a66cc99ceec6c4c14c7dadd5222c247e390ba2a7f9d3b462bbb65b6d2f3b762b

Analysis

user interaction
yes
max time kernel
599s
max time network
602s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
30/09/2026, 15:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
cubiomes-viewer-static-w64.exe
Size 20.7MB
Sample260930-stecfsbe37
SHA256 a66cc99ceec6c4c14c7dadd5222c247e390ba2a7f9d3b462bbb65b6d2f3b762b
MD5 fb7219e1280b63b546a1163be24f3ebf
SHA1 17c86f62dff3c866d1015c329bdc51a0e485d6eb
SHA512 c7a174590d50fd25b20dbcd42da2c18671afd92e5908de2e5ef0df9ae233644ba637429466dcd4d5586f314886f3054e608030b16115c3acf4b2d4306bbecafa
SSDEEP 393216:5kqo2FkU/tAXpxub7cceK4RlJsv6tWKFdu9CKa+7+B+F:5kKmU/tAXpxu3BeKs
TLSH
T17A275B47F293109CC16BC134876BE372BA30B8585674BE6F2554DBB52F22F606B1BB18
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery

Malware Config

Signatures

Downloads MZ/PE file 4 IoCs

flow	pid	Process
96	5624	chrome.exe
126	5624	chrome.exe
126	5624	chrome.exe
126	5624	chrome.exe

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
1	discord.com
32	discord.com
53	discord.com

Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 2 IoCs

When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

defense_evasion

SIP and Trust Provider Hijacking

T1553.003

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\OperaInstaller.exe:Zone.Identifier	chrome.exe
File opened for modification	C:\Users\Admin\Downloads\OperaInstaller (1).exe:Zone.Identifier	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5624	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2293636880-3790684622-1477845016-1000\{CBB5EECD-D4F9-404C-A515-396D5A2817F3}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe

NTFS ADS 2 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\OperaInstaller (1).exe:Zone.Identifier	chrome.exe
File opened for modification	C:\Users\Admin\Downloads\OperaInstaller.exe:Zone.Identifier	chrome.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
3996	cubiomes-viewer-static-w64.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
6132	chrome.exe
6132	chrome.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3996	cubiomes-viewer-static-w64.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
680	Process not Found
680	Process not Found
680	Process not Found
680	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 33 IoCs

pid	Process
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe
Token: SeShutdownPrivilege	2424	chrome.exe
Token: SeCreatePagefilePrivilege	2424	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe
2424	chrome.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3996	cubiomes-viewer-static-w64.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2424 wrote to memory of 1816	2424	chrome.exe	81
PID 2424 wrote to memory of 5056	2424	chrome.exe	82
PID 2424 wrote to memory of 5056	2424	chrome.exe	82
PID 2424 wrote to memory of 5624	2424	chrome.exe	83
PID 2424 wrote to memory of 4756	2424	chrome.exe	84
PID 2424 wrote to memory of 4756	2424	chrome.exe	84
PID 2424 wrote to memory of 5760	2424	chrome.exe	85
PID 2424 wrote to memory of 4764	2424	chrome.exe	86
PID 2424 wrote to memory of 5760	2424	chrome.exe	85
PID 2424 wrote to memory of 4764	2424	chrome.exe	86
PID 2424 wrote to memory of 4952	2424	chrome.exe	87
PID 2424 wrote to memory of 4952	2424	chrome.exe	87
PID 2424 wrote to memory of 2488	2424	chrome.exe	90
PID 2424 wrote to memory of 2488	2424	chrome.exe	90
PID 2424 wrote to memory of 4144	2424	chrome.exe	91
PID 2424 wrote to memory of 6012	2424	chrome.exe	93
PID 2424 wrote to memory of 6012	2424	chrome.exe	93
PID 2424 wrote to memory of 1212	2424	chrome.exe	94
PID 2424 wrote to memory of 1212	2424	chrome.exe	94
PID 2424 wrote to memory of 5756	2424	chrome.exe	95
PID 2424 wrote to memory of 5756	2424	chrome.exe	95
PID 2424 wrote to memory of 944	2424	chrome.exe	96
PID 2424 wrote to memory of 944	2424	chrome.exe	96
PID 2424 wrote to memory of 1684	2424	chrome.exe	97
PID 2424 wrote to memory of 5844	2424	chrome.exe	98
PID 2424 wrote to memory of 1684	2424	chrome.exe	97
PID 2424 wrote to memory of 5376	2424	chrome.exe	99
PID 2424 wrote to memory of 2300	2424	chrome.exe	100
PID 2424 wrote to memory of 708	2424	chrome.exe	101
PID 2424 wrote to memory of 564	2424	chrome.exe	102
PID 2424 wrote to memory of 564	2424	chrome.exe	102
PID 2424 wrote to memory of 780	2424	chrome.exe	103
PID 2424 wrote to memory of 780	2424	chrome.exe	103
PID 2424 wrote to memory of 3096	2424	chrome.exe	104
PID 2424 wrote to memory of 3096	2424	chrome.exe	104
PID 2424 wrote to memory of 1536	2424	chrome.exe	105
PID 2424 wrote to memory of 1536	2424	chrome.exe	105
PID 2424 wrote to memory of 1520	2424	chrome.exe	106
PID 2424 wrote to memory of 1520	2424	chrome.exe	106
PID 2424 wrote to memory of 3732	2424	chrome.exe	107
PID 2424 wrote to memory of 3732	2424	chrome.exe	107
PID 2424 wrote to memory of 2736	2424	chrome.exe	108
PID 2424 wrote to memory of 2736	2424	chrome.exe	108
PID 2424 wrote to memory of 2488	2424	chrome.exe	109
PID 2424 wrote to memory of 2488	2424	chrome.exe	109
PID 2424 wrote to memory of 4380	2424	chrome.exe	110
PID 2424 wrote to memory of 4380	2424	chrome.exe	110
PID 2424 wrote to memory of 3656	2424	chrome.exe	111
PID 2424 wrote to memory of 3656	2424	chrome.exe	111
PID 2424 wrote to memory of 4488	2424	chrome.exe	112
PID 2424 wrote to memory of 4488	2424	chrome.exe	112
PID 2424 wrote to memory of 2564	2424	chrome.exe	113
PID 2424 wrote to memory of 2564	2424	chrome.exe	113
PID 2424 wrote to memory of 5764	2424	chrome.exe	114
PID 2424 wrote to memory of 5764	2424	chrome.exe	114
PID 2424 wrote to memory of 4772	2424	chrome.exe	115
PID 2424 wrote to memory of 4772	2424	chrome.exe	115
PID 2424 wrote to memory of 4004	2424	chrome.exe	116
PID 2424 wrote to memory of 4004	2424	chrome.exe	116
PID 2424 wrote to memory of 1832	2424	chrome.exe	117
PID 2424 wrote to memory of 1832	2424	chrome.exe	117
PID 2424 wrote to memory of 2660	2424	chrome.exe	118
PID 2424 wrote to memory of 2660	2424	chrome.exe	118
PID 2424 wrote to memory of 3896	2424	chrome.exe	119

