aokigahara | a0f16ab04a6a80b8ae0a2cc140b71ffc030c16d374b7eaea9cc642e326703092

Analysis

user interaction
yes
max time kernel
149s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 23:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LOL.htm
Size 428B
Sample261002-3zsr5sysds
SHA256 a0f16ab04a6a80b8ae0a2cc140b71ffc030c16d374b7eaea9cc642e326703092
MD5 3abb3012ca69e50663a084f8547ea011
SHA1 e68ff5febef39cc45270110e1b83af791e6ffbf8
SHA512 9f1792a607623d9ddc750d3fb03b285cfc33e9cbb7f3cd51a23a83b0b973fca9accd235b43bf9deb850da68215820ff886923faa2a600b5111bb5f71f6506f8b
TLSH
T131E0A3FF0C64CC131D3574907956F11B2454110ECCCC88D4B1C0D07546E4B67EA2D729
MD5 SHA1 SHA512 TLSH

Score

10^/10

collection credential_access defense_evasion discovery aokigahara spyware stealer

Malware Config

Signatures

Family: Aokigahara
Aokigahara is a Windows stealer written in C.
stealer aokigahara

Executes dropped EXE 2 IoCs

pid	Process
1012	Loader.exe
1464	Loader.exe

Reads WinSCP keys stored on the system 2 TTPs
Tries to access WinSCP stored sessions.
spyware stealer

Data from Local System
T1005

Credentials in Registry
T1552.002
Reads data files stored by FTP clients 2 TTPs
Tries to access configuration files associated with programs like FileZilla.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003
Unsecured Credentials: Credentials In Files 1 TTPs
Steal credentials from unsecured files.
credential_access stealer

Credentials In Files
T1552.001

Accesses Microsoft Outlook profiles 1 TTPs 4 IoCs

collection

Email Collection

T1114

description	ioc	Process
Key opened	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	Loader.exe
Key opened	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	Loader.exe
Key opened	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	Loader.exe
Key opened	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	Loader.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Looks up external IP address via web service 1 TTPs 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

discovery

Internet Connection Discovery

T1016.001

flow	ioc
509	ip-api.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Loader.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Loader.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Loader.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Loader.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4032	msedge.exe
6100	chrome.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Kills process with taskkill 16 IoCs

defense_evasion

pid	Process
5636	taskkill.exe
5492	taskkill.exe
5636	taskkill.exe
4408	taskkill.exe
5004	taskkill.exe
5640	taskkill.exe
5208	taskkill.exe
4616	taskkill.exe
4344	taskkill.exe
5956	taskkill.exe
4284	taskkill.exe
5956	taskkill.exe
1452	taskkill.exe
4616	taskkill.exe
2736	taskkill.exe
4284	taskkill.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{78DC47F2-3163-48E5-8E9E-95884B3108A9}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{30CAC8EC-7603-436F-BBE9-2CC6ACE39F6D}	chrome.exe

Suspicious behavior: EnumeratesProcesses 28 IoCs

pid	Process
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
1012	Loader.exe
1012	Loader.exe
1012	Loader.exe
1012	Loader.exe
1012	Loader.exe
1012	Loader.exe
1012	Loader.exe
1012	Loader.exe
1012	Loader.exe
1012	Loader.exe
1012	Loader.exe
1012	Loader.exe
1012	Loader.exe
1012	Loader.exe
1012	Loader.exe
1012	Loader.exe
1464	Loader.exe
1464	Loader.exe
1464	Loader.exe
1464	Loader.exe
1464	Loader.exe
1464	Loader.exe
1464	Loader.exe
1464	Loader.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 28 IoCs

pid	Process
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe
Token: SeShutdownPrivilege	5704	chrome.exe
Token: SeCreatePagefilePrivilege	5704	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe
5704	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 980 wrote to memory of 3188	980	msedge.exe	88
PID 980 wrote to memory of 4032	980	msedge.exe	89
PID 980 wrote to memory of 4864	980	msedge.exe	90
PID 980 wrote to memory of 4864	980	msedge.exe	90
PID 980 wrote to memory of 4864	980	msedge.exe	90
PID 980 wrote to memory of 948	980	msedge.exe	91
PID 980 wrote to memory of 948	980	msedge.exe	91
PID 980 wrote to memory of 2684	980	msedge.exe	92
PID 980 wrote to memory of 2684	980	msedge.exe	92
PID 980 wrote to memory of 4452	980	msedge.exe	93
PID 980 wrote to memory of 2684	980	msedge.exe	92
PID 980 wrote to memory of 4452	980	msedge.exe	93
PID 980 wrote to memory of 4452	980	msedge.exe	93
PID 980 wrote to memory of 4680	980	msedge.exe	95
PID 980 wrote to memory of 2552	980	msedge.exe	96
PID 980 wrote to memory of 4680	980	msedge.exe	95
PID 980 wrote to memory of 4680	980	msedge.exe	95
PID 980 wrote to memory of 2552	980	msedge.exe	96
PID 980 wrote to memory of 2552	980	msedge.exe	96
PID 980 wrote to memory of 1704	980	msedge.exe	97
PID 980 wrote to memory of 1704	980	msedge.exe	97
PID 980 wrote to memory of 1704	980	msedge.exe	97
PID 980 wrote to memory of 2868	980	msedge.exe	101
PID 980 wrote to memory of 4980	980	msedge.exe	102
PID 980 wrote to memory of 2868	980	msedge.exe	101
PID 980 wrote to memory of 4980	980	msedge.exe	102
PID 980 wrote to memory of 3560	980	msedge.exe	103
PID 980 wrote to memory of 3560	980	msedge.exe	103
PID 980 wrote to memory of 3560	980	msedge.exe	103
PID 980 wrote to memory of 4620	980	msedge.exe	104
PID 980 wrote to memory of 4620	980	msedge.exe	104
PID 980 wrote to memory of 4620	980	msedge.exe	104
PID 980 wrote to memory of 2508	980	msedge.exe	107
PID 5704 wrote to memory of 5776	5704	chrome.exe	117
PID 5704 wrote to memory of 6100	5704	chrome.exe	120
PID 5704 wrote to memory of 6108	5704	chrome.exe	121
PID 5704 wrote to memory of 6108	5704	chrome.exe	121
PID 5704 wrote to memory of 368	5704	chrome.exe	122
PID 5704 wrote to memory of 368	5704	chrome.exe	122
PID 5704 wrote to memory of 5232	5704	chrome.exe	123
PID 5704 wrote to memory of 5248	5704	chrome.exe	124
PID 5704 wrote to memory of 5232	5704	chrome.exe	123
PID 5704 wrote to memory of 5248	5704	chrome.exe	124
PID 5704 wrote to memory of 1676	5704	chrome.exe	126
PID 5704 wrote to memory of 1676	5704	chrome.exe	126
PID 5704 wrote to memory of 5592	5704	chrome.exe	127
PID 5704 wrote to memory of 3156	5704	chrome.exe	129
PID 5704 wrote to memory of 3156	5704	chrome.exe	129
PID 5704 wrote to memory of 4696	5704	chrome.exe	130
PID 5704 wrote to memory of 4696	5704	chrome.exe	130
PID 5704 wrote to memory of 2620	5704	chrome.exe	131
PID 5704 wrote to memory of 2620	5704	chrome.exe	131
PID 5704 wrote to memory of 1088	5704	chrome.exe	132
PID 5704 wrote to memory of 1088	5704	chrome.exe	132
PID 5704 wrote to memory of 512	5704	chrome.exe	133
PID 5704 wrote to memory of 4240	5704	chrome.exe	134
PID 5704 wrote to memory of 4240	5704	chrome.exe	134
PID 5704 wrote to memory of 3232	5704	chrome.exe	139
PID 5704 wrote to memory of 212	5704	chrome.exe	140
PID 5704 wrote to memory of 700	5704	chrome.exe	141
PID 5704 wrote to memory of 1212	5704	chrome.exe	147
PID 5704 wrote to memory of 1212	5704	chrome.exe	147
PID 5704 wrote to memory of 4448	5704	chrome.exe	149
PID 5704 wrote to memory of 4448	5704	chrome.exe	149

outlook_office_path 1 IoCs

description	ioc	Process
Key opened	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	Loader.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LOL.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff26b3c188,0x7fff26b3c194,0x7fff26b3c1a0
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2008,i,13704119197277098966,16006471845697785533,524288 --field-trial-handle=2032,i,11855037804335222537,5507485989991410867,262144 --variations-seed-version --mojo-platform-channel-handle=2076 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1700,i,17683116715599239096,15644864358947852843,262144 --field-trial-handle=2032,i,11855037804335222537,5507485989991410867,262144 --variations-seed-version --mojo-platform-channel-handle=1976 /prefetch:2
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2556,i,18160140431705182807,12846019032375753652,524288 --field-trial-handle=2032,i,11855037804335222537,5507485989991410867,262144 --variations-seed-version --mojo-platform-channel-handle=2724 /prefetch:8
  2⤵
  PID:948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,10053111731217301562,3113308811734029360,2097152 --field-trial-handle=2032,i,11855037804335222537,5507485989991410867,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,16839239645660884285,11008341622867709217,2097152 --field-trial-handle=2032,i,11855037804335222537,5507485989991410867,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,12492345860437548224,5909554534817662622,2097152 --field-trial-handle=2032,i,11855037804335222537,5507485989991410867,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,15186474628271758601,6268310665322263555,2097152 --field-trial-handle=2032,i,11855037804335222537,5507485989991410867,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5068,i,732820760196112611,3920850941775688434,2097152 --field-trial-handle=2032,i,11855037804335222537,5507485989991410867,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:1
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3624,i,5717108979227452139,4030875510668898547,524288 --field-trial-handle=2032,i,11855037804335222537,5507485989991410867,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:8
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3536,i,7982723214453586370,1000392710383073016,524288 --field-trial-handle=2032,i,11855037804335222537,5507485989991410867,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:8
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5996,i,3180107681516712,18270028434521751386,2097152 --field-trial-handle=2032,i,11855037804335222537,5507485989991410867,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:1
  2⤵
  PID:3560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6224,i,2715570553408119475,1959093230899800665,2097152 --field-trial-handle=2032,i,11855037804335222537,5507485989991410867,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:1
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6792,i,10121230825050802517,4273901534628172819,524288 --field-trial-handle=2032,i,11855037804335222537,5507485989991410867,262144 --variations-seed-version --mojo-platform-channel-handle=6776 /prefetch:8
  2⤵
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6792,i,10121230825050802517,4273901534628172819,524288 --field-trial-handle=2032,i,11855037804335222537,5507485989991410867,262144 --variations-seed-version --mojo-platform-channel-handle=6776 /prefetch:8
  2⤵
  PID:2508

