95300dc1dad29d8e10b0c26251971a1aa571352fc9ceccaa99878571d7b6b2f4

Analysis

user interaction
yes
max time kernel
599s
max time network
602s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
30/09/2026, 06:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
free robux.exe
Size 12KB
Sample260930-gr3rgssfqg
SHA256 95300dc1dad29d8e10b0c26251971a1aa571352fc9ceccaa99878571d7b6b2f4
MD5 d267544e945f5d1c20c61274730f091b
SHA1 c27646e56a87e32ef48aace0e6b2442a65f07e1e
SHA512 0768fcd4fd3b1b9250f56afac1eeedb8728055d87eae7e11864f932829e859db3a5930278e2bae78aa6172e0b677e18c7f6c9af23bffa915d5db3cf22ecab245
SSDEEP 192:/QF/gxRYojJXr3VPq82/fv3z/bZAVVS7R3Q5tfAxj0zGT:y/CYotXLVRuh3xj0
TLSH
T16F421947FB8548EBD66943BC82FB078AF0B1BE185B9213CB03A1E0551E4A7C5B6B15C8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 7 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
79	camo.githubusercontent.com
80	camo.githubusercontent.com
82	camo.githubusercontent.com
1	raw.githubusercontent.com
12	raw.githubusercontent.com
61	camo.githubusercontent.com
78	camo.githubusercontent.com

ConfuserEx .NET packer 1 IoCs

Detects ConfuserEx .NET packer.

resource	yara_rule
behavioral2/memory/5308-802-0x00007FF676A00000-0x00007FF677850000-memory.dmp	ConfuserEx

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
240	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe

NTFS ADS 2 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\die_win64_portable_3.21_x64.zip:Zone.Identifier	chrome.exe
File opened for modification	C:\Users\Admin\Downloads\dnSpy-net-win64.zip:Zone.Identifier	chrome.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
5308	die.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
4960	chrome.exe
4960	chrome.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5308	die.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe
Token: SeShutdownPrivilege	5548	chrome.exe
Token: SeCreatePagefilePrivilege	5548	chrome.exe

Suspicious use of FindShellTrayWindow 56 IoCs

pid	Process
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5308	die.exe
5308	die.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe

Suspicious use of SendNotifyMessage 18 IoCs

pid	Process
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5548	chrome.exe
5308	die.exe
5308	die.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5308	die.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 5548 wrote to memory of 2412	5548	chrome.exe	90
PID 5548 wrote to memory of 240	5548	chrome.exe	91
PID 5548 wrote to memory of 464	5548	chrome.exe	92
PID 5548 wrote to memory of 464	5548	chrome.exe	92
PID 5548 wrote to memory of 436	5548	chrome.exe	93
PID 5548 wrote to memory of 436	5548	chrome.exe	93
PID 5548 wrote to memory of 3028	5548	chrome.exe	95
PID 5548 wrote to memory of 3028	5548	chrome.exe	95
PID 5548 wrote to memory of 2948	5548	chrome.exe	96
PID 5548 wrote to memory of 2948	5548	chrome.exe	96
PID 5548 wrote to memory of 2628	5548	chrome.exe	97
PID 5548 wrote to memory of 2628	5548	chrome.exe	97
PID 5548 wrote to memory of 6036	5548	chrome.exe	99
PID 5548 wrote to memory of 6036	5548	chrome.exe	99
PID 5548 wrote to memory of 5476	5548	chrome.exe	100
PID 5548 wrote to memory of 5004	5548	chrome.exe	104
PID 5548 wrote to memory of 5004	5548	chrome.exe	104
PID 5548 wrote to memory of 4492	5548	chrome.exe	105
PID 5548 wrote to memory of 4492	5548	chrome.exe	105
PID 5548 wrote to memory of 3272	5548	chrome.exe	106
PID 5548 wrote to memory of 3912	5548	chrome.exe	107
PID 5548 wrote to memory of 892	5548	chrome.exe	108
PID 5548 wrote to memory of 3172	5548	chrome.exe	109
PID 1780 wrote to memory of 944	1780	chrome.exe	116
PID 5548 wrote to memory of 2672	5548	chrome.exe	117
PID 5548 wrote to memory of 2672	5548	chrome.exe	117
PID 5548 wrote to memory of 5288	5548	chrome.exe	118
PID 5548 wrote to memory of 5288	5548	chrome.exe	118
PID 5548 wrote to memory of 1176	5548	chrome.exe	119
PID 5548 wrote to memory of 1176	5548	chrome.exe	119
PID 5548 wrote to memory of 1648	5548	chrome.exe	120
PID 5548 wrote to memory of 1648	5548	chrome.exe	120
PID 5548 wrote to memory of 6040	5548	chrome.exe	121
PID 5548 wrote to memory of 6040	5548	chrome.exe	121
PID 5548 wrote to memory of 5248	5548	chrome.exe	124
PID 5548 wrote to memory of 4960	5548	chrome.exe	125
PID 5548 wrote to memory of 3608	5548	chrome.exe	126
PID 5548 wrote to memory of 3608	5548	chrome.exe	126

C:\Users\Admin\AppData\Local\Temp\free robux.exe
"C:\Users\Admin\AppData\Local\Temp\free robux.exe"
1⤵
PID:564

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3548

C:\Users\Admin\AppData\Local\Temp\free robux.exe
"C:\Users\Admin\AppData\Local\Temp\free robux.exe"
1⤵
PID:5128

C:\Users\Admin\AppData\Local\Temp\free robux.exe
"C:\Users\Admin\AppData\Local\Temp\free robux.exe"
1⤵
PID:3404

C:\Users\Admin\AppData\Local\Temp\free robux.exe
"C:\Users\Admin\AppData\Local\Temp\free robux.exe"
1⤵
PID:5748