C:\Users\Admin\AppData\Local\Temp\cubiomes-viewer-static-w64.exe
"C:\Users\Admin\AppData\Local\Temp\cubiomes-viewer-static-w64.exe"
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3996

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff0785c728,0x7fff0785c734,0x7fff0785c740
  2⤵
  PID:1816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1656,i,10654151137657296517,393467253148571806,262144 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=1908 /prefetch:2
  2⤵
  PID:5056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1460,i,3756197094159150526,13073317468818043841,524288 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2260 /prefetch:11
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:5624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2380,i,16073378653824174596,2772343157118964581,524288 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2532 /prefetch:13
  2⤵
  PID:4756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3236,i,6168283867100530021,4445270412008874801,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:5760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3248,i,8774596340070316051,3517583688366205892,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:4764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3220,i,5873437622781784518,3617289457003838544,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4292 /prefetch:9
  2⤵
  PID:4952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4708,i,17986757744873922507,11976059833331205837,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4696 /prefetch:1
  2⤵
  PID:2488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5508,i,3930360950702941531,11010860108601701793,524288 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5512 /prefetch:14
  2⤵
  PID:4144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5828,i,13133011351040702496,16749768449899809985,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5880 /prefetch:1
  2⤵
  PID:6012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4740,i,10988594358040725621,5691406055920361590,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6024 /prefetch:1
  2⤵
  PID:1212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3568,i,14371412334758386166,8543263585057303071,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4852 /prefetch:1
  2⤵
  PID:5756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3532,i,18230145720220527127,13700247902085592743,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4776,i,1687947179700335419,473930023234950008,524288 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4800 /prefetch:12
  2⤵
  PID:1684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4704,i,12655233976798225886,13270119858237312876,524288 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3248 /prefetch:14
  2⤵
  - Modifies registry class
  PID:5844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6112,i,7647518854199690316,5974606253504657700,524288 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6108 /prefetch:14
  2⤵
  PID:5376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6096,i,1707189652472415211,1894132083244825260,524288 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6036 /prefetch:14
  2⤵
  PID:2300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6080,i,8618955834497765547,6303865332519159548,524288 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6128 /prefetch:14
  2⤵
  PID:708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6116,i,10223563489983998003,7024620067369987743,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6340,i,14788288678549563233,2214115734230518617,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4372 /prefetch:1
  2⤵
  PID:780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=4808,i,6202292655261177432,411204905813349750,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6012 /prefetch:1
  2⤵
  PID:3096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6056,i,9961508545057728401,16896056049069482946,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:1536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6444,i,14386556027081925218,1294251364547378792,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6416 /prefetch:1
  2⤵
  PID:1520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6580,i,13716900991568261734,12351081283957788644,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6596 /prefetch:1
  2⤵
  PID:3732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6424,i,12290587857845647659,2538147563831976330,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:2736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6712,i,15663031702976638174,12917700492169602968,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4300 /prefetch:1
  2⤵
  PID:2488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6124,i,3862743050061434615,9543518867232909352,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6592 /prefetch:1
  2⤵
  PID:4380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6620,i,6297715497646113977,6931971328360190471,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=872 /prefetch:1
  2⤵
  PID:3656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=4712,i,1843354957184054364,4695969547550859006,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4320 /prefetch:1
  2⤵
  PID:4488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=7100,i,1439296740852311073,5142215763314863114,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=7120 /prefetch:1
  2⤵
  PID:2564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=4304,i,4429582885398745980,12347428104718021375,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:5764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=7092,i,7147593675530720219,10626886479283933808,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4368 /prefetch:1
  2⤵
  PID:4772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=6772,i,7317270287304411309,12839505339050096553,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4764 /prefetch:1
  2⤵
  PID:4004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=6732,i,3878646774855061630,410307293462073108,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:1832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=7104,i,15247283620071318763,1869844104594062193,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=7120 /prefetch:1
  2⤵
  PID:2660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=7172,i,15232802155679158481,9310481264177890652,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=7324 /prefetch:1
  2⤵
  PID:3896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=3684,i,15747739212193905621,11225763910342546293,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=7364 /prefetch:1
  2⤵
  PID:5652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=4848,i,18325984897183607009,5197922121127240493,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=7632 /prefetch:1
  2⤵
  PID:4076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=7104,i,15151031298314102326,3808574326328653127,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=7564 /prefetch:1
  2⤵
  PID:564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6240,i,4692079438152473700,17166129511569987933,262144 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=7828 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4444,i,9955826242443406058,4604069564166306600,524288 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5720 /prefetch:14
  2⤵
  PID:4136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4688,i,15683524833098766271,17206786066362137170,524288 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6048 /prefetch:14
  2⤵
  - Subvert Trust Controls: Mark-of-the-Web Bypass
  - NTFS ADS
  PID:5636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=7504,i,14705233087988225871,7907125910642251281,524288 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=7632 /prefetch:14
  2⤵
  - Subvert Trust Controls: Mark-of-the-Web Bypass
  - NTFS ADS
  PID:1916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=4368,i,14025985655529690021,7010742599517801760,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=7352 /prefetch:1
  2⤵
  PID:4496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=8556,i,12844621210083018673,13492148973562167793,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=8508 /prefetch:1
  2⤵
  PID:2796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=8668,i,9852573996435861561,2475272610473286017,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=7376 /prefetch:1
  2⤵
  PID:5368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=8812,i,7948589895107720102,9756511089713791260,2097152 --field-trial-handle=1924,i,14427519562499770208,10783857803373986836,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=7384 /prefetch:1
  2⤵
  PID:5616

