d8fd1816cf8f6f477fdaa713f667af672135b7294dfdff5504255ef4a4cce2ff

Analysis

user interaction
yes
max time kernel
599s
max time network
600s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
02/11/2026, 02:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
tabela_de_valores_240426.pdf
Size 454KB
Sample261102-cls8msdh73
SHA256 d8fd1816cf8f6f477fdaa713f667af672135b7294dfdff5504255ef4a4cce2ff
MD5 e9b2345adf83410e9a21ea590de9cb61
SHA1 2b64b342b24f136184cec3dc7672fe671e99c1f1
SHA512 f5b0dcf673465f59f6d68e327cab628d00a4af9843aa9847a141c38039893606bcd5aceb695afe4e0a1a66a32e10aa28f38f2e81f1e048532467041a45e0ec7e
SSDEEP 12288:JNH/lBbvzWoYdORyyA0sC4zLwxEhZVGKAnZJ5Z3:XvmAw0B4zVmZZ3
TLSH
T181A412AF9858B08C6EC35BCAACC8294F41CDB071666B82F53068D6955F31DDF4F69238
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery spyware

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Location Discovery: System Language Discovery 1 TTPs 8 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RdrCEF.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AcroRd32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RdrCEF.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RdrCEF.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RdrCEF.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RdrCEF.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RdrCEF.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RdrCEF.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3392	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	AcroRd32.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	AcroRd32.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION	AcroRd32.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\Local Settings\MuiCache	MiniSearchHost.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1826067017-2692080558-3687773357-1000\{C09CA3BD-3BBE-4D29-B656-98BAD9515B3E}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1826067017-2692080558-3687773357-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 24 IoCs

pid	Process
3940	chrome.exe
3940	chrome.exe
5976	AcroRd32.exe
5976	AcroRd32.exe
5976	AcroRd32.exe
5976	AcroRd32.exe
5976	AcroRd32.exe
5976	AcroRd32.exe
5976	AcroRd32.exe
5976	AcroRd32.exe
5976	AcroRd32.exe
5976	AcroRd32.exe
5976	AcroRd32.exe
5976	AcroRd32.exe
5976	AcroRd32.exe
5976	AcroRd32.exe
5976	AcroRd32.exe
5976	AcroRd32.exe
5976	AcroRd32.exe
5976	AcroRd32.exe
3940	chrome.exe
3940	chrome.exe
1648	chrome.exe
1648	chrome.exe

Suspicious behavior: LoadsDriver 3 IoCs

pid	Process
676	Process not Found
676	Process not Found
676	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs

pid	Process
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe
Token: SeShutdownPrivilege	3940	chrome.exe
Token: SeCreatePagefilePrivilege	3940	chrome.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
5976	AcroRd32.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe
3940	chrome.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
5976	AcroRd32.exe
5976	AcroRd32.exe
5976	AcroRd32.exe
5976	AcroRd32.exe
5976	AcroRd32.exe
2932	MiniSearchHost.exe

Suspicious use of WriteProcessMemory 57 IoCs

description	pid	Process	procid_target
PID 5976 wrote to memory of 2252	5976	AcroRd32.exe	80
PID 2252 wrote to memory of 5376	2252	RdrCEF.exe	81
PID 2252 wrote to memory of 5296	2252	RdrCEF.exe	82
PID 2252 wrote to memory of 5296	2252	RdrCEF.exe	82
PID 2252 wrote to memory of 5272	2252	RdrCEF.exe	83
PID 2252 wrote to memory of 5188	2252	RdrCEF.exe	84
PID 2252 wrote to memory of 5188	2252	RdrCEF.exe	84
PID 2252 wrote to memory of 5500	2252	RdrCEF.exe	85
PID 2252 wrote to memory of 5504	2252	RdrCEF.exe	87
PID 3940 wrote to memory of 3944	3940	chrome.exe	89
PID 3940 wrote to memory of 3392	3940	chrome.exe	90
PID 3940 wrote to memory of 2440	3940	chrome.exe	91
PID 3940 wrote to memory of 2440	3940	chrome.exe	91
PID 3940 wrote to memory of 3896	3940	chrome.exe	93
PID 3940 wrote to memory of 3896	3940	chrome.exe	93
PID 3940 wrote to memory of 2316	3940	chrome.exe	94
PID 3940 wrote to memory of 2380	3940	chrome.exe	95
PID 3940 wrote to memory of 2316	3940	chrome.exe	94
PID 3940 wrote to memory of 2380	3940	chrome.exe	95
PID 3940 wrote to memory of 3096	3940	chrome.exe	96
PID 3940 wrote to memory of 3096	3940	chrome.exe	96
PID 3940 wrote to memory of 4688	3940	chrome.exe	98
PID 3940 wrote to memory of 4688	3940	chrome.exe	98
PID 3940 wrote to memory of 4532	3940	chrome.exe	99
PID 3940 wrote to memory of 3168	3940	chrome.exe	101
PID 3940 wrote to memory of 3168	3940	chrome.exe	101
PID 3940 wrote to memory of 6080	3940	chrome.exe	102
PID 3940 wrote to memory of 6080	3940	chrome.exe	102
PID 3940 wrote to memory of 4516	3940	chrome.exe	103
PID 3940 wrote to memory of 4516	3940	chrome.exe	103
PID 3940 wrote to memory of 5772	3940	chrome.exe	104
PID 3940 wrote to memory of 5772	3940	chrome.exe	104
PID 3940 wrote to memory of 5708	3940	chrome.exe	106
PID 3940 wrote to memory of 708	3940	chrome.exe	107
PID 3940 wrote to memory of 2924	3940	chrome.exe	108
PID 3940 wrote to memory of 6128	3940	chrome.exe	109
PID 3940 wrote to memory of 6128	3940	chrome.exe	109
PID 3940 wrote to memory of 5444	3940	chrome.exe	110
PID 3940 wrote to memory of 5444	3940	chrome.exe	110
PID 3940 wrote to memory of 3872	3940	chrome.exe	111
PID 3940 wrote to memory of 3872	3940	chrome.exe	111
PID 3940 wrote to memory of 5168	3940	chrome.exe	112
PID 3940 wrote to memory of 5448	3940	chrome.exe	113
PID 3940 wrote to memory of 5168	3940	chrome.exe	112
PID 3940 wrote to memory of 2936	3940	chrome.exe	114
PID 3940 wrote to memory of 2936	3940	chrome.exe	114
PID 3940 wrote to memory of 3932	3940	chrome.exe	115
PID 3940 wrote to memory of 3932	3940	chrome.exe	115
PID 3940 wrote to memory of 2056	3940	chrome.exe	116
PID 3940 wrote to memory of 2056	3940	chrome.exe	116
PID 3940 wrote to memory of 1528	3940	chrome.exe	117
PID 3940 wrote to memory of 1528	3940	chrome.exe	117
PID 3940 wrote to memory of 1648	3940	chrome.exe	118
PID 3940 wrote to memory of 1064	3940	chrome.exe	119
PID 3940 wrote to memory of 1064	3940	chrome.exe	119
PID 3940 wrote to memory of 3376	3940	chrome.exe	120
PID 3940 wrote to memory of 3376	3940	chrome.exe	120

