.exe
5612	Pleasuregram.exe
5612	Pleasuregram.exe
5612	Pleasuregram.exe
5612	Pleasuregram.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
3056	chrome.exe
5612	Pleasuregram.exe

Suspicious use of SetWindowsHookEx 9 IoCs

pid	Process
5612	Pleasuregram.exe
5612	Pleasuregram.exe
5612	Pleasuregram.exe
3308	chrome.exe
5612	Pleasuregram.exe
4868	chrome.exe
5612	Pleasuregram.exe
5612	Pleasuregram.exe
5612	Pleasuregram.exe

Suspicious use of WriteProcessMemory 42 IoCs

description	pid	Process	procid_target
PID 5512 wrote to memory of 5568	5512	pgsetup_7.2.9.exe	84
PID 5568 wrote to memory of 5612	5568	pgsetup_7.2.9.tmp	106
PID 3056 wrote to memory of 1244	3056	chrome.exe	128
PID 3056 wrote to memory of 176	3056	chrome.exe	129
PID 3056 wrote to memory of 176	3056	chrome.exe	129
PID 3056 wrote to memory of 3580	3056	chrome.exe	130
PID 3056 wrote to memory of 4264	3056	chrome.exe	131
PID 3056 wrote to memory of 4264	3056	chrome.exe	131
PID 3056 wrote to memory of 5836	3056	chrome.exe	133
PID 3056 wrote to memory of 5836	3056	chrome.exe	133
PID 3056 wrote to memory of 4340	3056	chrome.exe	132
PID 3056 wrote to memory of 4340	3056	chrome.exe	132
PID 3056 wrote to memory of 5776	3056	chrome.exe	135
PID 3056 wrote to memory of 5776	3056	chrome.exe	135
PID 3056 wrote to memory of 2076	3056	chrome.exe	136
PID 3056 wrote to memory of 2076	3056	chrome.exe	136
PID 3056 wrote to memory of 1088	3056	chrome.exe	138
PID 3056 wrote to memory of 3612	3056	chrome.exe	143
PID 3056 wrote to memory of 5996	3056	chrome.exe	144
PID 3056 wrote to memory of 4276	3056	chrome.exe	145
PID 3056 wrote to memory of 1488	3056	chrome.exe	146
PID 3056 wrote to memory of 1488	3056	chrome.exe	146
PID 3056 wrote to memory of 5052	3056	chrome.exe	147
PID 3056 wrote to memory of 5052	3056	chrome.exe	147
PID 3056 wrote to memory of 4904	3056	chrome.exe	148
PID 3056 wrote to memory of 4904	3056	chrome.exe	148
PID 3056 wrote to memory of 3308	3056	chrome.exe	149
PID 3056 wrote to memory of 3604	3056	chrome.exe	150
PID 3056 wrote to memory of 3320	3056	chrome.exe	151
PID 3056 wrote to memory of 3104	3056	chrome.exe	159
PID 3056 wrote to memory of 3104	3056	chrome.exe	159
PID 3056 wrote to memory of 1316	3056	chrome.exe	167
PID 3056 wrote to memory of 1488	3056	chrome.exe	166
PID 3056 wrote to memory of 1488	3056	chrome.exe	166
PID 3056 wrote to memory of 4868	3056	chrome.exe	169
PID 3056 wrote to memory of 2244	3056	chrome.exe	170
PID 3056 wrote to memory of 2128	3056	chrome.exe	184
PID 3056 wrote to memory of 2128	3056	chrome.exe	184
PID 3056 wrote to memory of 3128	3056	chrome.exe	185
PID 3056 wrote to memory of 3128	3056	chrome.exe	185
PID 3056 wrote to memory of 5084	3056	chrome.exe	186
PID 3056 wrote to memory of 5084	3056	chrome.exe	186

C:\Users\Admin\AppData\Local\Temp\pgsetup_7.2.9.exe
"C:\Users\Admin\AppData\Local\Temp\pgsetup_7.2.9.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:5512
- C:\Users\Admin\AppData\Local\Temp\is-N0Z6WE8XSB.tmp\pgsetup_7.2.9.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-N0Z6WE8XSB.tmp\pgsetup_7.2.9.tmp" /SL5="$402F8,54895112,917504,C:\Users\Admin\AppData\Local\Temp\pgsetup_7.2.9.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:5568
- - C:\Users\Admin\AppData\Roaming\Pleasuregram Desktop\Pleasuregram.exe
    "C:\Users\Admin\AppData\Roaming\Pleasuregram Desktop\Pleasuregram.exe"
    3⤵
    - Executes dropped EXE
    - Drops desktop.ini file(s)
    - Reads the TCP/IP host and domain name from the registry
    - Enumerates system info in registry
    - Modifies registry class
    - Suspicious behavior: AddClipboardFormatListener
    - Suspicious behavior: GetForegroundWindowSpam
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    - Suspicious use of SetWindowsHookEx
    PID:5612