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1276

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5576

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 b5f88c19dbaa5b7e8fc95915ac2370d06f2048815e808e192993a0168624a447
MD5 ba8689d9a01acec6a78f1dc649025f1f
SHA1 9e80ffcf0df352940fd0e2651bee7a535462b457
SHA512 cbd4514c7812c31f4969482d33afc8ddd27422235bf738312ad0f8cde3774dffe2b8360745e72cb4134187047d4cbe6737be09b0f9bcf61e2b41ea1b72560ac2
TLSH
T151F0F4A5DC21ACBF18FC0B2860A54B4AE765136B2780898B3A3D910C4FB163B868681C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00003e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003e
Size 346KB
SHA256 9be344d8aab52c80881980d24ba1435146143794aebbeb98bcae9a4b41f0bd16
MD5 fc31feb6dbd996017ba0751ebf1a2be0
SHA1 d5e54654c86bcbfc7aeed4377e9183421b5f63f4
SHA512 21a4c7e4b3c8f42a8886bcac34a50ae30e61efd3c0443b66fd3cffc54caaf4265d4ee65521051cc530e2e1dccbfb877a303a119768406da737c3249ab577b0e5
SSDEEP 6144:r6PyntaVKs+9xeKjohEc1avaW5Id9Veu22qVTvHodWVjaVrQXcx81E+/SnCCKCDC:uPynjs+9QEcyIfcN2YTvHo0VjaV2Z/SO
TLSH
T1FF7423717998940FD4622800765A6FF51C403FAFC52AE6E3677B10B34D9E4A7347CA38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000047

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000047
Size 23KB
SHA256 1cae5bad340b07ad22b610e9718e260dc1f7731244d80b17ccca29e5a1c83f31
MD5 6aad07873bc0d4c7d9d43b6da985964c
SHA1 f74560000ddb5a202a13306a406cd7b6ef8246fa
SHA512 7628fafe4946cdbbb9224d1d5306756dddfb8a03e45dbc255de2063ed62d48de0a460cf39ec986cb0ed010827e60477f1fd3c77300a9a006304891ef2cbcbcda
SSDEEP 384:SdQunW7bHeTqFSFwCuDPFwd5eck5Vu3JdLQWmS9sxd5i2BJTTpC3+cPlCu:xqTqUFuzFClk/ElQWeHBTcOW
TLSH
T1E3B2D19908210FAB99323A19E5D5493ED48895E1F001BCFD866CF01E5DA2C99B49FF8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000048