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\tabela_de_valores_240426.pdf"
1⤵
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:5976
- C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
  "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043
  2⤵
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:2252
- - C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=2A59501DD5E5E2C81033C10E8651A20D --mojo-platform-channel-handle=1760 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
    3⤵
    - System Location Discovery: System Language Discovery
    PID:5376
- - C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=EA3F6AD7E2E718EA1540CED5BB800DD6 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=EA3F6AD7E2E718EA1540CED5BB800DD6 --renderer-client-id=2 --mojo-platform-channel-handle=1772 --allow-no-sandbox-job /prefetch:1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:5296
- - C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=49CEB02DBCE9938912AAA9254DF8B1A0 --mojo-platform-channel-handle=2332 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
    3⤵
    - System Location Discovery: System Language Discovery
    PID:5272
- - C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=685DAE7EA4FA37B594D32C4A9EC4FC7D --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=685DAE7EA4FA37B594D32C4A9EC4FC7D --renderer-client-id=5 --mojo-platform-channel-handle=2352 --allow-no-sandbox-job /prefetch:1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:5188
- - C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=6B8B1D0D5DFA79BA53CA87061A715D29 --mojo-platform-channel-handle=2700 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
    3⤵
    - System Location Discovery: System Language Discovery
    PID:5500
- - C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=F86DFA2A10A6C2772EEDB38F1CC255D6 --mojo-platform-channel-handle=2816 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
    3⤵
    - System Location Discovery: System Language Discovery
    PID:5504

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcfe4ec728,0x7ffcfe4ec734,0x7ffcfe4ec740
  2⤵
  PID:3944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1828,i,14416845780261600843,4780676053312697104,524288 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2116 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1640,i,11938486044355782009,1218574193153473128,262144 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2004 /prefetch:2
  2⤵
  PID:2440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=1820,i,2352215378861617773,12507469951764893708,524288 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2404 /prefetch:13
  2⤵
  PID:3896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3236,i,4520497437083002093,3201968377273343218,2097152 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:2316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3284,i,18359259658647817098,9834281050817785669,2097152 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:2380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4292,i,1529867949481692129,11494774868955918285,2097152 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4308 /prefetch:9
  2⤵
  PID:3096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4836,i,1326311751579674048,12514061928944324290,2097152 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4728 /prefetch:1
  2⤵
  PID:4688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5544,i,3149286958275049791,3228434151677662752,524288 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5560 /prefetch:14
  2⤵
  PID:4532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5948,i,8405206715808034450,636941412275316071,2097152 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6020 /prefetch:1
  2⤵
  PID:3168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3608,i,17450785684174871134,2781906597482775450,2097152 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:6080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3324,i,8545963253495154963,10782593451642243362,2097152 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4900 /prefetch:1
  2⤵
  PID:4516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5944,i,13975624677833158152,11086469640823547429,2097152 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5960 /prefetch:1
  2⤵
  PID:5772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6288,i,12570868955485750441,4048158121098056624,524288 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6296 /prefetch:14
  2⤵
  PID:5708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6264,i,7802976366853862821,15160545805838319284,524288 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6360 /prefetch:14
  2⤵
  PID:708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6292,i,12549264795371355720,10767423032285038271,524288 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6280 /prefetch:14
  2⤵
  PID:2924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4356,i,2789277996380289032,10528304400980001620,2097152 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4344 /prefetch:1
  2⤵
  PID:6128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5416,i,6239347557002800521,9222939234917515014,2097152 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5644 /prefetch:1
  2⤵
  PID:5444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3324,i,593781399014571617,1276507334189345264,2097152 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6508 /prefetch:1
  2⤵
  PID:3872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3448,i,16836046521351731400,11060232007802629156,524288 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6648 /prefetch:12
  2⤵
  PID:5168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3552,i,4366254704821836950,413089420452648942,524288 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6680 /prefetch:14
  2⤵
  - Modifies registry class
  PID:5448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6052,i,6618317839969837686,513824532947943328,2097152 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6136 /prefetch:1
  2⤵
  PID:2936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5992,i,683312161437356752,133025648130748982,2097152 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4404 /prefetch:1
  2⤵
  PID:3932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=5860,i,16385004913722683740,13370435410196045589,2097152 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5840 /prefetch:1
  2⤵
  PID:2056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6872,i,2635534056818294219,14917142469236046430,2097152 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6856 /prefetch:1
  2⤵
  PID:1528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6880,i,6916912286637871112,8101642033491514726,262144 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6916 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6924,i,1525386630788048805,12015148040536935588,2097152 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6888 /prefetch:1
  2⤵
  PID:1064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4508,i,14672991431211278352,12102831091950703074,524288 --field-trial-handle=2012,i,14805835805917871671,4248215689264715577,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6452 /prefetch:14
  2⤵
  PID:3376

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3352

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:656

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2932

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

ReaderMessages

Path C:\Users\Admin\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages
Size 64KB
SHA256 29e62d1d7edbdcf67be9dc3d2e62ff86aefa1b974a867adcd564342652f5b134
MD5 342d4b3ffb09fb033a04e304076250a1
SHA1 5056d0283589eaf3b749cb5ba46fa0af93adc00b
SHA512 9bfbd75ffb7039e6eb8402656dced9807f1fb993e55d417afe32d05f4349e28483c0bc76c0b260ef26a4c1ecded4a75e73d10e5cd05c6cf65bd541c9393fd078
SSDEEP 384:yeNtdThatELJ8SWvDTuGmQgZsLglKhubvGZsLRZh+vS4:e+eUZsLQCZsL3hUS4
TLSH
T14D53CBDB26348040CA07A8BBADB5731BB662D0BFC1C6F1E87E858A1780F453D9775687
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReaderMessages

Path C:\Users\Admin\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages
Size 36KB
SHA256 b1b77e96279ead2b460de3de70e2ea4f5ad1b853598a4e27a5caf3f1a32cc4f3
MD5 b30d3becc8731792523d599d949e63f5
SHA1 19350257e42d7aee17fb3bf139a9d3adb330fad4
SHA512 523f54895fb07f62b9a5f72c8b62e83d4d9506bda57b183818615f6eb7286e3b9c5a50409bc5c5164867c3ccdeae88aa395ecca6bc7e36d991552f857510792e
SSDEEP 24:TLiXlzkrFsgIFsxX3pALXmnHpkDGjmcxBSkomXk+2m9RFTsyg+wmf9Mzm+Zs3tGl:TqlmFTIF3XmHjBoGGR+jMz+LhT
TLSH
T178F21D566E241E3CCA9EC336340836C34D78023DACF3B762A58A719747AD181E37D6E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReaderMessages

Path C:\Users\Admin\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages
Size 56KB
SHA256 111dac2948e4cecb10b0d2e10d8afaa663d78d643826b592d6414a1fd77cc131
MD5 752a1f26b18748311b691c7d8fc20633
SHA1 c1f8e83eebc1cc1e9b88c773338eb09ff82ab862
SHA512 a2f5f262faf2c3e9756da94b2c47787ce3a9391b5bd53581578aa9a764449e114836704d6dec4aadc097fed4c818831baa11affa1eb25be2bfad9349bb090fe5
SSDEEP 192:wedRBvVrThe4p4/KhTB4p4CitZtkZsLRGVDbw6H3ph+v3YQa9:weZdThkKhBvkZsLRGlzh+vS9
TLSH
T1C94379DF2A348110CA0768BABD71771BB655D0BFC1C2F0A87AD68A1780B463CE775687
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

045194d0-4479-4a40-9777-855c730870f1.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\045194d0-4479-4a40-9777-855c730870f1.tmp
Size 269KB
SHA256 54df0e86aad2d5cf2163a4f88bfc5057284fff7e8dea9f0bfb2962574056391f
MD5 25d66d210d1971073a9a1a2fcfbfaea4
SHA1 b726024b87cb1f939d8e7da3fc755be595e1f272
SHA512 ee6acd1a688835332d5d5cdfda3a8a134de43b9901a123dcb627c64e629603f6726fde42d28a5c9018bc22c9e62bbc2d56e44b3a99741a96294b15e2d6ae3738
SSDEEP 6144:f7yQcfSxZLpN1YNTRJsX0qZcpYPgv3/t4fLJ0L6nGJxi3bzqapJjg:f+fqrpnIlJsXzhQ3/WXUx8zvpJ0
TLSH
T10F4412F1D1E1AC2ECB77DB92E0777ED08EB1A9C1888C9F5009F24D991B5A9604707E93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

07e4dedd-12c1-440f-834b-9eaf0dd2fd87.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\07e4dedd-12c1-440f-834b-9eaf0dd2fd87.tmp
Size 269KB
SHA256 27a9a12786bee318a2159c55adf03545dcf483664ddc55c4a9bd907f5eddc10e
MD5 938a04be338f112c41a2ffcaddc22c51
SHA1 964e645be05d83f441e02af6bca475649e261d41
SHA512 d83908c875ef12a955d560a28b2c9951f19d7b88cd0342a40536cb0f634f9e74232123dbb6201285d7010ba770730b0b24e9c618a416d62dd1abec987e8bd3cf
SSDEEP 6144:u7yQcfSxZLpN1YNTRJsX0qZcpYPgv3/t4fLJ0L6nGJxi3bzqapJjg:u+fqrpnIlJsXzhQ3/WXUx8zvpJ0
TLSH
T1484412F1D1E1AC2ECB77DB92E0777ED08EB1A9C1888C9F5009F24D991B5A9604707E93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1938bab4-55dd-4775-8125-903da58af48f.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\1938bab4-55dd-4775-8125-903da58af48f.tmp
Size 270KB
SHA256 8953b826343665906a4dc84b3a8aae0de75fe5b1eb189cea53a677e0766f45f8
MD5 98d8ccec11ed1fc77eb2197242bda513
SHA1 3a2fbf9ed79043b8244c06ccc979a42540286996
SHA512 3727148c11769410661ff3086028de2d7ce47771f65d7b040153e848e6f8efefa6a87ff886685578265e86c3079a9efec854ca6906ceff4394a4b1e2f1e18703
SSDEEP 6144:m0yQcfSxZLpN1YNTRJsX0qZcpYPgv3/t4fLJ0L6nGJxi3bzqapJjg:sfqrpnIlJsXzhQ3/WXUx8zvpJ0
TLSH
T1A64412F1D1E0AC2ACB73DB91E0777ED08EB1A9C68D4C9F5409F24D891B5A9608707E93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5bf303ca-c35b-4670-b80a-c42d1aa1f9fb.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\5bf303ca-c35b-4670-b80a-c42d1aa1f9fb.tmp
Size 270KB
SHA256 a3814d3600bb23841f3f2663e573f89af0666f6acc66e588948a7d260b532cfa
MD5 710dac179edc631328333891c792428f
SHA1 794a71efae11f819cf16d85aa8530827b330cb9a
SHA512 b336189e74f5d13f1ea100a76895ff0aa7b88d44a4d434b28eb48c9f38b783ba1b430475d67a1b4b46bd675bb42d68bd6b864e2445713e7cafc06b319f7629cd
SSDEEP 6144:30yQcfSxZLpN1YNTRJsX0qZcpYPgv3/t4fLJ0L6nGJxi3bzqapJjg:PfqrpnIlJsXzhQ3/WXUx8zvpJ0
TLSH
T1594412F1D1E0AC2ACB73DB91E0777ED08EB1A9C68D4C9F5409F24D891B5A9608707E93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6c671bf6-24ee-4a50-ae03-086a32407619.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\6c671bf6-24ee-4a50-ae03-086a32407619.tmp
Size 130KB
SHA256 67fb58bbe77e4f9735477d6f501c57e65d71ab96ff56587019f86e5e8f77a62e
MD5 62a9cdfaaa0ef16776ea253a27fc934f
SHA1 f50101f35f840ee5f648ce7ae92b6ccf87644f4d
SHA512 10fc899900395919e9360a8a4d97665adeed15acb6e4e6f90a8135b0bc0573ecef1beee55fd9629310db63d6933f82b8cc2919754c2cbdfe1968f2de68c17bc7
SSDEEP 3072:sH2By3RJD4diWs9aJ0xN6nGvw8xUNTfd3OUhLHfS60ApJjk:Ut4fLJ0L6nGJxi3bzqapJjk
TLSH
T1B1D302F0D6E06C7ACBF7EE4145756E948F71D5C289CDBE2409F9881816CEA344A13EA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