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffebeebc728,0x7ffebeebc734,0x7ffebeebc740
  2⤵
  PID:2412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1828,i,23787724155008273,4724485595341873366,524288 --field-trial-handle=1900,i,127751737889129297,7097550279631964950,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2076 /prefetch:11
  2⤵
  - System Time Discovery
  PID:240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1600,i,736286911060457218,8081719625764947613,262144 --field-trial-handle=1900,i,127751737889129297,7097550279631964950,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2044 /prefetch:2
  2⤵
  PID:464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2348,i,1815654101279869316,18093170227623674165,524288 --field-trial-handle=1900,i,127751737889129297,7097550279631964950,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2360 /prefetch:13
  2⤵
  PID:436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3252,i,5477365829766057535,2241503193811226536,2097152 --field-trial-handle=1900,i,127751737889129297,7097550279631964950,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:3028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3332,i,14332991716218307004,14601128552594885742,2097152 --field-trial-handle=1900,i,127751737889129297,7097550279631964950,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3384 /prefetch:1
  2⤵
  PID:2948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4336,i,281893705704715335,4527700440106731309,2097152 --field-trial-handle=1900,i,127751737889129297,7097550279631964950,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4348 /prefetch:9
  2⤵
  PID:2628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4720,i,6825340129354474564,2702811017351151606,2097152 --field-trial-handle=1900,i,127751737889129297,7097550279631964950,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4756 /prefetch:1
  2⤵
  PID:6036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5556,i,5783689537525877850,13005499251480382466,524288 --field-trial-handle=1900,i,127751737889129297,7097550279631964950,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5560 /prefetch:14
  2⤵
  PID:5476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5564,i,3520964114813187991,11167654558249288749,2097152 --field-trial-handle=1900,i,127751737889129297,7097550279631964950,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5792 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3464,i,18297772689341276385,11887784753910316909,2097152 --field-trial-handle=1900,i,127751737889129297,7097550279631964950,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5884,i,7939009636463975538,11349727393270374527,524288 --field-trial-handle=1900,i,127751737889129297,7097550279631964950,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3596 /prefetch:14
  2⤵
  PID:3272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4880,i,6511956664271629060,15140722585153608416,524288 --field-trial-handle=1900,i,127751737889129297,7097550279631964950,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5916 /prefetch:14
  2⤵
  PID:3912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3632,i,5658497487021051414,7902999785132190712,524288 --field-trial-handle=1900,i,127751737889129297,7097550279631964950,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5960 /prefetch:14
  2⤵
  PID:892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6032,i,2401914204973820768,521436379116569499,524288 --field-trial-handle=1900,i,127751737889129297,7097550279631964950,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6040 /prefetch:14
  2⤵
  - NTFS ADS
  PID:3172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6048,i,15572955564972430357,604755039780440878,2097152 --field-trial-handle=1900,i,127751737889129297,7097550279631964950,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5352 /prefetch:1
  2⤵
  PID:2672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6208,i,3847098458638077063,8137403370346567463,2097152 --field-trial-handle=1900,i,127751737889129297,7097550279631964950,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6192 /prefetch:1
  2⤵
  PID:5288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6376,i,4943450856560958894,16596698380193118993,2097152 --field-trial-handle=1900,i,127751737889129297,7097550279631964950,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6424 /prefetch:1
  2⤵
  PID:1176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6156,i,11500520321417337523,11359930601936916053,2097152 --field-trial-handle=1900,i,127751737889129297,7097550279631964950,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6128 /prefetch:1
  2⤵
  PID:1648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6044,i,4204763264031087215,1008479038076737813,2097152 --field-trial-handle=1900,i,127751737889129297,7097550279631964950,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5928 /prefetch:1
  2⤵
  PID:6040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6372,i,16232063096356522903,1664866005166053006,524288 --field-trial-handle=1900,i,127751737889129297,7097550279631964950,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6248 /prefetch:14
  2⤵
  - NTFS ADS
  PID:5248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1156,i,11911790903061926242,5403073738049153604,262144 --field-trial-handle=1900,i,127751737889129297,7097550279631964950,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6180 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4600,i,8384996395481486722,2892009405396074212,524288 --field-trial-handle=1900,i,127751737889129297,7097550279631964950,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6680 /prefetch:14
  2⤵
  PID:3608

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:836

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2260

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
PID:4656

C:\Windows\System32\DataExchangeHost.exe
C:\Windows\System32\DataExchangeHost.exe -Embedding
1⤵
PID:2284

C:\Users\Admin\Desktop\die\die.exe
"C:\Users\Admin\Desktop\die\die.exe"
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:5308

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x80,0x84,0xe4,0xa4,0x108,0x7ffebeebc728,0x7ffebeebc734,0x7ffebeebc740
  2⤵
  PID:944

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 2c1ac791de8cf913a455b573604aac34d987b5e01256ffc1dcd0af3912a9e72b
MD5 1f8cfbb98ae8201ef02c280fd47b5469
SHA1 c339dc53137b24bfd48445808e9d5e26ed40a09b
SHA512 c7b0a644f28c837ce80be7a9371d048eb4702d2364ecb60b024946f809be6c2c67429fa636812527b4a4cadb62882074ce40c0ebe07513b646a2240aafefa8f4
MD5 SHA1 SHA512