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000048
Size 55KB
SHA256 ecd9942986136160bd0c9b6535d3e27edeab32dc17787b948b1c58cfc11d5485
MD5 32a48102690980f5efefc9e590c5ba06
SHA1 4e90220a20a80869f27af08727464d2ad2fcec31
SHA512 11724f4da4ca8678c819f3a8860aecd185cfeaef770995d3307fe02dc66ffd6453a59638df854d4038d82cd1f55930670299ff95713cc4e4a81352adc73cc412
SSDEEP 1536:Sp18GsxCc6zv8TxmaFbzdZq73jK4B8cAacIljr464zV9gfO4:WrsxiCxmeXq73j98facI21R9gm4
TLSH
T11D430282EB328F9059C47C081127037B9A82D232F6357D21CE790E666240F95D68FF6F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 10KB
SHA256 f6d6993ebe85ceef764317597d9879f6e56cf8798ae8bae0ca04075677ba53bb
MD5 13b7f31685aeecc5253d45a71e1c69e9
SHA1 7dce9c8110c0c49f90d67b3da4770bc3e53877e5
SHA512 a022b2e1ffa729f00e3a82fee20e30ee07497c7e753636e3bc9b700dc49e1a2664c51ac42c19ddd33afbf04ffed2eaa2c4979e0f088434d9da8995f6d4ff5ba4
SSDEEP 192:okkJz+Ap6EYQSXKidoXm4xidKESA3AA1mczoqQGAMjVTXESyZW0Xxd2YT7:4JzPADPoA5TEPf7
TLSH
T11422C942E4A08842CB778A3466C71BC5717A5E832867DF273C57A23DFD327A1470A2E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 10KB
SHA256 5e9ddd906d2eb74b732f43d53aecb9f6dc1358720e02660aa40ccf09c90f4f3c
MD5 0122b940b6b8732103d83694bd647e2b
SHA1 ba80b1f898fcf36e74129a32c9588dcfa8224b7f
SHA512 0923c2d5846c51ddcf427a91f2ef99248794cf7001cbcb1c457147ec36881eef1eb88c2cb4dfa637a7d39b3bc8acf7e9f00a7415a9193f0fba4b53da38160281
SSDEEP 192:HFkJz+Ap6EYQSX0idoXa4xSdKE3A3A7/1JbOzoqQGCMjVTcESyZWkXxd2YRl:iJzPADlo1zwEr1l
TLSH
T1F222EA42E4A44982CB768A3466C31BC5717A5E836463CF273C67A23DFC367A1071A2E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 10KB
SHA256 a21717cca6c29f82ebf14f96713906e5f30e6e13ed0a9b74b6978cee30d7ba64
MD5 25169de9046a3d5e8f4c0d88ecf7671e
SHA1 76d18c144538d3279604c7dd2252b89129820463
SHA512 864c63cfc77542d301c5f213f340372002a751e65bb6fb50e1346dc7e942779dca8d7b90279fe5c1839275c05df37242e9a7f2fb5fde51eccb1d1e5f131864b3
SSDEEP 192:VOCJjHesE6twQSX4FoXbZsVdNuU3A3A7CJoxFOXEwQaA05VTl8SiZWskxd2tjSx:3Jj+sNq4oToxCJcOFx
TLSH
T18132EA46E4E44941CB774AB4AAC71BC4713A5DC76453DF263D57A23EBC363A0031A2E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 29KB
SHA256 4d1f8090dfff7a1f1d13fa869e5d12715d52604ee8ee3b3627b5ef37a6e091f1
MD5 698a8c0399ad67940e961a4c56437764
SHA1 0cf9d7f39cf90493c0c1d583e25641726ed314fe
SHA512 e6ae76e61a19d5ed36c6f9e0741e598e2efed7cdb0e3624f17ac94409cdaeb04975a40ef24862b93a1967fe87a2e105e15de27837052e5552a1e0a47eee98ffd
SSDEEP 384:DOTh1HWMXsjNLkdad+P2XfJWm+hVEyT+6JaPeMjfuJAU+yBePbwGdAPU/zYj7r1o:4/HRwVCDGjPZDZ1
TLSH
T199D28BF7C3F8866ECC1162F09A252E1BCE5D1919432C3C5BC5D5AF4A57E28B1E281A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 24KB
SHA256 c22af41a4b1c4e4d456c02464e2c64de461308cd7a93bbe07c6e1a414e29b57c
MD5 63616bab513493a9832a1de8f8f33eff
SHA1 7eb97642e8ab0ed90cfe3c69dd4e22f34931cb79
SHA512 56fd1c0f95752caa63ffb6e2e7dcc902b53e155aa4c0533b1f0729ee489fa70fd250e8124e62ba67a4b739ec2132a7eeab5b2ac02de716e795c2a847352431ee
SSDEEP 384:Djs6PfxgTPz4lkdad+P2XfJWm+hVEyT+6JaPeMjfuJAU+yBe67r1SDLolKSwR8Gm:+/HKBYxn9Feal
TLSH
T147B28EF7C3E8862DCC1166F09A253E17CE5D1919532C3C1BC9E5AF4B53E28B1E291A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 25KB
SHA256 89970b27569bdba0d98f61a650e4cb966dda4ea0c7bc8b05053d1bd45e4b191b
MD5 c08a851afa1c91d8d52306e529d3d077
SHA1 9187fc79a6006493f8f145757f5fc5d0e03a141a
SHA512 e9b6236134aa47d3b855a96549d9a146231f8838d223e1f14a5e1d4ba4d1fc39ef37acdff48f9dd3a4cc6fc2d19b6b42bab44dd0e3f81dfc0561f2f0b6d93c4d
SSDEEP 384:DOTh1HWMXsjNLCnTf01TIymxxGJ67IVUIJXkeLYU6JU+QABenbwGdAPU/zYiD7r9:/E5bwd5gPBuVAAT
TLSH
T1C9C2BEF783F8866EDC1162F09A256D1BCE6D1915032C3C5BC5D5AF0B97E28B1F281A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 24KB
SHA256 1551b129de1ff1d89ab34beb23901361012174dd115e9f0161c96fb3edc4c675
MD5 86f26379c0666324656401d4b3544cb1
SHA1 3eb8b6d34cce55e189a91bf541b749b83a679481
SHA512 16c897d6c4b2278a03afa5a0395382022e32be88a91f3887d98afc8d8c54ad32bb36806a13082212ac643b67a485cfc2c1486b4214eb30bb71c1b62f91202145
SSDEEP 384:DOTh1HWMXsjNLCnTf01TIyxxGJ67IVUIJXkeLYU6JU+QABenEdxu8TjqzYiCR7rd:oE5iwd59PBuVAxh
TLSH
T1AFB2AEF783F8866EDD11A2F09A256D1BCE6D1915032C3C6BC5D5AF0B93E2471E281B4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 001f8852fa15b656f351391df234839ba95b6bb49c063de790d65bc76e46fddc
MD5 2f647d6105c50b98dd6e41f0b84f6fba
SHA1 e086699bc06e2a823b25577f48727cd9d9da27de
SHA512 05c7b16cff2c882ec292103ae36b489c1ef23ff64e1324e6079e2f12eeb0da21c0846c9743f81b28d0e8620f3c379ec4396e16394f44bfc00692e51794977607
TLSH
T19A417DB3C3D8867D894166F4AB192F1ACE2A0D59532C3C57C8D4EE1F53E18F1D65054E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 3b80a57f0936d86f3aedbafe8762e07705f6cd882c743f29851b468d6d83685a
MD5 14a0c3e4dd9c0d4f8f2b5f386829e4bc
SHA1 e84a2af631cc9d81fbf2195e613a6a99a06b17c1
SHA512 7568286a24e51617433344482dbf03962258bab998c08a08a620673648cb9107c62017f084661eae9d8bb3cf2afc25baa4a89fdaeafe17c2fc71e2404b6aac97
SSDEEP 192:Djs6PfxgTPz4lk47r1SDLolKCrhJ59RWa6URH6R8GJbhrwGl:Djs6PfxgTPz4lk47r1SDLolKCrhJ59R+
TLSH
T1D7126AF7C3D88A2DC91156F46B192E1ACE6D1D1953283C2BC9E5EE4F53E2872F24064E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 52b8b9dce55d00678a7d026d25e716270d9e7f50473a3dd793f9bd61845dbba8
MD5 3964c05f1a84e445850a8ffc6eb14e39
SHA1 3523da1bf0c47ca52d24780c8b306895276db6c4
SHA512 81b725ffccb6a571daf9cf2657c560bdc04e6fe5e4ab195250b9ca28471aa762464520ee22ecd4ec01daa6f7ce0e00488e84d374d3c1ca6df470592cf4861491
SSDEEP 192:2RxAg6dOURA9pT9L8nkMa6v79fGhAPRp2P9+Hsb+WNnPk0u02lVDeMzQDVyIsnA4:2RxnpgNG8XYows0X2lV3+8
TLSH
T13A42C62DBE10757F5CEBC22AF961776BD6F5102220C42E84E6FC896C15DB6CD221B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 d5bea1866a1daccb861ed494e60d6c13d2dc7e6848f7f9a738cfdb70aa2e2b69
MD5 618c30c3b1155ea076ef3339bd35496f
SHA1 5eaff2ad828408b017487bb9f0fdd89de42ed6b0
SHA512 61159daf2824691d47b77dc552949aa0ff14267bfdf6147e3ce8cf2f3a4f141248a360d1f6af83d7b49a6f98988565bbb51c24ca2100f02e12f924e1588ac5e7
SSDEEP 192:2Rxtg6dOkRA9pT9L8nkMaAHv7s0fGMnPRpjij3wafm9+Hsb+WNQMg/PkO/0ape+H:2Rx2RygGGQXLowVB7wuu2lV3Xe
TLSH
T13B62CA29BD6065BF8CEBC22AF961776FE2F0102220D02E84E6FC8D6C15D76CD2217857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 84b575d827c1ea7e601f7d658077133143ee50cfd8a23401c5a5c71ebc238b31
MD5 2b35d9045869a3d598e3bcfe7a360719
SHA1 9e9665db8523d975e16bd81f94359acb461c1f0e
SHA512 33c806523b5d8768d1739d408c710927f442baf5e8a05edcec07cef86449694b855d2acf64f2f00fef0d26e60b23025fb60b244b6a5822f68fb3f4e04a09af7c