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7fff0515c728,0x7fff0515c734,0x7fff0515c740
  2⤵
  PID:1244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1800,i,10160475955302275898,14612791371880971607,262144 --field-trial-handle=1928,i,3240685029414721070,4970374587551131130,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1924 /prefetch:2
  2⤵
  PID:176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1656,i,13426333240097044688,5442987192146683110,524288 --field-trial-handle=1928,i,3240685029414721070,4970374587551131130,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2444,i,7344337687995825700,14024427769126815870,524288 --field-trial-handle=1928,i,3240685029414721070,4970374587551131130,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2612 /prefetch:8
  2⤵
  PID:4264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3260,i,12269095301395920170,14877763694254145984,2097152 --field-trial-handle=1928,i,3240685029414721070,4970374587551131130,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3292,i,6869020236629983469,13419934538321005582,2097152 --field-trial-handle=1928,i,3240685029414721070,4970374587551131130,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:5836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4216,i,4204596476829655447,16704078536349554893,2097152 --field-trial-handle=1928,i,3240685029414721070,4970374587551131130,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4512 /prefetch:2
  2⤵
  PID:5776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4768,i,1220265521239033068,10005139315764819488,2097152 --field-trial-handle=1928,i,3240685029414721070,4970374587551131130,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4780 /prefetch:1
  2⤵
  PID:2076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5528,i,9365824059628205173,4582564476987606751,524288 --field-trial-handle=1928,i,3240685029414721070,4970374587551131130,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5532 /prefetch:8
  2⤵
  PID:1088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5852,i,1491425095449964069,14874345564770704589,524288 --field-trial-handle=1928,i,3240685029414721070,4970374587551131130,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:3612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5908,i,4890434164474567674,6270938528097461527,524288 --field-trial-handle=1928,i,3240685029414721070,4970374587551131130,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5788 /prefetch:8
  2⤵
  PID:5996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5924,i,855715352554461588,4373241689576703467,524288 --field-trial-handle=1928,i,3240685029414721070,4970374587551131130,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5976 /prefetch:8
  2⤵
  PID:4276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4544,i,6150705789377518303,3055827457747209246,2097152 --field-trial-handle=1928,i,3240685029414721070,4970374587551131130,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4520 /prefetch:1
  2⤵
  PID:1488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3656,i,13377015250934682008,1256131852663929636,2097152 --field-trial-handle=1928,i,3240685029414721070,4970374587551131130,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3384 /prefetch:1
  2⤵
  PID:5052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5800,i,15890882199124984697,16574739033321971919,2097152 --field-trial-handle=1928,i,3240685029414721070,4970374587551131130,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4964 /prefetch:1
  2⤵
  PID:4904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3332,i,17332373075462480398,868886668740085504,524288 --field-trial-handle=1928,i,3240685029414721070,4970374587551131130,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  PID:3308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=864,i,11770581127829339357,17166914821392139998,524288 --field-trial-handle=1928,i,3240685029414721070,4970374587551131130,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4600 /prefetch:8
  2⤵
  PID:3604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4616,i,9518784746284454904,13425299364694109712,262144 --field-trial-handle=1928,i,3240685029414721070,4970374587551131130,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4556 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=1580,i,2595840289807946652,575656084966135521,524288 --field-trial-handle=1928,i,3240685029414721070,4970374587551131130,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3288 /prefetch:8
  2⤵
  PID:3104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6076,i,2903397791980650190,4403427947122272360,524288 --field-trial-handle=1928,i,3240685029414721070,4970374587551131130,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6064 /prefetch:8
  2⤵
  PID:1488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4664,i,16514105198935168565,17729102369581188250,524288 --field-trial-handle=1928,i,3240685029414721070,4970374587551131130,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3272 /prefetch:8
  2⤵
  PID:1316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5528,i,5126566800740346743,5013318368413904611,524288 --field-trial-handle=1928,i,3240685029414721070,4970374587551131130,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3468 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  PID:4868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3656,i,6576791971667284953,14614560941618111596,524288 --field-trial-handle=1928,i,3240685029414721070,4970374587551131130,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3444 /prefetch:8
  2⤵
  PID:2244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=5756,i,11364537735427900811,12769768950828806951,2097152 --field-trial-handle=1928,i,3240685029414721070,4970374587551131130,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5548 /prefetch:1
  2⤵
  PID:2128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=5968,i,17538817190871253153,3305180568667351394,2097152 --field-trial-handle=1928,i,3240685029414721070,4970374587551131130,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5552 /prefetch:1
  2⤵
  PID:3128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6052,i,17206036364220763536,1972938395610923637,2097152 --field-trial-handle=1928,i,3240685029414721070,4970374587551131130,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5528 /prefetch:1
  2⤵
  PID:5084

