0974678c1006d6d7c495e3ddbef08b18d6ed8430fdd50827d7af10c0ab344233

Analysis

user interaction
yes
max time kernel
47s
max time network
62s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-de
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-delocale:de-deos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 20:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Java MobGirls 1.0 [neoforge-1.21.8].jar
Size 164.5MB
Sample260930-zbfwwswbpd
SHA256 0974678c1006d6d7c495e3ddbef08b18d6ed8430fdd50827d7af10c0ab344233
MD5 2ee9e0b3fb7e7a50e99ff0e267f645da
SHA1 c7786ea6d1371aec012a76fbca0d4b4df5e5e78c
SHA512 521004020a3996a017ec0d7375502929b4b3030bf606d16ab9f31ebacabeb4b43d3cbfdbaffba67bbcbb0d8624655242ef38b7e895f8b73543587c4799a7f4a3
SSDEEP 3145728:lFliTMUBjFHc1Fx15z8GUBjFHc1Fx1WGleiSO15yWGleiSO15h:lFliTMOHgf15z8GOHgfsGlzScGlzSo
TLSH
T1DF8833B186E61528E70F16310338AD4AA91851D5B61B62BEEA4C6FE0FCFCD3700657BD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5328	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
364	chrome.exe
364	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

description	pid	Process
Token: SeShutdownPrivilege	364	chrome.exe
Token: SeCreatePagefilePrivilege	364	chrome.exe
Token: SeShutdownPrivilege	364	chrome.exe
Token: SeCreatePagefilePrivilege	364	chrome.exe
Token: SeShutdownPrivilege	364	chrome.exe
Token: SeCreatePagefilePrivilege	364	chrome.exe
Token: SeShutdownPrivilege	364	chrome.exe
Token: SeCreatePagefilePrivilege	364	chrome.exe
Token: SeShutdownPrivilege	364	chrome.exe
Token: SeCreatePagefilePrivilege	364	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe
364	chrome.exe

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 364 wrote to memory of 2872	364	chrome.exe	92
PID 364 wrote to memory of 5328	364	chrome.exe	93
PID 364 wrote to memory of 1572	364	chrome.exe	94
PID 364 wrote to memory of 1572	364	chrome.exe	94
PID 364 wrote to memory of 1016	364	chrome.exe	96
PID 364 wrote to memory of 1016	364	chrome.exe	96
PID 364 wrote to memory of 1704	364	chrome.exe	97
PID 364 wrote to memory of 1704	364	chrome.exe	97
PID 364 wrote to memory of 5588	364	chrome.exe	98
PID 364 wrote to memory of 5588	364	chrome.exe	98
PID 364 wrote to memory of 716	364	chrome.exe	99
PID 364 wrote to memory of 716	364	chrome.exe	99
PID 364 wrote to memory of 2884	364	chrome.exe	100
PID 364 wrote to memory of 2884	364	chrome.exe	100
PID 364 wrote to memory of 5076	364	chrome.exe	101
PID 364 wrote to memory of 2724	364	chrome.exe	103
PID 364 wrote to memory of 1980	364	chrome.exe	102
PID 364 wrote to memory of 2724	364	chrome.exe	103
PID 364 wrote to memory of 1980	364	chrome.exe	102
PID 364 wrote to memory of 4188	364	chrome.exe	104
PID 364 wrote to memory of 4188	364	chrome.exe	104

C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
java -jar "C:\Users\Admin\AppData\Local\Temp\Java MobGirls 1.0 [neoforge-1.21.8].jar"
1⤵
PID:4204