SSDEEP 192:2RxAg6dOpRA9pT9L8nkMaFv7DfGhAPRp2KwQ9+Hsb+WN+LPkoKB2202lVDeMzBDM:2RxnonXG8XJowfH2f2lV37e
TLSH
T16E52B62DAD10757F9CEBC22AF961776BE7F1102220C02E84E6FC8A6C11DB6CD2217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 a9e521f92a1989b57eb207660a555a9c8efaa04651d566e7011eb837b6b1b76c
MD5 4313088c0431c7c60641f2263ad2b363
SHA1 20f4ed4ba0b89e93823d3ba9e0d82c3a614b23ab
SHA512 9c94cae65de4022b630307f2d2abb7fad5bec9e619f85948e8c86bd563bb5b5a2c7d024569230c168ab3f480ef7aca1f80218a881480bbe59cd69dead2d6093c
SSDEEP 192:2Rx+g6dOkRA9pT9L8nkMasv7s0fGMnPRpjij3wafm9+Hsb+WNQMg/PkO/0ape+HO:2RxlR+gGGQXLowVB7wp0+k2lV3Xe
TLSH
T1F962C92ABD6065BF8DEBC21AF961776FE2F1102220D02E84E6FC8D6C15D76CD2217857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 35a10b5afb01ba01c4d799b7b60881790f166858845f970591dbcd85d998fe01
MD5 ee37331a1f2e06fac88c493a3caad78a
SHA1 90d2d36afb65ab7b452b046be25a95112dbfaa77
SHA512 5843987c30f6a3ed7bc499d3d8f2a2676e30560d59c94b74f8a526471ee88799466899188add76666ffc1e680c8ec9c73075833c7bb71075104fdcd227892f39
SSDEEP 192:2Rxkg6dOpRA9pT9L8nkMaEv7s0fGhnPRpji3waU9+Hsb+WNQ6LPkO/0apee/02lA:2Rxbo2gGG5XPow2B7eM2lV3Xe
TLSH
T17862C82ABD60657F9CEBC62AF961776BE3F0102220D42E84E6FC8D6C15D76CD2217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 d0ac8323f6eb60deaa5be47a3010398344c5b16bcb58785709d336f961317baa
MD5 299e8c59bd89feddbacbd16f4c8953b5
SHA1 3b32d27ac05ff7f9ad8adc18a04e3c6d34e6798e
SHA512 5c3dacff197f4c64ba7b746e2fa6ecf4c4c428db96f592831a4f34b7f2d47357d9b7ea00ef629f241d12ad5cd6287dbd32f8dc155b3a2d0b1e23a0c90f207a8a
SSDEEP 192:2RxPg6dOkRA9pT9L8nkMasv7s0fGMnPRpjij3wafm9+Hsb+WNQMg/PkO/0ape+pp:2RxIR+gGGQXLowVB7kEE2lV3Xe
TLSH
T1B662B82ABD6065BF8DEBC21AF921776FE2F1102220D02E84E6FC8D6C15D76CD2217857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 84a24bf1565cd502bdd44acc2213cd32c90059fccb57ffd3f7d3a1994b97ded4
MD5 7edc2cdf5735760434b6db4ea6f19a2a
SHA1 8b9352d8edfa61ef67352508635254622fb96ded
SHA512 af1252afc38eab9f87c80135bc89b146a1aec4386f19deb27d83f1050df31f5fefa32027be5c47256b708d57c19fd4ca1e51f4d96a4b32350cb4d916d57d13b5
SSDEEP 192:2RxAg6dOpRA9pT9L8nkMa6v79fGhAPRp2GQ9+Hsb+WNnPkoKB2B02lVDeMzQDVyt:2RxnogNG8X6owsH2a2lV3+8
TLSH
T14042B62DBD10757F5CEBC22AF961776BE6F5102220C42E84E6FC8A6C15DB6CD221B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 a453c6e7ba7e61a55c8e2d1865e04103f132e84fed962b3f0ba38c7888cd8d7d
MD5 449caf862b15836c91c9462967934118
SHA1 bd4ec2bd4ef9960fc32c4b498b6dd984a531d72f
SHA512 cb7e14fc730b00187459b386c8b344d1833bb72a1bb186a7bd11b5cc2fc38b833e910fc7ddbf6a2761478fa80490468e3c59deefbc7a80cac26b9dade2752c47
SSDEEP 192:2RxAg6dOpRA9pT9L8nkMaEv7s0fGhnPRpjKwB9+Hsb+WNQ6LPkO/0aKB2902lVDa:2Rxno2gGG5X3ow2BZ2G2lV3Xe
TLSH
T1E252B72DAD60757F9CEBC62AF961776BE2F4102220D02E84E6FC8D6C15DB6CD2217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 d758180d5168f61e832c32ab2adb8df542cf62af7b7d299d40aa4d96459790ac
MD5 8a2010ec09c10df99714caa1aee86a5d
SHA1 76fb11eec0b22981997cd10b54f80dfe3807922b
SHA512 7f6ac12f1c4e7ab720d3bfb81b8da7107655ec1e7119963c718118ff49e75e65d86d02b40cb0fb0d89cbad89b176c6f2c0b5c7207bf68400b013af708e10dfcd
SSDEEP 192:2RxAg6dOpRA9pT9L8nkMavv7DfGhAPRp2KwQ9+Hsb+WN+LPkO/0aKB2z02lVDeMW:2RxnoJXG8XJowfBZ2Q2lV37e
TLSH
T1E752A62DAD60757F9CEBC22AF961776BE7F1102220C42E84E6FC896C15DB6CD2217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 226B
SHA256 ef8f38e3eb9ea390b8a9f0b339649d9d1e62f45cb43aa14b89c93750c416ef89
MD5 89ade9b4d028d693df9db58a377d2915
SHA1 472f2353f52c88d07644d6512c9b8034c491e679
SHA512 aa9ab9ba65ddb4edb02e8f9da8b2258a20a18f5b8875f7ad06aee7253c0c62001b22f84e76733b3592214f23cfcdc5be30d3cd16d633f7a05334b16cab156ad8
TLSH
T1E1D097EBE2081050E5B60B815B361C26C3183CCC4084C48D700300185882E938021F42
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 e580e579fad58b926864546cffc896ae69d40f0f447cf1a6be029c8c392fb408
MD5 61b38691569a6908a9ee871be1c6a4fe
SHA1 6eabb2573ecc55353f21ae0be73dae116bd33e1f
SHA512 447b98d85d80d0e8344e3970d0836d04baf2f6b24b70fe0cfee77f67e1cc9c220c94e9cf1d638ab89256614ea9c118f09821cee6ab7b85acdf83e50b8a0a8c81
TLSH
T194D097EBE1291050E2B20A828B361C16C2242CCC4080C4CDB003302C24B2E838120F42
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe594099.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe594099.TMP
Size 138B
SHA256 0412670ebb992ba419a41e55f242258f4bae3c7609a4fa87b0f22f6285fd7229
MD5 b572000fec7379a08671e805aa1aefe2
SHA1 fc28350fc6ac9fa314a60dea8a154996500a0729
SHA512 09301dabc9a03563671658f61e4868dfce59c03cb6051c7891780a2841610e2f61701abdafcd58fcd34dece150234ca474bdf3f6a836ad641a4c3b1c90de9387
TLSH
T1B3C02BE7A2400064C7250651C3335C1CC3042CCC4881C48C701334282075E632101F91
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 12cba8f99883e4438c82ba988a493af190e66795f1a23f0c84e6aaf3b49267ff
MD5 00adb855ea318ee2269be0a123556c75
SHA1 91dfb5e34b74700b773482fe1eb3e52a031cd2e2
SHA512 ae5aefc087e13f712b27dc5c34b498167b50572981ca5a759deedd59a29db4bfa5c9dddcb353944e99f5dc250fffebc2c57d81bee7f842cb40c714b595e6d2f3
TLSH
T1A2B01254C041B301C45302B12790188831549F11E70A130253F42D85D83A5A1825B155
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5923f9.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5923f9.TMP
Size 96B
SHA256 f66147eaf706484bce7481f7a53487b240e4ea6746a14d493a9dbd99771037c9
MD5 6364281cd6b629cabe1941b1b92ae9e2
SHA1 3fffd87187230112e6d13c6f40f27256340c3d63
SHA512 30e785dfd1b76db44a8bbfb6795939a204da4871cb51e0087d9f0d4fefa2748ea259542e70f7728bf6a2bd7927c810937c8d639b0f7ed3df1f9ad83e1f8c7ccf
TLSH
T15AB00259C3026722D84207F83695D5DC7264DF65C6031616E3F41BBEFC397B14525260
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 91B
SHA256 c87ef4d706c6d7f4933bd6d3e64176e2fe7758f7daf057c73b47f1429e2ec72d
MD5 e25c9c76fc320735b8f7a4861abd591d
SHA1 0a7c36545e37b0873f0a777aef7afbf24109d9a9
SHA512 3b43c0a7b634162b668d58e99ecbb26642c8a60e7d40c9e72e83beef689d110098cbec127c55e53204110734344b795738c148500efa7fcc4533ca1ff6c1509f
TLSH
T16EB002BF514259D51F7534F7014731DDC56633CC9C85EE9D94721058321497F2001C65
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5996f7.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt~RFe5996f7.TMP
Size 178B
SHA256 ad3d6557312aea26ea0ef2d69c6dd11399be97c9f4fa25f685529a531c4046e8
MD5 c9be8aa17b5024b6aa4bc845b46cce31
SHA1 87476442658a903f25ec017921e077f4bec53558
SHA512 4921032fa9de9e1696ea5b0278271bacf680f8de644d7121387fe5ccb5831f965705c1cee1ead01d8b4799e0883fc0f6500393b1dc5ee339cddccf6048a6a61a
TLSH
T179C012BB1081D9E53A7468FA425732C8CA2A7FC84CC2AA5C8822301A22308AA2900824
MD5 SHA1 SHA512 TLSH