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4424

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7fff26dfc728,0x7fff26dfc734,0x7fff26dfc740
  2⤵
  PID:5776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,4161684785976169331,3798888894403198840,524288 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2240 /prefetch:3
  2⤵
  - System Time Discovery
  PID:6100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,4142460307921333635,12000861926758444664,262144 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2200 /prefetch:2
  2⤵
  PID:6108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2440,i,8395470131546564891,9464803975828590250,524288 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3212,i,1034759746797508664,2115395071733246150,2097152 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:5232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3232,i,13092103592692639620,12658437872463439529,2097152 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:5248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4480,i,1256552809812388594,1592981865374246860,2097152 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4552 /prefetch:1
  2⤵
  PID:1676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5376,i,3188999531730590181,5999046172001360638,524288 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5380 /prefetch:8
  2⤵
  PID:5592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5864,i,4162844120958038186,1119246988350526066,2097152 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5744 /prefetch:1
  2⤵
  PID:3156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5724,i,6103253679065872308,8867311069353239216,2097152 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5648 /prefetch:1
  2⤵
  PID:4696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3336,i,12035867139188120079,8347020812117691727,2097152 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5996 /prefetch:1
  2⤵
  PID:2620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3424,i,730580877833975391,17660683541466109169,524288 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3360 /prefetch:8
  2⤵
  PID:1088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6072,i,4317942216715685067,13483059081024784209,524288 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  - Modifies registry class
  PID:512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4600,i,11687409983459066808,10780333841130549797,524288 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6036 /prefetch:8
  2⤵
  PID:4240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3420,i,18401209993798011887,17284147324785009877,524288 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3348 /prefetch:8
  2⤵
  PID:3232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6136,i,7867093430327593109,7155446002486333805,524288 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3392 /prefetch:8
  2⤵
  PID:212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4616,i,417290149465005837,6545871639563142307,524288 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6112 /prefetch:8
  2⤵
  PID:700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3348,i,6147334527572207727,10293481003185694272,2097152 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4608 /prefetch:1
  2⤵
  PID:1212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6292,i,13851577116451969302,8251516167428650508,2097152 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6288 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=864,i,16289803546788703611,17778181573168528106,2097152 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6556 /prefetch:1
  2⤵
  PID:5172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5376,i,8177303532243294946,8914987001311547508,2097152 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6648 /prefetch:1
  2⤵
  PID:4452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5996,i,9680367190677565332,7367783330819394092,2097152 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3356 /prefetch:1
  2⤵
  PID:3572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5272,i,719639015564578271,12522849969914217852,2097152 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6796 /prefetch:1
  2⤵
  PID:5504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=5728,i,14911501026667095640,17031452320826305563,2097152 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6768 /prefetch:1
  2⤵
  PID:176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6816,i,3335497616122130683,8949516115132788294,2097152 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6808 /prefetch:1
  2⤵
  PID:5936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=7024,i,2710688008002410363,12355347434240543856,2097152 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5656 /prefetch:1
  2⤵
  PID:2428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6700,i,14736344382035814688,8891186440332609194,2097152 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6724 /prefetch:1
  2⤵
  PID:2556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=5936,i,13184723167210162150,4798270633273232886,2097152 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5972 /prefetch:1
  2⤵
  PID:2108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=7248,i,11489258903587376894,15200664851452670125,2097152 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7260 /prefetch:1
  2⤵
  PID:5500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=7408,i,9504067465235501386,9024042071153492360,2097152 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7428 /prefetch:1
  2⤵
  PID:1676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=3420,i,909825092452291047,8051539146981458969,2097152 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6016 /prefetch:1
  2⤵
  PID:4832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=7576,i,15235448202998482626,13523869357147568950,2097152 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6816 /prefetch:1
  2⤵
  PID:3192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=7796,i,15029314093081573517,17663247889056762517,524288 --field-trial-handle=2208,i,9012352012548782373,14963393557707335747,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=7908 /prefetch:8
  2⤵
  PID:3480

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5376

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4124

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3840

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\Mod Menu V5.86\" -ad -an -ai#7zMap23399:90:7zEvent24055
1⤵
PID:2668

C:\Users\Admin\Downloads\Mod Menu V5.86\Mod Menu V5.86\Loader.exe
"C:\Users\Admin\Downloads\Mod Menu V5.86\Mod Menu V5.86\Loader.exe"
1⤵
- Executes dropped EXE
- Accesses Microsoft Outlook profiles
- Reads the TCP/IP host and domain name from the registry
- Suspicious behavior: EnumeratesProcesses
PID:1012
- C:\Windows\SYSTEM32\taskkill.exe
  taskkill /F /IM chrome.exe
  2⤵
  - Kills process with taskkill
  PID:4408
- C:\Windows\SYSTEM32\taskkill.exe
  taskkill /F /IM msedge.exe
  2⤵
  - Kills process with taskkill
  PID:4284
- C:\Windows\SYSTEM32\taskkill.exe
  taskkill /F /IM brave.exe
  2⤵
  - Kills process with taskkill
  PID:5004
- C:\Windows\SYSTEM32\taskkill.exe
  taskkill /F /IM opera.exe
  2⤵
  - Kills process with taskkill
  PID:4616
- C:\Windows\SYSTEM32\taskkill.exe
  taskkill /F /IM vivaldi.exe
  2⤵
  - Kills process with taskkill
  PID:5640
- C:\Windows\SYSTEM32\taskkill.exe
  taskkill /F /IM browser.exe
  2⤵
  - Kills process with taskkill
  PID:5636
- C:\Windows\SYSTEM32\taskkill.exe
  taskkill /F /IM yandex.exe
  2⤵
  - Kills process with taskkill
  PID:5208
- C:\Windows\SYSTEM32\taskkill.exe
  taskkill /F /IM firefox.exe
  2⤵
  - Kills process with taskkill
  PID:5956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-startup-window --headless
  2⤵
  PID:5624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --headless
  2⤵
  PID:5016

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1308

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5656

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2136

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1120

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4312

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5796

C:\Users\Admin\Downloads\Mod Menu V5.86\Mod Menu V5.86\Loader.exe
"C:\Users\Admin\Downloads\Mod Menu V5.86\Mod Menu V5.86\Loader.exe"
1⤵
- Executes dropped EXE
- Accesses Microsoft Outlook profiles
- Reads the TCP/IP host and domain name from the registry
- Suspicious behavior: EnumeratesProcesses
- outlook_office_path
PID:1464
- C:\Windows\SYSTEM32\taskkill.exe
  taskkill /F /IM chrome.exe
  2⤵
  - Kills process with taskkill
  PID:4284
- C:\Windows\SYSTEM32\taskkill.exe
  taskkill /F /IM msedge.exe
  2⤵
  - Kills process with taskkill
  PID:4616
- C:\Windows\SYSTEM32\taskkill.exe
  taskkill /F /IM brave.exe
  2⤵
  - Kills process with taskkill
  PID:5636
- C:\Windows\SYSTEM32\taskkill.exe
  taskkill /F /IM opera.exe
  2⤵
  - Kills process with taskkill
  PID:5956
- C:\Windows\SYSTEM32\taskkill.exe
  taskkill /F /IM vivaldi.exe
  2⤵
  - Kills process with taskkill
  PID:2736
- C:\Windows\SYSTEM32\taskkill.exe
  taskkill /F /IM browser.exe
  2⤵
  - Kills process with taskkill
  PID:4344
- C:\Windows\SYSTEM32\taskkill.exe
  taskkill /F /IM yandex.exe
  2⤵
  - Kills process with taskkill
  PID:5492
- C:\Windows\SYSTEM32\taskkill.exe
  taskkill /F /IM firefox.exe
  2⤵
  - Kills process with taskkill
  PID:1452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-startup-window --headless
  2⤵
  PID:5340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --headless
  2⤵
  PID:552

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4392

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2552

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4604

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5428

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4208

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5216

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\Mod Menu V5.86\Mod Menu V5.86\" -an -ai#7zMap19992:144:7zEvent5422
1⤵
PID:2248

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Credentials in Registry

T1552.002

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Email Collection

T1114

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

18b0862f-1c33-4619-9165-73ccf8a21c13.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\18b0862f-1c33-4619-9165-73ccf8a21c13.tmp
Size 265KB
SHA256 6eff2c707c6779befd99f1ac75c3fe11ce1c16b5d8e32abbd92a55078148d343
MD5 143433292e4106789e95774d1ca638a0
SHA1 baffa20ce87a63e4352e18f9cd679a4cc5262638
SHA512 12331091634abdd94944435c65bc8776b28d7dcf633293de980c49fe1286a63662a0e63d6be3eebb0912fcbcbc76d68a77aaadd735a2133a0b9334596644f08c
SSDEEP 6144:UpY7uYA0n6qmC9js1aQwicN2I+hFD+7t56OD9ZfSApprm:UFYvn992whcIyFSXD9ZfS4U
TLSH
T1CD4423322A28FEA7CD746A806187A118DCB67ED991DD6C5CC8886F8F507BC5C065B837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

503f329a-91c3-4143-a038-6dd35194c949.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\503f329a-91c3-4143-a038-6dd35194c949.tmp
Size 265KB
SHA256 d7ebdf8e9cffa22d3375e5befd58f70da10b19df66afb3c208bea34e0792c9e1
MD5 d07e84bbf2dc2ba840688b38a7b6fff0
SHA1 db03032bfbda41e38f4cd052cbf22d85f7317092
SHA512 23a7b64896105e4e243c1e0203dd03c2c2338bf924f64eb82a223618cf0bfd8e76623b846ae6c2da25e3ecf2fbff13bf68a6ba5e0607586dc9eef99de2bf732a
SSDEEP 6144:2pY7uYA0n6qmC9js1aQwicN2I+hFD+7t56OD9ZfSApprm:2FYvn992whcIyFSXD9ZfS4U
TLSH
T1CD4423322A28FEA7CD746A806187A118DCF67ED991DD6C5CC8886F8F507BC5C065B837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 4d0c5fbc12a875642429b0dd2daa46ea463d1c2b1482abf3f14cd122bba54191
MD5 d588345da3672470b53c54f52ba4c7ae
SHA1 a4a09d4dfe1f7232a6aee942ed8ba9fafacc4c81
SHA512 8fdce53fcf159847b327d3aea853aff1923b0786fdc362c79ba5e9c4a508f118e8dd193e48658133923b5b97a69d4cf2f94ecc2a52de56b372a393039e32aff8
MD5 SHA1 SHA512

Submit Download

14291eca-e79c-4f6f-b46e-6cd2b94d12d1.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\14291eca-e79c-4f6f-b46e-6cd2b94d12d1.tmp
Size 14KB
SHA256 2dc1507417ff68b23bf35193bebccfc84dbb5c564d9d00d58ef2a82987514ba9
MD5 4d2e7c384edaa1eab4150e92b2098211
SHA1 1d38f98ea4ce4cc582afa9f22a071c2290c7c752
SHA512 e9c924e0bb9a3d38741555f66cbe64075cb210ec6f20ad9c6351925d8f6290aa4a45e71ab5bb3db569746907a38e00efa8328edc3069f38982b2d8057691a9da
SSDEEP 192:5RHqw8I48Jv7EkZpvPRpwLmcu+odcyQSGT9/Hsb+WNjX7OktHkU7pEoZ2he8oVyr:5RHqCJokZBX6hwN6+Es2Oe
TLSH
T1DF62956AAD20297B5CDBC22AF912775BE3F5102565901EC8EBFC8D3C15E76CC221B847
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4ad959a7-9909-4de2-a4e7-6989946f4f87.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\4ad959a7-9909-4de2-a4e7-6989946f4f87.tmp
Size 13KB
SHA256 61e13e73702119412844d763c933e2a4318b49b823e9aaca4a7e9b31cd421eb3
MD5 1776bc393e18c52760b9b276173b5a7d
SHA1 836916813f4fa6578e0f847ed1af66318d5c44bd
SHA512 98107e8524aab0c3cec4371817903fde32666c8f501e10377906a63476671e5270548c2f3157c50a949b28ff4f2dc968b0a3016ebf4d6dc13b77688c3323c5e1
SSDEEP 192:5RN6w8I4XJv7EkZpAPRp2LmJ+EGT9/Hsb+WNnOki7pEDZ2he8EVyIsnAUgraJ:5RN6JJokZUX+hwtMEN2ie
TLSH
T16A52832AAD10797B5CDBC22AFA127B56E3F5102565802EC4EAFC8D7C15E76CC221B807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8ad5e1a2-8738-40a8-8fbf-e31d48ded9b6.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\8ad5e1a2-8738-40a8-8fbf-e31d48ded9b6.tmp
Size 14KB
SHA256 614c39539b8b756d59c025dc4cda49e3c70e1c990af3265b128cf5c25372b606
MD5 0f55bfcbed439a9334789b7ee80c4df3
SHA1 d85482cf1f2012348b39659fb6e42233093eccdd
SHA512 fee78c1069f41708d8c696379f4e38cf6dfcf96189fb141ab1cf2895a8faf1874e26b2ac6615d32430242198f2c4ada5df7038af4180c26d07e665ab3353a619
SSDEEP 192:5RN6w8I48Jv7EkZpvPRpwLmJ+N1SGT9/Hsb+WNf7OktHkU7pEoZ2he8oVyIsnAUp:5RN6CJokZBX0hwx6+Es2Oe
TLSH
T16952952AAD10397B5CDBD22AFA127B5AE3F1102565901EC4EBFC8D3C15E76CC221B807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9eeb8f43-0b6a-46ff-ba79-5d73a34f1e7f.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\9eeb8f43-0b6a-46ff-ba79-5d73a34f1e7f.tmp
Size 13KB
SHA256 cbff59adc7b520f0de2985ad921ee12da5b00aa0aaadd64b2862a8b11ece7f19
MD5 8620b09f169758aa6d92f2e7b8a4c29c
SHA1 c265bb3d46a3af238c08a66240583a655be69a0e
SHA512 017bb2738ebc633e2b1824b1fe90215df48c3e3ec2d222610a597c250ca9b406bd8560dd6e15c6ddcea319cc301407ec464c4569fc29dfb4f74923aa99fdceb8
SSDEEP 384:s2jGN7KxkXqKf/pUZNCgVLH2Hfgsl1/XODGN+ErU3pxHG4xHk4V4:s2GN7KxkXqKf/pUZNCgVLH2HfgszvO61
TLSH
T1C4520A27A88C9A3F0FD8C54DD8177F4FADF101566268492452FB9C1903A5BDB114A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Size 20KB
SHA256 d129a9f2b5fddd57d5f34458083d56b0a9bb2110c57caf3fb4a812c0e8632948
MD5 8bff57b95b0014ebd86e6fa5cad16c92
SHA1 44d18bfe7ab03e24c9ff5ec6e19d024f4abf582e
SHA512 22068f54ffcfb50315981a0128eec6eb1d92cf7bf1bfe3970c193c984bee276fd47106f5615bc614ce1a6394e2bccd4de2a05f24fb25bfb0bbcde0a8cda72c4a
SSDEEP 384:s8ssE9H+uj8NnE4sNRtoauYSeEN9Va2Q38xx5d93w+aCrC1K4G:tssGH+C8NE4sN3oJeSHKkf9a1s
TLSH
T10AA2E100514F6B1FAA3BF12AAD3980D8CE46DED5D894F26C5194E0607215D3FBC2E67E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c
Size 57KB
SHA256 82157afad92312a287536435de08c1147db530299a1d7051e3bb199478fd1b26
MD5 c2ff328dbbb55f676536bd886c1a4a57
SHA1 86bd53885b9712e7752be41cf3e1f1a116aae634
SHA512 a23e49dac379b52fd52b4cf365c0fc7d6b0e497b815f8d9551adc50601fa6fd1206524130a4ed690eedb05733627febea2657c1c9b44fda53c9ae4bf8cb9f178
SSDEEP 1536:5oDPWhApnwdIqCiw+C9Ts0hvCIdmNkcraoliaP5scEGho88v:6GApwfCLFrh6IdEkiiaP73SBv
TLSH
T1E943028001B6B4D303CF94AB1E7EB4DA185B4C795CC36702122E99BD60F6DDBA3945FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d
Size 687KB
SHA256 53f1fd6255c3ff7b7775e2df8fdeb95955deff6adec3e79b18f765821b2d5fd9
MD5 e7b21c5d5be7dd89c04cecd3fc920d06
SHA1 0c6b72c84e34f36e9c58f6082c810db7737ec63c
SHA512 656c0514d850671540bc4d553ab7740809122009152556f45ca460cf51a9d1cdf886fcc977f8c82f248fac5222b718d0f334286f93162a91611424c9a1fdbb63
SSDEEP 12288:pdu3WVBHzZPQcZlx4ssZaE7jcm+jFkPvv6dTj/YPdYBs+zdSg6Gq/hLvib+3j:pQ3OHl7x4DZTcmgFkXv69SdYB9hNg13j
TLSH
T19CE433B55E85A8DFA2F8CFEA0FED0C4308C6A3FDDE168626BDE0DE41470A0C2E554465
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e
Size 22KB
SHA256 8de603e753cdb1d2dfdd9f81dab608481c9f2ddea7bf144a2680bbf48825392b
MD5 3c607480acba570611115c79921584d2
SHA1 d1fb439cce5fd86b5f836940333021ee73b78f62
SHA512 5c8b97f425b8bcbd1879f569403a05211a07f3f49fa1f7bc29204901df29c94b7eb24532176a0737561b6f53eaa6797fcd0ba81ad22006da7e4d8a5009fff35d
SSDEEP 384:Md3UKQINKjrD8UGeJqarQHLAGr847FT8kxVAKbJHcpyC3TRUstzBi9:83UN4Kjrnvg7FlPPbKpYse
TLSH
T126B2E18C7627D76D808D3BA66DB1D2FB07194CD70450EBB808F50A658A469DF3705AB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f
Size 34KB
SHA256 065d8a6615275258392793bff6e3a406664dd6f1472b7f09ca818894b82e5c5c
MD5 22270f7c549c860465b29aa9f6ebd054
SHA1 f6d0933acc52e02bd02ba982d72c720ad5ca39f8
SHA512 ae2b10787e21b1d80eeea755efd5877d551e3c943f5daeaa38aa904442d05006de7ff39ec10763de2351c571a698befd80fb6dfa4a04c91d4394af7f9097e5cc
SSDEEP 768:DcOO/p1jVXLzQ06MVUwp4cov5f47EBJ3MfQ0PdnhIy+52:xIJzh6Kp25IEBJ3MY0PdhIhM
TLSH
T196F2F1F6A87626BC5A0C207E004A23C96BFD72F6EF333B05C2290F5568665D444E47F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000010

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010
Size 291KB
SHA256 6534788e06b9fa2b2cccc40021fc185a5a3944b0600542cb8f69109fff84d334
MD5 68a13710ac3fdd4a69c8b627f957e702
SHA1 f478e9766354cad9fdf4999490ed0671eb43a830
SHA512 20dd876a5dd126119411aafd42a4175aa2f367130f4f0d620948564957f6b44e410f22262f6a1613e1a39f60c67992c3b37a894aa103428ea81bbca175470100
SSDEEP 6144:75zqPfo3alQ5y3A43Ps1+D26SYCfYQSwp5dEPwR7J3c:7kPfosoUA4eE26yYrwp5yPw/M
TLSH
T186542304E045351EAF0BD364E7178315E3AD5CA9E99B7758BB580B937089BACFAD0238
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000011

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000011
Size 2.1MB
SHA256 1366c29c4dd372eb45cb8123f7ef717072a0573af15a5d41244dd29ed1fc1af4
MD5 32e6a8e6920838cdd89e3da75ef6a42b
SHA1 07318e8ec7d104cc3128fca32331938c2be600de
SHA512 1fdf6e696be97eb27fdc9bb232c9a6f0290f7cf4b5b34769164c88841562c11600aafc3326670491642fd726917dcca595757efe9d3eb61891761760dc0d46d8
SSDEEP 49152:x+i2CGXEMcmEP2yp0C3BlWnWVz6yWImmFSzWobN2eDV:xHGnc3eyp0KBlWnACImmUzWsV
TLSH
T17AA5330AC1C9FC6B764C34724BA206D351D87AF75EC831EA2B325085E1065A76EB4FDB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 720B
SHA256 8aef708ca5c039e7504d361f92c2c5b3dd19a354031a9262e9f13857fb959894
MD5 2ada6febfce7cd90d8e9fbca28fd8b3b
SHA1 8289c20c56d012922dd219175a45c740e9c69fbc
SHA512 148ebd725334fe405c925ede2158720785b51448e773983fde0ff1903df5a8d8ee8477f120a4da52ec4dc6bff99e73938a8418ae2164dfe7264c5823ea2d35b7
TLSH
T17D0146BCA3C554A9CF00863760D015E3E2769F8347125F0B49A34AC07CFA1C34A09119
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 3c8ed83e8173076ee6cdc46b75c9b78e908fd883582fc05f9bf03c056687cf70
MD5 2b5d2a24bfd37d8bca97d79fbb2de7ee
SHA1 ed531f0acc3c991f0b64f8bbdaa52ea6696f54d2
SHA512 b3d9ef2654cd4a4e6bfb33f081a2af9a8c27ec0621cf4d29f9f43ac7338e59cfdd33d14aec18519cf7b7004aa95bc96bf5592f283d7bd01c0c1e0c931677cbc1
TLSH
T1F9518A78F3F0245DCF184E3AA0E62C59B176B78A53520F1B108FC2A07DFB6D55624B15
MD5 SHA1 SHA512 TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History
Size 192KB
SHA256 29aec8e192e6fcf773794d3b5f66d79d1e2933a3cdb9a932c57b6077840804f4
MD5 42410fe4519c73e00822b32811777601
SHA1 cd39438eb735563b6024d2bf2a68098604807354
SHA512 0bb77dc4fa123949a3b7d746e73e00f2b330532ef1b00208354f7f06b330108e88bacf96ab7f6596fe93fb785e3cf7bc7b9aff0c64fd55f411baebf76ed944df
SSDEEP 384:+YUD7SQfKx5XNW8/tIkUI3ijVMWNkqpJYUDISd4SImAxS2UDfUD:+p7HfKb64iNkqXpIC4gAxCq
TLSH
T19D144B4FAF603322CC7D90B6649B67F75C7EE52F07929D86A46100D0CED9A6650CF88E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
Size 262KB
SHA256 606419a13177f9ca35a850770961de15c3a0010b8306854adec468895afde55f
MD5 65e80d0eb78bc0544526988839b977e0
SHA1 a1c506f7d3180871ea44db0acb8e108ab0fbecf5
SHA512 0c05778324428da91f7adff0d5f24e744442addab0ac4822a3a8ed7c7299b7fd2346ae1c612c236393036bcd57db199df0f5e131ff79bd506499844e67d7c446
SSDEEP 3072:7PlPPlDTOQjfiRFc/Al5a5CypBG8RQ5HRpgwf9A455Hl3DrDHZktVirjocnp0xlq:xfqpUcFn
TLSH
T19744391962E271DAE12DC37705228D47E372EAC4515C70A6B9E27B2D73FBB183710B29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000014.ldb

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000014.ldb
Size 22KB
SHA256 6982bcf7d41b854c6be5a339322e7259c6377a00c1cee537c5167b85b753ef94
MD5 821ef4bf882cde6379ce84c9ec0d0392
SHA1 c243fe84c6680f151dc589b23879de21152e2e3f
SHA512 ff6689b5c0e912bb62f35a4a6cb480bf8c26a1cccace88bc8d215fd7d913d7eb9a307b60145395f20903df64987e0e01ea01a9164ece4fac17f2c1c4a6afb1f1
SSDEEP 384:gyEzkbb9hanwFPi2b3gP58p6xkkMros403eGWej+IJeqeSn3yJ:gyEeFPdgPuPlros40uB1IJeh1J
TLSH
T169A2BF793EC984C3D53DA3BBE1FD014D7E21B9053A1AF4DCA291305C19636BB582AA1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000015.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000015.log
Size 150KB
SHA256 bdaead8ad15a065c2d1d65149803e442e03928cd1ab6d17cf3e2c90f0058e22b
MD5 b626eaa0b4dd0ca926d6a17f33d83346
SHA1 4e23dfd545a14487bf653de98c2b8ca72f1fb873
SHA512 1476fdd4efe77922bc88243db6ffd293024c5a2d3e5cf55f41fc3fa475b623eba9d9fbe7ff11e18e89593b4fbed0b085761fdbf66d10219804bdce6499acd923
SSDEEP 3072:oQ0BcQY8Aa6D65etiUjkrmAuD24sGYa9isjk3mDUy:a6D6KZnxh
TLSH
T108E3A524729292C9B03F836B06165C2BD731C9C8865E74D5BDB23E4C26EB7883E4977D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000017.ldb