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ffc18d9c728,0x7ffc18d9c734,0x7ffc18d9c740
  2⤵
  PID:2872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1920,i,1505476958967137097,13638167783788129728,524288 --field-trial-handle=2008,i,7747959586690675011,2708621796490014438,262144 --variations-seed-version --mojo-platform-channel-handle=2056 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,2144626544265002538,4520299947317104734,262144 --field-trial-handle=2008,i,7747959586690675011,2708621796490014438,262144 --variations-seed-version --mojo-platform-channel-handle=2004 /prefetch:2
  2⤵
  PID:1572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=de --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2344,i,2704571816088397830,2883013844155590823,524288 --field-trial-handle=2008,i,7747959586690675011,2708621796490014438,262144 --variations-seed-version --mojo-platform-channel-handle=2184 /prefetch:13
  2⤵
  PID:1016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3284,i,8044192648436925717,5296804414755495981,2097152 --field-trial-handle=2008,i,7747959586690675011,2708621796490014438,262144 --variations-seed-version --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:1704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3332,i,5300854457429106043,2501498084959947796,2097152 --field-trial-handle=2008,i,7747959586690675011,2708621796490014438,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:5588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4744,i,2872646317903857235,11893729178621807477,2097152 --field-trial-handle=2008,i,7747959586690675011,2708621796490014438,262144 --variations-seed-version --mojo-platform-channel-handle=4728 /prefetch:1
  2⤵
  PID:716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=de --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4908,i,9525286750095062116,17534127795169172674,524288 --field-trial-handle=2008,i,7747959586690675011,2708621796490014438,262144 --variations-seed-version --mojo-platform-channel-handle=4896 /prefetch:14
  2⤵
  PID:2884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5372,i,1052536154330279700,2630220908852838658,524288 --field-trial-handle=2008,i,7747959586690675011,2708621796490014438,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:5076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5508,i,3460879154125204582,9966999476042334406,2097152 --field-trial-handle=2008,i,7747959586690675011,2708621796490014438,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:1
  2⤵
  PID:1980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5516,i,3129763683257819865,15647085992037655815,2097152 --field-trial-handle=2008,i,7747959586690675011,2708621796490014438,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:1
  2⤵
  PID:2724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5800,i,6126080763334075564,3990641300669662649,2097152 --field-trial-handle=2008,i,7747959586690675011,2708621796490014438,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:1
  2⤵
  PID:4188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5984,i,9374934694517181312,1813066256121005110,2097152 --field-trial-handle=2008,i,7747959586690675011,2708621796490014438,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:1
  2⤵
  PID:4280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6116,i,1028780144521075960,10587280460276372361,2097152 --field-trial-handle=2008,i,7747959586690675011,2708621796490014438,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:1
  2⤵
  PID:3884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=de --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5976,i,4470658974387908609,5762701436358991181,524288 --field-trial-handle=2008,i,7747959586690675011,2708621796490014438,262144 --variations-seed-version --mojo-platform-channel-handle=5532 /prefetch:14
  2⤵
  PID:2820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5784,i,3004014090908937412,1296574829676187633,2097152 --field-trial-handle=2008,i,7747959586690675011,2708621796490014438,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:1
  2⤵
  PID:2976