Submit Download

.usage

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\FileSystem\t\.usage
Size 24B
SHA256 fac0a85e4f5907c8036b0052214b777ddbacea9420e5903526272dc76bd4c7b6
MD5 e1edf83f1dbe0a1640e5800ef2f44b90
SHA1 58e8f31a1282e84a05c6960d6ab461d6ccef42cc
SHA512 151b19bcb34d72c304d02f2830f577036c5d2156499cb998643a87a3010544e5a4c236f8458786ea4b3416aaa4fd1ea96fc3bfe1ab0c5baebeac29e5427ca417
MD5 SHA1 SHA512

Submit Download

00000000

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\FileSystem\t\00\00000000
Size 1B
SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
MD5 93b885adfe0da089cdf634904fd59f71
SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\6\CacheStorage\index.txt
Size 88B
SHA256 67398dce07f2f398e40a530315dc058c1f741a9e87c474dfcd2b18876544f6e5
MD5 59cef0db306bc37e38a57d537d971855
SHA1 7e324ed7f6a1f74119c98c5b4875f504588ba6f4
SHA512 62cae2a8fe94c9b9463ecd3f7150a77658576211b345f8da498584a47e823a743048d86c1859a887afb3416f5fa7a3118dde418d45e07896369f9ca5a8890533
TLSH
T16EB002BB05429AD11FB134F7145531DDC96332C89C80DA4C8471505833504FD1055C2C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5a9154.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\6\CacheStorage\index.txt~RFe5a9154.TMP
Size 175B
SHA256 bfa5166a292f61d8e85fde9990defd592331e0d51c99546b0b76112fe0e802a5
MD5 58b5b16dad83c4fb27277695d9d54a6b
SHA1 15b44f33169045dcb5471d3d4f31d59866c75146
SHA512 e65747f2e3a21d37ddff484098230deccdce9eb13423e644ca58f4593daa2c053ffab43d10be45fceca6cefd45eab68aa2316a7ea159291ebd13107fc17db65c
TLSH
T13EC08CBB00A2D6D23FA434EB2076B2ECD9323FC84CC0964C84B2B0992275CED2104C2C
MD5 SHA1 SHA512 TLSH

