Overview

overview

8

Static

static

1

pdf-p-clas...ss.pdf

windows10-2004-x64

3

pdf-p-clas...ss.pdf

windows11-ltsc_2024-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    750s
  • max time network
    434s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/10/2026, 15:17

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    pdf-p-classtruncatedtext-module-lineclamped-85ulhh-style-max-lines5aimbot-v3-fps-gui-features-p_compress.pdf
  • Size 48KB
  • Sample261002-spesesch29
  • SHA256 0b7511102c9f9a6b0cf9202ebfbc83c34a983d99578c1f75a471b7aead827958
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarediscoverypersistenceransomwarespyware

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Enumerates connected drives 3 TTPs 4 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 8 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 62 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies Internet Explorer settings 1 TTPs 2 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 7 IoCs
  • Modifies registry class 39 IoCs
  • Suspicious behavior: EnumeratesProcesses 26 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 25 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 59 IoCs
  • Suspicious use of SetWindowsHookEx 9 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\pdf-p-classtruncatedtext-module-lineclamped-85ulhh-style-max-lines5aimbot-v3-fps-gui-features-p_compress.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Checks processor information in registry
    • Modifies Internet Explorer settings
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1732
    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
      "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:992
      • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
        "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=3BFC478FED11159EABC7C590B3D8339C --mojo-platform-channel-handle=1804 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
        3⤵
        • System Location Discovery: System Language Discovery
        PID:5728
      • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
        "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=09F350413AF1F80C3013575A5E3FBCB1 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=09F350413AF1F80C3013575A5E3FBCB1 --renderer-client-id=2 --mojo-platform-channel-handle=1796 --allow-no-sandbox-job /prefetch:1
        3⤵
        • System Location Discovery: System Language Discovery
        PID:4920
      • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
        "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=7D5220133A83CF654EDABE02BF607C7A --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=7D5220133A83CF654EDABE02BF607C7A --renderer-client-id=4 --mojo-platform-channel-handle=2384 --allow-no-sandbox-job /prefetch:1
        3⤵
        • System Location Discovery: System Language Discovery
        PID:4100
      • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
        "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=CD8120CE38FC88B4F80B52C1E27EE429 --mojo-platform-channel-handle=1940 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
        3⤵
        • System Location Discovery: System Language Discovery
        PID:1316
      • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
        "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=2BCDAF2651646E4C577D152101B4CBDE --mojo-platform-channel-handle=2728 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
        3⤵
        • System Location Discovery: System Language Discovery
        PID:1176
      • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
        "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=160DFDB6C9C8442D0C1648C56B343B28 --mojo-platform-channel-handle=2100 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
        3⤵
        • System Location Discovery: System Language Discovery
        PID:3428
  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe"
    1⤵
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3164
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ff9fad4c728,0x7ff9fad4c734,0x7ff9fad4c740
      2⤵
        PID:5312
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1492,i,2817322716730923555,6563251809342714238,524288 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=2132 /prefetch:11
        2⤵
        • System Time Discovery
        PID:2528
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1636,i,9044189106761783853,16328867156865884431,262144 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=1700 /prefetch:2
        2⤵
          PID:3132
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2324,i,7729481511586352503,16477039771497601509,524288 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:13
          2⤵
            PID:4512
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3280,i,7815027848168122639,2479299655617407448,2097152 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=3300 /prefetch:1
            2⤵
              PID:6040
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3248,i,3513804860194973929,15999389773062256968,2097152 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=3272 /prefetch:1
              2⤵
                PID:5036
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4728,i,8033358744585650183,13940808920543491515,524288 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=4720 /prefetch:14
                2⤵
                  PID:4248
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4768,i,13538399513080821498,7931743592453979319,2097152 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:1
                  2⤵
                    PID:4600
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5424,i,17964812733173567302,5542062679927807828,524288 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
                    2⤵
                      PID:5792
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5524,i,14896601551427889925,12858541361767783617,2097152 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=5552 /prefetch:1
                      2⤵
                        PID:1128
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5544,i,17812212795787088119,6722755846622007397,2097152 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:1
                        2⤵
                          PID:3768
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5464,i,4632482713720808950,5149202552179875249,2097152 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:1
                          2⤵
                            PID:1888
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=6000,i,487774774601704850,22798598338847243,2097152 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:1
                            2⤵
                              PID:3516
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5996,i,14577869286662754384,12895159991054977013,524288 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:14
                              2⤵
                                PID:1588
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5596,i,7258589463843061916,3145545421583651602,2097152 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:1
                                2⤵
                                  PID:4800
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6272,i,14761201063066632138,18134886675545234817,2097152 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:1
                                  2⤵
                                    PID:3332
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5424,i,11469087220823285574,3695579169212969747,524288 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=5608 /prefetch:14
                                    2⤵
                                      PID:5504
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6276,i,9322484326558109124,9227053562958562644,2097152 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=5596 /prefetch:1
                                      2⤵
                                        PID:2796
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5796,i,1946893774410677240,7524863216526439515,2097152 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=4720 /prefetch:1
                                        2⤵
                                          PID:5692
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6412,i,168156658249795597,11482148122091983205,524288 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:14
                                          2⤵
                                            PID:4788
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5928,i,180608068326765984,2181220845897410496,2097152 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:1
                                            2⤵
                                              PID:3984
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5992,i,9388428248679602678,15881645357688442130,2097152 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=5728 /prefetch:9
                                              2⤵
                                                PID:1220
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5688,i,7016235554106287973,7955212210330614178,2097152 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=5764 /prefetch:1
                                                2⤵
                                                  PID:1344