00127282-d196-4657-8b04-05c53e218085.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\00127282-d196-4657-8b04-05c53e218085.tmp
Size 14KB
SHA256 2cb98c5af897753a0aed033d3d72a8be262174bca3e2fb8f89fbc10b8093fbff
MD5 efa99855ef0c0c8ea4a0f736365d96b9
SHA1 5e6acc88fc7da24e8438b777b372d3ac5eed9026
SHA512 9271aa839a8213929f22ae129ee5998aabdcb26795bd4919da5755ae9f46b2175e33c3c9c5ed987405b556475bc3f93e753e011db17304b870b846d9bd3eae79
SSDEEP 192:8RZlcBz26H+bv78pmPRpoXoSPcpvi9/Hsb+WNk/uBut5WLrzolSWJ+4xwI2qITcN:8Rzmz21jQiXw1twk/WXjdjU2P7e
TLSH
T13E62B82AA8547A7B5CDBD229F825BB5AE3F5103154D03EC4EAFC8D2C14E7ACD2217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2e1599f2-2a55-4c6e-b107-df63a9dadae5.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\2e1599f2-2a55-4c6e-b107-df63a9dadae5.tmp
Size 13KB
SHA256 07eb2cfe718c3f0ce88e7c7d624485f0191041d8ed1d338ab56faad6a286eb77
MD5 67b8ca17274dc56226e027225e687389
SHA1 a90a95a635580ba98a40157faf4ed1585d3b63f1
SHA512 b136b467029902b4e9383ddcfa6c61cd93b78b662e8cf568fe20be86277019a1b7fb9ccbcab354f1b9e16572fe7a0210775d6d6ce032922056db0f383c05a110
SSDEEP 192:ERZlcBz2VHC6Ev7bpmPRpoXoan5i9/Hsb+WNjlBf77dFYxwI2MITcVyIsnAUgraJ:ERzmz2gfPiXwUtwXf025Me
TLSH
T19B52B62AA8546A7B5CDBD229F925BB5BE3F5103250943FC49AFC8D2C14E7ACC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

390a57b4-9e39-4155-b659-892b8581b979.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\390a57b4-9e39-4155-b659-892b8581b979.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

6482a4a9-3b97-48a6-b53e-67867f5011fe.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\6482a4a9-3b97-48a6-b53e-67867f5011fe.tmp
Size 12KB
SHA256 f2782813655abe3550b86a2f537a14abbc54b1395848087ce9f2f0cb32f2e2ce
MD5 682f8f0be31d29890c7cd682509a5591
SHA1 a9e7d95414fdd977be93df0aad23c94856bc3728
SHA512 282c07dc2308325d2ca84a25d4380489efb121207fd420e98f3ca652349cf98b90ebdfba6f53b4ca0ce6d518484b5cd55d13a403d925105c09d9551ef4c7dc1d
SSDEEP 192:ERZlcBz2VHC1v7bpAPRp2Xoan5D9/Hsb+WNjlBf77dF2ZITlVyIsnAUgtaJ:ERzmz2gFPUX+FtwXf2S38
TLSH
T1CF42A52AA9546A7B5CDBD229F925BB5BE3F5102160D43FC4DAFC882C14E7ACC2217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7151689d-276c-41c1-b766-8c44e86449f3.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\7151689d-276c-41c1-b766-8c44e86449f3.tmp
Size 14KB
SHA256 f9e322976d7b6430f87587470373a2d6381804bda170740a3dd846f249d0e54e
MD5 f39ca6b0590efe769eef2be5dddd5aaf
SHA1 379d8934cc813b60ab38e705f262fdfc5afe7f4e
SHA512 540256a8fd1d3aa7a090cf5453a8230d249fac2fbf303980bd4a05f3be5ff1da892d9d77655d0133604bfe6742b5fd8d74ed891a99e26fbce83b16eb9dff70b0
SSDEEP 192:8RZlcBz2VHBVv78pmPRpoXoSPEpvi9/Hsb+WNk/uBut5WLLrIlSWJ+4xwI2KITcN:8Rzmz27lQiXw9twk/WXT9jU2v7e
TLSH
T16862A62AA8547A7F5CEBD229F815BB5AE3F5103154D03EC4AAFC8D2C14E7ACD2217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8507cc94-0b07-4b75-9fd8-c7560b39a3f3.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\8507cc94-0b07-4b75-9fd8-c7560b39a3f3.tmp
Size 14KB
SHA256 e167f7ad76a475fc0a77e3cc584dbe4ef911082ccee7f758b844cbca802e673f
MD5 5e47a46a0dd8ba8699aeb63323feb384
SHA1 f2998f57d415305179f31a10977ccea80b97c60e
SHA512 8e9572d52cb54c81cadf8355d2db3d9d60d900a1578843eb6a006fe60429d404a1e3d30ea4ffc03e87319145279205e8552ab2c1460c91e996f80d5b5282c99d
SSDEEP 192:8RZlcBz2VH+9v78pmPRpoXoSPcpvi9/Hsb+WNk/uBut5WLrzolSWJ+4xwI2qITcN:8Rzmz2g9QiXw1twk/WXjdjU2P7e
TLSH
T11262A81AA8547A7B5CDBD229F825BB5AE3F5103154D03EC4EAFC8D2C14E7ACD2217817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