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3696

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5208

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
PID:784

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 a2688857569c3f760488028a4176bc3ac430ee068a4e91f8a7d8ec954a049b73
MD5 a48c5aa88ecf0acfb10fc0591a6d15f0
SHA1 14ffe6d28eb9c71c0410a4970bc51e6a02db3e81
SHA512 f0d3d78330f03a0bad502631b28ee04d9852c8d2eac2a696fce29aed048a3f69df7e42fb927132fd21f7a63f2904851032865e06a9c2f72c9a451a20ceff7f5b
TLSH
T1E0F02DA5C821AC3718FE0B5821A5CA46EB54236B2B404C8F3A3C811C8FB063B4699D5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 346KB
SHA256 9be344d8aab52c80881980d24ba1435146143794aebbeb98bcae9a4b41f0bd16
MD5 fc31feb6dbd996017ba0751ebf1a2be0
SHA1 d5e54654c86bcbfc7aeed4377e9183421b5f63f4
SHA512 21a4c7e4b3c8f42a8886bcac34a50ae30e61efd3c0443b66fd3cffc54caaf4265d4ee65521051cc530e2e1dccbfb877a303a119768406da737c3249ab577b0e5
SSDEEP 6144:r6PyntaVKs+9xeKjohEc1avaW5Id9Veu22qVTvHodWVjaVrQXcx81E+/SnCCKCDC:uPynjs+9QEcyIfcN2YTvHo0VjaV2Z/SO
TLSH
T1FF7423717998940FD4622800765A6FF51C403FAFC52AE6E3677B10B34D9E4A7347CA38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f
Size 437KB
SHA256 a451b8791f9183f16a2b30959f9f69e20f35117f8ca6e34e463916869328f3c8
MD5 15d9ce7fe8b446c91cc0598983dde50a
SHA1 b2ad1e9b11a41f5176e3cc495dac68aa26e0955f
SHA512 39e14f23bbde8278b586057eeb648777afc1e6d11b71f3e5529688341f7868b61d0d7ef43cc925189a70def4a6b53e863a06fc8d36e7551c9a50745be6607529
SSDEEP 12288:9SyJNj5Vy52pw6eyroMIW3/dJhlzOH7pVUa0Uiku:9vJzV1pw/yroMfCIUfu
TLSH
T10B9423CFDB2108E7FE76C411CDAD9FE8049BA554056D8CB35BB6066D825A0808636FEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002a
Size 21KB
SHA256 bed514a326972fc0947503666e200e60295a7aaa789818138ecd4b41c3f359f4
MD5 5b3463c6a60e81bb4d17c13c1505db8f
SHA1 317df981ef3a0c242e40fa964368c0d3b75d8623
SHA512 3979438111bcc157cdf40c9091dd24503f5262a1cb494b904ee07a1b8b0124733a402dc800e5687ed7605f131a59009ca1ab85f56f17eff152e98bb47257a274
SSDEEP 384:2S7YCn02R1hBPf/Ezj3hnGuiXIc8lkE8127B2qViOIiw2aBhr46BgD:17YC02R1H/i1GuiY4D1bqViOIZRBhrns
TLSH
T14CA2E18345D8077B4D214902E119B8AB9F27F1F7CF76E90BD04BA96C44E463EFC41562
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002e
Size 65KB
SHA256 b621060789bed55e4b0f1d3ed36066c8373f92c1d08da91ecd93d14605a822b3
MD5 385935a3bbfd4f804823708ee9033808
SHA1 920ec88e0af9f05626a2f06a3e60859c1fca24f9
SHA512 dbc9098668a0444b5d2ce59458c95b720ec07d0548b2e6a2b508385b0c7dd282c558c873e2a94d42d203164d34b31989ec455ac2e551d1202e7155f675c507e6
SSDEEP 1536:t+N9obt2vdopZ7oaDdjLzmAzsN/cUdXa11u2n/Hp:t+N9gtydcHdj3zs5c2wn/J
TLSH
T1036302B31CED9930A43D0D74F69EDA164D0139CB2FB35B3AB69B1856B56D101FC80E1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 c8a34848b64b969177eeb7449a1935c121c89d0aec01d766ce42b62db536a801
MD5 313d21bde3cee7dfff8222bd38c542cc
SHA1 4c095981056fe6c07ddadecdd6e7a4632f49fefe
SHA512 269532370ab6e24e52f14f3054b009a4420431582e9cd9ae4e9200d9cfb9fb402c28deae7070e7b1c7723d2f37ffa0f09f3c25a4f253e7ccfb17d7046f2ab170
TLSH
T19651436D215F4364CBCA2F762E6A82445EDDA76EAEC6774E42184F747DCD3309E00A34
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 01a9182c2fb9cd5df7e52bcd4b2d53a38821f589bfbd61eea53636af7b0705f1
MD5 d32e5a52077269e19478e809d0f113be
SHA1 8f7af67d5aa58fe9b091002f5e6bdc2ac7f8bcff
SHA512 559c4b125804bc70a9cf6b6cdaf667fd437af88d549b1a2b276f718ed2991339ef0f1548a2e4b4a8504e18ea1dfb993cace09a0b8c377e7f0e7e10b3ee29b039
TLSH
T116C09B15515F5455D795163122956055B3B40918018B554682E005587D1B5694601D55
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 b9e3f07fa230fd6c355c7aa92b9e71c1dfbd21b459c0cad3956010d90347171e
MD5 e96cd18a3422ce0a0e442c40a7419374
SHA1 93531e72bef7951788e9a4fcef43617f7e871eb7
SHA512 c17cdedc9968ce574db4cc1c1b98968d2c634e3db8205b156d7578a9918337eb8d2a1245f5e64e03e8b0987a736e81965630b0684a4ba02e1efc6631e7298daf
TLSH
T19431AC2D249341E4DBC02F7067AE02995C2C676AD9C3128AA31C8F643DEE33A051595C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 707ec21d9d835f62e1472598852a4482b03293508f47d9fd3028c292a5bf6144
MD5 b7a90ae391d9696edfbcf5d731426997
SHA1 af2aba8c0d20d0fc9d69bf82115f8adcd0597ec5
SHA512 e2f59c614732478079f2fd084f612e35b0da8c91303b3745e3367c82aee0d353a3e3bb89bfd3b895fcfa6f623008e7d96d3fc7d7f68d493ac31abc95decba53e
SSDEEP 192:DOh1wLuWtqGJJ5Jtu2KqpiEdGFUZFaPiuQvqmfPiNPiIVtqQQDjhPiZTvK:DOh1wLuWtqGJJ5Jtu2KqpiEdGFUZFaqH
TLSH
T1D1F19CF7C3E4C62D891196F49B15AF1ECE2D0528032C3D76C8D8AE1B93E2872E25575E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 9234601fa1bfcf6503fe5272149f236ebe2b4bf301e9098a92d692d6ba89f614
MD5 9ed720e45e299a9785045a85d06e5c7f
SHA1 10e8b4def09e6c136370cbd911ff91b625e53c79
SHA512 cc5c62d908071b4377dd4168a83183fb47bb6986b59cbce7fad64458321dd63b0728658fdd7d80bb155e782909b3114740ebbf57422cc55999a1e932c00638df
SSDEEP 192:DOh1uWtGJJ5JuzFAdAjKqpiEdGFUZFaPiuQvqfPiNPiI9qQQDjhphJIwNWTE:DOh1uWtGJJ5JuzFAdAjKqpiEdGFUZFaD
TLSH
T19C02ACF7C3E4C62DC91156F49B15AF1ECE2D0928032C3C7688D8AE5B93E2472E25574E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 a668dd25edf3b1d20c7fe626e73929c69bbf65d2d115e062414b28af50424f7f
MD5 a0b998d4e047f59c16aa422fd4a35751
SHA1 d02af7bc005dfb20d13b461e3bf5c3700c8b56e9
SHA512 a31751411eb70556ecde649a14da6735317c7538883e69d2a8671a7fd8702f9a3110ffe9c1821881f149940621860783dedc47da452bb2b8f1fcedc1e83561f1
SSDEEP 48:YALlqNqoq7hehyhgPsjRsRXLsHbfoKsiBgmzsi4fsiQosicKsit+sicqzsi31tsm:D8La4A62KqpI+3oN6UVE
TLSH
T1D9919EB3C3E8C66DC94156F49B257E1BCE2D0A28522C3D66C8D8AE5B53E2872D21174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 3ef6f6410f1342f74a07f9a93b1c99f3c73cb87ab4bc94701ee30956892c0013
MD5 053a96653774aa8e7e2a0c7718a46937
SHA1 e9018571c47958966031023efdd0aa4a203137eb
SHA512 30b7721969c3d00f82589fe24067186f7044502b16d0b86095e86ef20c784eda52ee09787a7b6bbafb8a2ee089a21e64d115119d394b505d69219070bec7579a
SSDEEP 192:DOh1uWtqGJJ5JtuzFuKqpiEdGFUZFaPiuQvqmfPiNPiIVtqQQDjhEDaW:DOh1uWtqGJJ5JtuzFuKqpiEdGFUZFaq0
TLSH
T103F1ACF7C3E4C62DC91196F49B15AF1ECE2D0528032C3C7688D8AE5B93E2472E25535E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 e99aa7c2ede81fc06d915979a710219bdb1db05f9e0c6a5977920477c8b8309c
MD5 544f001cd9798c3662ebb0902871d918
SHA1 82b29862ba6dc126228ddb9636daa11ca4127a63
SHA512 a43d5b6ed59f62fa09023c285e7f08fe5885ebdb103d90f3ab9b5e214326dbaec27627e1c3292c7e9eaa2b1a35036fc9690463bbfca4c279fcdf9543c20f364c
SSDEEP 192:DOh1wuWtqGJJ5JtuSpKqpiEdGFUZFaPiuQvqmfPiNPiIVtqQQDjhb5YE:DOh1wuWtqGJJ5JtuSpKqpiEdGFUZFaqz
TLSH
T195F19CF7C3E5C62D891156F49B15AF1ECE290528032C3C76C8D8AE1B93E2472E25535E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 0555ddc837f126875b5ecb9a26c90cb9980a0962753db74c048167b989c1eb80
MD5 f4e4393cb929ba00f10e093c6625b593
SHA1 150fafe5554e634a6b77661b76d3b80ff679a40b
SHA512 832a6f42e25ab8cc2b1aa9bee70f410e3fb9543f9a7bf267f4bdd597b80b6d6abebc9af6beeadbffe3d3e51bf645ce25a69a49493b7b0b7894b377bf9df1568e
SSDEEP 192:DOh1WGuzFAdA1ZJjJvHKqpiEdGFDqQQDjhpLNaTaPiTUIZxIKI8vnfPiNPSuYE:DOh1WGuzFAdA1ZJjJvHKqpiEdGFDpQDT
TLSH
T1C812ADF7C3E9C62DC91156F49B15AF1ECE2D0A28432C3C26C8D8AF5B93E2471E25564E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 0b58222d90c4ca2c841c8819f3fe7d92d19a8d10736751b5badc48012b24cf4b
MD5 0f91132f5ad431ad6d468fa5ded75b59
SHA1 e086313dc1f0e63669c73387fbaeb012e8537af9
SHA512 8e4e069b9763e09f3caa9a54e0196de29db44388f336ce0a8b86e12bdd48070e1731464934879e31080837b8fad281480cf2cca0473a65d2104297ac87d44f27
SSDEEP 192:D8La4A56THpAJPJwy2KqpI+3GFaCFaP1kNQvu2fP2NPeIbIYtqQVQUbP:D8La4A56THpAJPJwy2KqpI+3GFaCFatG
TLSH
T11512D1F3C3D8C52DC95156F49B25AF1ECE2D0A28432C3C66C8D8AE5B93E2871E21574E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 83097eba915a567c56dc9485145a417cf3da1300d8afadec6efba07a8513cf31
MD5 d3a8a3e357030f2eab62d9b543dbdf5e
SHA1 edb7662ffb38f699040815e1bc51f02a224b48a7
SHA512 c7ee64575b65bc4aa508dcebf649427c0f3b210bebf4d98c92378e446866b055c531e1cf2de72d8f17ebfac14a1e259bcd7b86b32643c5b71437d4447055130d
SSDEEP 192:DOh1wLu6THpAJPJwy2KqpiEdGFUCFaP1kNQvu2fP2NPeIbIYtqQQNHDjhFW:DOh1wLu6THpAJPJwy2KqpiEdGFUCFat+
TLSH
T1CA02AFF7C3E8C62DC91156F49B15AF1ECE2D0928432C3C66C8D8AE5B93E2871E25574E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 4c7fb0d37313614f8a256633b2c78e0c8f90b852654fd02809432dc869773b1d
MD5 66ef9319a139909f622eb39bf777db5f
SHA1 ebb1bcda73edd7ee6e5598c8f7e50ccbee6cdf1d
SHA512 e83d8f9e880589f8e693e85a5f4242fdf644fdfb4e434791bd3f0682cf858086f349d2f7abb00e5a3c00189fa3ebadb9a937b628168fe5f26b1f3511ca83f86a
SSDEEP 192:D8La4A56THpAJPJwgKqpI+3q6iFaCFaP1eTNQvu2fP2NPeIbIYtqQVE:D8La4A56THpAJPJwgKqpI+3q6iFaCFaD
TLSH
T15A02C0F3C3D8C52DC95156F49B25AF1ECE2D0A18432C3D26C8D8AE5B93E2871E25564E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 461250a7ad360869d4298743579d56e691f499512c0b1d2ebb3605a2a10ec1c1
MD5 da2a333d82c83ff70c71ea583d892168
SHA1 0ccc34ad8830a13bd79ff2922acbb9020d76aaa5
SHA512 f08e5a7169e59ead6e41f4ab892123d7d0ab879e1e2982f0eedfc16d850fdbccfd02146eb087784ba721eb117dacbc655ff24afdcddbfa695e0921c3e9ffd468
SSDEEP 192:DOh1WGuzBAdZ1ZJjJvJWtKqpiEdGFDqQQDjhnHNbaP3UIZxIKI8vnfPiNPSuUz7y:DOh1WGuzBAdZ1ZJjJvJWtKqpiEdGFDpi
TLSH
T156229CF7C3E9C62D891156F49B15AF1ECE2D0A28432C3C26C8D8BE5B93E2471E25574E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 519B
SHA256 00fba80ac22d4f059df1a96b4312404be4ab559d9980f7cb4cfa267e1e32847a
MD5 3806f10a64a5b39bab546a235cf1c5b8
SHA1 50d811322c5d7ca0c447d83cbe5a933fcc4db3ed
SHA512 de0a948d8e3767427d7863d09fb017f9853c9990f7b349076984586a07db5cea75747d5f87b30042c7852f10ec73be2d73687e02b06d2121f059a9c9c87db8c4
TLSH
T1EDF059F7EBBE756361B985A71E08FC0525B6E838025178F0EF6A42ACE191CE70B43413
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 baf926f881afbb445c426adbd00da2e9312afef0c616243906e7b9c7fe014088
MD5 4b7e0935c8a6b5ce4f1d3001dc9d051c
SHA1 3a8942d7d2b18b068248a083c5d1fc001d297bb5
SHA512 958bd2ac8159c5c05c1f8455e03446b9df9b8b9168fbe33c785135a1d0e918ad46773ae3b2c62fbe1143ac98689328667a5ae690c2a4e8932a0ef78f8fc28b53
SSDEEP 192:lRub6OFHu6bfv78hAPRp2YpE9THsb+WNnwB4q/2ebJDK2ZjY5kwmGVyIsnAUgraJ:lRubVtb348XQJw0V2ebty5Gee
TLSH
T1D852C52EAD50753B5CEBC22AF961BB16D7F5102160D42E88E6F8CE3C25E75CC221B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 ddc2f757be01cfdff133c5f645e4dc65c3c5b87e59c6cf673223c087fc3a574c
MD5 539fe595a610e6502b780844f41a8ebe
SHA1 a364741900950f4fb83c02bbcd9e9cf5c1ac18b4
SHA512 559336903848a177cb6d743f1206b6164eb36a20d8639cd07ba1bddb3ea115e2e5dba726cd5d7223bb6302213dc34f597dc8ac97c10ea35c49014c58a7c6a5cf
SSDEEP 192:lRWcBhD4OFHu6b5v78hjPRp/Ygt9THsb+WNnwB4t5ceGQK2ZjY5kwKG8yIsnAUge:lRWmhDntbZ4pXHJw0wcePy5qhe
TLSH
T1D252B32EAD50753B5CEBC22AF961BB56D7F5102161D02E88E6FC8E3C25E75CC221B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 27b8bcf0b2b554b6d0f91726588bf125d35bd90672ebb2424f029476a27dfe8c
MD5 658555524026581d2cdfa679aed77555
SHA1 6251fd841de23d8072f64ff2f33f68e756ff80fd
SHA512 dd1c28891d0732a39cb3e9e7e93e7e58fe2138fe840f3a8920691a1fa72110ed425fa7c239a7465621bc6dd691a9144cd3409f2ad4557331f713db07f3d48505
SSDEEP 192:lRWcBhi4OFHu6b5v7khjPRp/Ygt9THsb+WNnwB4/PeeoQK2ZjY5kwKG8yIsnAUge:lRWmhintbZopXHJw04eety5qhe
TLSH
T1A552B32EAD50753B5CEBC22AF961BB56D7F5102161D02E88E6FC8A3C25E75CC221B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 cc8695b6f5d06bf56866b0c4130a8711fe3a1aabdced7e76e292df503a7124ae
MD5 8c803f074ba80767e7d22672a842fee8
SHA1 3682f0801b4004b9faaa00daadeb250ae473b828
SHA512 36e4a7ddcc9d21a3f5215d9e7492a9e14d46576a0b191fd7275daf1c5f098bcdc1b94cfcc694958635aee478206feb322f314e38e3617b7b0eb8ffdd4e18a562
SSDEEP 192:lRub6OFHu6gfv78hAPRp2b9THsb+WNnwB0eiDK2ZjY5kwJGVyIsnAUgtaJ:lRubVtg348XwJw00eKy5pe8
TLSH
T10C42A52EED50753B5CEBC22AF9617B53D7F9102161D42E88E6F88A3C25D75CC222B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 9d8227f3f8414925dbcaba77ed8239271b8ff80bf8eaf8a537801b6fbcfeabfe
MD5 ad9dd8761bd6fd9638134a675e650598
SHA1 db8ceeee49656890007af608c627ca81353d372e
SHA512 260f13c7966c89813396d95238366de65ef1b996a7f12db3c6bba25bdf3a1ece83d78cb261769f06814c85279ea9afce02f948b2193a0a594e42bf96221139af
SSDEEP 192:lRWcB0i4OFHu6dlv7khjPRp/YZq9TH4DHsb+WNnwB4+tOeNQK2ZjY5kwKG8yIsnB:lRWm0intdVopXv6rw0XOeiy5qhe
TLSH
T14452C42EAD50797B4CEBC22AF961BB16D7F5102161D42E88E6FCCA3C25E75CC221B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 21fc8d560be04bb60e408480028cffc55e1c457e8f2dcdbd3d7994560f55ddd2
MD5 f02589a5edf35dd64c381d0d2d2f9e4b
SHA1 85077b3d1a122e9563186892d37260569a02ec92
SHA512 6810d8ecb8a562491139cb26a138ae248d00fdb0b33b070f7628ad1d089669eca82f25504cde5b734ebb67832132acac839aa42aa9487f33139ddccf7cb7bd11
SSDEEP 192:lRub6OFHu6Dfv78hAPRp2b9THsb+WNnwB0eiDK2ZjY5kwJGVyIsnAUgtaJ:lRubVtD348XwJw00eKy5pe8
TLSH
T1A442A52EED50753B5CEBC22AF9617B53D7F9102161D42E88E6F88A3C25D75CC222B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 a107ccdc9f5d8c26f6ed7516d687983b269761793360a14f8d22ac543341a82c
MD5 a02b197e3ed0214ac1166971948ef974
SHA1 17943f56eb36625b0d692c7524b8e7be9ef3a191
SHA512 c12a59a7427d12f46e4d88d0fa386aad579437bbe61f20fec00e6a4a32bc7eb5815d385379a57fe222bab2fbd7246c03142c643a7487d518770b3c8096715db1
SSDEEP 192:lRWcB0i4OFHu62lv7khjPRp/YZq9TH4DHsb+WNnwB4+tOeNQK2ZjY5kwKG8yIsnB:lRWm0int2VopXv6rw0XOeiy5qhe
TLSH
T18952C42EAD50797B4CEBC22AF961BB16D7F5102161D42E88E6FCCA3C25E75CC221B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 6094f17f713a439fbcd6655b60da912070e86d94077f97feb5d06333c476d133
MD5 7a389e260c500feabaa4c64ed4d0f06a
SHA1 a9c2795681b2ebc2dccaa046d1b95344305d9edd
SHA512 b6ee261ecf91492ede95a3a404ea9469050ddc0d2ad5272872a98292f5bb6c5604a7fee1e85b3bf8f6ae4df3f2f1e314103b99d4d8a68ae009fdb0657f535592
SSDEEP 192:lRub6OFHu6bwv78hjPRp/YpE9THsb+WNnwB4cTeebDK2ZjY5kwKGVyIsnAUgraJ:lRubVtbs4pXtJw0jee7y5qee
TLSH
T1BA52B32AED50753B5CEBC26AF961BB56D7F5102160D02E88E6FC8E3C25E75CC221B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f0e75b88776c1d2b5067f0bbf9ba740987496bdf5e60851a411bef9c3b77b923
MD5 5bb3118a391716370a400611c528af5b
SHA1 8516ebdaa23626d08a94859cb28fed8b0f7ccf0e
SHA512 a544e7a38e512dce3aad57d2af9ab2ee959dc90e32880163b114053a645dc5ff18e55b31d6419dd2e8216d1b418af417609819b0103af9b8c311bbabde5c206e
SSDEEP 192:lRWcB0i4OFHu6bWv7khjPRp/YZq9TH4DHsb+WNnwB4+tOeNQK2ZjY5kwKG8yIsnB:lRWm0intbiopXv6rw0XOeiy5qhe
TLSH
T13952C32EAD50753B4CEBC22AF961BB16D7F5002161D02E88E6FC8A3C25E75CC221B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f0ebd3632b68d2c73b38b5a6a67810d5aeb8e335c7cbb116d3dc5ec39e1b7472
MD5 bcfd219d843337047a632c9016875c7d
SHA1 b75515eeb0a2e79be15580d2ed2875e80b0b3b09
SHA512 f68743bc9b9cdaf22c25cf0e0117b0a733d733819974564a8d0a74349a50be13faf31b01af9fd88fd35df4e049977f2ea4a37423b6b1084515f6dc5aa7e7965c
SSDEEP 192:lRWcB0i4OFHu6b5v7khjPRp/YZq9TH4DHsb+WNnwB4+tOeNQK2ZjY5kwKG8yIsnB:lRWm0intbZopXv6rw0XOeiy5qhe
TLSH
T17D52C32EAD50757B4CEBC22AF961BB16D7F5002161D42E88E6FC8A3C25E75CC221B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 964affee1dcb29a72fc3c357fbb6ccf07dd6f4abac91fa000981466f36bf5224
MD5 4b523c855b4b75033f0a5340d58f38d4
SHA1 66b2d8c3d1e9d52849f5ca950f36eb840fc13e9d
SHA512 ddcca61ae9d754715f78f693ccf1fbb6593813e24aa6b5192438a7163483818a7e155b8613cf7e85fe9bfe35c16d7ef9306fb2e79e48384bb3552828b636b4b6
SSDEEP 192:lRWcB0i4OFHu6Blv7khjPRp/YZq9TH4DHsb+WNnwB4+tOeNQK2ZjY5kwKG8yIsnB:lRWm0intBVopXv6rw0XOeiy5qhe
TLSH
T1A952C42EAD50797B4CEBC22AF961BB16D7F5102161D42E88E6FCCA3C25E75CC221B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 23dbbe0f7a538129094326758f47a5699d3421172a498549f9ab03690330064c
MD5 1cc2d055eca4045287e2b963b949fc27
SHA1 43dbab0697588f94c23a30ecc6068cc655e02c64
SHA512 459bbbee76ca5c1c335518ef1c55331ce850251d8463a572b865725c72fef0c37a7b4e28d8a9066bc21607d8c2591072354ddd1f08f0a4833b92ad638c951c37
SSDEEP 192:lRWcB0i4OFHu6flv7khjPRp/YZq9TH4DHsb+WNnwB4+tOeNQK2ZjY5kwKG8yIsnB:lRWm0intfVopXv6rw0XOeiy5qhe
TLSH
T1A652C42EAD50757B4CEBC22AF961BB16D7F5102161D42E88E6FCCA3C25E75CC221B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 be7c885ff5993207b2db2442f701ba3eca02ea7fcf9565a8862f5f51c5d58722
MD5 32f60edf2e6556d639fa7fec18cedc51
SHA1 9df6b8d00db6e6a13013a29e41f824cb03f21f4f
SHA512 4ee557d7e070003e85948019849dc7252430bf935b7ab6d6dda88fb4b5bbe89910f82e89480ba65e5acaa8e64f3c6aa4d9436b2eb12e603d8769afe63d71f5c1
SSDEEP 192:lRWcB0i4OFHu6Bvv7khjPRp/YZq9TH4DHsb+WNnwB4+tOeNQK2ZjY5kwKG8yIsnB:lRWm0intBnopXv6rw0XOeiy5qhe
TLSH
T1AF52C42EAD50753B4CEBC22AF961BB16D7F5102161D42E88E6FC8A3C25E75CC221B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 73ace080deccb7e4f77a216d667ceb9d451bbf7722e74bc73a3ac641bbe71b10
MD5 6b7dafc3a7e9042f5a68c2fef390847f
SHA1 e7e59019e2477a914f583f4a4e7c548a47954798
SHA512 b250110d02fc73c39628b5624d475f4ab9a0238c6034b14eff2ba3d52260b9e75af34eda3d2273c4f55516b9671f13441773ccc9fa2aa6ccf708d5ddd0fa26a2
SSDEEP 192:lRWcB0i4OFHu6Liv7khjPRp/YZm9TH4DHsb+WNMFLwBK5x++tOe6QK2ZjY5kwKGN:lRWm0intLuopXv6rwq409OeDy5qhe
TLSH
T1B362D42EAD60753B4CEBC22AF961BB56D7F5102161D02E88A6FC8E3C25E75CC221B457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 c5f5c67dbdae467079504b2c3e8bdc0c0e6deab661966943722eaa32ba78b6bb
MD5 5926a2a7e5cee782a300c1f63b62a55c
SHA1 9469a3d1b5c31a090524ca05e132aa270689ccf4
SHA512 49b9999b8d4bab5782a412829b3385daa5c1d4941132e864de429feafaa1ff715e4caf5635482bea74392cdd7c83bb3056a2a6b244a1b49e89158858c28e5f4b
SSDEEP 192:lRWcBzb6OFHu6bev78hjPRp/YT09THsb+WNnwB4cTeebDK2ZjY5kwKGVyIsnAUge:lRWmzbVtba4pXbJw0jee7y5qee
TLSH
T18352B32EED50753B5CEBC26AF961BB56D7F5102160D02E88A6FC8A3C25E75CC221B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 c1872c43b3d8fcbb7c9b785821426cf84ea8fcb0f3cd70374dc74aa032bcb2b2
MD5 7bbe1d864cbfc75607727f72bbe12adc
SHA1 3992d806e4ce8a265ec9d611aef268bd1e00b89c
SHA512 a22effa8b28fb88c1eb29c1d961910db9c49a543a71aad95f8bd205ce83d47f653e435ca8258e0229d6c38ecd9c02ea9943637bd060852a433906be7ce63e2ed
SSDEEP 192:lRWcBhb6OFHu6bev78hjPRp/Ygt9THsb+WNnwB4j4EekDK2ZjY5kwKGVyIsnAUge:lRWmhbVtba4pXHJw0TEeIy5qee
TLSH
T1BB52B32EAD50757B4CEBC22AF961BB56D7F5102160D02E88E6FC8A3C25E75CC221B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 08b43e8be92ebc46e025d30cbd0e82cb9b6013111b9d162e1dd4826f62edf7e4
MD5 47c6a213c874e7363e5e7057fd3835e6
SHA1 46a02338af9c15e5cf6c94bbb306dfd4e5b34975
SHA512 5ee3835b40d2d7be4e7b97354efe654519cdcd767b2fa5381b65f7a5eeb76080d30c68a9d375c7a3089eccea3a5bf9079d6eb5afab57e2ed21ac1252ccb8cef2
SSDEEP 192:lRWcBhD6OFHu6bev78hjPRp/Ygt9THsb+WNnwB4j4EekQK2ZjY5kwKGVyIsnAUge:lRWmhDVtba4pXHJw0TEeZy5qee
TLSH
T10952B32EAD50757B5CEBC22AF961BB56D7F5102160D02E88E6FC8A3C25E75CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 238cfb01735e279571186bae8a9b6b1f61799013bbd8ec9bc9b6c7e532984da5
MD5 5df4da9fd22d761e84ed5835aae8a794
SHA1 292d011ff427120c24eb6e9f3bb1bef206d375cd
SHA512 b6eddc07011b3d08dd9b04029876768592dc5abd676de3cfa9299b1c22f7666e516d189e9947c3c67b7d1325d70e2ce429081be30490328512b314e2c616b1ba
SSDEEP 192:lRWcB0i4OFHu6Ylv7khjPRp/YZq9TH4DHsb+WNnwB4+tOeNQK2ZjY5kwKG8yIsnB:lRWm0intYVopXv6rw0XOeiy5qhe
TLSH
T19452C42EAD50797B4CEBC22AF961BB16D7F5002161D42E88E6FCCA3C25E75CC221B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 a9f0aa89a38c847b596aa743bc2a0dcc5a825489abf3671f7632ba8fdc54a0d0
MD5 7273918eed0a8b25625ac8c5f1415a09
SHA1 a460aab5a83956feeff9f82959d615740261e27a
SHA512 ae75bf70994bd74516cac4c3db81a58954299125aeca2bb80d0f1c1423c73eed9df2d7a312db4c7d966c878999a83f2ad7d51ede7823c4565c6c91dac2c964e7
SSDEEP 192:lRWcB0i4OFHu60fv7khjPRp/YZm9TH4DHsb+WNMFLwBKm9iZW+tOemWQK2ZjY5kk:lRWm0int03opXv6rwq45MZVOem/y5qhe
TLSH
T16762D52EAD60757B4CEBC26AF861BB16D7F5102161D02E88E6FC8E3C25E75CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 32d0225777e2de9f65f7fec1103445eea15764355424dbfcf45fe65484329e62
MD5 a26f2fe5ef32ed985ecb19c5b7290497
SHA1 ed59c961c51c314d0e7417c5ff458f94f3369194
SHA512 d34c78768d1e11e87e2b9f9699be5aafedb6861aaabf442af6073e5e008e400caf07f91878ef83bcd6be73a269c50e001a53fe576470614d820a33b9d7752955
SSDEEP 192:lRWcB0i4OFHu6Elv7khjPRp/YZq9TH4DHsb+WNnwB4+tOeNQK2ZjY5kwKG8yIsnB:lRWm0intEVopXv6rw0XOeiy5qhe
TLSH
T1D252C42EAD50793B4CEBC22AF961BB16D7F5002161D42E88E6FCCA3C25E75CC221B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 0216bf00cf54141d2a227fb9c5da00bd5816669d0e3b1038e85923d3ca7a5422
MD5 30c520fd5489470c4936b09121ef0aa7
SHA1 7bbbd8b9ca3c21a099fb16182bdba4d8cff46f2f
SHA512 1a44569355787bcc1b3b1ed40891db89747fbb4657ff60ca389156b030799eda1658afbd0f78879d4463fe702ce4d4c3f1f87b36bd2710e020a80635c21ec3a0
SSDEEP 192:lRWcBhD4OFHu6bev78hjPRp/Ygt9THsb+WNnwB4j4EekQK2ZjY5kwKGVyIsnAUge:lRWmhDntba4pXHJw0TEeZy5qee
TLSH
T1B752B32EAD50757B5CEBC22AF961BB56D7F5102160D02E88E6FC8A3C25E75CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 a55c9d9bfbff27f4080d00af8282862be9cc6b021b0d1cf3b654e6d1857a1705
MD5 c8926c13ed1e541a9ebca052800d518d
SHA1 3522a9925410a3faf9a73cb924c1c1fb4dbffb5b
SHA512 0cc7f70f08f90753f1713955142d2f28c2b7b8284eb83bb86dea581036af8c57e30edda3af83eb81e1295de946e3c6812dc7f1671fca9c13e29cb035d90943a4
SSDEEP 384:j5j3S7KxkXqKf/pUZNCgVLH2HfgslA/7pLuLceS9YXOD32+ErU3tJHGT7LAE:jJ3S7KxkXqKf/pUZNCgVLH2HfgsC/7pO
TLSH
T1E772FA67BC4C9A3B4F94C68CDC267F4FADB5024B61ED886443FA582603D5ACB05062FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 1c97d29e389ba86b0348e24d4765371bdd993e4481434e93e3203eeb3de7c64d
MD5 5b603d729fdb69b5bb942cae417390c7
SHA1 c91f5c847e5c0deed0d97a754deba816daacd3b9
SHA512 7d8cbe29e11116e69474d784b42385738bfef363a2304c0ad6b59d89583caf8238e152026b402fbfe62ebb5ce7289f3c5bd471c1d2203a521d441d9b79ea89e0
TLSH
T1C1B0123580423301C00603711670A49433608FB4D513238581E00D45A8351A14057208
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d542d.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5d542d.TMP
Size 96B
SHA256 927d2ffd65dceb87b829e09f393811280173f7843b46e05d715c4201bc63538a
MD5 dc37c0b7f9ca2da83bb19ae38e739cd2
SHA1 cbe4275a4f94045c5c9fc0fb0e8ccc557a650ca7
SHA512 2d11cd069a1c88940bb31124d26794a7a62ad80320f7c0e7b881adfd694521648af88ad364ce01b27b29cd2c5543962dc4d57c6eeb2f5a2e37f5ed75c00437ff
TLSH
T13BB00279C1036213C04317B5A695D5D8B361DF25C753123693E12A6BEC2977189251A0
MD5 SHA1 SHA512 TLSH