Submit Download

55186e12-e42c-43a8-84fb-dffcef66104b.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\55186e12-e42c-43a8-84fb-dffcef66104b.tmp
Size 13KB
SHA256 d6709d3c4efc2fb6c203a53c701a8f32013bc2dab04624f648e41c5a2d8866e5
MD5 1f63dbb511e458db9fc1a844de7d425d
SHA1 9203987e9143498588f7f27752640c3523c5ee50
SHA512 c1ba0d48cb786e46058dffff93330d1b71d4b8f7c204d29bf26c4d485562bbf113c4c2c3f199a18cdf5c21c8d7c47a7eb1b55ba9b5830d866462466480e4c408
SSDEEP 192:5RH8cBzM1nuEYrVmv7bpAPRp2XwXuTq9/Hsb+WNaIVy4md2Yyeqp2olVyIsnAUg8:5RcmzMJsSPUX+8tww32np2E8
TLSH
T1D752D62EA96439BB4CDBD219F965BB57D3F5102160D02E88EEFC892C14E7ADC321B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 16742f3c33f77620f044c5d774467b51c1b36caf5522bb4e5a2fc60e8160cce9
MD5 da0db1c1f1dc7861797d440955a97104
SHA1 cd443636f50cd425d9d336a5a0b2f0a2be2fedbe
SHA512 9e4d4d2996fda99c77499e66758e4f31fa5ee524ed4e8d5067ce395dc27ba8986a953d7e77bdd05a73732946953de03d83d370cf5ac38a4fd2b74790abc72b56
TLSH
T18AF0F4A9CC20FC3708FD0B1860A44B4AE79023572790499F3A3DC21C8F7567B469982C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 346KB
SHA256 9be344d8aab52c80881980d24ba1435146143794aebbeb98bcae9a4b41f0bd16
MD5 fc31feb6dbd996017ba0751ebf1a2be0
SHA1 d5e54654c86bcbfc7aeed4377e9183421b5f63f4
SHA512 21a4c7e4b3c8f42a8886bcac34a50ae30e61efd3c0443b66fd3cffc54caaf4265d4ee65521051cc530e2e1dccbfb877a303a119768406da737c3249ab577b0e5
SSDEEP 6144:r6PyntaVKs+9xeKjohEc1avaW5Id9Veu22qVTvHodWVjaVrQXcx81E+/SnCCKCDC:uPynjs+9QEcyIfcN2YTvHo0VjaV2Z/SO
TLSH
T1FF7423717998940FD4622800765A6FF51C403FAFC52AE6E3677B10B34D9E4A7347CA38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000011

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000011
Size 117KB
SHA256 4365535d361d3b8bef86f637e77d444777ac35579d1cf0f69f1a6689316c52c5
MD5 e93ff93efa8ffa9a468b5bfc93cc543f
SHA1 4211070ff4ccb020e4b6a2419c53559a2d2421d8
SHA512 2b5b4aa14629db234f45ee54bc878931f014450781d90ff499b1b2b40fff0b9c4a75f767fa03083ac19fc39363825609d36b38228fead33cc1f898357b7e1761
SSDEEP 3072:SYR+hGxq5Sye6bGV9jdnIJaxvbBT4+OM6Iuw7QwLAMhF:SY6Go5Syk9jxIJ4Vhnuw7AYF
TLSH
T17CC312727124F7FE64045A0F7EBD56C26168B6C1DBA6C38C3D225EB95C2AC19C0B9A30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c
Size 39KB
SHA256 351740773d7f76fdcbc590e4877f82b43b6b302e055b4a212b5f0eeeb7d75c72
MD5 cc0a7c6e4d5d6be516c7a0e9bab02d67
SHA1 4aec30569325f3c30837d976910f17894fc7cb5f
SHA512 570ea83d4c122d9889baad2579f1653962e59ce778db8cdf94a98831dfeded91668c7d2e80fdfb8c3f702e902593d3df351300370c1c5e0d61bfe5617b755ef7
SSDEEP 768:Cob8upP5M7nN5mfoc6hHsJeDy+Itjui1hnh1R8FghRFH4uIylFW/0Qmp5k8R:Z5m6fZDeYnagDFYdyrV5rR
TLSH
T13B03F190E091176E363637A7BC65993F8C09EB737F94F1728A4A0EB690C4512363A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d
Size 21KB
SHA256 30d4d556af766bd567373084dd5cbd11c3a5f6161b9088a188d37943df88fe0f
MD5 39119c80a2b772fd57105d29465c234d
SHA1 8ceecbbe57ea8f4a2447beb0dc661040fe4e470c
SHA512 8c64f411bea5158e8ce279664c21bb92fec192381008df86e49cc535326c99aef267c52d8b4fced92a0a8c2637a6ec3792ce86fceb7b639b30f6987fefd6dcf8
SSDEEP 384:WiEwfMHqEGG/hrRLif4WNZEatBfzFJRGLDr9QRAPoAC03OO+JPfGOs4SQ/LvDshR:Wixkqk/DKZnZzFJkLv9QR3AC03Oh9fGp
TLSH
T120A2D01E5B3AC4FEB541A8C70B76F819986C383A9241B99A7549FC47815F3F01DCCA29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000021

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000021
Size 36KB
SHA256 c2dd29dfe7547d976415b749b5e6659ae185d300e60bbafb26d6609738a1e167
MD5 171d7a84e7efe752e6ed0d190b6be9ec
SHA1 fa570651cec1db69a835db996673b64c1cdf58f4
SHA512 5976cfe93be921d7d571c55505c1bc3044deecc0b1aa422c8cf58da720714aed3fb154f7fc22d10f6c4fca6ae5f92cb9ec8ce22987c042aecc79b358730a2f8c
SSDEEP 768:pYJskz1UkbTpFH462ItlOaYJ9l8V3s6jDewXH/foPPBy9NmicV0:pKJz1HXV1iJj8tXjSMH0Pku+
TLSH
T16BF2E16097B30835B25D1C37E82719B58D8F511CBEE6607A3C97EE53E620EA4305FA6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000023