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=3688,i,10548182833616293208,2117400908301714832,2097152 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:1
                                                  2⤵
                                                    PID:1376
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=5604,i,7476558189205270476,4990119697005729593,2097152 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=5688 /prefetch:1
                                                    2⤵
                                                      PID:4988
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6332,i,16479646862925201802,8223349326521977943,2097152 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=5632 /prefetch:1
                                                      2⤵
                                                        PID:1244
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4708,i,5279541371715931869,11768696822203038912,524288 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:14
                                                        2⤵
                                                          PID:5376
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3920,i,3197077848945856728,7392775298491829702,524288 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:14
                                                          2⤵
                                                            PID:5116
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3272,i,14402518278850707844,4691991004060819882,524288 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:14
                                                            2⤵
                                                              PID:1536
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=4708,i,12770004041215736981,11610126465568036874,2097152 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=4940 /prefetch:1
                                                              2⤵
                                                                PID:3548
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=4868,i,17590389961554953063,10094440936617359319,2097152 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=5552 /prefetch:1
                                                                2⤵
                                                                  PID:3592
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=5576,i,5897634047844666820,10632262633126563545,2097152 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
                                                                  2⤵
                                                                    PID:2180
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=5580,i,16232390132773856943,8273572584904288268,2097152 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:1
                                                                    2⤵
                                                                      PID:5868
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=5960,i,1291604317820248582,17983350674954084668,2097152 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:1
                                                                      2⤵
                                                                        PID:6048
                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=6400,i,16318572566263438877,568585556322120911,2097152 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:1
                                                                        2⤵
                                                                          PID:4352
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5800,i,5947675141788210353,4994772798773251528,262144 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:10
                                                                          2⤵
                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                          PID:5868
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=4604,i,8087744833763661894,17296763521674552435,2097152 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:1
                                                                          2⤵
                                                                            PID:3748
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=3680,i,675511419386045082,6249230338654706656,524288 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:14
                                                                            2⤵
                                                                              PID:4328
                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=1184,i,8606690820886619240,16562768576592024118,2097152 --field-trial-handle=1872,i,9690312647170431669,8398940879467594858,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
                                                                              2⤵
                                                                                PID:4160
                                                                            • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                              "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                              1⤵
                                                                                PID:4168
                                                                              • C:\Windows\system32\svchost.exe
                                                                                C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                1⤵
                                                                                  PID:4216
                                                                                • C:\Windows\system32\svchost.exe
                                                                                  C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
                                                                                  1⤵
                                                                                  • Modifies data under HKEY_USERS
                                                                                  PID:6068
                                                                                • C:\Windows\system32\svchost.exe
                                                                                  C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                  1⤵
                                                                                    PID:3940
                                                                                  • C:\Windows\system32\sihost.exe
                                                                                    sihost.exe
                                                                                    1⤵
                                                                                    • Suspicious use of FindShellTrayWindow
                                                                                    PID:3788
                                                                                    • C:\Windows\explorer.exe
                                                                                      explorer.exe /LOADSAVEDWINDOWS
                                                                                      2⤵
                                                                                      • Boot or Logon Autostart Execution: Active Setup
                                                                                      • Enumerates connected drives
                                                                                      • Checks SCSI registry key(s)
                                                                                      • Modifies Internet Explorer settings
                                                                                      • Modifies registry class
                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                      • Suspicious use of FindShellTrayWindow
                                                                                      • Suspicious use of SendNotifyMessage
                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                      PID:4728
                                                                                  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                    1⤵
                                                                                    • Modifies registry class
                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                    PID:4408
                                                                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                    1⤵
                                                                                    • Modifies registry class
                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                    PID:1084
                                                                                  • C:\Windows\System32\SecurityHealthHost.exe
                                                                                    \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
                                                                                    1⤵
                                                                                      PID:4432