Submit Download

580df7c88f4ea3c0_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\580df7c88f4ea3c0_0
Size 255KB
SHA256 6d4d40329b1862f0d0cb07693300951714d82a949f6f709ed0c14f7ba5aff8d3
MD5 04f973dbd53065485dc33aeb92bcfa1f
SHA1 268b35ce35deecee288d91166247ffbed01da253
SHA512 f89b8e7a0ab12cccbaa116cefc95b2a05307291ad218cdbeb5829e207e1fae86502fb0a74192fdebe1e5c8e838fb7e2166da2e981ded4122b8aab7625e6746f5
SSDEEP 6144:HNLGgJZqvkH2TGzW7+/6T3021ZprEghn7U0eK08QiQyIKZ:HNigJZwyzW7VrESn7U0I8QiQyIK
TLSH
T185447D723300F13FA8278EA1A6BA7F4D3825E217DD2706B8D5E4E5358FD6DBA141264C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 120B
SHA256 e8546c742b5d5ebd509be1c563f322ee6257ad2d4a27acebddb4b97c9923026d
MD5 61cb9f873147c586e91a7e4c2a50ad59
SHA1 2b9b60f798cf036b871cd9bb351a74b4cbe7e66b
SHA512 b08ed669a6536aa25a52b8373ba008a69cde4579ddc9ba70f7f5098fdc6c15fd04d505059ac5e8a6f110154c90e42aa6ff6e3a597c752bd3d8d3b4b291323a97
TLSH
T143B012D900A34D84CE0182B582CB49803B04651003430A0216920E449C391409603050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 47c17e354e5e0dcaeb15d62d3d4c99054243a6127b96c2577863b007ae39718a
MD5 211cf296d74aac5250e38d4bd33ff461
SHA1 b55c8b0d4eed3a0108857496c4456d7f856055e5
SHA512 891aba04ba99197271f25d0ab30e7efda722bd63867aa7e7fa40da29301611c707907a8965b302d368bf1d9b5ac761919fe6aec887569cee2191056a9da9b751
TLSH
T1F3B022CC0083ACC2CE0003F080CBCCC0BB222F00038BC8A2B2F00A00EC282002303800
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 265KB
SHA256 119b8bf6d13d1619d9975da525c580797915915450d51c2cdbafd251eb8ae465
MD5 12f95f1c6b31f8bfee5ecc783db9ddd5
SHA1 3d8e3b36500bc33031e0f8249bb31587cd7fd5da
SHA512 2d9211f3b9f2dc844e67165c43476ccef0866a8ac9882dff52d3a2bce570463ec228116dd3689692b2ac83e8487b5ae8ab66fc5e8439681c77d89388339e4b52
SSDEEP 6144:l+Dvz0p3IGzzZDTQ+hFD+7t56OD9ZfSApprp:l+fM4GRPQyFSXD9ZfS4L
TLSH
T14144133629969C7785BCE050E46FE128DD38C9CF42EE6B0984466F8AD2AFD4D0653C37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 265KB
SHA256 e3fb2f7977be6fe3a1eb38d85dbfb429cac29e32a811bbc1ecbeb273044a178f
MD5 cfa658576a56664d5b4c138c5300fa8b
SHA1 f552ec550921b5beac120286e1067a8627f375a8
SHA512 d88e70b26712a34965b9212b5154a54d0f2dddd586ccbdf724da56c034d8e853427ee2937309fbe6a3667d8075da51c6110399d25630562c88f8c1ad580a197d
SSDEEP 6144:0+Dvz0p3IGzzZDTQ+hFD+7t56OD9ZfSApprp:0+fM4GRPQyFSXD9ZfS4L
TLSH
T14944133629969C7785BCE050E46FE128DD38C9CF42EE6B0984466F8AD2AFD4D0653C37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 da2f59cd564dd80278c39d82d422bbab11a0a34b0b63b856a652559476cf8eea
MD5 653f436bbeab03e0e2e2fb56ad88500e
SHA1 c99f699e8c4e409315e27b414f30bd16404dd3dc
SHA512 13b8f167317b81b232b3519bd007b41ec4e97094f6efa72d06b22d59126d81783d89f4cdc2d2f9982ad1fbd1e42814ad228c9ba240c769ec273298573748228d
SSDEEP 3072:K+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gy:K+hFD+7t56OD9ZfSAppry
TLSH
T175D31232AA91C8BBC9BC6541B157A304DE766CED41DE3A09444A5F8EE09FD4C0773A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 266KB
SHA256 9b8bb7a548a082a3e13330a94e5570425150a86386b642ba2a5f50f14d78c9b0
MD5 dfa3a52b6b843b6c4568e04d21629396
SHA1 ffd7242909cfda7ff908813724eb7a2407831c6d
SHA512 44176a3b9da4750a5d787d243976ffe7b33da397a48412d9b7ee2eaed9241872889ad114e4bd2c484d6b79dc0f3619656881da29734812820ddbbcffef8ba57d
SSDEEP 6144:e+Dvz0p3IGzzZDTQ+hFD+7t56OD9ZfSApprp:e+fM4GRPQyFSXD9ZfS4L
TLSH
T1EE44123639928CB784B9E150F46FA124DD38C9CF42EEAB0984466F8AD26FD4D0757837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 266KB
SHA256 170d26fe5a8c73ecc9f333d8fe91e9740e17879d7e1eb0cf7fc147be9698570d
MD5 6a49f654836b6dbc4f72075a3c713cde
SHA1 81f4ee2093fff60fdf389e976a5340a70ee9dcc6
SHA512 e2dab2a007c0d9701bd38e62a3a817d6376cb24686b186b6d299a336552178e3e1cfaa2c47e870633971a5736326b0cd092af0e946501883b4989abdeb7299e6
SSDEEP 6144:a+Dvz0p3IGzzZDTQ+hFD+7t56OD9ZfSApprp:a+fM4GRPQyFSXD9ZfS4L
TLSH
T17744123639928CB784B9E150F46FA124DD38C9CF42EEAB0984466F8AD26FD4D0757837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pgsetup_7.2.9.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-N0Z6WE8XSB.tmp\pgsetup_7.2.9.tmp
Size 4.2MB
SHA256 9b0c6ba2a57d83b447ca55c61fca88933aadd1768a4cfb77d0834ef225caccf5
MD5 bff0e898dd6178210cf14e3fec04af2c
SHA1 37093e8616b4ee156d0420f55198bba5a671d173
SHA512 6a8041adfca1fd0f2906287f12d5ef5821d2e291b1014996148281cc904a6f0af6e1919e3006246a1af71eeaf22bef3d34c64c691afb26e831dbaddb9f1035c8
SSDEEP 98304:g9SZUvl30aj90ZFcvdQ0hdgvminQLMj+JK333/zt:3ItJj90Z6RgKw3zt
TLSH
T1FF168F03B388753EE4B71A3A883FA654583F7A213A26CD4B6BF4095C4F396416D3A747
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 30B
SHA256 1a79b5ef446801abf6de705b8cd0afec73b90af5d4ea5129a81fee713cbba174
MD5 66a67589a43fd19545cebc479924f968
SHA1 764fcdf1fc16fbc1cf9cd495d47a4245162db407
SHA512 e50c009ad65e1ff599c864e711d5ead19961c12b51633cf360f934080ed1a2675e1ab9b02b1418ee3aa62fc373058d646f0e360a4593205cb2736d7f351dcdd1
MD5 SHA1 SHA512