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000023
Size 42KB
SHA256 71beca431e0a22f97d900b357b43964d9156ef8616623fd0ec17c0c7ff9b7b07
MD5 cdd139608ae66d12fef74a7ac8c29a46
SHA1 633dcd83bfec38c58f13e047be2abb61480be5ff
SHA512 796e334d2a7a1db304b732c7c0b647634584077ceafe99a2ae9f0751aab8a0ba8d1ce5a144e96806b173be4d9dcf1e8c232c0fabceb8e35dfa968e519b7bc02e
SSDEEP 768:k/nAiIGsU6ABC0ixK4BL9Tl5qkeFtKK22YNyjzDHgdgXeI4xIHIeaz02ibZ:yyGs4ZJ4x9TXqNtRYAjzEXITkHcZ
TLSH
T12613F117235FDE8620EB9458C1EBE2B6623D7C2C97396402835C9226713C42B26CF7EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000024

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000024
Size 36KB
SHA256 16fd378a7fde064728239e08cb13e6f59a03b09afbf8ea3f8c029fcb18bb4ead
MD5 c0601c2958e17c80230f7469ffd0985e
SHA1 47135c0285f9d05a161a08052e3be181efe772a2
SHA512 0020fd3351de90869d04a73004b5e5a19f0ebaa8e725832ef934b5cb935237ff836fef13679aa8a523b01812eade52fd016fb402e63aa060197a5ee11b49c07d
SSDEEP 768:znmst0/m+Fid/XuGic8X9DqSPSU8Mj8a+RPnVKpD7royockkR+OMi:znmsy/fiEGaVH8PkrD2nOMi
TLSH
T18503F2348668488EDDF274F72609D4D9E45F03763A0BAE6B704D58186F93398AF72185
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000026

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000026
Size 31KB
SHA256 ce02eec63a1ca5d81dbda806bbf98e197d02737e04ee89b3a1648f813d6f0c61
MD5 74ba77309f324479f66b97d0e5c38058
SHA1 3118a07a0e176b3d2eeee482834979ea4ffba4da
SHA512 09845536147e0c16930125c71a508314a71e1107bc83b2554e0a819d3085515a67256e54947574a6c49a55aa4902bd3f14ba90cb9c84638455f2f199ef098f34
SSDEEP 768:uVDhfGF3XiUiE8aL8jnln6UENgfi0B77USY:ubKiNaKnltli0BcSY
TLSH
T1D9E2F16F57394AC8951FD43A44FAA3E185308AE07EEA1089EF5C8D8B9B3BD681E60400
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000029

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000029
Size 18KB
SHA256 b0ad467413f924d3cec786a0dcd5d806b0607f405c4dd4e6ca08b4c1bd7cf82d
MD5 bb0be68eec99b07d88d5d34220babdd5
SHA1 6d77ffcbbf90e51cd0ff59596274aea6447890c0
SHA512 5b95c12f9243d331ef5abd3172db5cc6200335c8c27b704632a3f390a291d7730a25324206124502db6152e16f135c868a41d71e6927d817039a2b5f35a758f1
SSDEEP 384:GpH1chx1CNjHuPUjk2E2r2rnxntPRRPbyNaYmwsj5FF1Lj86L1Wp3y:GpH1CzChunp2WnxtZmzsjTj46hWg
TLSH
T13982E167E8B92EEC2DC7142323FA57F5D22EAC17D9922690B101E37815010DDE612DEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002b
Size 58KB
SHA256 c17cd0536ea6d874741569b893dab49fa9d69153f7f6c34d5fb9f3a029ead3b6
MD5 293468046bf7120767db5ede16ec89db
SHA1 78126b9b414c2717bc5cf464b0ff2c4efc879641
SHA512 3a9ff8ee19ff3c306225cfe21c72ed4a9815c991ce16043cebd643d89f95eb56d6661a3422fca8f3fabcda1e70d8c52b3561695b5471f213616b423eb7173cf2
SSDEEP 1536:BX/AsidNG2Ykfjyq5zJdRtMj5zt8xDGfVUsutw5Ll6mBf+Q:BX/AsidsDkfRFdG4DM/utw1Xf+Q
TLSH
T1FF43020487681C6C0F279AEC8E4180CD9DFC6EC466F6D9829A7694F1FD9D834CD9194F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002c
Size 26KB
SHA256 2f06dd884e79d1306c70babceb7f4b4a304e0360966b605c6a2cab1e3bbf9680
MD5 c4fa1b8cd6ec8ff252f76b3eece7b99e
SHA1 4cae877abe3fb3233ffcde9ee7d71676c482ba70
SHA512 4b239b278580d5db4b26df7b86ae323bd6dcb9eb1197e3f37492ec123f4fe532a7483c0e0ee3f76c443dc42ec02034d138e785095c2d75de3a990b7a1b5b5b98
SSDEEP 768:5GctyQUogdcX1+Vymu1o+GX29o0ZyR+JJJb3ZLe/d:fYQUHcX1s4wX2elgJJJdLe1
TLSH
T135C2E0CD7762345BAA4542E0780827152B0EF32E6751C65F0A2DE7A32FE3D98C4E5DC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002f
Size 64KB
SHA256 8cdce7d4b3d4437e4b9721f16fe5fcb48bbf7190c57390f94a7e774decae8359
MD5 9650bc3812295f2dd52ec34997a2b1dd
SHA1 b4667bc722761c978e3a8fd5de751ecdf039c2c9
SHA512 78b24927982f94346e6ca0cc49b904db1797cb49307e7156ff0f3a6d404b2306902378dc1dde5bda1b07993754c6c146a40ae19e6d8f011ad823197c6b6f6cd1
SSDEEP 768:MN0+b4Yd2qqOuAhuAL7z4VwZzZzXiT1waWIpnY7ZgOKyCpipFTQ0OBPxkQJCVcqS:+7bdd3qW3vtPzUiInYuUrORMd490lVA1
TLSH
T1555302D1739629277BD87DC80B973B848B6BB7859710FD8253E49CCE0F34148A02AED2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000030