                                                                                    Network

                                                                                          MITRE ATT&CK Enterprise v16

                                                                                          Replay Monitor

                                                                                          Loading Replay Monitor...

                                                                                          Downloads

                                                                                          ReaderMessages
                                                                                          • Path C:\Users\Admin\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages
                                                                                          • Size 36KB
                                                                                          • SHA256 b1b77e96279ead2b460de3de70e2ea4f5ad1b853598a4e27a5caf3f1a32cc4f3
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          ReaderMessages
                                                                                          • Path C:\Users\Admin\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages
                                                                                          • Size 56KB
                                                                                          • SHA256 111dac2948e4cecb10b0d2e10d8afaa663d78d643826b592d6414a1fd77cc131
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          ReaderMessages
                                                                                          • Path C:\Users\Admin\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages
                                                                                          • Size 64KB
                                                                                          • SHA256 3d215219679c3ee5cf13f5e53f97f0d148037b15f58a9f160a42c1cc68fc967e
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          270209e7-1612-46e1-85d4-06d47f83b9d5.tmp
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\270209e7-1612-46e1-85d4-06d47f83b9d5.tmp
                                                                                          • Size 138KB
                                                                                          • SHA256 09d4cedeb1a6b856ace193978914015a7986cc82ce80bee15fa576a4da64aa1b
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          3f124dc8-fd14-461f-bac6-6245574d74ae.tmp
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\3f124dc8-fd14-461f-bac6-6245574d74ae.tmp
                                                                                          • Size 139KB
                                                                                          • SHA256 f0fc565e4b4791a60593ef0a5dad0cc608fc4bf92b7d59adef436b61ca359a93
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          6afa2def-c0d0-4c5d-b5da-5f9ef2f521af.tmp
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\6afa2def-c0d0-4c5d-b5da-5f9ef2f521af.tmp
                                                                                          • Size 140KB
                                                                                          • SHA256 29eb7db8ce9e0a44311af68aad711c934c5a0a0332c1692257dfe3e27dbea56c
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          94b964ad-9214-4a4b-b6fd-ab6b333e1f94.tmp
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\94b964ad-9214-4a4b-b6fd-ab6b333e1f94.tmp
                                                                                          • Size 4KB
                                                                                          • SHA256 01e88b2f0632fe9c687eb6963659802ed047a6838c47d874407d6996e7332224
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          settings.dat
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                                                                          • Size 40B
                                                                                          • SHA256 c414448bbe060e4a60b198f5530612393cf6ce3e2127fea378f16d34d823faa8
                                                                                          • MD5 SHA1 SHA512
                                                                                          Submit Download

                                                                                          1f610829-2e53-4cac-b086-77f23da7a0bd.tmp
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\1f610829-2e53-4cac-b086-77f23da7a0bd.tmp
                                                                                          • Size 6B
                                                                                          • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                          • MD5 SHA1 SHA512
                                                                                          Submit Download

