Analysis

  • user interaction
    yes
  • max time kernel
    532s
  • max time network
    536s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    07/11/2026, 15:38

General

  • Target
    JoyDebouncer/JoyDebouncer.exe
  • Size 141.5MB
  • Sample261107-s263facz5v
  • SHA256 a62a9daae1e46d1cabb771f618db49e3b33308238b39e39d7d694bc0abbf8eac
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 31 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\JoyDebouncer\JoyDebouncer.exe
    "C:\Users\Admin\AppData\Local\Temp\JoyDebouncer\JoyDebouncer.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    PID:5072
  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe"
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2248
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7ffd3a39c728,0x7ffd3a39c734,0x7ffd3a39c740
      2⤵
        PID:4256
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1748,i,1815080151135351018,17636453886173447554,262144 --field-trial-handle=2044,i,2357376437637247980,8605172288220681774,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2040 /prefetch:2
        2⤵
          PID:4448
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2296,i,2850973763634375342,10340449826872878658,524288 --field-trial-handle=2044,i,2357376437637247980,8605172288220681774,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2300 /prefetch:3
          2⤵
          • System Time Discovery
          PID:3640
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2424,i,12264317098642629932,4831143259049436268,524288 --field-trial-handle=2044,i,2357376437637247980,8605172288220681774,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2608 /prefetch:8
          2⤵
            PID:4020
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3272,i,16523531983170753801,14238216525946849481,2097152 --field-trial-handle=2044,i,2357376437637247980,8605172288220681774,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3284 /prefetch:1
            2⤵
              PID:1684
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3292,i,7817328089329689912,11052841156343890263,2097152 --field-trial-handle=2044,i,2357376437637247980,8605172288220681774,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3356 /prefetch:1
              2⤵
                PID:3984
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4472,i,3606099280531873790,11833403961166470439,2097152 --field-trial-handle=2044,i,2357376437637247980,8605172288220681774,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4484 /prefetch:2
                2⤵
                  PID:4528
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4752,i,10857827655091797321,14604456719365683301,2097152 --field-trial-handle=2044,i,2357376437637247980,8605172288220681774,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4780 /prefetch:1
                  2⤵
                    PID:5060
                • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                  "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                  1⤵
                    PID:4788
                  • C:\Windows\System32\rundll32.exe
                    C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {24AC8F2B-4D4A-4C17-9607-6A4B14068F97} -Embedding
                    1⤵
                      PID:1040
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe"
                      1⤵
                      • Checks processor information in registry
                      • Enumerates system info in registry
                      • Suspicious behavior: EnumeratesProcesses
                      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                      • Suspicious use of AdjustPrivilegeToken
                      • Suspicious use of FindShellTrayWindow
                      • Suspicious use of SendNotifyMessage
                      • Suspicious use of WriteProcessMemory
                      PID:3628
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffd3a39c728,0x7ffd3a39c734,0x7ffd3a39c740
                        2⤵
                          PID:5060
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1744,i,16122711373563146542,9574905138162915562,262144 --field-trial-handle=2064,i,1544940476898591288,8415502408493153468,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2060 /prefetch:2
                          2⤵
                            PID:1912
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1920,i,4254124462915766401,4196960077541512641,524288 --field-trial-handle=2064,i,1544940476898591288,8415502408493153468,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2108 /prefetch:3
                            2⤵
                            • System Time Discovery
                            PID:4860
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2384,i,8775197540079859333,8210939697060086175,524288 --field-trial-handle=2064,i,1544940476898591288,8415502408493153468,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2568 /prefetch:8
                            2⤵
                              PID:3844
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3228,i,11562678880927661402,18442355068259467095,2097152 --field-trial-handle=2064,i,1544940476898591288,8415502408493153468,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3224 /prefetch:1
                              2⤵
                                PID:2676
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3232,i,13550138867416291108,7821744305164560917,2097152 --field-trial-handle=2064,i,1544940476898591288,8415502408493153468,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3280 /prefetch:1
                                2⤵
                                  PID:1632
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4560,i,9631673044963382620,279635221427955733,2097152 --field-trial-handle=2064,i,1544940476898591288,8415502408493153468,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4568 /prefetch:1
                                  2⤵
                                    PID:2908
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5300,i,13512649418033687770,18140780190906105283,524288 --field-trial-handle=2064,i,1544940476898591288,8415502408493153468,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5316 /prefetch:8
                                    2⤵
                                      PID:1776
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5624,i,17369881505343432998,663635004001439206,524288 --field-trial-handle=2064,i,1544940476898591288,8415502408493153468,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5612 /prefetch:8
                                      2⤵
                                        PID:4008
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5628,i,8285341570551923775,16961011089699252526,524288 --field-trial-handle=2064,i,1544940476898591288,8415502408493153468,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5652 /prefetch:8
                                        2⤵
                                          PID:1660
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5632,i,4317320324213039888,5269317391305050052,524288 --field-trial-handle=2064,i,1544940476898591288,8415502408493153468,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5576 /prefetch:8
                                          2⤵
                                            PID:4112
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5572,i,14041781781239606180,16231407708509804309,262144 --field-trial-handle=2064,i,1544940476898591288,8415502408493153468,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4704 /prefetch:8
                                            2⤵
                                            • Suspicious behavior: EnumeratesProcesses
                                            PID:4352
                                        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                          1⤵
                                            PID:4216
                                          • C:\Windows\system32\svchost.exe
                                            C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                            1⤵
                                              PID:3028
                                            • C:\Windows\system32\svchost.exe
                                              C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
                                              1⤵
                                                PID:3744