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5232

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4376

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
PID:3456

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 2ec12981c43d5ebc2ab4d18ca5b71e7bb5e4ea82c7d284ba6108893bcf73e072
MD5 a6d55444d60bf25fe68eeba90d909d96
SHA1 38d9a8568fa82b6b56a559845a90624e8a4d4d09
SHA512 dadc1dac72bca2f641067fdd35c65a80011afc2487691bcb5bc6aafbe4a36154e0acdba2efe93458cef1d9593366a3fe50fe3192d692cc2bcc296d7804603ce4
TLSH
T15D417BB3D3D8CA7E891156E49B256E1FCD6D0A14522C3C52D9E8AF5F53E18B2D20068E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 356B
SHA256 93d0bf041965b5044ee7dfa7c38c8f5766994fcae6c77ec2234fd29965084235
MD5 aa444effa162656ecf1bf6df5594c8e3
SHA1 1338a62e5b64576ee83c4d4008409d6be730df2a
SHA512 633e295727d63b886d85920314ab2920d91c8bab356b2c320f10b41dd3a8c0723212affecb714ca4b546e4d7f9ba8f3104476e810bfe19c06eb28fb19947b815
TLSH
T1D8E0D8A7E7AEB46740B945EE1D00F90A9677A83002916CE4CE4A422DF1961F62B16403
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 10KB
SHA256 8fcf26953f2b93dcb411bb132573e280f7467e42879eaaf78a022f0e27eb9300
MD5 3be7384281480bcd425b467f1c163980
SHA1 bbc6b6beaa4025b06683b7dafcf94fb52ade46f7
SHA512 233e7e346d4f61266b0a80dffc78107a48828a047072e4d0b32cd98850d854cadcb5efb04d6b1a7726326b43a82f8b9ff62bac388c6137f0bed032d67c011d00
SSDEEP 192:gRpWZqv7cvAPRp2GXsb+WNndd40VY2ywkw3wyIsnAUgR:gRpWZmA6XlXwL40C2zIR
TLSH
T15232832DAD64B43B9CDBD22AFA263753D7F5103234902E84E6FD892C15E79CC622744B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 11KB
SHA256 01beb2b8f8f13dd37264b9ae3d072b88d10055ac6cb0e0a3815b975a066426f4
MD5 eeca2e0c83ccf68574297d90790047d2
SHA1 f1be9b80ba510a5bc60e25a43692e611742fa784
SHA512 a0a792aa3b9e964b35553f9deef911be948ad1ec9802376a62a5e7338fb2926f752f469d5fe2225f6a3f1251dff4f760507771710c8b4e3a3a858765c3b9eb7f
SSDEEP 192:ens4K6fb7KxkXqK4I40pUZNCgVLHrKHfFKslESfFXzKD/wX+ErUkKN9l2AOkoP3K:usjYb7KxkXqKf/pUZNCgVLH2HfgslzFk
TLSH
T14032FA2BA48D9A3F4FD8D519DC176F4FACB402566228096497FB9C0803F578E114A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 4KB
SHA256 3b754871971370b1cccae2119d04946ef5d6090447e430083cb82beaee66fcaa
MD5 e007bec691ac1b8f1db5e76687f4cf9c
SHA1 576a8b62074cedaba08979cd7aac824b18784b01
SHA512 e77bb562c61afcd02b7d18a3395096e7c4210e7c4908b71c830cc87e244a69ec497a19ed8e4bc0ac46d88cb495369a19be93366ad67c3046ec8c8dadc3b2025f
SSDEEP 96:CC0d+TWqN/K890wxi+9M7fX3urjUBdyRDotok5Vp0cDEB6vGyvtBWG0cq3bOv4a:CC0oWqNVVxi+9oP8DUDf0KoDeW9cq3bQ
TLSH
T11AA13A31A87999B789F2D485B1463E538FB930BFA621DFC4E8EE1D1C20B309C0342627
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 139KB
SHA256 0dd78a3786099725666d877e6ffeefd67ccead51a8f0b68e324e117a53d053a6
MD5 27e6cec69a0782df53c315fc8904be96
SHA1 b9699aeb4a97bd4bb55ca30d74c49d9ff2bd243d
SHA512 f1c109ade0c5d6ff36a3212c3b07791b9304cb2ff97010682ed942a0054cf64054def906bfcd276ab943ca5011eef3bc2367b6b55277bfab53545500363970e0
SSDEEP 1536:38pjVnMsX/ykMCxDp/RSztp/VZIIusdBUpk7/Y6aRZFswCL/Y1z4ovF3dvQogFlf:8RBy6AztpvzHUpwjaRPIGzZvF3d5ZDTs
TLSH
T108D3133939D61D63509AE070E87FB47A8A3CC14F43B6EF4A98525B59C7B6C4B034AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/4204-2-0x000001B3D0C10000-0x000001B3D0E80000-memory.dmp

Download

memory/4204-12-0x000001B3D0C10000-0x000001B3D0E80000-memory.dmp

Download

memory/4204-11-0x000001B3CF320000-0x000001B3CF321000-memory.dmp

Download