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000017.ldb
Size 17KB
SHA256 63520392ab97b425d5d80b3f8a51d65faa6ddc9733226b39bccf3001225dc77f
MD5 1175a6b603a4346e7ed3873427b8f186
SHA1 85c2f806f6673fde05075d2f974a1ba82c2eae52
SHA512 52908924f14166a8a53ee9b5499e9ab012efa9f9648f3bc3865cba3461f1cbd71dc4ff3645e024c0ef1fdd43c33ba4383b35a43978762c41302b90ecd702b135
SSDEEP 384:K3iRC0b5ZnHvVq6xkkMros403eGWej+IJeqeSn9yiX:K3iRvZ8Plros40uB1IJehDiX
TLSH
T1F082BF357ED9C5C7D675E337F1FE008C2A22B84A790AE49CA6D2305C156357F2826B1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 5KB
SHA256 1f1a134be6b44647aeda7f2db39408e2b1b2689d39f4e83b1a54e7331f9f247c
MD5 107569bf731d859382dc8a6141a2db72
SHA1 4845a3cb0f791f42c8bada71a08daee02a83b150
SHA512 c00c2cbe07d7da12e159123536b137883d0c2eab6931381bbe08bf6238361a27c2eee9016cadc01136b88eadadb1dd8f3a866855b3e26aeaec52ff28a5f53215
SSDEEP 96:l/JU/JCDpN//dvyJk7gdkjBTiIPG3fVUzkYSXUZaRemx9Pky0gWFnjjVjjjfjMks:Zd7qkS0G3mzfaVBmnjjVjjsY7M
TLSH
T181C14BE73A29C4EC104AC122827DF169CED8952097482F5966CCF78F0BE942BD1979B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 1007B
SHA256 f139153603dfcce9808ae7baa5f4614e7228d5cc4d3a2d50801298a0f38896ee
MD5 9e83a14b7b484fdbb114eb7500b0e1f2
SHA1 8b61d8d6b95f72fdf8e3e93528355a0c7d3f0fc2
SHA512 81d5644d95607f14790a5f39cfd309471ce64dc4bd601b495a3f82380894ea071576d70abe7b0f5848aa56ee76966e1510c75467d251ffe32091a022f9260c96
TLSH
T11311A8EB66A9C4EE01C4C172953C326ECED94024878C6F59ABC4E3CF1EE880AE046479
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 1003B
SHA256 2f573f356045d77eb42c25c0b4153ddc2c6ca53c7a439720442b5b714ab524bc
MD5 c75c26333948baf090a06be2f7fc7609
SHA1 e5a300630da2ad08c1ada55e2b54625cca1fcaee
SHA512 81f2101af4bbd9f313ea91720f03edb992af8c430fc5894faab73e9205f282dbcc38f092f5693182487cc5953742f36d2993e7cbfe7254a429d5b58a3a16767a
TLSH
T177117A21EBE47891F4A654F5DC37A95E371238C9282DDD0F4593B0AFA8635858C1023D
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
Size 9KB
SHA256 96d8ad13c7e2546131b7640c7390ad8dbfde9ff3202d15c55b9126f26446c0e9
MD5 71398a49e5937d346e9d67e8f91326aa
SHA1 789bbc32d85edada727a74ac0b0037cc481087ec
SHA512 c0713a5715a16a77a9fb81bf5b1c2ee35f68c126b94daa9163b8c588a3853153e89a09ef3f8f9aaad3cbaf00d7987b9fffe637179ef982ddcd129d7433200690
SSDEEP 192:q15pVw3lTimZQ4sBSOB+N4BBJWOCJxmAa:qh63lOm2PSYJPOW
TLSH
T1BE1273F79DC8C5FADB2B88E2A133F67DE227946ADDC4EAD5E985E84B846413500C0C54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

18d06002-4b32-4af2-837d-72ab9f79594a.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\18d06002-4b32-4af2-837d-72ab9f79594a.tmp
Size 12KB
SHA256 1c799d929a033d8588360bd1e70e00b5e315ccf35efa417614aa75de6d161e8a
MD5 9e69123ec79763e8d394badbfae1a728
SHA1 5149f82e345ff224c70399ae7c3c0e31d21218f7
SHA512 b153cf98d833459d46b65f0e1899bcd9cc7ba980330067914620b1cee35dff538862b7c878ac0c596a318c75df8e3a9f1eb3c57e7ee9ffb1b53da19964b8a770
SSDEEP 384:DHzimgDY1zAules9k3j0A4M32yk/eWDxjAPNb2r+WW+WbWkWv287Go7rgqs0yGhF:R/ki5r
TLSH
T194429DF3C3D4863DE81116F4DB543D1EDE6A0E2843283C26D9D9AF4B63E5471D290A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Size 60KB
SHA256 ed4fd7bd20c322b15c076717c816dfa5f989febb49adf80ebe8bef76da65a2bc
MD5 b22e842545b49dff6f14a52256ac816c
SHA1 515737a2d3ae09af6f616c9876b91dd35cf34122
SHA512 31a9a4ed37c4b45f28bb830c59c2d270c348a41345564e1d90e622b6a6011df6171944a05298a1d74fc2240b1463d453040c7f9ca80918dac2b7fa2dcd977eda
SSDEEP 384:BPOR3EodNkEuM45eeEbMI0vk0bplA7GMvp5+cMWxPm9GWMQr+VUTgU2x4vtSmzD+:c8oniA7GmtZWMLVUUmvMmzG2fJHOSip
TLSH
T1FD533C1B6D9220CEC76F2879CDF3253B150EEAE91501F5E7359CC563C1287B2319EA26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\2ea5236a-974e-4a16-8600-c037a5143e75\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\4ab0bc48-158f-4968-961a-3208781b7b48\index-dir\temp-index
Size 576B
SHA256 08f84408c8d6d7c3806ac0624589bdb82d55b30a9c3e1917ddf6a66cffd190aa
MD5 bb29b02921c2220f69f6992ee2f22aa7
SHA1 3a2e3307403840c865695e512e7cfed0a3dde045
SHA512 0d110ddb22468eded1725b037aeace28d9abc3ef26bf293c2ab24f968e2fe0efe47be18325382913a81708f41dd1df8085964c05eadbd474f1d6cf1c2f942c00
TLSH
T1A0F0F12033448836CEE97BBE487201D46B78D28A868E16A3B5D088199DC73491545964
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\4ab0bc48-158f-4968-961a-3208781b7b48\index-dir\the-real-index
Size 48B
SHA256 c94e612b6ca7b1b7bb3a1f3d58ac8cf049c7ce7c5e7a33a868bce8bee7e48f70
MD5 b63fc16ca83ff4aa3f18ff0e8fd7201d
SHA1 24f81404725fa3a80a72cc3f4ed4be7e69042275
SHA512 1457c734a2d187ea6aba15306ccc17901612b6797117bb8f2e37231ad931d65819a6977a9482baec19336cf8405a1c15786267c2a5594a157b2acadb8838050a
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\8a122595-a9f2-4ec7-b909-3adaac473cbd\index-dir\temp-index
Size 2KB
SHA256 b0f7958f472db317fcf2d832146a6a6397d2f12f2bfaf166891b2e23d027b5a6
MD5 5d4024f1012316d70e2b93260991b894
SHA1 0cb3aca7a996ada3b4389eda40511ba428f44cf3
SHA512 b6f6bb74206a798ec32c9223ae0ddaa098db8929fb3bb41727a03b11d553fae9f22ad70f54137918822688f7e680640b88be5c7c5494123583ac23ed2b31b423
TLSH
T1CB51704CCC84ABADEC7550BD2D9004B263753D28FC68C79281A8B5B538932A81B479FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\8a122595-a9f2-4ec7-b909-3adaac473cbd\index-dir\the-real-index
Size 48B
SHA256 8fc84daaa30db96f1d54bbd90bef5e656ba63997c672aae9620c16ffa2f42e06
MD5 7358dd482e444302a50300ae6fb26aef
SHA1 88a6b42ed46bfe7cdb8abdb8f0f8b05ad77ca3f0
SHA512 9634921af615ca9bed2260346668681ceb2983889705418a462d232be70c164f37f20aadff882b8298c9b02ffcd9de17484cbbeb51d08712814c8610ae390537
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e3a3f442-8d15-4d01-b77f-4fcc8467f06e\index-dir\temp-index
Size 2KB
SHA256 726a37387094a4a118ab365499652da8f0a2daa34901d69fdc7714102257532e
MD5 96608c3e9af39589834f455386885663
SHA1 4c276a1dbd84c35b0d4de29d4ff7c2dbd2a105a8
SHA512 fb4eae7315be4ff96f1cc9e543c37d4eed5f53312c79028d8a07da9e1b54a1010cff081b6952c3e93bdae2fff308a0fa2b97687e5656ce5b8417b94743b62547
TLSH
T1D441524CCC90ABADEC7551BE2E9415F647B52D38FC58C2A245A4B2B13403AA81B4B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e3a3f442-8d15-4d01-b77f-4fcc8467f06e\index-dir\the-real-index
Size 48B
SHA256 523f472e1ca19711d68e1a644e41d337de8291f8df30c2e1dcde812e3f12af28
MD5 1e3014e99eb278050da39077426cf8bc
SHA1 590a7b18ef9955b45317dc7aa07b4141a728b5f3
SHA512 a6c2ed0488ace3c48f47c22214bb1d4b1b64bb4c250e58792e1faa8bcc50f80370a9b815c8a397bcaa7f13368e121b72263798eddbd4ef97bdcfaa1e000a1315
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 137B
SHA256 2326450a0ccdfd59738474dffff5daa7f780258c8b3be1503f8035ef353a9249
MD5 22aa4fc24919d953c0b1ce8204ac2076
SHA1 89a975a6acf9cc5cd6f183c808130b423bb403a4
SHA512 6dac5ed2fd4ecc92798c384259aae68649556e098178e88beca02b9b48c8e1419fca828e0034df929dc50fccda2f4e0c2169c8c71f2b62ace2d725ec78778f5c
TLSH
T1DBC09BD21420565747B25BC51034574DD51F4C5989CCCCF4B00571153174D338C41F75
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp
Size 214B
SHA256 75e282dfb817b724788f3df15b527a64937127388926ff1c66519b36248dc8d9
MD5 197378125a71e498d7d23d348a321687
SHA1 3a883fcfc074afcaa371b398ef61bf61c6de1656
SHA512 d85424251cc679c3570563a4cd6abf3ab6dd76246f618f769b634fd039442cf487813f61a8d24a33a8fe61f1db4fca6fcb1c72afb213ee25627db655ad70bc3a
TLSH
T1D9D022E25A32AAAB07B09AC41034972DC80A8C09C8CEDCF89940B11334B8B13C841FB9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp
Size 140B
SHA256 e49af9bf0b70a7ce75e512ff88317e8426996a9749fafd211cffa9d340fae2b1
MD5 d0c8e4c99d122663b3c9ca3fc5309043
SHA1 ca18b07371e0f5b8635058fdca41aa5678458cd5
SHA512 94454d3333aebd27bc1d9a6b5fd7547bc12a93de18aa3383441107b84ff0b34184f5f112d0882f57032bc4e25a96585d6cfaec17ab39ce9bb1650b8b14b36648
TLSH
T161C02BE74E7454561711F5C0B434124CF45F5E78F8C4C8E08402B0817078303C102811
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp
Size 130B
SHA256 52c7767f4aa78c383e9f35ce55d245f59b1c24ba2668fb4c0b189f804fa4e70d
MD5 098b66c8d1d19036ec24bb2edc35036c
SHA1 8bb607fe858f6ebe9c607bf247062ca078d6b84c
SHA512 af864467224df4778fb0dde3623c0e63dbf3e0acf0afe35dc5f42f2e96b7024ba803935bf370ca49db34e715a97206e8baf020227d05997c38d69781712f2484
TLSH
T1B6C09BD21410565F46B19FC41034571DD50F414985D8CCF4A04461153174E234C41B75
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp
Size 214B
SHA256 014792c691ea3589e0f84a4ca1e9fe5f006b7ac5b9cd55959e1d8df812c9ba38
MD5 db6839778a8dfb77436f39c420447841
SHA1 546ee4f1c4404ab0d28c1dae72f8cc7e98312de9
SHA512 e22e1a42363be8acb8c1997bddfa463b1008453ded2ad66885b922d19fbe45b0734f4f63636c0210ad04c95276cd8fa32fb66d68e384c0c5de0b908239df4842
TLSH
T137D022A6CA3049421B33EE80743862ACA8EF5EB9E8C8DDE49603359174B8203C50293A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp
Size 241B
SHA256 422e10927bb8c4c62b1ae69c68a9ab62219b80aa598c851504433eadc1481b49
MD5 83ee06433b53ece33d235f7d07a5c65d
SHA1 43c062e67d5a818e32cf9b6797117d40d9728078
SHA512 87f84d0fb2181166e7f318fafb23f8d43ed1c370a396f0fe16141aed2409c4e5e1a828de57cf6ca6b3b9956d581727fc178833d45c10e10d0270d706c2f98cb6
TLSH
T19AD0A7D7E93141451A36CED9303CB2AEC6AF9E9C8CC5CCE8215971153134913C553F38
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp
Size 390B
SHA256 85ff4e9132aaa31a290bb417e4638347b8cc5e6aa0de496d75182e6c82e8d113
MD5 dea78c025045862e68d2f4ad767a9509
SHA1 9926f843fd90749c10c32f84db8112fc79e77b1a
SHA512 adc8b4eaec4f49e5034020d7ecad67db23ec75ac69f4838372050c626dedda8a901ffe8b32373488c17312071d6964ad09429428c7d66f0efb56b113002c3baf
TLSH
T106E068AAE5720045AE378F95383470AFE7BF59E84844CCA4268A2119347161BC822E2D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp
Size 130B
SHA256 2a310284a1fdba44ebda58c28af6e7f34bb9d5af0c7561446643b61ae39e73c9
MD5 aea9deb036e1bd9e9277b2f9e0e027a2
SHA1 f12c19c4330bc54de3db0a87273c715cad6ccf25
SHA512 97a3f97271751ede77c4c09b0bd486648a9f306dc2674d9a1f2db5289299ac7fd33a144170c1898dd56a773d945fdcb93587138cb2b557069060ae685988a22e
TLSH
T14BC09BE6D52086460D76DEC43034B75DD9DF469C84C4CDF47545544124345138403975
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp
Size 383B
SHA256 2a74351ff38e068ca6871b071b68cdfbbf19a4bc15b57508d4125ae7378645c0
MD5 742fbcbe4b12febee4596adf05a918e2
SHA1 dc8922b1f64cffe35d6a87f2ce3bc9e086fa073e
SHA512 41ed8f5a6a033e28f0e034b78360d0ba62c84d0fff659bdb2d1fa389e8deaf85ae1388f5a1804ff0e6c2fe917b5803c72e7327abf9d5180928b89ab9f2a267b8
TLSH
T14DE068ABE53100557D77CF942835B0BEE7BF51E88848CCA4568A0109343161BC453E2D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp
Size 56B
SHA256 c58cb79fa4a9ade48ed821dd9f98957b0adfda7c2d267e3d07951c2d371aa968
MD5 94275bde03760c160b707ba8806ef545
SHA1 aad8d87b0796de7baca00ab000b2b12a26427859
SHA512 2aabd49bc9f0ed3a5c690773f48a92dbbbd60264090a0db2fe0f166f8c20c767a74d1e1d7cc6a46c34cfbd1587ddb565e791d494cd0d2ca375ab8cc11cd8f930
TLSH
T1069002F74800819A0E20A9C82038A35DE40F818CD8C0CCF0900890423028A234002851
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 144B
SHA256 df0bf09b5a70b14e8b27f5bea76f2f59470bff116b49c62b5ee77021e8b2d97b
MD5 f27f651b219064ac73cdf2c6a11fc3af
SHA1 acc92202c195e4f9acb154882bd818aeefedb09a
SHA512 ccdf21a4906c04b3fd5631234f41bd7ee9ba0b2493f6d31dbc56573dd99d90169582826d8c77cff40ec1958fd47d5336bf7638ea81c545d3984d32c037e14e27
TLSH
T1B5C01289C4565481CCB84374A50A05CD30649E31D960119BE3F465D7E55B0B04335098
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
Size 72B
SHA256 850199973e892298c2b014d7df8310c5b2c740b621282d532194e3fca24f07a4
MD5 f37585ddf48d6359e605a30110307b23
SHA1 67bbb350045df7eba2425c1b1720d92fcc1c8777
SHA512 abe6a13f1bdc1ab6c40dbb649927ea0cbf6ece8ca1cc024f30e50d335efd3396e0bd3140c8c65110a41139e20a5d1b5ea8eb4c9eae2f0e94c410f7acb896d153
TLSH
T104A002506142590DC00C137052A5814162D5BD1403191645B5E10866FCA45907156029
MD5 SHA1 SHA512 TLSH