                                                                                          21a8f3d3-2723-47df-85fd-b56a79164e94.tmp
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\21a8f3d3-2723-47df-85fd-b56a79164e94.tmp
                                                                                          • Size 12KB
                                                                                          • SHA256 e0481a06f770646a1bd50ae8a5bd1adf9d2874c44e55084a84a33fe01e748702
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          328013d8-b02b-4b28-8761-58a660fb0554.tmp
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\328013d8-b02b-4b28-8761-58a660fb0554.tmp
                                                                                          • Size 13KB
                                                                                          • SHA256 f02c8600fa898c4c68084b4bcd431398c7d749b0ac8eaeca04a8e677e12592b5
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          3d38f344-e7d7-43a3-939f-1ffdf445ae48.tmp
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\3d38f344-e7d7-43a3-939f-1ffdf445ae48.tmp
                                                                                          • Size 13KB
                                                                                          • SHA256 c5ad550d3c724a65e913f13228f4f7fbbbd09db71370ac4da52188bbc62f3f35
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          4ba1f332-45bd-4684-a656-057b20498a9d.tmp
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\4ba1f332-45bd-4684-a656-057b20498a9d.tmp
                                                                                          • Size 13KB
                                                                                          • SHA256 dd79927ec6f35d72bd7f86894770290406a1e79a2c99f4c1e2402dc24e23106b
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          7043c8a4-f962-4bc1-8ff3-f8b1329e7be7.tmp
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\7043c8a4-f962-4bc1-8ff3-f8b1329e7be7.tmp
                                                                                          • Size 13KB
                                                                                          • SHA256 2dcc089cea3c51cc3bcf1db4540f480162d05d58a931b75303ffd2ba99f520d2
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          7a9bf6e5-3c06-423b-b025-f5a0df2b1d53.tmp
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\7a9bf6e5-3c06-423b-b025-f5a0df2b1d53.tmp
                                                                                          • Size 13KB
                                                                                          • SHA256 ae55cad94a1a4f6ea2a3f9ba11cc0498524e0ec2175f16a3104aa6f02d441dd8
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          f_000004
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000004
                                                                                          • Size 73KB
                                                                                          • SHA256 f3da3acb05ffefdc9ae669d4d171476ad2d7f4aefefa8fa9e0245a7a3b5ac2dd
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          f_000006
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
                                                                                          • Size 38KB
                                                                                          • SHA256 7165713d3e1a610399471a5e93d5677508f62ef072c1151e72273bf4bd54f916
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          f_000008
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008
                                                                                          • Size 88KB
                                                                                          • SHA256 233bbaf591c2daa1003b79a816fc6e23315e2087e04796482b2c862e44f1506a
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          f_00000a
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
                                                                                          • Size 437KB
                                                                                          • SHA256 a451b8791f9183f16a2b30959f9f69e20f35117f8ca6e34e463916869328f3c8
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          f_00000b
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b
                                                                                          • Size 518KB
                                                                                          • SHA256 eb31a67cfa564906da0e24ebc5afa814633d3978d17bde44addf125ea9cdd597
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          f_000019
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000019
                                                                                          • Size 224KB
                                                                                          • SHA256 3ccac8fef64968133d2cbb4c45ede701a1f5947f4f2428fce45b6ae2677e946a
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          f_00001a
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001a
                                                                                          • Size 21KB
                                                                                          • SHA256 ff2dbff8bd60aa8f5672c1ab0b7af96204f3825b90faf4dea5b54ad0243b7d63
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          f_00001e
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e
                                                                                          • Size 123KB
                                                                                          • SHA256 2ed8f151791bb6da09d8e8e85c936315b68d7324bfb597a4d9dc3346360b86a8
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          f_000020
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020
                                                                                          • Size 49KB
                                                                                          • SHA256 004a233fee23aa63c3565fca4ecb569ad355cba1a4a487247f1ef69d07b02d02
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          f_000021
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000021
                                                                                          • Size 66KB
                                                                                          • SHA256 a2f41b5b8175d6eedd41d5030f78906b4bbe045ab40f5c7b02d996a708974c57
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          f_000022
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000022
                                                                                          • Size 55KB
                                                                                          • SHA256 a4c58efb78371702ed6dc4ea06596a2fa1d01f0fb5816636fc2bd9dd699f9bfa
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          f_000027
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000027
                                                                                          • Size 28KB
                                                                                          • SHA256 ea92da0752b6c8a6eec9fe97fd384bac3c40d9b6be5028d12f454902d5ae303d
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          f_00002f
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002f
                                                                                          • Size 69KB
                                                                                          • SHA256 99d676ddca810224f2e7251374fda55464e0e45a8d2bf9b00c6a9a9c22f2030f
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          f_000037
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000037
                                                                                          • Size 39KB
                                                                                          • SHA256 dcb080f438ff4a7b133b7db1b43471746890cc89c11f29820d28b36c457de9ec
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          f_000050
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000050
                                                                                          • Size 657KB
                                                                                          • SHA256 960c09a6b26ea766db18d05d2ef476e91ee671857ab490e12fba8b17efafe9bb
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          f_000051
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000051
                                                                                          • Size 20KB
                                                                                          • SHA256 3abdf2bf238e2cea3922437685d2ae508453495b04da2f85b209736ebd468a54
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          955cd64f74724558_0
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\955cd64f74724558_0
                                                                                          • Size 4KB
                                                                                          • SHA256 d400036b8f5876246feff6aec0e65fc6bcb33249549ce6c510aa4c1c197c4fe5
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          temp-index
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                          • Size 2KB
                                                                                          • SHA256 2130e57b7fad2fc0cc8b88c15000547a1f99010f71204ff9da512ca2a2bc7adb
                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                          Submit Download