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000030
Size 80KB
SHA256 cc7e4137f4150d11c218dc7c22316b3a7ba113e380b31abf41f9c25d859c7f52
MD5 5b975d577d37173879f99f65719a6334
SHA1 0036cad0cd06dd3bdd9b9ae25b4a12546af94ff1
SHA512 ebc26bff8907f947ba9767334d72fa945cba927443c64c27a1bf495b93b12e97ec67dcc9fc28c9623257f1a59f669dfb0729e4c45860378b30d90508c84502f6
SSDEEP 1536:D6P0Tpx+LubiokpuYn7feIyH0T7NtWcr90fd13gGk4os6QqFNfQfM:m0lEQRYsUTDj9MUt4os6QOifM
TLSH
T1928312AA4C6CBED5F08D5C8A6FCA9194981A99B0D89F57F7EC5C5B3D8221120C22ED31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000075

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000075
Size 444KB
SHA256 571c80a3b9815946d34b637265310a16446e807945bb679114eccb5bcd46fc02
MD5 73d6466a4524b160ef28431e7b4c634b
SHA1 1dd17375fdccfeae801290e339612e90f744f0d4
SHA512 e96d535830564da48192a53bb80634a957a9df34177af13b947e50a29ac0094c3bb9fa93d80e3bcaa23a0f642e204fe2ff200897811da52214b6fd237f578ed6
SSDEEP 12288:mEp65q3O7tQZWzBZ54RattAZuMHA/EL1Yo:m83SoWzhcatuunELp
TLSH
T12EA423A0FE8421C7516E4D6A2C70C730B71724C6F61FFBB6591A9E5DA4E8BE1124D2C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 4f4940f17692eb69d5e3b5da0efb51d4f8a6dd79171ac7ba2d203345dff8f505
MD5 fcff8cb878bb6cc3934a78ccbd5f25cb
SHA1 b0ff5a78ea7cb6db9eb7b716f4f1771b54a735b9
SHA512 1db8cad54ecdbe6c9ca9876b26030f89587fe5526bfcb8d3e10c0bae35bdc3f6237880add529b75970bf1f5ab97cc31abfe899e8bb75b5dc0dd7034ff9790f94
SSDEEP 96:OTdr4XOadw42LdALql/kY/S/mrj0DLACuiw2NzvKc2pPmur+8v7ljmXmrLsDTYDP:08dw+PcjE3FvKd3Thm2rMsiE
TLSH
T1E602A2B158640CA7C71442FB15E38E27BF3D5AA2016B4E961BF498FDBCF877654A800B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 b5a833850d9e5e95933eb2bc347e46b4f7e4bedcc0b64770ed1ff33fa443c846
MD5 585b20b1bec6a31b3b21c3072b6f0ccb
SHA1 c5ecf18b740d67a19505b58d7c70b0d51d3e3fe3
SHA512 d725152b75aae38f29468f232024a4a8333b5d466c4ba4d82b4f3f1a61aef5f1da009377374ac5f8871f18af483008ec3b0c7da0386299473524d0f1af48e44d
SSDEEP 96:q4Ur4nSRhkLLLECXPLL4jNsvClwWiBDzvQDKby+r3j9X+PH6GgTi:Pghk/wjSNdvQaz9OPwi
TLSH
T158F190A91A681562C79442BF19E30213BB395762319B0E5E1BF4A4FCFCF9FF6904004B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_github.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 dec7646ba9471b594e0ab3fb92ef6dc017825a22ca4a4d8f2004a7696ae74ab7
MD5 4d79271b841a00c368a4007d8f81730b
SHA1 5151abbb252860ea8ad26881b2f4b690767cd4f6
SHA512 b27d2b30eb88f2af1f15802000e651c38a05aa7def2352beceb66a25233df61bfc47075b0fb4baa1198c745682648772e1638e528826f6726454f33f1edc0fc5
TLSH
T1D141BBF3C3D88A7D890166F8AB152F1ECE6D0A25132C3D16D8D4AE5F53E28B2D31054E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 0d5d1f0b3a1af7e37d0227d929abb0710de939f0171afd0803778b614c8dc800
MD5 b67168ccb6da4bd9326d9e406321173b
SHA1 2f5507eb85c9d1d1cd20070626a09b6029a44b5a
SHA512 f55d53420aed825f479a77c7b9bacd7355da3b79387f831b0c8306583ad9731f91f586a2e43be5e154c4175772ac149ed064da46584b75f43be7d8354cab5f87
TLSH
T14541BBF3C3D88A7D890166F8AB152F1ECE6D0A25132C3D16D8D4AE5F53E28B1D31054E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 8ddc0a0cc01b0593d4a9e8a6ec7fa6293388c5d2f47344461d69e792945fe38d
MD5 b71f4b839e6e65bc5fe04ebdd6e23342
SHA1 821ad0e394858ab09c873fe0bf7308e3d53f5ca7
SHA512 0699981374c675437837e93f037372edf936847fb6286f42e7b8a86d8916e5eafb1008fc888d7c935a13e0ffb844ee04921d62085051af5da38b1ead2f2582d4
SSDEEP 192:Dmhx89bgu8YmNm1OtCyJPaLeCw/UmAR05ZA1nUzKNPsaPgMv7fPQcNmZmmmmmD0/:Dmhx89bgu8YmNm1OtCyJPaLeCw/UmARa
TLSH
T10422CEF3C3D8C62DC94256F4AB15AE1FCE2D0A28831D3C26C8D9AE5A93E2471D25535E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 b2adb77eefea8164ca26888f310ed88138eca7f227cd965d4e4ea83d8b75a354
MD5 97b4bab23fe06a7954240365527e767f
SHA1 aec5878d326d45cd2e9589f889ab71e25902b170
SHA512 eb52d76764d2a3c53ed1048d234389278ab963f0ae1e86c0f87c1ea64a9251250e3bbb7b280d96b479036aaba009be4b9b7af7f86de158da453efaaa6718c9b0
SSDEEP 192:Dmhx89bgu8YmNmWLeCwpoMV6GGHHJhygNPUjaPimwHmpmmmJmD0mzmH:Dmhx89bgu8YmNmWLeCwpoMV6GGHHJhyX
TLSH
T1D002CFF3C3D8C62DC94156F4AB15AE1FCE2D0A24831D3C66C8D9AE5BA3E2871D25174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 e553e90cb8a18eef81c5792921df163a7bc9283274bbdd35a67a8f7a105299ae