Submit Download

16.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons Monochrome\16.png
Size 257B
SHA256 d52376c8b210b8003f5aed9f4555a7916b4640d4c42a36cc81d9864991c87a8b
MD5 6cc922565abd761f4039c816d86018c4
SHA1 05393c91529467f8ddec22a121fe482701365d6f
SHA512 8732f24ea85ab3fa845b3cfa2a354a85cab63a507947fb61bd8119c623e31c87d6f0735ce7f06119db597ec4fce4ad44c15046859b574cb11fb1306e489cf995
TLSH
T1ADD095F2E311DD34C52E96900533C473F433171B1DD56055664491DA4D9E90533C8D59
MD5 SHA1 SHA512 TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Shortcuts Menu Icons\Monochrome\0\512.png
Size 4KB
SHA256 d345d2dbe2efd56ff9494cb31cae0e28cde5bdf176a22bca9aee27465b117c88
MD5 97193e4d969021cb6e6ad1b25bb7499a
SHA1 69cb3acd8bc0b31b63791efc9dc47d5657bbf40b
SHA512 1df06713846ea152089ea40434f3fcff250ba2d2c0b5afcbc546b82a65b68f3ad1cf503dbc4e8246765c01f191b4f8389c4c55efb7da507f443d858a8dfd704b
SSDEEP 96:TTcYKfambSQTNpzzBOWUjfRVS/TFm9BfyKhnaBS8ZP9jeLWfbOGp:SbSQTNh9gD+mLfB49ZILWfCW
TLSH
T1B0A1968E8CB5488E66658747D48538A2C5B030A7A7BFC3BE719D174851E32C6FF29B06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Shortcuts Menu Icons\Monochrome\1\512.png
Size 7KB
SHA256 1e0b1b2e4dac49da1e2ce91a72e01f77fdb3bbb26ed3422e5d4037745cc307a4
MD5 cc525d60c0dc9696ddfe9524dc9abe82
SHA1 fc94cbd2a45bf2ff0fbe411f57a7cafa31126bfd
SHA512 09ab42f7dc3d6a08b9635ef229539a5c4c240506378a9de4eccf1f69d52b266222cdf084e9a567c6d21f19e61c4da7ccd98928870d6f10cd74e9158c64a4142e
SSDEEP 192:U3/tgbWgm8Xl2X+xqWwB3kUXPmv9rCywxAQU:2/rgXXExWKdXPa+txrU
TLSH
T159F1AF6F639B59EA3AF8493D4BD7A21FD62E108A2F275B71C5101045628A1C1FC69F0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Shortcuts Menu Icons\Monochrome\2\512.png
Size 9KB
SHA256 ad08077126e7106674e4219f5f9cfac2305e8b3f627247c1d3e72136399e6fd2
MD5 660ae59d489be5b5e1e9036b88b4a033
SHA1 b1ebdb9421bf14b5c43a399b4dbd92288d91a604
SHA512 3bf52f4d1e92ececb7691bedf1f53dea75041615447eac2c1ec9f99d07417a571e08fbd2db58896506350e8af831e8fc943d35e35747a8cb6db9a03d880331f9
SSDEEP 192:uJTyU9sUZdxl59pfNK8EliT9Tjx/t0xM6LwZx4nwBmJH/Rr6O:g9sUxXM8iiJKMfcTJIO
TLSH
T1F022BE9744E4E7A3427CAEBF4684D914DF4E1B7384366E10020B199F0D7AA8268E8B93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

192.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5704_1930132498\Icons Maskable\192.png
Size 2KB
SHA256 e38c817644be45d52a86cbd54bbb93d6a8eb48f235247336f634d99833ba6236
MD5 5da9741a0c59eb94fdb2294873d36c93
SHA1 edbdd46c522579b44f3feab65fceb75f8cabe108
SHA512 cae22d835be04790cd3ec818c33f17d7f79aeeb18f3dffa4e013cbd93c848e098d5c865579538d0b8ef5e85d696ec0474d3d35c65465e00039886fc3b9d76f7f
TLSH
T11D5160528E43A48F95D61189AD0AD395283FA9F772989E400DD0487C4BB1F72F0BE4C1
MD5 SHA1 SHA512 TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5704_1930132498\Icons Maskable\512.png
Size 7KB
SHA256 5cf3c46ba4fb97d3c33a2f0fb6fcf21e80f806b0efaa37d4c0b093fb5d06b515
MD5 8c3ebdba674edb75ac6e781b49b385f0
SHA1 3e675d9c54ca020fe7024011c26672dded81ffee
SHA512 13cd044f3e07d507a4638db1e1c768eeaf27e8eb9dfe6ab89ff1c7f8466b948813a9842ecbb150a3dd4331a796d60eb43b13d2c0c351769641aafb22b38ca066
SSDEEP 192:1RK1l8wmf7eYldMKJjx/hUZkEzvJkwGLA:DFWUDTZPEzGZLA
TLSH
T117F14A4C6AD084E556A8D24F8036C4D646D849DAEEEF9FA1708090ED2E3B71ACE74F47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

32.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5704_1930132498\Icons Monochrome\32.png
Size 414B
SHA256 9ab81c6c525db346f436b28dedbd230871b83e44b3d1cbbb3799060302d6f5be
MD5 0e75ba937761d9ac2cf74fe8cfb7ddae
SHA1 00d57da0fdb6e82f5fea7d8bb2e4da16647bf33e
SHA512 4d52759c3063b3ee921cb5ce44a7f49d27b2aaba83fb03decb6d7f06da4325c59be6d40d63d9adeb9af93e2481ca747e7bfbe1cee5303d6e4729f5645ffb8c53
TLSH
T100E0ABCADB1AB83AE6859A121C108589A89A0318221900AC8381EA6161D89AE6732D8B
MD5 SHA1 SHA512 TLSH

Submit Download

48.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5704_1930132498\Icons Monochrome\48.png
Size 639B
SHA256 bac87bfc14cff248df502005c077fec30abb6b71e4874860b5fbca615d55e06c
MD5 1bdc03ed18a0e29d48da13da101ba676
SHA1 04b1fae9ae2e96cbf6c680e09ae95307c764199a
SHA512 0459c71d7c6b6758f76cce2d8651a6bf052dbe8e4802386fbd0cd75866e5d3dc7bfbe4d55eb4889a3e6a15755cf20591948c84aa3ffc16dbf18e447f1e765c0b
TLSH
T194F0681657963CFB8D90017CE772607ED4B751B62134816623DC5CAD610D459582134D
MD5 SHA1 SHA512 TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5704_1930132498\Icons Monochrome\512.png
Size 6KB
SHA256 61348deb0a5da1f8e5cae8f1fb05653fd95c4eadc0c9628dd392afe36bff53b4
MD5 ae9c961523761367f8b19321afd804d8
SHA1 4cd4285023417ed969358f0a1442885658574618
SHA512 30b8972d89e3694b15a530b1fdec38683ab5d0bf0bae3e37c92995b6397b8d497ac789e4b1d1c5cc33281ec4b7a025428393097380e41ca20c47e35dae1869fd
SSDEEP 96:qGPhZydBAJqpBAhc3BJ50l0EHdV8fPWI8XeaYWzI/sL2c28H7fPk:gqkBdRJ50lPdSb8OaYWc/sLXbE
TLSH
T121D13AE3B22FDA41706A53B2CD43CEE1BE539695C745021A29EC567C84800A97CBAF99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

128.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5704_1930132498\Icons\128.png
Size 4KB
SHA256 41b1a4ae8496e6638ccb3b0272f2005eab76f90e56d29f48866dab38fc7df8c1
MD5 84f2b6869b9c60a182b77688c26f9838
SHA1 f9f2d89e83e3aed40f3e78ec47a905acebdc37d6
SHA512 c801e4fd6d38f08243ffb0b69e961288cc6ac1e84fdd0163acb16ea59530299784b7e082633942365e561fab41a4813ad335c44470c1c809f2ca066c2556ffb8
SSDEEP 96:o+33PzSQ75aBw18MppNU8AtQR+eQoSBQK73i5Y/1OIAF8Kr3Clbd7e5h7bYJ:o+33PJaBwlppNUFGciLEyaNOIrUkRav4
TLSH
T1D0916EB6691BAC05F9A7ABD7D17942EF0CEBAA80C704CF152C5D166437081E3A3B63D0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

144.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5704_1930132498\Icons\144.png
Size 2KB
SHA256 5dc5e3a8c0c0b0ea564b1c378500077947988315fa64b25f62ebd55253de5659
MD5 8045398ad785fc11c7a9d5a42e0661d1
SHA1 7c9b07ccf79011949524d9e4b7f1908894d6dbec
SHA512 ee6757fc7cda9f0b8aaf085811ec254818a474adb72014b171d08d8bf0413511aff17d579d8cc7948b64462881759a4bf2fcfd58bfaee57249e3805e57aa2a46
TLSH
T18951F98297E55619DE63713A0222C904E962CA34E1A9D7E3247449EDB68C6CE8773445
MD5 SHA1 SHA512 TLSH