                                                                                          messages.json
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
                                                                                          • Size 593B
                                                                                          • SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                          Submit Download

                                                                                          craw_background.js
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
                                                                                          • Size 531KB
                                                                                          • SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          CURRENT
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\CURRENT
                                                                                          • Size 16B
                                                                                          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                          • MD5 SHA1 SHA512
                                                                                          Submit Download

                                                                                          MANIFEST-000001
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\MANIFEST-000001
                                                                                          • Size 41B
                                                                                          • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                          • MD5 SHA1 SHA512
                                                                                          Submit Download

                                                                                          0972ae33-91cc-48e0-a36a-1480050cee79.tmp
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\0972ae33-91cc-48e0-a36a-1480050cee79.tmp
                                                                                          • Size 13KB
                                                                                          • SHA256 8f7a3e8f8a18a5ddd30b7bb6a5676a9243ebeaa1ecea2c6af2abbb836dbf38fb
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          190a661b-c4fa-47fd-a4bb-7c6874df521d.tmp
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\190a661b-c4fa-47fd-a4bb-7c6874df521d.tmp
                                                                                          • Size 1KB
                                                                                          • SHA256 b2ad7431884bd58ec642c50ddac1b65b637ff1f6f8a039eeff7b67edb81515d6
                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                          Submit Download

                                                                                          5a8ba672-98f6-4d56-b04a-f0fc98f561fb.tmp
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\5a8ba672-98f6-4d56-b04a-f0fc98f561fb.tmp
                                                                                          • Size 13KB
                                                                                          • SHA256 f7ad9968b4ced6352f60cf04898c0fdc198ab97e6c4c6de71b3b80cc0ce02147
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          6dd25837-d120-4587-b1d3-984f6ce3c166.tmp
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\6dd25837-d120-4587-b1d3-984f6ce3c166.tmp
                                                                                          • Size 2B
                                                                                          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                          • MD5 SHA1 SHA512
                                                                                          Submit Download

                                                                                          Network Persistent State
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                          • Size 12KB
                                                                                          • SHA256 85fd0bad44b2cdd11df156a79b7762389ffa7da4e59e666a6505b7c228654867
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          temp-index
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
                                                                                          • Size 96B
                                                                                          • SHA256 fe7e4afe85974b488e064c074ce6b8f1c5eb16cf00c546dedbbbd0f229e9c186
                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                          Submit Download

                                                                                          temp-index
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
                                                                                          • Size 120B
                                                                                          • SHA256 10ca216c39f4b1ae2d2cafb719dcfc9a162cae97afd3b097a74ae82382a62bb3
                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                          Submit Download

                                                                                          temp-index
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\temp-index
                                                                                          • Size 72B
                                                                                          • SHA256 9551f444b2eb95165e3fb43838ef2f91dea73f96c328f532c0af3b3b3424630b
                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                          Submit Download

                                                                                          the-real-index
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
                                                                                          • Size 48B
                                                                                          • SHA256 5b003c9a0af024b63687837575d3b38388e03a881d5fb7bd14672d2ddb64fef4
                                                                                          • MD5 SHA1 SHA512
                                                                                          Submit Download

                                                                                          data_0
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_0
                                                                                          • Size 8KB
                                                                                          • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                          • MD5 SHA1 SHA512 SSDEEP
                                                                                          Submit Download

                                                                                          data_1
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
                                                                                          • Size 264KB
                                                                                          • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                                                          • MD5 SHA1 SHA512 SSDEEP
                                                                                          Submit Download

                                                                                          data_2
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_2
                                                                                          • Size 8KB
                                                                                          • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                          • MD5 SHA1 SHA512 SSDEEP
                                                                                          Submit Download

                                                                                          data_3
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_3
                                                                                          • Size 8KB
                                                                                          • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                          • MD5 SHA1 SHA512 SSDEEP
                                                                                          Submit Download