MD5 60baaa98c34f2c9531e000496ada30d1
SHA1 ef9893ffdb5f20184fe918eae145b1bdf49dcaac
SHA512 d92d060f5e63dd920d232078a88d7f507ea11f8ed73eddbc36670200fd8ebae091fc7fd34851acf88b8d758bc8bc8645de53c6bebc1a8dd003427ef14000faa9
SSDEEP 192:5RHcM1nuEYrVmv7bpAPRp2XoVi9/Hsb+WNnVy4md2Yyeqp2olVyIsnAUgtaJ:5R8MJsSPUX+btwE32np2E8
TLSH
T12342C42DA9647A7B5CDBD219F965BB17D3F9002160D42E88EAFC882C14E7ACC321B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 ad29fe77b790416074ad821f85bd14db1bfdc05cea341e0b455c408d6d9b1124
MD5 424a90011257917eb025ceee7830899a
SHA1 aae90949656a3c818094fc7384064ad0778c33e7
SHA512 6c64f357e725e2e0d0cc6dc981bd4cf925255ec95d82b9f278661a389dc9258f86887920c168d357f7e6243884f073286c2079e7040709f9554f77676ccf6eb3
SSDEEP 192:WRH1cBzo1nuEYrdmv7bplPRptXwXYvaS9/Hsb+WNel1AuCj78+Nq+aoHWKnyeqpn:WRVmzoJoSPvX9WStwe3AEVF+WKqp2ze
TLSH
T1CC52E62EA9643ABB4CDBD219F925BB57D3F5102160D02E88EAFC8D2C15E7ACD3207417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 880e052821cad9be83f1427a267819d93e22f27b5dda525d14ec5a073e469a8d
MD5 c2eca1fe802883af12285c334688056c
SHA1 3c4c35c1da4ac46e4f8082afe03c9bd3d440e883
SHA512 f1c6c63cb3f279cbe7108a8b909fadd4b791572ab2c33e5fb808e6596365c5f37a3095ddd0e3b81b7276a0cfd7c59e4605d74ebed843dd40b6d9b2f273b1dbf6
SSDEEP 192:WRH1cBzo1nuEYrImv7bplPRptXwXYUaS9/Hsb+WNel1AuCj78+Nq+aoHWKnyeqpn:WRVmzoJpSPvX9TStwe3AEVF+WKqp2ze
TLSH
T1B952D52EA9643ABB4CDBD219F925BB57D3F5102160D02E88EAFC8D2C15E7ACD3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 82f59b29be044082688311f3bfe5abf6673bf993fc24c5c7b2cf75aeea049907
MD5 f432157faee71fd1e7b11ce23b5be1dd
SHA1 0c3e37a2b371d8ba0a42e408c107514d5865319b
SHA512 6e0fa935a9d530b27b8ed96b0c062a1b874104b3bf8bc2ebdc006986af9ec708a865699ae21823e31b7f098db70177f2735cb2f098b5ae75594ebe4e048a2dfc
SSDEEP 192:WRHtcBzp1nuEYrdmv7bplPRptXwXYvaS9/Hsb+WNpEUl1AuCj78+Nq+aoHWKnyeo:WRNmzpJoSPvX9WStwiU3AEVF+WKqp2ze
TLSH
T1F462E62EA9642ABB4CDBD219F925BB57D3F5102160D02E88EEFC8D2C15E7ACD3207457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 3f0e510e6cbdf0217a19bdd7fc12872615b2b15c32188a98290f79423f93a199
MD5 366b9ed017313e1bcd336fbf6bb8d50f
SHA1 ee92c61d087d2f709efbacaadf77b88bff1bbc53
SHA512 4fae74bfa29d3969b9731d613833e0e0c5dbbdcaa3223e0b874b8550d757670a5890c8e356b885252165cceca82dc30c0ce4f1b64428eff44adda28b2341f379
SSDEEP 192:5RH1cBzo1nuEYrVmv7bpAPRp2XwXu9q9/Hsb+WNaIVyvNq+md2Byeqp2oaVyIsnB:5RVmzoJsSPUX+mtwwo92kp2pe
TLSH
T17E52C52EA9643ABB5CDBD219F925BB17D3F5102160D02E88EEFC892C15E7ACC7217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 de13521758ef1bfcb2d2450b3cf0a7a99cd0970c06b92340bd4289551bfc2ad6
MD5 b0928f3b5aacd381a50cb79484995d2d
SHA1 ba2f982a9d1dd6c557ee7a37adadea8daab8b737
SHA512 af3e8c9148f12d0e4fb4988464bd2a8f2df2e47ea7c5f1cab56fe717533c7f2da51919aeb6a09e6a8b95119e5735947b80bbd19844feb7e8ffa58cbd1ddf81e1
SSDEEP 384:Q2j8z7KxkXqKf/pUZNCgVLH2HfgslO07pLuLceSe/XOD8P+ErU3fKHGFwjj9B:Q28z7KxkXqKf/pUZNCgVLH2HfgsI07p+
TLSH
T1E47209676C4C997B0F98CACCCC267A4FADB5024B65E9886443FA5C2903D4ACF110A2F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 899c28a59ad72f500a39848be891d88808277fc5324a0d29e1ab719901769131
MD5 aeed19f05257dc8e994c1dfce3970824
SHA1 ad0ad6a0e5b44e9ef6c62c606e56be3e10b58044
SHA512 501fc7485dde2c7e5923bfdc6e45eeeebeab700b528bc27ab306b36a1d3949f5e4e6fa22b22327ddbdef3da367e2343aa7927fd4afe5e5ed57372f14d8c62cdd
TLSH
T10DB0120581862301C00103F01664D05436A0CF39DA13178745E01D01B8352B0501B118
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d2b97.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5d2b97.TMP
Size 96B
SHA256 7779b83f1d8467a1d698ddd2403c73f3db8c8b402efb44e379d34d1b68a3e1d7
MD5 97620d3c4d00a3d2eb0cad94f65c7c9a
SHA1 f423ac98ad3f11113a71fa2a8da09dd4c09912b4
SHA512 7cb6e480d0c05dade1ce75d65fa88096e2610a8fc4ab4a95dbebbe15496fee30bd3e7ec317bb484deb51ddd689a288a658380de74e9b53009a6e2c38b93f38e4
TLSH
T107B02280C0032383C02303B038C882CCB22CCF32C2030A0282E00EA2EC2E2300C28030
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 532de02e1d2466260c9dd0032ea9b98c2310e2b34f71c25bef433704992eaa5e
MD5 5fe9362f0d8eea967f1b6e925d76a209
SHA1 53f69b8c6fbe176f781f32e1bcffc4e37206618a
SHA512 ed9c50424d19424e675293dc4192ea41c00b4e930a9cd3a211d92ff357c09352926e740a028ea8e349ea2888d7236e0c7ac8c1840617a463614fffce8a5f2b42
TLSH
T187B022FBA0002F03EB0003F02AC3088033B03C0023F302F20AF80008F200EA80283A00
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 46961614537d6da8712d30c1e1c93a4f1ade6d5f4bae755b6fa1e6e63d112a3f
MD5 1948a2dd233fe89178bb74dc85e255b2
SHA1 dd38ea9117c2de9e761a43d7dd5dbad8fae6cf1b
SHA512 e3c3750e8de1fb59286becdb0e40e60de0aff821bdfce09b526ac53b4c97ada2640bde62a51e4b4edca16787661a689302540137e1c90160e081060fe0297aaa
TLSH
T1D5A002D012484702C00252B0A6C946C43F15BE6907030B4146901444D990156412BA14
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 266KB
SHA256 710017c5e2dd2488b46008b0e655e37eb0ca346457ba590222de4914f87236ef
MD5 65eb6dc0a2b84f5ce05c62f216b1bd49
SHA1 6a756cff8a4eae5aaa72ad0b9a7637456e4b5b29
SHA512 f5e9d197c8c3d7c8f14e20623d29ab65cb6483d9412b497cab2c7fcc0a1ffa040555a6f53798ee6264fe57c55d00eff56393f5075bb2563ecf921e81cf8ed185
SSDEEP 6144:LPQrWMy4s+Je+Otv7eSOu6nt4fLJ0L6nGJxi3bzqapJje:kiMJs+YlKSh6nWXUx8zvpJ6
TLSH
T1474423F192A2BDFADBB7AE5204292D401DF4E6D2DB85AE7409E48D0867CE1104D27F63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 266KB
SHA256 68a5a6f0beeb5ba727ab54632cc447ae3604af25b6795d8379fb4f06a1ad2064
MD5 3b9e4c8efc3ff58b2523cd798106e5ac
SHA1 cd378d143a8cf5a29f6c9ed5f86900868ee08e23
SHA512 a2ec0e2317c69c80ac30fe494da02e0cf3b48ea1e94b4b6d03e541cad2e0f194b740f47ceb8b3c81f895c11de56953129fdfded240b9adc9e3c78d752780c884
SSDEEP 6144:3PQrWMy4s+Je+Otv7eSOu6nt4fLJ0L6nGJxi3bzqapJje:4iMJs+YlKSh6nWXUx8zvpJ6
TLSH
T1494423F192A2FDFADBB7AE5204296D401DF4E6D2DB85AE7409E48D0867CE1104D27F23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 266KB
SHA256 2152a1fca735f3553c10ea3dfac79f69098675d85a5d88cccebe4b96611e7223
MD5 06c448ee05716b0b2d2a0ac0a4596a2a
SHA1 e16b2492336f4389b5c575e7cd748080e5f0ca53
SHA512 d724bb0562615636f79400b0161d3e2caf8f7fc18d73c370044d3b953dbaff93828fb0fdb1dcc31ea20070cb34926545147f4e81fce1f2994eade390e1f2a3c3
SSDEEP 6144:ZPQrWMy4s+Je+Otv7eSOu6nt4fLJ0L6nGJxi3bzqapJje:KiMJs+YlKSh6nWXUx8zvpJ6
TLSH
T13D4423F192A2FDFADBB7AE5204296D401DF4E6D2DB85AE7409E48D0867CE1104D27F23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 266KB
SHA256 8349b2e24be9b174d84ece8fe2f67900486bb2b53cea66a59904ae2d1df744a7
MD5 3aafd10b6f1dd2dd15e58404ed34a24a
SHA1 bffb39280d9f7ea5f8e0fd0c151daa140c41cf86
SHA512 367baaa07f31c94edabfce3a8114bcbfdf5e3e9d0cca7a2da56efa53eacecd84e7b9df35bba6b8192d6c1e4ff160b741af6c6455ed48010df202557e03d5359a
SSDEEP 6144:tPQrWMy4s+Je+Otv7eSOu6nt4fLJ0L6nGJxi3bzqapJje:miMJs+YlKSh6nWXUx8zvpJ6
TLSH
T1494423F192A2FDFADBB7AE5204296D401DF4E6D2DB85AE7409E48D0867CE1104D27F23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 48a81ec5334e57147f060cf9f9215acacf6a50d7facaf783eb80c1a885fba7b3
MD5 df3f719ebe3a6763eb7625fdd3099368
SHA1 b91c9eef23d3377203e3c9c8ac02e0b241bfab9c
SHA512 03eebbfd56e229a06beb203f2d88e364fc88d0384ebb7664da726438f3c069165310087caab4906d02e577139939dd5f9a2f1a83b1ceb43bc12e898110242eec
SSDEEP 3072:6H2By3RJD4diWs9aJ0xN6nGvw8xUNTfd3OUhLHfS60ApJjk:6t4fLJ0L6nGJxi3bzqapJjk
TLSH
T159D312F0D6E06C7ACBF7EE4145756E948F71D5C289CDBE2409F9880816CEA344A13EA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 265KB
SHA256 c06deb796832bcde677d8415b9593d35aff0afc1ef32864683f147e33eb0a905
MD5 20eeb9dae63b72b3b540f9f009187245
SHA1 a975346cecc1b6806385700a3995c5073463d1d2
SHA512 975407e64902916354263e5705f299eca4fa914a1e1b944523eba2df30ad074d8bcbed1b8a815b0f493e6c582237193f3451db3881e29102467fe230c9c572d8
SSDEEP 6144:36QrWMy4s+Je+Otv7eSOu6nt4fLJ0L6nGJxi3bzqapJje:3BiMJs+YlKSh6nWXUx8zvpJ6
TLSH
T1FF4423F192A2FEF9DBB7EA12042A6D441EF4E6D1DB85AF7009E4890867DE1104D27F13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 265KB
SHA256 6a6b70003b1ee23d4b54673b221f5764518c1863f6e1c63d771fb5ff2cb097f5
MD5 ee3b46a751b088a0c3ea9095132d95bd
SHA1 6fda98dca0a11ea849fc5304cc49fa40a99466b9
SHA512 c9bba1e3d1d50ce4a6ccc7c8ce964d5cd92467fa6c428ea993d83565637800896fbd02648f9086b5ecb7e56651577bb30843ab1fd4c1e9fe6da189d23e5bfe2d
SSDEEP 6144:g6QrWMy4s+Je+Otv7eSOu6nt4fLJ0L6nGJxi3bzqapJje:gBiMJs+YlKSh6nWXUx8zvpJ6
TLSH
T1274423F192A2FEF9DBB7EA12042A6D441EF4E6D1DB85AE7009F4890867DE1104D27F13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