                                              Network

                                                    MITRE ATT&CK Enterprise v16

                                                    Replay Monitor

                                                    Loading Replay Monitor...

                                                    Downloads

                                                    313954bf-b75e-47b9-95cf-43d55cad417b.tmp

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\313954bf-b75e-47b9-95cf-43d55cad417b.tmp
                                                    • Size 274KB
                                                    • SHA256 a463e698c3b3c31fec0447c4a32391ba27dfe2ef79f53e7213d021c95672611f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    7d9d199d-8f1f-4c57-9696-9fba4e22695d.tmp

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\7d9d199d-8f1f-4c57-9696-9fba4e22695d.tmp
                                                    • Size 130KB
                                                    • SHA256 6a8081fe74b3ca66bb4ccbbb9eb4ad622a6845877af492b933c33101f9ae5b0a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    settings.dat

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                                    • Size 40B
                                                    • SHA256 4804f5345dd7a1abbf91d44a7d836e7cbb1ee9fa6385975e53c6f8ec96c6c47d
                                                    • MD5 SHA1 SHA512

                                                    16f3bbdb-6fcd-44a7-815b-4717a8694e58.tmp

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\16f3bbdb-6fcd-44a7-815b-4717a8694e58.tmp
                                                    • Size 6B
                                                    • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                    • MD5 SHA1 SHA512

                                                    374adf64-c10c-4242-ac90-dffa7929d151.tmp

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\374adf64-c10c-4242-ac90-dffa7929d151.tmp
                                                    • Size 12KB
                                                    • SHA256 5dc7550670674f7f481742b9d4a4cef61f92b745595566e32f06a9d54545e247
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    4fae39eb-13dd-4ff1-b8a1-7688c9852fcc.tmp

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\4fae39eb-13dd-4ff1-b8a1-7688c9852fcc.tmp
                                                    • Size 17KB
                                                    • SHA256 f7e0a7036b9bf87d18941afe0a0039bacd2a6a85b55115963a1d3bb3d3d25ed8
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    511b838d-bb30-4327-a380-40225cc78525.tmp

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\511b838d-bb30-4327-a380-40225cc78525.tmp
                                                    • Size 11KB
                                                    • SHA256 28485cd008573cfe61f028dd7e40d13037bd7e8c112c17da41391eccead3372e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    data_0

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_0
                                                    • Size 44KB
                                                    • SHA256 46fb02d886952eec7f0d604b06faa453c30720bfd5903d5e3efcabc5f405f478
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    data_1

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_1
                                                    • Size 264KB
                                                    • SHA256 1105e3ac4ab9c079107e785a82b67fc9f92c3c90978ff52dea267251622b1afb
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    data_2

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_2
                                                    • Size 1.0MB
                                                    • SHA256 420cdb3e169794192619cde02b2aba71d7755c899c196fe9af1c490b9c928f9e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    data_3

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_3
                                                    • Size 4.0MB
                                                    • SHA256 ce1c4df7b3674b381431ebe83092d7e7a7e8ec99d439294e9d0db92589498075
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_000004

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000004
                                                    • Size 38KB
                                                    • SHA256 d58a69e4031de1ab3acafd0ec7a3bb2e394d65cd97a96c65cca531f67a4dd57e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f_000005