                                                                                          Network Persistent State
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\Network Persistent State
                                                                                          • Size 59B
                                                                                          • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                          Submit Download

                                                                                          b697d15b-5c04-40f5-b72c-dfc2ace3bf44.tmp
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\b697d15b-5c04-40f5-b72c-dfc2ace3bf44.tmp
                                                                                          • Size 111B
                                                                                          • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                          Submit Download

                                                                                          b488bca9-77c9-4f4d-9055-1b466cbdfd58.tmp
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\b488bca9-77c9-4f4d-9055-1b466cbdfd58.tmp
                                                                                          • Size 13KB
                                                                                          • SHA256 c6c4934b427d78a3d64ef8b4991293fdd3c1494bfbf29a862fd50e6e7e4b6e79
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          b6de2faf-567e-40d5-b0f3-4dbb45b329d7.tmp
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\b6de2faf-567e-40d5-b0f3-4dbb45b329d7.tmp
                                                                                          • Size 11KB
                                                                                          • SHA256 9e6bd8aa461a70c0dee35d687263551db1139113b75d457d70fbe6e807676286
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          d1a06f9c-d751-4d3a-b66c-6e05f702ca6f.tmp
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\d1a06f9c-d751-4d3a-b66c-6e05f702ca6f.tmp
                                                                                          • Size 11KB
                                                                                          • SHA256 587fca8ee60c08e411612455e1ff9499080dff6a3b0e873dfb58c013075bc500
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          c07dd370-3bf3-4af2-a9b4-b3ab08ef1a74.tmp
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\c07dd370-3bf3-4af2-a9b4-b3ab08ef1a74.tmp
                                                                                          • Size 139KB
                                                                                          • SHA256 dcbdf05964c0acdc66d98157af884532a0c0bbbfea7e913d7fd2112c007fe9b9
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          cc6efe1f-47d2-4a50-99c8-966c90795bff.tmp
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\cc6efe1f-47d2-4a50-99c8-966c90795bff.tmp
                                                                                          • Size 139KB
                                                                                          • SHA256 dfb352b628dbcc6e355a9d0160e6acc80caa0e5fb9aa3c6c55b79332dd5c407e
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          d347ab1e-6e63-41e9-ad2f-41a2eb299dbb.tmp
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\d347ab1e-6e63-41e9-ad2f-41a2eb299dbb.tmp
                                                                                          • Size 138KB
                                                                                          • SHA256 3a965f2e133365232b10bafe3ff0aba25d439885120605303a60eb7229b8d6cf
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          fd403b87-a3ad-482d-84c0-c5dac1b532be.tmp
                                                                                          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\fd403b87-a3ad-482d-84c0-c5dac1b532be.tmp
                                                                                          • Size 138KB
                                                                                          • SHA256 e5e5c2f7fd42b41e5514e44e3c764be369972c5faa38399a8193994cdd89ff96
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          prep_Activatable Class_Hermes_perf.cache
                                                                                          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                                                                                          • Size 607B
                                                                                          • SHA256 be6b74e52e5eef1f1c27c0976bf3bf1bfa99958c00bbef2898a602f691be6dae
                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                          Submit Download

                                                                                          prep_Activatable Class_Hermes_perf.cache
                                                                                          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                                                                                          • Size 599B
                                                                                          • SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                          Submit Download

                                                                                          e97fc79e-8774-408f-b782-fbca0a1f8c41.tmp
                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\e97fc79e-8774-408f-b782-fbca0a1f8c41.tmp
                                                                                          • Size 242KB
                                                                                          • SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                          Submit Download

                                                                                          messages.json
                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3164_2121079260\CRX_INSTALL\_locales\en\messages.json
                                                                                          • Size 450B
                                                                                          • SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                          Submit Download

                                                                                          memory/4408-1327-0x00000208001E0000-0x00000208002E0000-memory.dmp
                                                                                          Download

                                                                                          memory/4408-1367-0x0000020801C90000-0x0000020801CB0000-memory.dmp
                                                                                          Download

                                                                                          memory/4408-1358-0x0000020801E70000-0x0000020801F70000-memory.dmp
                                                                                          Download

                                                                                          memory/4408-1392-0x0000020814210000-0x0000020814230000-memory.dmp
                                                                                          Download

                                                                                          memory/4408-1357-0x0000020801A30000-0x0000020801A50000-memory.dmp
                                                                                          Download