Submit Download

eb1a0fad-059e-4592-a047-d4014e3a464a.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\eb1a0fad-059e-4592-a047-d4014e3a464a.tmp
Size 17KB
SHA256 52faa1c0a2c145f24cb6bf0e4a48b0237ba969495c82d742d374c6759b4dc290
MD5 10219fe671f251c5a102a95887dac447
SHA1 7f90b76134fd16f85ae158bfb5c71425e83ed0ae
SHA512 caee2e22a50a8965d0fb94b1a22f1071e58b061efd33cb3d9eeb5e5a6d58e48d84366477559486942f9c5103a8a77cad8186aef0b09c97ec8427f2be08e3f9cc
SSDEEP 384:SEjml7KxkXqKf/pUZNCgVLH2HfgsluN7pLuLceSMtXODml+ErU3I6HGCX2v41q:SIml7KxkXqKf/pUZNCgVLH2HfgsAN7pe
TLSH
T18A720A677C4C9E7B4FA4CA8DD8277E4FACB5024B55D9886442FA5C2603D4ACF11062FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f9d04d65-176d-44ab-9a0b-b8d92e493065.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\f9d04d65-176d-44ab-9a0b-b8d92e493065.tmp
Size 15KB
SHA256 68ca264718b1a083b207d82458f4168b304219cb245f16c9e04fe475d504a1da
MD5 cb4273d04f280a74f43c9e52c64aa6b9
SHA1 6aed9cfe3e334e3a3d14feded074088ec0652db7
SHA512 e2be2be5278a7eb28c9a80aad6728bd3d1429e4f52e270c639c7cbb18e5e955044fff1ac470ff50176a4b533798709abcab3d0b46af63daba501add6a0336106
SSDEEP 192:2RxPgsdOkRA9pT9L8nkMapv7s0fGMnPRpjij3waf59+Hsb+WNQMg/PkO/0ape+pp:2RxIvngGGQXEowVB7kEE2lV3Xe
TLSH
T10E62B92ABD6065BF9DEBC21AF921776FE2F1102220D02E84E6FC8D6C15D76CD2217857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 266KB
SHA256 0bdc7fa75510a4adbc1d25707bfbb298c7f5ddaf38f7dacb1a98e9e6eb5e3198
MD5 c8ec8d7d829b815c12b530a74aa38d60
SHA1 7fe65df21c3d244485ed6873b7a8475c0ca35004
SHA512 c9966588efcac321da74dcc643450fabdaedab447268cd798fed9e05ba72d646160ee02acc7136111e51972556c59485d87188da025f0c664c4a164a1d8d56e4
SSDEEP 6144:yxi+Dvz0p3IGzzZDTIThDxWhaj5mjie/JYFob+:Ci+fM4GRPEh/NmT/JYOa
TLSH
T1054423262CEE09B710ACC124D07F792496BCC66F8384EF4798D56A4FD2D7D86534B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 267KB
SHA256 80c00ab2bad893cfaafd1f3118188ffecceaae1dd7ab43dc42d3a8f478eadb50
MD5 efa01042616ecf647a17ef5030a76b41
SHA1 f297952982c56ac563107e595e771088efe523b8
SHA512 98e722b8294d0f50a6f870b236a88fd1c2541a6ec09fee0fd06b90cbe83f9531ea9980889a363b91b65a8f7eb4a8754b1f6f6d27d94b4c7f5ef44945c647ba9b
SSDEEP 6144:J2+Dvz0p3IGzzZDTIThDxWhaj5mjie/JYFob+:0+fM4GRPEh/NmT/JYOa
TLSH
T14C4422363CEE49FB10ACC114907F79248DBCC26B9684FF4B98946E4FD2D6D89534B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 267KB
SHA256 7219e1eeb3f06e273189d14c04d6efbafd304dc3d73251c0ba3ff7e8d2edd2b3
MD5 6aa6390062158e302858b5c409c45658
SHA1 fc6890622cc06a071317a752c751246166a72f6d
SHA512 61d7dbb4833d6f3a027065bd0196acf08cd922ab2b42bd98d5cfc57455338e5862c9b9a566f6badf0eb0ed25c3f0eb09ca8120576a39e517075b2300f7ef5f3b
SSDEEP 6144:J5+Dvz0p3IGzzZDTIThDxWhaj5mjie/JYFob+:/+fM4GRPEh/NmT/JYOa
TLSH
T1AC4422363CEE49FB10ACC114907F79248DBCC26B9684FF4B98946E4FD2D6D89534B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 267KB
SHA256 783ea2b7e886084af0a0e296d3244fa4345d20dfe284d38d26d1a05d769d9562
MD5 daff87daff3a0fbe8f8f857d8141ae10
SHA1 dc1c05f1841e8696572b1354855c2c7814bc9f6a
SHA512 7dbc5b243f04fdbfa1028dedc25311f6cebb573b6dc30cb9074846a4cf0772d8e8454aaa28b6f1ac46724d425a61192964dce0a003487c5048841fd1e8659eac
SSDEEP 6144:t8+Dvz0p3IGzzZDTIThDxWhaj5mjie/JYFob+:2+fM4GRPEh/NmT/JYOa
TLSH
T1F24422363CEE49FB10ACC114907F79248DBCC26B9684FF4B98946E4FD2D6D89534B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 267KB
SHA256 337104cc35efc350346909b1915717050246e734a183b1660f80a089395d2a50
MD5 eb3b13245d892f72babf6e76cd27edfb
SHA1 3488b86666470d5dd61a86ea5d7527a284904b5c
SHA512 aaa52e33dae38c2e404cb562e964cf48bd331298be8b71006eb73b62dc0401bccdfa2195b6f1f3e5ec1acac0b6d4bfa0fcb16bcdcaed764d1190aae66b337671
SSDEEP 6144:tD+Dvz0p3IGzzZDTIThDxWhaj5mjie/JYFob+:5+fM4GRPEh/NmT/JYOa
TLSH
T1444422363CEE49FB10ACC114907F79248DBCC26B9684FF4B98946E4FD2D6D89534B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 267KB
SHA256 b5f28195df595646680c364053f8230e62c8bd30ea6f381818318acca0942bf6
MD5 d27e9c0d46b760ad50910863bb25c68d
SHA1 3b0cbc2dff9ff5cb32fb402763843c7c4b295331
SHA512 ab51beee0874b1caa70d0c0f5f921a4827359d8f2e9524fff239aa6e3b80a4d15c399cb9036dd619faf6b5a9113ed69e330a168e1b85e1a18ffdc499c3a5e252
SSDEEP 6144:J1+Dvz0p3IGzzZDTIThDxWhaj5mjie/JYFob+:z+fM4GRPEh/NmT/JYOa
TLSH
T1374422363CEE49FB10ACC114907F79248DBCC26B9684FF4B98946E4FD2D6D89534B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 7f92f14be64373640422ba5419f628d2b1ec8bcb4578cdce1010e4ee0ab5565c
MD5 b44f82d25ca2000b88423fe29c27afeb
SHA1 901215ce64865b84d587c99bf34dd73b312f6457
SHA512 cf481a3c3972bfd989cd2c00482a1b26090193f93cb15bf61f1636f63baba5147f1146da38b8258229c9a2c2ecc4a9986ea024ab995671560f9548ef87ddbf3a
SSDEEP 3072:JFT8ThDUxx0Rghaj57THH/53w/7qclnYe/JYNfobTOLXE:JmThDxWhaj5mjie/JYFobx
TLSH
T1D9D31223ACEE01FB14BCC508907D3F0096F985B39640FFA79ADC6A4F60D7EA4A366155
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 266KB
SHA256 2ede52f843133dccbc517f6cbfadbe14b6abab58c40bca571b5b2fa7ce1046d3
MD5 3529010c974521317d4782dcd1393be3
SHA1 a85d9af5b8567405eb9106c3748fe44e7cb9c02f
SHA512 ed6cc89730f7a59b04a77a981435b19dab7b6f16046c776fb77efc23fa95505e7f74c487068ec6031c08b12f7a29f0f5cf5433fdabe25fdfa100a8f24ccf7758
SSDEEP 6144:txi+Dvz0p3IGzzZDTIThDxWhaj5mjie/JYFob+:Xi+fM4GRPEh/NmT/JYOa
TLSH
T15A4423262CEE09B710ACC124D07F792496BCC66F8384EF4798D56B4FD2D7D86534B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 267KB
SHA256 59e0fb8aa9fd0276c079eb619142e74b00a29bbe15e46345fce0c731058f6aee
MD5 d7a239a03b1a1e305ce581ef3f2f1795
SHA1 6b3cf131d1e326bbe79a99621a2aea4c701b186f
SHA512 e4c92766287ea22706cdeca5dc5cfe7da11fc4905b5b55e840a028251e15ff6f8e67d5550d235acc9c4bd8375106cbfc9f02dba9d9470a7ffec67c91dbff1281
SSDEEP 6144:JP+Dvz0p3IGzzZDTIThDxWhaj5mjie/JYFob+:p+fM4GRPEh/NmT/JYOa
TLSH
T1974422363CEE49FB10ACC114907F79248DBCC26B9684FF4B98946E4FD2D6D89534B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 267KB
SHA256 2cc4a8bdfcca70a749cea9a2028e2ec64cafa772ca88fef816c61cd864356514
MD5 cfdb11e65b4958343c1179d02ea7a2be
SHA1 45280c1621a5a20e2b2ad511adba9493bc8cb8e2
SHA512 3b6e8abd41ff8a191d012e018279ab88271e696f32078190ecac3ae51d1acee5964fd0e1c4e05e5eddfb9d549ca128c6a5771f994cd677ba73e80c2ffe1a45e0
SSDEEP 6144:te+Dvz0p3IGzzZDTIThDxWhaj5mjie/JYFob+:E+fM4GRPEh/NmT/JYOa
TLSH
T1194422363CEE49FB10ACC114907F79248DBCC26B9684FF4B98946E4FD2D6D89534B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperaInstaller (1).exe:Zone.Identifier