Submit Download

192.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5704_1930132498\Icons\192.png
Size 3KB
SHA256 5e80189d5743f0028efeac0b3df337266d6805a8d1f0f215f5dfb422ea223d4e
MD5 e234001453fc4adc6364522c236465af
SHA1 97d1b03a486084a51ebbd91d7395ea9c2c170daf
SHA512 2a847abcd37b1c94d8524d4bcfa46d38a50efc4d5b979b16aca45ae1c320377e44e1fc23009afa137bb744d4e95c0f998417f85e96aa927fc08de44f7d828fed
TLSH
T11E612A332A8725CDC1B6CBA6473D4C03547E504AA279E54A9EC8ECFC277694053CB7BA
MD5 SHA1 SHA512 TLSH

Submit Download

256.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5704_1930132498\Icons\256.png
Size 10KB
SHA256 5aec5c9ee2a69c0c3eaf9b23258b18e0c7f1e16f35387bec76061239a8fae04b
MD5 4e6b37b3b74156e6390915cb572bc37e
SHA1 47843dda50e6f2a6396630748b6db2ded41c9463
SHA512 2d913faeb2ac0067308bb845d850bbe2d2d4406069d3841987090bd0c1163d1395be8fd127171640783832efe7f96813ca48e67a0d990a110ab465b068a7366c
SSDEEP 192:ZEEEd4EwKtFFYRHWE+rhfQHQYGdjm0+AqQtmw5NvFgoNriGMkua0SEEE6:w4OFFY1WEUrfdjmnNiaoIxU
TLSH
T1ED22AEB073A1578FE1DFB3CD9F07CD14AC2875A884D7AE96AA95E1E19A08509D00EF34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

32.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5704_1930132498\Icons\32.png
Size 1KB
SHA256 bf77e0c65df7ce83532308d1acbf333098e1f4089672b67a9514a56144b1f1d8
MD5 ec856287ecbd2b1742659ffb05190088
SHA1 9c1ddd95b78d8ab154c85c57b5f89e7d7c39c7d5
SHA512 791f2f64ae67bb5798b249f55a966769c2cfccc21388cc17f6a41254649fc7f4c7c61a23fa3ad4920f2fef3e2acffd0ced7f1bb407736a0f1f2cf9c18bef8b4a
TLSH
T1641160C3EAC399B0E9FA232F6BB101B42402E429A7540908D878EC359A24A19A2DC2D1
MD5 SHA1 SHA512 TLSH

Submit Download

48.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5704_1930132498\Icons\48.png
Size 1KB
SHA256 148a4e02b72a9fd908a6b2fba36bc2f5101c747d0b3167bb29608c9d6d3e643b
MD5 26ef2d3ec2906fb06f431e4ad0f0883f
SHA1 c7f3c3e2abdfc40ff64b1185400ad00dc7db53f3
SHA512 8fadd9090320de5820e5a323c6b0ccca899d062c061945589992827ae26c587c21fed2a3100b70b20e665d1b5d70479ed0efeffda867e37b21f875fea2ab5389
TLSH
T1F0312AF7AA3D5DF02E440562B8CBB798E1248ED9C2677026681F331509DF2900725FC0
MD5 SHA1 SHA512 TLSH

Submit Download

64.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5704_1930132498\Icons\64.png
Size 2KB
SHA256 1d14c6cc14f6adca1d761b639adac4519b078766ec4d5872f4a4d3384c69162f
MD5 a5938c289204eb6828b69966640ff454
SHA1 169905d2da57cb1b0203df14553323ab45c10f57
SHA512 4c21be815bc7d8466d034e14e14c3a820c4681e9607a76cbdf889ec1b939e4ceecd1e90bf5dac38138fb7c646f35a8445d2306cab3a2c809ab5eaf5172b6e405
TLSH
T143413A2FA615D572D996E085B89C1AD1DC920B2F71F168052E67F401AD29EC938CE842
MD5 SHA1 SHA512 TLSH

Submit Download

96.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir5704_1930132498\Icons\96.png
Size 3KB
SHA256 aadcc8084bbb970accd15979e1512a992e64f3169a44d911c44100bd63b13e3f
MD5 992c01e537191cb57b74dc0e33b9f30e
SHA1 9aafda8fba4ee601696e0371f32ad78ecaea45e9
SHA512 017a6c48021caf2d270e45292322c976ddc2f78f778d5d0f853deae067820f40b0fa619286c873a988b8395358ebe1a023f23ce6519ec70656c73bf2516d8b5b
TLSH
T13D613CFDC0A5BD2EC13FD5B18EB09544FD10805B76CB434BF89544A67842B690D7E24D
MD5 SHA1 SHA512 TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Data
Size 138KB
SHA256 c771e279e0358ccbc0fb9b4855ac40c3a03e20108295b4319fc7b5cfe1a1bc59
MD5 9f6153d9ca6cd620bce862e8f1916cc2
SHA1 2525c7f45f70f4130b23afdeda14c13e71f7f5a0
SHA512 354de2e16fef0caae9fe08e0782409695a594be470176c438ed4fc4916ff2f7ec2d01a95e6c24c6abd5b412e4fba5709eaef89a86fc33633d1377e3af79ff4b7
SSDEEP 384:jeuvBnhJsueMEGvIW1DcP2OhQ/vJVumkBanK:1nbZeMrv/hGthKveanK
TLSH
T1FAD3874B3A743102EDE58A721CE054BB5E3CB16D8F55A5D438B620588EF2963A23D4BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\blob_storage\e4b9eb56-2ad8-41ff-b859-3ea068660b62\0
Size 5.3MB
SHA256 28f24f79679874e7b55f048d86a89444539c8ec274aa60a294e4758bc866e91b
MD5 8ea4cd79357eafa142a688fd8aa84c51
SHA1 9d1d57bcbe6502515c6ce67cdd5f46d341e9f4cd
SHA512 2b94a7db78da309e5ac903e4aa1450b0ac7c0c632c3410b7aed0d04617a5642ee0d139621eb131a44499b3a7e803b2ed742771f43705cdf303d35c8ce2ced8b9
SSDEEP 49152:6qOuySW5XiWDmP3tWubfYfbPWahu1TtmTp48Kkn6I/nhNsz+0LTeTorU39mBLO84:YWO8oUoXAk
TLSH
T1B246FAE8F19534342397A061F0BF1409767B658AC14D4464F5BACAFA1FFCE08A237B69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fb0cd643-2760-47b5-8ceb-c30ebbcff0f9.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\fb0cd643-2760-47b5-8ceb-c30ebbcff0f9.tmp
Size 12KB
SHA256 f590e27fb24ab49be43f6214f7c58169db4dc0060c17fe32a6463289ca349211
MD5 2bfce6475fba95e3ca1b64592918f4eb
SHA1 18007ed41c427cc328df23e3db9d10580933cf03
SHA512 64e052d150df684ada3d8f5c10b75aecbb5da1f7b5ac3ce58fc873379b4f5c09631cf399e936a4861af4c30d3a80e386040b8fd2d03206c9d32f55ca1605589f
SSDEEP 192:5RN6w8I4Xrv7EkZpAPRp2LmJAEl9/Hsb+WNnOkipv2FZ2he8CVyIsnAUgtaJ:5RN6JTokZUXxhwtU2b2U8
TLSH
T139429429AD20797B5CDBC21AFA627B56D3F5102564842EC4EBFC8C7C19E76CC221B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fe3dfb32-22b9-42bd-bd96-45fb1cc3fd78.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\fe3dfb32-22b9-42bd-bd96-45fb1cc3fd78.tmp
Size 12KB
SHA256 af6dcb9a27dd3f5f7a24937dd2aed6e6b859e181f573174fd7ec3beea68b4d27
MD5 f53953bbb2c6934068306eff44e0e4ef
SHA1 4a886791945ce214b46043a677b576ea6a24e02a
SHA512 2bb631e1b6bc4dfc2d04a2d16e7dfbd66b7717aba93b90d01929e04a4dc0410c27942229d2aff3213cca03cc2f5fba9d36027185fac49e31e4af3b3aa2481b75
SSDEEP 192:5RN6w8I4Xrv7EkZpAPRp2LmJ+EGT9/Hsb+WNnOkik6EIZ2he8EVyIsnAUgraJ:5RN6JTokZUX+hwt0EM2ie
TLSH
T13C52842AAD10797B5CDBC22AFA127B57E3F5102564842EC4EAFC8D3C15E76CC221B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffe4847d-dbf7-4e4f-b41b-caa612a7da67.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\ffe4847d-dbf7-4e4f-b41b-caa612a7da67.tmp
Size 649B
SHA256 bc6243a3bb9742cf7dd047ad23d73af270990f08d526ddc9eec13c6c8ff1317b
MD5 fda8bd325a513abd04a65e0be166e06f
SHA1 0719eb409531e9844ab4db5017a8701b5382f4d0
SHA512 be739d2f7740714a586bf7be7c340352b6c08754a25d4d329158badfd222b02fc98ad7a3f7c17eb79d5a5dbd5a308fe11a7adbe48f08a0e828ba69148508612d
TLSH
T19AF0F9A5CD21AC7B18FC4B2920A51B47E750136B3741459B373D951C8FB563B454586C
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 264KB
SHA256 403128ab57c3ccfb2ddff1dc4c859366579392360b9110e18f24abb1e5098c3f
MD5 8035fa10354d9cb04d4e69c8abdd1cd9
SHA1 5d24e9fea4160f2af26f13848f9ee3c5b9d61d5d
SHA512 dfb2d5a3775a6c04b10c86a2d0d2fa5b7c4e80becdc10031f936daa2525e373731c73cb0c91e8381f8a081b374a264c765ecf83aab87093c6818c0d7ba8da261
SSDEEP 6144:J1+7uYA0n6qmC9js1aQwicN2I+hFD+7t56OD9ZfSApprm:J11Yvn992whcIyFSXD9ZfS4U
TLSH
T11D4423222B78FEA3C9746680B1879258DCB67CD8A0DE2C5989849FCF5077D8D035B937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b697dcf8-40d7-4d1f-8bad-a4e39e32ee15.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\b697dcf8-40d7-4d1f-8bad-a4e39e32ee15.tmp
Size 130KB
SHA256 6193e4b52fad2b00f6b00e7f726b9454605a7e12e4d9fe200dbf758b7ae76f62
MD5 bd2abe44b9439a2b5b477b7648b63175
SHA1 6075a5acdcbbebf10bd350ed8a803eec7942c476
SHA512 d82059f1543a8cb9b7dd7bda899cbecd52782775f9ff06d2f804b22eb7627e0271c60f2388de08acb9c4553d4e697194a922f6d86d9ee5f2fb51df6e5088d552
SSDEEP 3072:xLL+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gE:JL+hFD+7t56OD9ZfSApprE
TLSH
T1D3D31232AA95D8BBC9FC6541B157A300DE766CED41DE2A09444A9F8EE09FC4C0773A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b7a7af5b-514c-41b0-94f8-81e2c7c32741.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\b7a7af5b-514c-41b0-94f8-81e2c7c32741.tmp
Size 264KB
SHA256 563a54563289475ae044f3044d99eb8e2d6f40f5940ddb691ba98c17c3342f70
MD5 4b449af403017c45d0cbcbf6d0c7aa0f
SHA1 53a37a1c1f52f8de2d8b16409371ed0111c06d8c
SHA512 a9005439529885380274a23f1cdfdfef523ec4942c6fbdde84d3a91fd2ad9d1c02e2c064c491c3c9656a6abbd219d0ceca2c8e3ddf077e3723c513fdbea3c129
SSDEEP 6144:U1+7uYA0n6qmC9js1aQwicN2I+hFD+7t56OD9ZfSApprm:U11Yvn992whcIyFSXD9ZfS4U
TLSH
T19E4423222B78FEA3C9746680B1878258DDB67CD8A0DE2C5989845FCF5077D8D035B937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7a83cc54-11de-4a5f-8f67-2dd700848409.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7a83cc54-11de-4a5f-8f67-2dd700848409.tmp
Size 8KB
SHA256 0cf0b0732eabac16705af2c57ef9fc685175d72f9db9e4e3dc0d1932cc41feef
MD5 7b5c5e61629e8e46aa74e758c2c91e2e
SHA1 34ad9a996d40199819c0fcf9590415c586be7a64
SHA512 221913c307b8b47b8fadb4d0928bfb171e682af6f3e057073016e15014a81800b909ec61b87745a0981c34371869f4d60dee4741dceadbe39eb7d419f3abc4f0
SSDEEP 192:BONF6JUKQmiUyfDdo//p+GqLBNxQpq1U6:BONF6+GMdo//p+GqlQ4U6
TLSH
T16C12E736A868AC7B5DA39591F08336239E64416BDB859F94D6DC2F2C06DF1AC530BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7ea2d6ad-9b1b-4f81-bb20-ec68be5e345f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\7ea2d6ad-9b1b-4f81-bb20-ec68be5e345f.tmp
Size 105KB
SHA256 25559293c954898f2da344ed5fe3faf3c076ca2a1868befb99178bedacb3d026
MD5 7921e958d547711c39f2211be9d582e9
SHA1 d327f17351a129da59733ef73c24b256addb1b88
SHA512 29c83b34cc319b93140a7156f0e4fd32fca94b626b32f9aa46eb5471603b5bab4338ee0313db91199b04ee0ff93fc3dd5d552299e129f6c1cd750f4211244525
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7E:fwUQC5VwBIiElEd2K57P7E
TLSH
T117B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 04d384e503ac7726cb96f043e69cad98489c2eafc2665c80e33cb016d873b6e5
MD5 c5a323aac1462c81d1642ed0f7b1b5a2
SHA1 c07fc90a5c5d549ecbf33b4bc8cb6cb9ca204f88
SHA512 222a743460a5faf30304aa1d67f0e10e2db3eb1a339b1bbf5ca524b4a2fcaa1361289e4358333bae502b5bb38029cddb6902b4cd64293b0ad42b474cee75f892
TLSH
T1B2D02BA4A3D839C9E112183602214366348D40A15057E010CCA0518907C91538281460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e249170bbcfe30a2a7f421f287b6f81c1c4b71b07e845351f15d008b660ff09
MD5 81d112607d82fd2070ddb7aeeb981683
SHA1 14d14f6413d240f3629ae2eba8f5d1139dc415d0
SHA512 983c5ff8fde2dccf9dc8cf1c11f0008f124b59c2922b2ae470dc2c7595c82289abfd0b4819d73f1bf062a77e62e9ed53318e5f62978a688554f46d0a6c41cbfb
TLSH
T1CFD02BA463D83DC9E512183602204366348D40A15057E111CCA0518907CA1938281460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f7e901ff3df2d769334a9a6d3d1825c832dead150655a1e08b1ef005d0292c1c
MD5 54b5c89d12a534155a20824f377fc719
SHA1 633c3f7842f6f8f5fca6889975166d8beceab229
SHA512 232113d19f85e9404efda63cedba3028a48c801cab50f01744982526b2603d87acb2c9b209ffaa2266ed46e4496bd525b77408f425a951d529554a9790832746
TLSH
T118D0C06096B83ED9E131203F03700311348C01D351136100D85000490BE808381C1CE0
MD5 SHA1 SHA512 TLSH