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

Pleasuregram.lnk

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pleasuregram Desktop\Pleasuregram.lnk
Size 1KB
SHA256 b30ebc9ffc09a4bbac8979f7fac032029c2a02decc4baae04401c93fc9779124
MD5 8380ba811fd7d5e7bfe34c76a082aeff
SHA1 4c9ec6140fee47fa7601a732afa54208b14d3cda
SHA512 06ef1436f870aa39740ed74924a7e1503775b3a183b5185b6acd7a3b25dde9be5b23c5bf4e23da2220d1aaac178472b92dd5effea728f864854f624068f907eb
TLSH
T1F111BD4437CA1B29F3F38D718AB69224D6B3F942EF45CB6C4764488E1CB5A05C614F1A
MD5 SHA1 SHA512 TLSH

Submit Download

3471f044d010e91ac15983caf590b466.jpg

Path C:\Users\Admin\Downloads\3471f044d010e91ac15983caf590b466.jpg
Size 4KB
SHA256 f6a06017759914a2bb7f0acde58c61df24013a88f34f01553cb4120088229454
MD5 e9b6055b3ae00dbfad069d417eeddbed
SHA1 cade7be254b3b719fbe611b6ab97df478d50cae9
SHA512 6eba3515f41b3b3798324fa61bb915b8f5a470b5010d3ea7b3619f7f9ebfd602f6a9453c224bf69ca24ea998d4ebb1755667be7a39e87bd943559e887956db65
SSDEEP 96:m6l8GZOC5oaupyftB9mDanjWjxmYlQNlgDV2Z4PVJFpZ9wz:mjMruiLNnjWjxTQLmVPVJFb9wz
TLSH
T19CA10AC737E5CA08F823DB7208FD8776F35AFC0EB653521F26606061074A4E29E956C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

images.jpg

Path C:\Users\Admin\Downloads\images.jpg
Size 4KB
SHA256 20ddf797f1029402b890195f0071cb48f70c3044f33d9de90b20798c14c494fe
MD5 212288b98296f2dc720dc47c59834b54
SHA1 e903649d03f3ed9a167aa12d04c436579b46c99d
SHA512 3812d5dc887f073ed86d1d48c3c9c5c88b6247c4c38cb460afedd6813ac35f0760e50ff8b69b161740bf0ca12d010ab581ee8b5e0b6b950c3ca0768ed01a8da0
SSDEEP 96:ciHAA74b6IrlERtjr7wBf/uSaQDFnyi/sahtLSKrmu9HKakgy9:coAX6IrlGRr7wVuaDBz/XtuKrm0K1gs
TLSH
T18A916DEA2BC7DA82CA30EB731D23681EDE4F68550424411C542C59E3090AFEACD2AFCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/5512-7-0x0000000000020000-0x000000000010E000-memory.dmp

Download

memory/5512-0-0x0000000000020000-0x000000000010E000-memory.dmp

Download

memory/5512-36-0x0000000000020000-0x000000000010E000-memory.dmp

Download

memory/5568-8-0x00000000007F0000-0x0000000000C3A000-memory.dmp

Download

memory/5568-35-0x00000000007F0000-0x0000000000C3A000-memory.dmp

Download

memory/5568-9-0x00000000007E0000-0x00000000007E1000-memory.dmp

Download

memory/5568-14-0x00000000007F0000-0x0000000000C3A000-memory.dmp

Download

memory/5568-5-0x00000000007E0000-0x00000000007E1000-memory.dmp

Download