die_win64_portable_3.21_x64.zip.crdownload

Path C:\Users\Admin\Downloads\die_win64_portable_3.21_x64.zip.crdownload
Size 24.0MB
SHA256 078f2934f267392247f9c7b759a1c2457a48bc2000b25b80c2f129955ee4a3b9
MD5 039c279693597cecb3c2a67786a92149
SHA1 5343f3785f971ef9211b225d4bd5c0fe78a090ab
SHA512 b0ca7cb1f20f6d8ed73b9390d143d7bd098db77580eda95aa53351135461a1dc422ca83cebb2f9cf56edea1be591e008d577a4b6d83da64167d03113544b176a
SSDEEP 393216:XkNWJN+ZDfJt3fTodgqpeLT4rBbEzxrcG14aG8MzuFUEq9Ee7ejH1OtMlLc9lvIn:XcMgJJt3fT5q4Hr8aLIvZSLk0Kyi8f
TLSH
T1B247335AE6192347C0AFDBBF24DB8279EF54806F02B9E327076964552E836C11F3970B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

die_win64_portable_3.21_x64.zip:Zone.Identifier

Path C:\Users\Admin\Downloads\die_win64_portable_3.21_x64.zip:Zone.Identifier
Size 1KB
SHA256 2b22149c3fea30d186489f4c5bdc1f4b08dee13ad3347631839253472efd38d9
MD5 238f583acd01e0fc5f530b6d28d0f215
SHA1 b0624e10c30c3f79c0bd870a9f2d0a83e2d6ee9b
SHA512 8e9331a59e2cdc28fb110f2c845767a814b1f7b6a1dce3d3d51d2dc41c0341a212108c8e541035e16bef5795875545a87cb0d06f0658a647beedf5d44f3b6373
TLSH
T18D1172F6D1146A5E0A0EB5928E089F6EA01FE1A64D078E4D065AC04AD1800B9E1E386B
MD5 SHA1 SHA512 TLSH

Submit Download

dnSpy-net-win64.zip:Zone.Identifier

Path C:\Users\Admin\Downloads\dnSpy-net-win64.zip:Zone.Identifier
Size 1004B
SHA256 9a6f15797fedc62d56e05db7bc2587b15a0c464c7d5c30110c6f3c3c31307a67
MD5 cca7cc589d0b4a7d05b689ce72b20280
SHA1 db3e659fe72e325a8946fb7265cc5845d60bb427
SHA512 905bca37dd4741911262db07b36e6568601b64c356801608031429d6e56a2fcd1966769e56497d0d2b09666e41836121a386c61bb665238e63afdcfe0418e819
TLSH
T1271154F7A0199A5E4B0A6F91C94D9F9EA01BF5E69E065B4D422DC089C0811BD81F783F
MD5 SHA1 SHA512 TLSH

Submit Download

memory/5308-802-0x00007FF676A00000-0x00007FF677850000-memory.dmp

Download

memory/5308-803-0x00007FFE9B040000-0x00007FFE9B581000-memory.dmp

Download