Submit Download

122436c9-6f40-405e-92a9-8a539127c725.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\122436c9-6f40-405e-92a9-8a539127c725.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

579b079a-0255-4190-9f6e-2c1d04def335.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\579b079a-0255-4190-9f6e-2c1d04def335.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000089

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
Size 346KB
SHA256 51d725adc85e61c53d5ed7037835396b46e9fa3cfb658333861ddfc35fe63e9d
MD5 b28ce7f9dc81957871817c03cfcf9185
SHA1 30d1e930a04d4e493976eb041f8a1e53dcbdf322
SHA512 6f0685f95f8ce5874161b2dc5f02612af743447bf6a4442ae6a5ae78d42e4a9c3f38105ac0324009ee8bf65c620ad2918309174e98f027209595512a86bef2da
SSDEEP 6144:GNBARfr2x38GKGwQb0ln2iq7Pe+i8meINpylX5bfQZWY6BAk4HXH9C6UZoWFbkum:GNBufXs7+2z4/nylpzwRzHNDUaNuwX
TLSH
T1857423DA8608F8EEB240750A7C62FE2FD686191F4077BDD1B62E9AA63503C7054622D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 4KB
SHA256 00b2987b4c8fd64f211df1cc0926986367c4217d959e848e786f3dcbf9a0732f
MD5 28c057e097cbdf054cedb653d1556719
SHA1 5bfa3e7db7281ece038a40b3ef3dfef0d0b8de94
SHA512 4ea1463bdc2c3fd841e36b93aad4a87e219c6687d576e8f829a528695160c9b3261a5b6a87627bc82d630cb942027b5cd26899115d5b0ac5c2912b8db90d1aa7
SSDEEP 96:CfofJ6/8qxwwY19iFPZqelWkJ69oL+whMddN0vhyrgbaxqBRSWPqbIirtV:CQR6EqxSOFPUkWkJ69oL+iMddN0pyrgW
TLSH
T139A171F471A320C0FB95027396D1F816353066A050530F5239A7E5797EF778C89AEAAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a12224b6-d134-4375-af22-25ac093d97dc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\a12224b6-d134-4375-af22-25ac093d97dc.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 f1485487f8c8526737cd52baf1f006437fde74141272d464e14578be1750ecc2
MD5 40bb1e026f98124fda5cf8d758720900
SHA1 005aef7eff34c92ab196cb6350efac1043a1f588
SHA512 10415859ca2e24650044148faa870911a70a3a59792ec449ab9af68067d9c63d543db2684fdace2a3a5c90fb85090b89f9f1cb00fc3fee92e0cb4239928597cb
SSDEEP 96:sjIU+bGz83uy3+u4tgp4DLjGQLBze9z3/e1+9jBHMsDEuspU0wbtqrOQpPfR4J+j:sjf+G83uy3Ct7XBBKT8SH7DXspU3iD
TLSH
T17614421E4F242722CD7D917629E744A35D7CF03FCB5266DA786114B4CEE2A52A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.pinterest.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.pinterest.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 1KB
SHA256 f7e09e60b5838892aae41e3ae125842bc2a001481689d767bd66115becc3b80c
MD5 cfc3653a97df043874761563265485f5
SHA1 dfc056aaa961ba03b51d701eeac1ebfdc7fcd6a9
SHA512 088232f227ddecb16984e5442986987356a435561b9206b9af0e7777312a38f0310165784d9a6b3430102de4303f9e675e95f8e5c84027c53a3e43c3890696fc
TLSH
T17F2120F70505CC49D755E8E13042B607668F816BCFC9D9E1C76EA67880F9070F224F04
MD5 SHA1 SHA512 TLSH

Submit Download

162dfbb3-42a0-4147-ac2c-2c38a4aa3e50.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\162dfbb3-42a0-4147-ac2c-2c38a4aa3e50.tmp
Size 4KB
SHA256 0ab91491355293b411f07ff8cedba9d2f3edf0f8e75a1c435ea59fa8ad43b552
MD5 82c5b73ab9c246483572615c6158b27a
SHA1 6a696e666c61e6e754c2f6d101217433e5fc4e1d
SHA512 6ceb1544cf5b678f05066fdbbf38dd5b2df3a305203e11346aee29ed7215da84034a0fe2678c238ae56e7947534a5946411ba0e45d5fedd09dac945deb0743e3
SSDEEP 48:YALlNNOMtNMPMAnMWF1svTzEsN92sDELsZy0sWpso1csBnCIsKrYHEsXCKsFXRwy:DLOqNcHvkTzZ7byy39n10HTSXRwl0oQ
TLSH
T1D0A1AFF7C3E58A6D8C0199F096156D1EDF6E0A18822C3D168CD8FF5BA3E34B2D24155E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 6bea5d6bea3c9ccfdeb303241f04e6f859f2a68f0a911d68305d8e3b5e07ce99
MD5 200ade60d1b4f224d2f83a352ff33d1e
SHA1 ce0f2556a350730c55b6b3fdbf709d652c21e797
SHA512 2df5930b1fa4dd9d7489a65ba4c4eedf67bb7436ebce4a257eb42b80da0b0f8a1b9d4046608b5507c43026c1a8c4da3a6a148112e117f5bd5b3978fd248065a2
SSDEEP 48:TtLopFMatSaw/auUOt8BICuvN835Nagd9chIBborsRQBgETFfGN8FL6fQFraYg+E:9eMatUaAKIK2hJUOS8mf+J/e/f0XA
TLSH
T17992E95E2F312D11C5E915F2A8E4AA633F3C0029D7535099755880F24CF7666F01B5B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a264631a-bbd4-4b22-9e24-cb9fe6d5bfb6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a264631a-bbd4-4b22-9e24-cb9fe6d5bfb6.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c0403a5ab8c3d23fd7485f3961c78a42abecb82116639afb84cc4f84308c9e14
MD5 d56eb67f03ec236eab5dc6bb74cb1227
SHA1 486bcb421029c900036b2ab47708c4179e470d43
SHA512 28e714ca6ffded76560aa12564ebbef851c0b2d319388e7a9a5dc529a65d5dbd7093e114239e39401ee7b49458006cd6f351169593fcce9bf01fa5e791cbaf7d
SSDEEP 48:K08i8t8w8c8i8A8g8xb888L8sIS808xK98418C8xx868hY8j808g8SyLgvmqwaOG:KMkQKxKqG3OKMMPE4KRCC/
TLSH
T14F91745034BB461938BD654843A58A2A864131F37019FA2F7BBC40E65E6FF488EFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 6d6c4cbaae11db939fecbbb4b8341b95b9153a9a4e6013547d35d91aee1dc1fc
MD5 90a10c0cf45669f576e6c3358471b8fd
SHA1 613f94ffcba7bb4577fe96ac5794bb765411b9b1
SHA512 9b2c129648132a92cc08b1090e43a74db0274d35415e65d04343baf2c1595acc58df6f94cb8e8f036fd4dbb60569e54acff154dc168160cfd22adaf36fa78946
SSDEEP 192:P+xWNljfT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:mxIxfQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T16E24630A7B747001EDE6D9725CB080771E3CB16DCF22A6916DB254698DB2853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a9e78f67-501b-40d6-954a-da2912dbf5d9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a9e78f67-501b-40d6-954a-da2912dbf5d9.tmp
Size 27KB
SHA256 4ea91c49c719299efc90960f7a54caaa50cb1759acc841b0da6a59728c0b8e8e
MD5 9cb10a9bac7f2275be08a0ba067f7d72
SHA1 bb7ac6d5e74df29b31eb06ea54aa419939d1655e
SHA512 5434f584abd8f64599ced1752bbf8b33426d1b008621c6d8e1041ab988d4ebea6ee7e013e6fa1360b9e9817ad0ea726b158ed72f5557592b8b8956a9a706e313
SSDEEP 768:ldKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/6roXri:ldKlm7QWvUYe0u1ja8/L/E/xXri
TLSH
T18EC2FA2B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EE512B4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d8a1e22e-385b-4652-9353-9f0c257469d2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d8a1e22e-385b-4652-9353-9f0c257469d2.tmp
Size 11KB
SHA256 32c92d3c3f1b74b1bfa4b3890484effbfa44d4a4facfe5f35eb8d21844500033
MD5 7c58226f59d09e8c9578cae1e4d2907a
SHA1 41ec3e3efab1702c672e89e5b9e69a0dd876965e
SHA512 4f87dcedb4558e5589f8c45fc7ef0004d22f249bff2af818bb50abd7e326639449df2ce701a041fa84160ac73134bd37c4d27d738b779c288e94245ad6c9a294
SSDEEP 192:sxZQRbWB/fms0WpVMOIdpzWjBrHW6+WN+JY36THDIgQPJ:sxZQcB/fms0WvMfMHba7/+
TLSH
T1C542B8526D24697B8CCBD21AFA25BF13D6F9103690D05EC8EAFC852C05E76DD630B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 f3bfc5578914dc3fe76dd1077f9491c1d5c8fc3361e23f75962dca14fe0e99eb
MD5 4413ac9530057fd889289287dcce5cda
SHA1 40667a9d1ca261aac8eb9bc8556b6c94099d957f
SHA512 95c3717778112b7b6b72de2fd0e62653293dd560f8dd682ba448a1fe577f1feae31659b4a44292c7f3521ab14bf6fdc634c705cd1e417aefeb139352eb615f25
SSDEEP 384:0ZcIhsNk3phIbS7/h//p+Gq1hnAStxo7sVkLIVZh6DKhHYYioq:yh/dJ/hmySJVkLIfYGHYYiN
TLSH
T1ACA25A75D8A45CF788B5E9C2A442F6136FB8107792890E8CD5F9BB39309F5B81323D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c85550fe-7580-48c9-9cc0-b8c898648f15.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c85550fe-7580-48c9-9cc0-b8c898648f15.tmp
Size 22KB
SHA256 53d3e64fa403732d8184f9e98b744b072c2554f1e994372f0e0f2278946e3b31
MD5 a4ecc6caec6529b121c21ef871c9f035
SHA1 05d63b0cd69fe7272658bfe7b7093d0a8b91c1c8
SHA512 52794c04d5c5a084780fc4c6a361ff0771d14474d26de0173560da178c11717a2794c8f961087e4458ec77f10ebe42e3d4c943b57258da109f0656584555a844
SSDEEP 384:0ZcIhsNk3phIbSm/h//p+Gq1hnAStxo7sVkLIVZh6DKhHYYioq:yh/sJ/hmySJVkLIfYGHYYiN
TLSH
T14BA25A75D8A45CF788B5E9C2A442F6136FB8107792890E8CD5F9BB39309F5B81323D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f460e9f7-23ba-464d-8e7e-fd7f8de565b5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f460e9f7-23ba-464d-8e7e-fd7f8de565b5.tmp
Size 8KB
SHA256 a4e20f19b8ac93da161d26bee30eb1453de59cae28f1179e9ccc35a7822b7c6f
MD5 35b85ae706b8fc3b8f93200930ff418f
SHA1 dcfbf9b41e8011f797f0e0c4de8035e1a333a93e
SHA512 de2174ecff3d7c11f6e380f87004c110086ffc142983b1d565cf59e0c14b2488d3fc972553206298552b441033c00885bfcb70cb1f1eb733c21ec2b70d267378
SSDEEP 96:KqONkTQsjpfbUmjH5ih/cIPURHl8h4otop5NaDdBKP4v+Y1xf//ojd6x/eYzRtIn:BONb6JUm0QmiUyODso//p+8BCQZOU6
TLSH
T1A802E739AC68BCBB8DF3AE45B4477B239FA4107B9A955F84DAD81E2C01D715C1303C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f0e64408ec1dcb859a221e244c9eae3f20c43e80c5a443b08bf4fa33bbd2581b
MD5 da49f739e7076fa0a1c71d79af7f7406
SHA1 0ed3e2f2976cb8f2fe83760e70547f6387ef9692
SHA512 a20ae505d43d33e2a8cbca2686aff2331e568fb5fd18197b10f3b2b0e2e592391112d3842367577071182ba49e87436d2106f61496cda1bae7ba919019d5fde5
TLSH
T1E141276CB6E91108B3B77E5AAFF6686D487EB9332F0BD45D10110E4E0A62B40D8B1737
MD5 SHA1 SHA512 TLSH