98158bbc-c5c9-42cd-aaf6-f1d898551e5e.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\98158bbc-c5c9-42cd-aaf6-f1d898551e5e.tmp
Size 12KB
SHA256 9bdccac97612182e669a306b7f5a6c688076293f66ee93d037ecedf9d646777e
MD5 27f21a01eb853b0a49d496510c46a07b
SHA1 22ad3b44933e45d9e06045f299beca9aba0d8ce6
SHA512 8ca80b1ec9f645e84cf191c4a7e979fe94c55932bdad8a698d44c4934301745c966ee289c2358ed8983ae73829b26f3176c4340160b82b64c23d1bacf0f2564d
SSDEEP 192:ERZlcBz2VHCJv7bpAPRp2Xo5/9/Hsb+WNnf77dF2ZITlVyIsnAUgtaJ:ERzmz2gJPUX+6twDf2S38
TLSH
T16F42C42EA9547A7B5CDBD229F925BB17E3F5102260D43F84EAFC882C14E7ACC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 67cde8afd1bcb779bf77e47a306fa635b44e97841a3c8d15e680714f1757a60f
MD5 87f8278158e0a37c5bc5583c5a863f64
SHA1 d65a012f6ff6fb9b7ad6559ca0098ac01b63d824
SHA512 e0a318e2dc68535a8ab99962601901ebce9802a8715c7e0b32268541a95fc7e23f3b9db80ea967b3167061725470ddb537f5c5cc164edba2a11869aa53386c3e
TLSH
T1AEE02B79C821FC3718F9072C50544B49E74017172750599F7A3D911C8F7063606D9D2C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005
Size 77KB
SHA256 cd5b9997fa362be16ddb41e19a029a16e7e114a67b46e9833ac0fa7b09c8d51f
MD5 3d4ac487074103ee43a5bf024eb8b068
SHA1 f7f6302e816f76b3843e351bcf7e1138ecaea1b1
SHA512 98527e717843ab3dc3cb5458dee78f63c087f52eddb12b94c376a27cc003a5c98801296726acc079113e74c8e5044f32f2f7358479503104686dabb17a90f25f
SSDEEP 1536:cuIOAq5It8HIZTg/jyJU30LEvnBSRj9gmasW5fQUrhCfTuqRJm:G7t8WTg/O+kLin4VuJUk
TLSH
T1FE730260014D5DABF124EE16827981C663D96BA9BF28F6DEE217032F30F8105A7DCC6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008
Size 38KB
SHA256 7165713d3e1a610399471a5e93d5677508f62ef072c1151e72273bf4bd54f916
MD5 9436affc97843765a966b3568fa7e5ec
SHA1 7bfda74bb30589c75d718fbc997f18c6d5cc4a0b
SHA512 473ec3a843c33e18d6d194651fe11353fcd03a7959225faeabf8c77484155ea6a7bccb72dbaf2093ed53c408faa3be9f6fc907f7a5ddf8223375f9d09b504456
SSDEEP 768:eUEh2+iKBVQbBhu8vjenqz2Ez6Y/AxHLEaP72sV9qKYbDblXqhP8qwFSE3uk:eUEEoBVQDjeQaLnP2pfZTqgSEB
TLSH
T11703F112148F7FA1C244F224A4EFE416ACC3F565ABA15E6980B8B7C7010E3C657A46FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000009

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009
Size 491KB
SHA256 d7df279473038436444f0a90a87bd6a9afcf414f35502eba2ce7ee59b114097c
MD5 364c87f34c6b4ff9b4a2d6a0ac6053b6
SHA1 633f0a341179a1e54bb611917cc830e3d95b28e5
SHA512 650568bdf2851d93cf92d0dc2194a8109d913bee05cd5d8e848eadcaa169bd70b2b94d025bbd501837ed2007c197574a57fa4580fda86ecd901eb554265ba9e2
SSDEEP 12288:Iehqh36t12ol6kHAFj5gBiLbCEV6HhwytNMt/5hx:j4G7tHAFciXZONtNMtTx
TLSH
T19EB423D503861BED85B994364BC0E18B5E15352F296D02CDEDD7808FA7A287BBB740B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
Size 91KB
SHA256 b307793995b4830d9a339fcd652525de3ec50e70621bc57aa58036b283bcb683
MD5 e47138db3f19c9704f90e99577b00a8a
SHA1 baf250565207e01b374c0ada6f319289e0d42307
SHA512 7a258382ceaacc7bab4b358967e7bf3b55287e53bfee3e4ca4f153d2975b3c6b4993a447323cb2086fb165076ffe102107a2e51157cfa65bd5fa766c4fb3f966
SSDEEP 1536:iUJMoWKKDilhxWP2M2DD3ef1SfUb1CLGQjGhbmvkLUjWLgtdV0rGg6PYAKY/K8QT:zRKDPPZ2+fmUb1CLGE4RUjWIwGzY7R/t
TLSH
T1F79312029D65CB45DA210F91F6EDDEEFC014F2CB021D0E0D5882E732D8E52C96EA99AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c
Size 437KB
SHA256 a451b8791f9183f16a2b30959f9f69e20f35117f8ca6e34e463916869328f3c8
MD5 15d9ce7fe8b446c91cc0598983dde50a
SHA1 b2ad1e9b11a41f5176e3cc495dac68aa26e0955f
SHA512 39e14f23bbde8278b586057eeb648777afc1e6d11b71f3e5529688341f7868b61d0d7ef43cc925189a70def4a6b53e863a06fc8d36e7551c9a50745be6607529
SSDEEP 12288:9SyJNj5Vy52pw6eyroMIW3/dJhlzOH7pVUa0Uiku:9vJzV1pw/yroMfCIUfu
TLSH
T10B9423CFDB2108E7FE76C411CDAD9FE8049BA554056D8CB35BB6066D825A0808636FEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d
Size 64KB
SHA256 29be805e584846773ca4680684329f14f96a67c40cfa4f324bf2ff3d649c9202
MD5 8a9a62b9849e9a69c0d3ff48b60cc09e
SHA1 70ffb0af43a0f61f7d008f7bfd4fad29884db8b5
SHA512 1174490f949e412bbd382dba0a18ab9e76fdbdbd72e3ed107a26981316c1cfc8b7d190968c5b259df8fda7218c0d83b9ecb72bda2cf0132287e9888e1c0ccb52
SSDEEP 1536:BPMpfjOYlC2ADpZ49ymMuyqQ4ZsC6odzrCO8fNcXcKo0jN:9MoH2uEynqQ4y9odzrCOmNTK7jN
TLSH
T17E53025667B0EB99CFDD07E27A4AF947380747422BCC0571C5918F8A3F218D88AB9E58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e
Size 55KB
SHA256 38ef9c5faf8670ccedd6514c9aad534a59c7cf3d6f44f7477e0960550d66c9ff
MD5 2c454d24cbfd09071a0ad7f8b1a1db12
SHA1 44605c52039a9fd74063f56c32bad797281daff5
SHA512 e61bf82632496a6a41fefac3145074def2b641aad4fef5a33f72980a850f77e2dba9664c904ef8a6693c359ead8caf890abbd08d592d3207b51533177217b276
SSDEEP 1536:7jRUmr1uOLl5rN6O8aHf5Zj679cXDuR14Yxu9:/RFVl/6OnHf5Zj67KOpxu9
TLSH
T149430270790C509553D364EA87BFABD54413E2055E990E221F63FBFA1239B98B06CF68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000010

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010
Size 69KB
SHA256 505bcea989edf50099e9f59b875e622df938dab33ef37ca0b82fbaed751c8a4c
MD5 8805d657ab8ae87f8c6e407a4d6982c1
SHA1 65d2eb8114555eb5be293ea8aebe98edbe24a6fc
SHA512 1859d3db35cad7fab9ad61ccb6f0cd60e7b52e916e9c2dedf097e99bca38868198a8609d708803a2ed96ac73a48f72f4f1ed06ada0a90f18d35ddfce86eb0c2f
SSDEEP 1536:1YlUHLrQ0prHiuoVcAZCh9JcCeAplQqLcSFOdhYOe8OLD8:KlUHLrQ0prlC1ZC3pnDLY+OeNk
TLSH
T17F63028111BC5EFD53BEE511001A1BB7162198AB18FE0D2E74DE271D2B14EA189C3EED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b
Size 55KB
SHA256 01b2f8e052130c6cffb1f482ae78597901a95ac846e4ce1dc604fc6fdd3c0722
MD5 913326a03aab272572bae6ca372e1a0c
SHA1 898e3f48781254e55b8275cbe3601e28fff3d64f
SHA512 5fa261944851049b5014f3932409e7cabb722afa9059cb3b7e1b6099d1cdf6cb69d428c70d106af4c28cba702b7ee8a3bac04d0e8cbc1cfc127809bf96a29ba3
SSDEEP 1536:HRgY1Fte+4uYGoOEzyT4nZsiBuOil/tSS:HRjt74soVeoZBB5utL
TLSH
T1FB430170C1C4A59AEB4F65CCB48C6A503DE604396339B82EB9D0DFA0F1578D49EA60BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c
Size 29KB
SHA256 b2c29aeb7105e6b5fe0967b44db1c258606eaf0dc8a50d87d47147e424526e53
MD5 35dae49f324dd147b81ab69b50b5de99
SHA1 0f795fadad50c2e438efccd792f5b16f4a08cab8
SHA512 c46d1464d7e08b134a4f04435cb0dbb3ff820822d8f1c912c9ff4d52743fc05cbe388330417e691cc899ec9374ec0eebb7ed46f7b1f6715408b82ac7d1b3fd95
SSDEEP 768:Vmp+G+MCVLgYPjA4IBovNq6lts5ICGjsOD9equ5tJ:Vmp+GJSgYPjABoQ6A5ajzDwVX
TLSH
T171D2E1F4070E840A4043D03F29D883E0F50B0D2B8899D9EEBAC2F2F95D6A7E1321A95D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 927faf410a7588468aa1a04b15e52667420588499f89e9ac5c8d32106d677dba
MD5 9f4369752d7376a4d16af9b8482f7d54
SHA1 8c9f0b904f8c7e1bc16ccb4becf33e8e8ed1256b
SHA512 1919cc00b39b69d47039df94546073e98e295ed08291cc9b00926e5237689a423b0dc2a1867f4996f316b937a45c5092b4c14668ede009e94291545b7dd19f39
TLSH
T1B03178417898D8FACBF8347765EB189B65A472BECAC749A793B094309F432E1027F449
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 4b79dd151bef1804d1a9143a3a3966d7b8feda54c5354aa9785edfde7b244878
MD5 123d9469af9b6c747a66f754a643b0b4
SHA1 d416aa43aed6687e4e36cb97043943f53e426019
SHA512 b0e913025e5e254dbfbdd882b52a8d60da091d5171fc8a883fa160b56d8e702cee894490ee1d9038c9981aca25e24ae7609ffd7ae0fe8c93c9105ac11a5f186a
TLSH
T1855103817484CAF6CBB8247764E7594E35A4317A89C7BB57827584306F433E131FB849
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 d76cbbee8d3ff60e0ed12a90b561a6f579bb3c2fdb6dfa3a1ce94b03b9ee5f69
MD5 63736f3a20523077c1860c70ca28be31
SHA1 22484406624901a731c3c934f02db6c506fe7ee2
SHA512 a90b10bff93bcc774c52dbd2911b77e9d94a75b36c789903a8af13971bc2c1f99896d78cb61b8f271f591b5c3e722aa9c8b1e62939ecdb7ed4e5073241a84f6e
TLSH
T1ED510381B484CAF6CBB8247721E7554E34A431B9C9C7BB5642B58430AF033E131FB849
MD5 SHA1 SHA512 TLSH

Submit Download

26003505-b6ea-4eb0-8562-3bbbca178a23.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\26003505-b6ea-4eb0-8562-3bbbca178a23.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

3ce7778d-660a-41ec-89d3-8c482cb4b49d.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\3ce7778d-660a-41ec-89d3-8c482cb4b49d.tmp
Size 18KB
SHA256 7112947bdc83d144c6907cc127175ce4e50e63a9cce1b8bf1d81afbe0b627551
MD5 2634f3ee566cc1b6b00ff89aefec47a3
SHA1 408f6cb236de4ef9f4fe17a6ce70c2ae7eaa5d15
SHA512 15c84b0d7b1ae26a61d9c628cea2d8e8ad7cbca7aa879e5198403c98572246822de225333d1a91bd51a0c1a06293d87e58a4772adf912a2e087338e531bdf44d
SSDEEP 384:D0ujtixrCvLky0Xpg41JKJzU+i2KJgaIcT9eYPbOcVWCcgcnTNAcQR7BdVVvcDyA:yUCNMB324sX+7Brl
TLSH
T1B6828DF7C3E8862DD91152F4A7146E1FCE690928472C3D67C8E5EF8B93E1872D24064E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

57b9fedd-7435-450b-b3f7-1535446752cc.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\57b9fedd-7435-450b-b3f7-1535446752cc.tmp
Size 16KB
SHA256 52f2d1f9f11e7096abd8c88696d56ea5d4630c091659f1143a5aa04147061207
MD5 1dd0d242cc6c9590a73aeb88baf54df6
SHA1 2d1966dc63df27f8b9907ea839d64af8c5efeff3
SHA512 b42709dda54fc3211e91c79f2fe832e1d617aea26357cb54906ea2c55672cfdb80dff34355c9cc8f6d6da93adf8ae8abd08e8434a64326441cbedc809fe5cedd
SSDEEP 384:D0ujtixrCwzypEF2kNJJyJ11+i2KJ0VaIcT9eYPbOcVRCQgcnTNAciRJjd/VvcDg:CA/N3BLZ4ar+7Bx28
TLSH
T113727DF7C3E8C62DD91152F49B14AE1FCE690928472C3D66C9D4EE8B93E2872D24174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

881e2274-ba80-47ff-ad24-7d8efce3eef2.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\881e2274-ba80-47ff-ad24-7d8efce3eef2.tmp
Size 17KB
SHA256 739a21e0e5e91ce763322cdefc55e654cab33395dbfc717e656115fa8c5f1eed
MD5 72ea74f5a82e4ecc5b45c26a54f7b32a
SHA1 1fffbceaf4deba3b5de000796373bc647c11f1ed
SHA512 b6658b7420bb522cfb7ab7c7f41ee59bf4a0db883a0e4b087f9d35399c768471d0fde0e3ebfca24a9cb2bfcb75745b0ddf0cb4949dc2198d0fa4043ffb89ff40
SSDEEP 384:DpdJCIGuUvLky0Xpg41JKJzUWaIcT9eYPbOcVWCcgcnTNAcQR7BdVhN35vcDyimW:FU8NMBbI4sU+7Bdq
TLSH
T1E6728EF3C3E8C62DD81152F4A7146E1ECE691968472D3D67C8E5EF8B93E1872D28064E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9a54ad71-99e9-4131-8dd8-5b6ede27e999.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\9a54ad71-99e9-4131-8dd8-5b6ede27e999.tmp
Size 19KB
SHA256 74febe193e161615d876ab476207901c40b9bc692ef5e4511ed2184ce5dcfd51
MD5 90f35c010add6937c73b7747b437e2b7
SHA1 c1fbbeec680eefa9c62108f7c8c202cfe22da8d9
SHA512 8e5e3a9a6b7ece969f7a653a07dd1a02338c43bddc17f856925701de39ebaedc69cd6f7d94c41de87c1ce36e982dbdc35785cae107c5df1aac1e9feb41ef5cda
SSDEEP 384:DpdJCIGuUvLky0Xpg41JKJzU+i2KRaIcT9eYPbOcVWCcgcnTNAcQR7BdVnvcDyiS:FUZNMBlI4sU+7B8E
TLSH
T16C929EF3C3E8862DD81152F4A7146E1FCE691A6847293D67C8E5EF8B93E1872D24064E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c92acf69-5638-4a91-bf78-338fcd6d2c6d.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\c92acf69-5638-4a91-bf78-338fcd6d2c6d.tmp
Size 11KB
SHA256 72b48215c22706a482caaeeacc365f920897b801e7c0f6c93f40552931d1e8c5
MD5 755b6f86f367e142264e9f81a2e7b8b0
SHA1 184c54e57742be792782853dfbb6a8175d44c2d4
SHA512 018b79b494d8ab0d20216cae8127c904e0b25cb7766a801ed105ab7fba1cb009eabd561115258609de6ca7ee84f288fd87e547be9c50aa640e211e2a02b44245
SSDEEP 192:DpdJCIGuUvLky00pcaIcJWZCrj4FYNP+vOaPDe7VPbOcVWCcgcnsqNAcQR7e9dVg:DpdJCIGuUvLky00pcaIcJWZCrj4FYN2E
TLSH
T1B33290F3C3E8C62DD85151F4A7146E1ACE690A6847293D67C8E4EFCB93E1872D28064E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cec4dfd0-0a37-4d05-ad4d-5cfb7204ae44.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\cec4dfd0-0a37-4d05-ad4d-5cfb7204ae44.tmp
Size 18KB
SHA256 09851204f63c3493437e4f9ba2d0438a117c0dab55c35de4bd1473b659d322e7
MD5 7e456216e2b8a31b3f18d2b6c9b9bff8
SHA1 ce04edf5c922307f4c8318f78fa9560574f50c75
SHA512 26592ec98bb543ad138d54188ebf308496ceb77bba8f64f1fb7b07c4d45aaa2ed8cae1b8b3847706a3f42164e694fa7b7c273cafade25fd76e26c79ee4577088
SSDEEP 384:DpdJCIGuUvLky00pg41JKJzU+i2yaIcT9eYPbOcVWCcgcnTNAcQR7BdVnvcDyimW:qUZNMBlI4sU+7B8L
TLSH
T1C4829EF7C3E8862DD81152F4A7146E1FCE6D0A6847283D67C8E5EF8B93E1872D24064E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 168B
SHA256 083a978aaa7b59e2aee09d355af9d9e7bde3087d9a39c5fa9f2dea24d7ba57b5
MD5 9e57b5046ef768493d90fdac34c8c86b
SHA1 fb34e2ccb6a41b1279babadebc243a44f5801c95
SHA512 ce92e692aa7c491c42e25625c77191126c8f0e61db0846dbdbf26bfb6065945ec829940609eb771f52b7e3d56e8ab8cc23aa0027e392359111bd29229ccdf562
TLSH
T1F5C0929BC9452392E95203B019B2E0A87760AEB9D612179885E82A5AECB2330811B24E
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 120B
SHA256 c6fc9eaa1ef7adb9623e05146cbf5c2b8a33e4a6ca5cef7ff37ffebf36af4421
MD5 de18fc2065d0423bffefa53ec0056ceb
SHA1 0c4006053f2b707b2b37b19d018b07479e59a82d
SHA512 7113a5b29aea7c365a06b69ab80481afd8bb13adf7a247aa27efe3ebd0f31a1c454f4a6c0c92cc71b54f5559645039d3dded5c2c5800e80c9c78165180513d99
TLSH
T193B0120680416312C10103702155D4A872608F34D21213D541F01DA18835170421710C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 c54b54bd26632dd8957d439a85b88fbaa71e431d44a1b76ada80cb7afa490382
MD5 fc3e586a001a978e33f99bf65921cc7b
SHA1 97735814bfa4e0493fe4c0a2fcc5e7071f33f7d8
SHA512 a04c52d10fa15e3bc44219ec800a2f66e10728bc0728e0c4beed9f17d2c11f09da6f4dec40ffeb82988a7eab52cd794fcfe965806cf423a324d46242413a02a6
TLSH
T1EDB02280C002B223C00303F32BCA88C830B0CF22C2030202CAF00A32CC20A320022030
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
Size 96B
SHA256 9f7a1a4d2e729ef888f3f466cbb3e63e60ee8b8d9b72e145512e52e8b61e6f51
MD5 f2454d5bc3979c8d78da170503b946ff
SHA1 f3d32e44718850990f9b36a3819c3c4ca385335c
SHA512 069c295ebfd422ac2f454f72f55e4c18959479260dac5a728c5d4035ed606b2f11555e8f2bc059e1a97bbb1f840a4145a3f3a71f2ce27244d375ae08746008f2
TLSH
T1CFB0220800080CA3C3AA0FFCA2C200C0FB300E3003C30B030CB8A0B8CA322A2C283A00
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\FileSystem\t\Paths\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

c847190c-97b2-4abe-9da7-1c2b1855adc8.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\c847190c-97b2-4abe-9da7-1c2b1855adc8.tmp
Size 13KB
SHA256 10b84153b2fed4386c2a69b1ea51c1875ffbbbb3da4693f2f70ae1e9d6e12b1d
MD5 148845759a2221d5f66c671ef8997a54
SHA1 864d3ef7ca1a73bf060db7c3d613c55cbca5a5a3
SHA512 c28ee60f1c481b867bc39ba52de4852dd29d2bc7684a80c84814aec6e7d9670bcff1d27ecaf653598d050bf2b2ae915c98dfacfa726bea19e14d2715601c4927
SSDEEP 192:ERZlcBz2VHbVv7bpmPRpoXoSnvi9/Hsb+WNjlgutf77J+4xwI2ZKITcVyIsnAUge:ERzmz25lPiXwCtwe6wU2ZvMe
TLSH
T18052A62AA8546A7B5CEBD229F825BB5AE3F5103160D03EC4DAFC8D2C14D7ACD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d08b8aa5-409a-4542-a6f0-b6c5f8399295.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\d08b8aa5-409a-4542-a6f0-b6c5f8399295.tmp
Size 13KB
SHA256 897ec7be476d92097f8588123ccd608698b44b992e753891e8076a5abb580dc0
MD5 448605407993461db4c526ee560153c7
SHA1 d6042b64358926e9690fc25e7419202e23039769
SHA512 ade8e5c937ce71c8531425878a48477c63aefa2b84c288a415c9d082f1925f7274c0690a14b0c735ee5987b1efd8d159545996fd59f2ebe8d742034d6c6f5c24
SSDEEP 192:ERZlcBz2VHlVv78pmPRpoXoSnvi9/Hsb+WNjlgutf77J+4xwI2ZKITcVyIsnAUge:ERzmz2LlQiXwCtwe6wU2ZvMe
TLSH
T17152B72AA9546A7B5CEBD229F825BB5BE3F5103160D03EC4DAFC8D2C14D7ACD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5e540b4-d3a2-42ca-972a-9053dbf84f6a.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\e5e540b4-d3a2-42ca-972a-9053dbf84f6a.tmp
Size 17KB
SHA256 de13521758ef1bfcb2d2450b3cf0a7a99cd0970c06b92340bd4289551bfc2ad6
MD5 b0928f3b5aacd381a50cb79484995d2d
SHA1 ba2f982a9d1dd6c557ee7a37adadea8daab8b737
SHA512 af3e8c9148f12d0e4fb4988464bd2a8f2df2e47ea7c5f1cab56fe717533c7f2da51919aeb6a09e6a8b95119e5735947b80bbd19844feb7e8ffa58cbd1ddf81e1
SSDEEP 384:Q2j8z7KxkXqKf/pUZNCgVLH2HfgslO07pLuLceSe/XOD8P+ErU3fKHGFwjj9B:Q28z7KxkXqKf/pUZNCgVLH2HfgsI07p+
TLSH
T1E47209676C4C997B0F98CACCCC267A4FADB5024B65E9886443FA5C2903D4ACF110A2F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f5db994a-3255-4ab3-86eb-34df8919d61d.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\f5db994a-3255-4ab3-86eb-34df8919d61d.tmp
Size 270KB
SHA256 11a56de4eee16114bec2193c2d1f5b99b27015365fbea72bb8a9fd74a3311542
MD5 02782e83d921a211ce9fec3950e142ff
SHA1 b8873e338ccb27c01956193cfb5402c94d45640e
SHA512 ee8f4fd3bbb6279eb3273ae837e8bfd732906c4452b3b1d336b9cb5c96f50b66f18ccac379f6c95778a7834676fd039fcf005087bc8b7b4292ffd25d0459930a
SSDEEP 6144:n0yQcfSxZLpN1YNTRJsX0qZcpYPgv3/t4fLJ0L6nGJxi3bzqapJjg:ffqrpnIlJsXzhQ3/WXUx8zvpJ0
TLSH
T1ED4412F1D1E0AC2ACB73DB91E0777ED08EB1A9C68D4C9F5409F24D891B5A9608707E93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

memory/5976-251-0x000000000D300000-0x000000000D9F2000-memory.dmp

Download