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005
                                                    • Size 78KB
                                                    • SHA256 b93d7f00deab04d99b33a3ac1b70bb133fdc7aece2212ee3aa027ba4f74884ef
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    LOG

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
                                                    • Size 320B
                                                    • SHA256 d0e1ae27c5950e9d653d93d2c1863361cbc302513109231a40515e926591920c
                                                    • MD5 SHA1 SHA512 TLSH

                                                    LOG

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
                                                    • Size 332B
                                                    • SHA256 d5429eab6284a61da26a5c8d00b961a9e440fd0ea9d342a07fabf6b8e18bc0a5
                                                    • MD5 SHA1 SHA512 TLSH

                                                    4cfdb5fd-5527-4e5e-925c-3c971d902c4d.tmp

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\4cfdb5fd-5527-4e5e-925c-3c971d902c4d.tmp
                                                    • Size 1KB
                                                    • SHA256 366616dbc5399150ffc0500a594bb3e1282479e5e9463e1cebf1abf973c4e145
                                                    • MD5 SHA1 SHA512 TLSH

                                                    7fc2f1ab-8878-4074-9f5e-1007a03fb78a.tmp

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\7fc2f1ab-8878-4074-9f5e-1007a03fb78a.tmp
                                                    • Size 2B
                                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                    • MD5 SHA1 SHA512

                                                    830bf0ac-3514-4bcb-980b-fec1f607434c.tmp

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\830bf0ac-3514-4bcb-980b-fec1f607434c.tmp
                                                    • Size 523B
                                                    • SHA256 29b69fe4736faafb82bfae6666d49a11eca6eb54054477f8b6838c5e19e3d2c5
                                                    • MD5 SHA1 SHA512 TLSH

                                                    Cookies

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
                                                    • Size 20KB
                                                    • SHA256 ab7057a44237e7b1c0888e163e35ef0891b0f099a67025ac9555c27c94f2b488
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Cookies-journal

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies-journal
                                                    • Size 12KB
                                                    • SHA256 a9089610ce1002989325fbf178f4061bac8a8ae7ebaa5f34e2a3587e8b5ed1b2
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Reporting and NEL

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Reporting and NEL
                                                    • Size 36KB
                                                    • SHA256 654426efdc265b7469dcb942250120923588dd1f367bbae1027c34f396747717
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Reporting and NEL-journal

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Reporting and NEL-journal
                                                    • Size 8KB
                                                    • SHA256 a4efb3eb402e68eed208551d5ba9020b1d6226fa0694439149f22bd96d84976b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    bce93795-fdd6-45d7-b5b5-77adb9530f44.tmp

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\bce93795-fdd6-45d7-b5b5-77adb9530f44.tmp
                                                    • Size 2KB
                                                    • SHA256 05cd4133e164a30bb3634f4245e400418d86aff615df9842fed0315b99188ee6
                                                    • MD5 SHA1 SHA512 TLSH

                                                    000003.log

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\000003.log
                                                    • Size 4KB
                                                    • SHA256 fe2375b9068f84f87940f6c6f413fa02467407b8db6d384d39f33139f58ebf66
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    LOG

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG
                                                    • Size 336B
                                                    • SHA256 da73404c3fb4fe859d8350c8c80f42bc5c3e2a7293b1608e4dc20886e65034dc
                                                    • MD5 SHA1 SHA512 TLSH

                                                    temp-index

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                    • Size 120B
                                                    • SHA256 bf8d76c359451606ff33ac9db9ecb77999fc0475ebf719d23aae7da30798c0c7
                                                    • MD5 SHA1 SHA512 TLSH

                                                    the-real-index

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                    • Size 96B
                                                    • SHA256 07189b0ac90d984ae481a75deba611785a17276a6ef0b0a4d0620185e0cddde4
                                                    • MD5 SHA1 SHA512 TLSH

                                                    000003.log

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
                                                    • Size 308B
                                                    • SHA256 cbee1100a2c9add47776b7e416b58a809f6feb9fe458bef8185b0c176b5db340
                                                    • MD5 SHA1 SHA512 TLSH

                                                    LOG

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
                                                    • Size 320B
                                                    • SHA256 1c6d6d9fa98559c9844837bdb55d921e51da71ee7d01b36a963c15f13607a78c
                                                    • MD5 SHA1 SHA512 TLSH