Path C:\Users\Admin\Downloads\OperaInstaller (1).exe:Zone.Identifier
Size 26B
SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
MD5 fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1 d59fc84cdd5217c6cf74785703655f78da6b582b
SHA512 aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98
MD5 SHA1 SHA512

Submit Download

OperaInstaller.exe

Path C:\Users\Admin\Downloads\OperaInstaller.exe
Size 178KB
SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
MD5 4ef32b114eaa6f05340b46d0f48154c7
SHA1 a07219dc2a0fa96f5f9a03b1bb350c9ab2679d3f
SHA512 6631937f30fcfdc536bd14735870c9c4592f4414e9c1d71ec69c718bf341ff286174b782c6a23a6c29744be940bcac34aa93845e60727e090bee8423d738ea9d
SSDEEP 3072:IYHHEa1Lz5KhEwh5kc9+5sFoq0X/r6LGV4RxJ0OZnS+Rl//bRRlTHGVJp99vqRy:IYEwP5KhVyc9esFoBvum4RvGJTEy
TLSH
T1EB046B823AC184B5E5B244321864DBB19A7DFC700F65D9DB73987A3B5DB02C09932F6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperaInstaller.exe:Zone.Identifier

Path C:\Users\Admin\Downloads\OperaInstaller.exe:Zone.Identifier
Size 99B
SHA256 752d1b8c8a9edd6e37027c571ec956c96d4f57225c1f6566fc811a419e84bdf0
MD5 55d00e91172bb390d5bb354507c9b12f
SHA1 4acef2fa3ef467b4a528d276358a3e9d67b12627
SHA512 bd4c380cf0809d9e6f31f5e9c4e0ca53a4f921af09f0a2a492cb61b03245d1e9f09f2205f64b9917aa67db7c42a185da7c239fd8cac23f5eab2c4fabda956116
TLSH
T1FFB012970601C8100F2023C030BC910CE12B2A244C914104E8605087EFC04FC90D040F
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3996-1-0x0000000000400000-0x00000000018BB000-memory.dmp

Download