Submit Download

akg_debug.txt

Path C:\Users\Admin\AppData\Local\Temp\akg_debug.txt
Size 2KB
SHA256 e2b480c134c9485ef8410d24a64d62478c68640865a18ae91cc559eec32538c7
MD5 988b24d7215d7e980a39057604c45eb8
SHA1 74619538610b18f5739c244c07b67273c1fa2f2e
SHA512 6e2efa7da33236f113877d37f5467e7d6e25463d96c0c7d8aa43a5292d796df984ee2eca0f0d06b0b542bc74402452e83655ab889e0175404eed8eca99bafe67
TLSH
T12F51BC061D7FA4E13929CFACF46A86D4F58D21870B143204381D9B442BA630F2DBEE7D
MD5 SHA1 SHA512 TLSH

Submit Download

akg_e5a4f5a_2.tmp

Path C:\Users\Admin\AppData\Local\Temp\akg_e5a4f5a_2.tmp
Size 40KB
SHA256 06aeb2f9c1ee642348c091fb27541c143545354c273055ce30832e0f61aedf81
MD5 ba979c77c714b67908bc582ec373c723
SHA1 ff6b59b47b8d3ad488eaa7a4b0040a9a93eb19fe
SHA512 fc6b860dcb9e00c6ab7aa72555fb17921bbb8b1276acf0ab5fcb20b5f2dbd4bf71946c5c4fcfc46310f8de29491a63e46d43805070d19f290070f60077f80b01
SSDEEP 96:wDaCn8MouB6w9fUP8iZqmvJKLPeymwil:wDaG7Iw9f/iSi
TLSH
T16103440F2E682801C8B94632BCF124E62E7DA03E4F13EED12CB504659D75C52B52E5EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

akg_e5a7437_6.tmp

Path C:\Users\Admin\AppData\Local\Temp\akg_e5a7437_6.tmp
Size 56KB
SHA256 a36a4989ed48954499586d6551e61d6bccfc7bee269b4eab0bb836e394c24c7c
MD5 f92de240ae86100670164298edba43f2
SHA1 5d9ede7e7743e75344ee7f996456693f82896e5d
SHA512 2e6b9cbd04baf609d91a0583d742b19c5dc6dd7b334349fac1a71563c140075408fe881388e1fff72f5c1c0124d0603d54d35f5039c544ee9c1350b4e1684c21
SSDEEP 96:/kS/KLPeymOoizhGNOnfmG38tmvJHbn8MouB6w9fUPnP:B4oizhGNOnDV77Iw9fK
TLSH
T15E43651F1B682802C8698632BCB194F36F7CA13E8F639E922CB044359D75852B12D5FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

akg_ff_e5a7437.tmp

Path C:\Users\Admin\AppData\Local\Temp\akg_ff_e5a7437.tmp
Size 96KB
SHA256 33a2357af8dc03cc22d2b7ce5c90abf25ac8b40223155a516f1a8df4acbf2a53
MD5 6066c07e98c96795ecd876aa92fe10f8
SHA1 f73cbd7b307c53aaae38677d6513b1baa729ac9f
SHA512 7d76207c1c6334aa98f79c325118adf03a5ba36b1e2412803fd3e654a9d3630c775f32a98855c46342eba00d4a8496a3ded3686e74beaac9c216beee37aa5cb7
SSDEEP 12:DQnD+23Fmdmc/OPVJXfPNn43etRRfYR5O8atLwxeYaNcDakMG/lO:DQnS232mNVpP965RayKN0MG/lO
TLSH
T192A3DD826B781395C44701B2FCB0565E0D3CA23849272B55AC39B0B30CD6A438A329FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

35f947e2-0e2c-4cfe-bb11-30d9d28a9158.tmp

Path C:\Users\Admin\Downloads\35f947e2-0e2c-4cfe-bb11-30d9d28a9158.tmp
Size 16KB
SHA256 cf7fbc3635808a8375d8ed502735a07dfadc7b2cd97838cac5754a68fe070ece
MD5 238a6221a0e271086b49b4c4bc69f636
SHA1 7d6faacbf273df3037b554f513fd9ffd90b56377
SHA512 fbb96ebc8e3913acdb9409393daffb8ea8ae7fe80f13493002edefc0b107abc93134992466863cb294987cd9eb5829405c5c6c6582bcf245918d531f0e7b0793
SSDEEP 384:Xe+JqtZiZVor33yYgHmV4TGhedFBAFsV7W5mjwYYrCARe:Xe+KOVo337NVrheD2ELjRUCARe
TLSH
T13B72C076B85C684CDF3CA3F79D24C91A873DDAAAE38B17B5B708117E08EB13581B5240
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Mod Menu V5.86.zip

Path C:\Users\Admin\Downloads\Mod Menu V5.86.zip
Size 13.3MB
SHA256 2a4e55c436c333d468eb4786757bb489a88d222c98e42ffddd950f31ee18e058
MD5 88366e46a93686b954a2545e3628af54
SHA1 7758ef6c7f18caee56d561f20808092a3ad35476
SHA512 bdfebdf4c7199d5d3965e349bf43b2b647721153b4b4389b9c5ff88a7c359a4ad8d28c61047c4d2b03ae4399c52763dc47622f8476ba2e3da7ff528257edf478
SSDEEP 393216:QPkcuvQ75loXgkqoTQc25DA77bSCzXM6j+z/MqcxoyDSU:QPktvu5eQJoTQcQcWCzc6j+z/Zcu8
TLSH
T181E6334CD1D3AEA4DBB8DF37A600B1CDDF1A6D83C664A5D981D841BE4F8226D8F4606C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

x32.dll

Path C:\Users\Admin\Downloads\Mod Menu V5.86\Mod Menu V5.86\Bin\x32.dll
Size 4.3MB
SHA256 44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47
MD5 7641e39b7da4077084d2afe7c31032e0
SHA1 2256644f69435ff2fee76deb04d918083960d1eb
SHA512 8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5
SSDEEP 49152:aYlc/220PPiMLKam+VMrLi21f4i3jn5ZO3XUDmOZQwVd2uQpN3WsGVUWd55i/jrs:a6KD2Mrdaix4NQnLt
TLSH
T16F267D5677A840A9C27BC178CA574313EBB1781403349BEF55A0C665EF33BD26E3A728
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Loader.exe

Path C:\Users\Admin\Downloads\Mod Menu V5.86\Mod Menu V5.86\Loader.exe
Size 4.1MB
SHA256 89114130af72db18cf58264cd58e4332ccbe6cbaaf5551f2123df72e3e79677f
MD5 4c8a19a5b32c86d8d3706521e5402f0e
SHA1 c97bfd9ac3f5cabb535678f18471e3ce56217adf
SHA512 3ae6e8965d69af32e5804f318e9cce84b4acff16e4e65d98583bac1b54c8728c5a050489007d84a8e74c95a6fb18aa23904fdb9fc087b17120b1e03b9e7d49ec
SSDEEP 24576:Nqkrqhj/WaWSkdlfYAmPVWOqq5VBuHBXX6Mgn+/N217nslhcMbKPkwtA5iKIrp4R:traj/WafkPfgLs7bKP9sKTHuZnHZ
TLSH
T1671639073A8415A9D98AD37484B5566266B17CDEAB3277C71E80FBB02F227C0AF74F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

test_output.zip

Path C:\Users\Admin\Downloads\Mod Menu V5.86\Mod Menu V5.86\test_output.zip
Size 181KB
SHA256 aa54430cc923963db19c0dba7ff0a51627f5f0c463c48fa0dd832b3029e2518f
MD5 8cbcbaf0089b45c3cf5aa0df5f4c76f9
SHA1 43a8d7809a68317b6b99eb88fbcbefdb4ab22bf8
SHA512 a42acc7d55d8e3d4c59e3bb8e2f5a8aec568f53bbb6f32fcd1dd4cbdc804cb3ab57ce9ccc1bd62efae086b1cb8ef1c796c53fdd88ca5b25b6ff91967d27729e5
SSDEEP 3072:j7L8Ig6Wf3jPOWhNPWOl+PA6EQq+5JxfW+6dp4leLKmQqeiuaxPhrNVMmO3qV/AY:j7L7gfBjPWv/qCxeTp4ULzQn3axPFNVR
TLSH
T162041208A7CCA28DD5597EF1E553F6D39E3B10D926678BA1D626932007C08913F8FE27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1012-1923-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1012-1935-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1012-1884-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1012-1905-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1012-1907-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1012-1911-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1012-1921-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1012-1925-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1012-1868-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1012-1919-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1012-1917-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1012-1861-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1012-1933-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1012-1931-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1012-1865-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1012-1863-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1012-1927-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1012-1938-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1012-1862-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1012-1859-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1012-1860-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1012-1900-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1464-1944-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1464-1948-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1464-1950-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1464-1963-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1464-1946-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1464-2008-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1464-2006-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1464-2004-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1464-2002-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1464-2000-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1464-1998-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1464-1996-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1464-1994-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1464-1992-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1464-1986-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1464-1982-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1464-1980-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1464-1943-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1464-1975-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1464-1942-0x0000000140000000-0x0000000140035000-memory.dmp

Download

memory/1464-2011-0x0000000140000000-0x0000000140035000-memory.dmp

Download