                                                    Session_13438539963088598

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Session_13438539963088598
                                                    • Size 2KB
                                                    • SHA256 5263ff3215e7404a88a78ff7c705638aa61f740fae8f005258bc7890b8a0c7f5
                                                    • MD5 SHA1 SHA512 TLSH

                                                    LOG

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
                                                    • Size 348B
                                                    • SHA256 697749e0dfe21724bbd043f3c075f72533cca82000e0550263919bde85d2b21d
                                                    • MD5 SHA1 SHA512 TLSH

                                                    LOG

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
                                                    • Size 321B
                                                    • SHA256 49f43b5c2dd73df6ca4d0b88f9b103504780da9f5f3500274323207de038c814
                                                    • MD5 SHA1 SHA512 TLSH

                                                    Web Data

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Data
                                                    • Size 138KB
                                                    • SHA256 664fad5626195feee320ca6ec6eae10e2e1aaa62be5373992bbf764d89c35db8
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Web Data-journal

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal
                                                    • Size 4KB
                                                    • SHA256 902f6bf4ae12c983921d8c2da57fe42592c192ea3977a4323727bdf0fb345cf0
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    QuotaManager

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager
                                                    • Size 40KB
                                                    • SHA256 4852778bdf5f90740f40e850138f99930bf2541f738743d4d83187eaa218f671
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    QuotaManager-journal

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager-journal
                                                    • Size 8KB
                                                    • SHA256 dce0a4ffc94422ff8cbddf7cb85d394216d63c9bce45bd54e69da141b67e1025
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    a52a0953-d22d-4356-ab8e-e52f1b888216.tmp

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\a52a0953-d22d-4356-ab8e-e52f1b888216.tmp
                                                    • Size 12KB
                                                    • SHA256 2267b61ec63de6ea9d3be5b5d2b54a788a514dfd45754a582e39ec0a97dea93f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    d7a2dff3-ec9c-4ded-b73b-7e92c0c730bc.tmp

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\d7a2dff3-ec9c-4ded-b73b-7e92c0c730bc.tmp
                                                    • Size 414B
                                                    • SHA256 7e72cc8412997e7e9f455604856e2cb2d914739c5eebbfc8928baad8f488f5e0
                                                    • MD5 SHA1 SHA512 TLSH

                                                    000003.log

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000003.log
                                                    • Size 22KB
                                                    • SHA256 916ae7d6f97edddacbc444616faf67c3590d23f4c386a889ddc1387f0147900a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    LOG

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG
                                                    • Size 320B
                                                    • SHA256 8405e9a7f1bcd5288c24a6fe1ff3da28b0956950fe9cc050d6036f7ef28ea5db
                                                    • MD5 SHA1 SHA512 TLSH

                                                    000003.log

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000003.log
                                                    • Size 1KB
                                                    • SHA256 b9e611c3eb6b4591eb12200dab59c32d38bfb1f37695777c8d89fc4ec90f1166
                                                    • MD5 SHA1 SHA512 TLSH

                                                    LOG

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
                                                    • Size 338B
                                                    • SHA256 4e34510e6ff25a50a39bc65b316281fda6237b3337445837986af482647278be
                                                    • MD5 SHA1 SHA512 TLSH

                                                    Last Version

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
                                                    • Size 13B
                                                    • SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
                                                    • MD5 SHA1 SHA512

                                                    Local State

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                    • Size 131KB
                                                    • SHA256 d54b981b8fe35e3c944cd2c0f61e56504180f268d71d2f5af20d6aac8e144f1e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    data_1

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
                                                    • Size 264KB
                                                    • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                    • MD5 SHA1 SHA512 SSDEEP

                                                    Variations

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
                                                    • Size 85B
                                                    • SHA256 40395d9ca4b65d48deac792844a77d4f8051f1cef30df561dacfeeed3c3bae13
                                                    • MD5 SHA1 SHA512 TLSH

                                                    c7d323aa-72d2-49c8-8b59-41daa212a08c.tmp

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\c7d323aa-72d2-49c8-8b59-41daa212a08c.tmp
                                                    • Size 275KB
                                                    • SHA256 30d791c440a6787b2d4a20da3013b69f848507d5864401631b2db280cbe56ef3
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    cc740278-9001-4870-ac86-6ae8e1fb3fee.tmp

                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\cc740278-9001-4870-ac86-6ae8e1fb3fee.tmp
                                                    • Size 274KB
                                                    • SHA256 1f314eae50aa36fe19988108bb75bc56402780cde5d644c5b981a14dc5f9bda9
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH