Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    98s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260911-en
  • resource tags

    arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    13/11/2026, 10:16

General

  • Target
    W52UE52XBY31.exe
  • Size 2.0MB
  • Sample261113-maxf2att6k
  • SHA256 8daf63d256788702648f1699d1909d7a862bb9859ca93bbf96fd73f70bc107a9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Credentials from Password Stores: Windows Credential Manager 1 TTPs

    Suspicious access to Credentials History.

  • Unsecured Credentials: Credentials In Files 1 TTPs

    Steal credentials from unsecured files.

  • Accesses cryptocurrency files/wallets, possible credential harvesting 2 TTPs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 5 IoCs
  • Scheduled Task/Job: Scheduled Task 1 TTPs 2 IoCs

    Schtasks is often used by malware for persistence or to perform post-infection execution.

  • Suspicious behavior: EnumeratesProcesses 9 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:3164
    • C:\Users\Admin\AppData\Local\Temp\W52UE52XBY31.exe
      "C:\Users\Admin\AppData\Local\Temp\W52UE52XBY31.exe"
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:5252
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --headless --incognito
        3⤵
        • Checks processor information in registry
        • Enumerates system info in registry
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:4236
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750 /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Crashpad --metrics-dir=C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750 --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x12c,0x130,0x134,0xf4,0x138,0x7ffb81a5c728,0x7ffb81a5c734,0x7ffb81a5c740
          4⤵
            PID:2392
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --force-high-res-timeticks=disabled --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:11
            4⤵
            • System Time Discovery
            PID:3520
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --headless --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:2
            4⤵
              PID:5188
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --force-high-res-timeticks=disabled --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:13
              4⤵
                PID:3720
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=3428 /prefetch:1
                4⤵
                  PID:5056
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
                  4⤵
                    PID:4120
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=3780 /prefetch:1
                    4⤵
                      PID:5100
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=3924 /prefetch:9
                      4⤵
                        PID:4876
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=4024 /prefetch:9
                        4⤵
                          PID:2900
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=3764 /prefetch:1
                          4⤵
                            PID:3368
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:9
                            4⤵
                              PID:5376
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --force-high-res-timeticks=disabled --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:14
                              4⤵
                                PID:5424
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --force-high-res-timeticks=disabled --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:14
                                4⤵
                                  PID:6072
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:1
                                  4⤵
                                    PID:4052
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=6100 /prefetch:1
                                    4⤵
                                      PID:2052
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --force-high-res-timeticks=disabled --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:14
                                      4⤵
                                        PID:4760
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --force-high-res-timeticks=disabled --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=6508 /prefetch:14
                                        4⤵
                                          PID:5328
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:1
                                          4⤵
                                            PID:5200
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=6744 /prefetch:1
                                            4⤵
                                              PID:5240
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --force-high-res-timeticks=disabled --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:14
                                              4⤵
                                                PID:1724
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --force-high-res-timeticks=disabled --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:14
                                                4⤵
                                                  PID:4628
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=6536 /prefetch:1
                                                  4⤵
                                                    PID:2336
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=6744 /prefetch:1
                                                    4⤵
                                                      PID:944
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --force-high-res-timeticks=disabled --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:14
                                                      4⤵
                                                        PID:1868
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --force-high-res-timeticks=disabled --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=6536 /prefetch:14
                                                        4⤵
                                                          PID:8
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:1
                                                          4⤵
                                                            PID:2520
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=7096 /prefetch:9
                                                            4⤵
                                                              PID:4468
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=6956 /prefetch:1
                                                              4⤵
                                                                PID:5944
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=7052 /prefetch:1
                                                                4⤵
                                                                  PID:6044
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750" --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --field-trial-handle=2200,i,596108867067576618,6529970550437116679,262144 --disable-features=PaintHolding --variations-seed-version --mojo-platform-channel-handle=6500 /prefetch:9
                                                                  4⤵
                                                                    PID:5336
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --headless --disable-gpu
                                                                  3⤵
                                                                  • Enumerates system info in registry
                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                  PID:5980
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\HeadlessEdge5980240696015 /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\HeadlessEdge5980240696015\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x248,0x24c,0x250,0x244,0x2f0,0x7ffb70b9c188,0x7ffb70b9c194,0x7ffb70b9c1a0
                                                                    4⤵
                                                                      PID:5960
                                                              • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                1⤵
                                                                  PID:2872
                                                                • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                  "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                  1⤵
                                                                    PID:1412
                                                                  • C:\Windows\system32\svchost.exe
                                                                    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                    1⤵
                                                                      PID:5868
                                                                    • C:\Windows\System32\schtasks.exe
                                                                      "C:\Windows\System32\schtasks.exe" /Create /F /SC ONLOGON /TN "WindowsSystemService" /TR "\"C:\Users\Admin\AppData\Local\Microsoft\OfficeBroker\svchost.exe\"" /RL HIGHEST
                                                                      1⤵
                                                                      • Scheduled Task/Job: Scheduled Task
                                                                      PID:1140
                                                                    • C:\Windows\System32\schtasks.exe
                                                                      "C:\Windows\System32\schtasks.exe" /Create /F /SC ONLOGON /TN "RuntimeBrokerService" /TR "\"C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.PeopleExperienceHost_gw1n1c2fhyeqy\AC\Temp\RuntimeBroker.exe\" -Embedding" /RL HIGHEST
                                                                      1⤵
                                                                      • Scheduled Task/Job: Scheduled Task
                                                                      PID:6028
                                                                    • C:\Windows\System32\Conhost.exe
                                                                      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                      1⤵
                                                                        PID:2052

                                                                      Network

                                                                            MITRE ATT&CK Enterprise v16

                                                                            Replay Monitor

                                                                            Loading Replay Monitor...

                                                                            Downloads

                                                                            data_0

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Cache\Cache_Data\data_0
                                                                            • Size 8KB
                                                                            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            data_1

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Cache\Cache_Data\data_1
                                                                            • Size 264KB
                                                                            • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            data_2

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Cache\Cache_Data\data_2
                                                                            • Size 8KB
                                                                            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            data_3

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Cache\Cache_Data\data_3
                                                                            • Size 8KB
                                                                            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Code Cache\js\index-dir\temp-index
                                                                            • Size 48B
                                                                            • SHA256 479e17f78b4637194603a17cbfd865d059feb0e55cd2368dec21bc9a1fb910f8
                                                                            • MD5 SHA1 SHA512

                                                                            MANIFEST-000001

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Extension Rules\MANIFEST-000001
                                                                            • Size 41B
                                                                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                            • MD5 SHA1 SHA512

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Extensions\Temp\scoped_dir4236_810877343\CRX_INSTALL\_locales\en_GB\messages.json
                                                                            • Size 593B
                                                                            • SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            craw_window.html

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Extensions\Temp\scoped_dir4236_810877343\CRX_INSTALL\html\craw_window.html
                                                                            • Size 810B
                                                                            • SHA256 bb8742615e4cd996ae5d0200e443ae6a6f0b473255f03affdb8fb4660de4554d
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.111.1_0\_locales\en_CA\messages.json
                                                                            • Size 851B
                                                                            • SHA256 6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            dasherSettingSchema.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.111.1_0\dasherSettingSchema.json
                                                                            • Size 854B
                                                                            • SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            service_worker_bin_prod.js

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.111.1_0\service_worker_bin_prod.js
                                                                            • Size 137KB
                                                                            • SHA256 63b3d006783e106d3aacb9cda3224d48a218dd45d50db663d38b45d2d9b2bff0
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Reporting and NEL

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Network\Reporting and NEL
                                                                            • Size 36KB
                                                                            • SHA256 473cee21f162f3a7a25635fadf8a9264238ac53cf89f7bb67ede9fbcdc676cfc
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            SCT Auditing Pending Reports

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Network\SCT Auditing Pending Reports
                                                                            • Size 2B
                                                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                            • MD5 SHA1 SHA512

                                                                            Trust Tokens

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Network\Trust Tokens
                                                                            • Size 36KB
                                                                            • SHA256 61747eae344a1ed6b1bea06522e094eba6879049db5f918e55423dbd8981a881
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Safe Browsing Cookies

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Safe Browsing Network\Safe Browsing Cookies
                                                                            • Size 20KB
                                                                            • SHA256 2ade7ad8f15eccb025798893f007bc3a04679504411bbad75e4d1f35cf47a65e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            index

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Service Worker\ScriptCache\index
                                                                            • Size 24B
                                                                            • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                            • MD5 SHA1 SHA512

                                                                            db

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Shared Dictionary\db
                                                                            • Size 44KB
                                                                            • SHA256 b08af7745c49533422c5afb2e683b61ab1b025a2ef13f892321a2cd1383fba79
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            CURRENT

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Site Characteristics Database\CURRENT
                                                                            • Size 16B
                                                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                            • MD5 SHA1 SHA512

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\wasm\index-dir\the-real-index
                                                                            • Size 48B
                                                                            • SHA256 17a060c3f50c163f0e3c0dfc284f970e4e4ff078f8b9fdf01a635d2e7aa9a525
                                                                            • MD5 SHA1 SHA512

                                                                            128.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_1047996012\Icons\128.png
                                                                            • Size 3KB
                                                                            • SHA256 e8a4d1e6103287bd80fa5bad0418a550fcda7dc7418e9a2f5b7a8e2cd51ec1d5
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            192.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_1047996012\Icons\192.png
                                                                            • Size 1KB
                                                                            • SHA256 434382805003287179ce1ced4422245ee09a7ccacbf5920758078614ccd9689a
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            256.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_1047996012\Icons\256.png
                                                                            • Size 6KB
                                                                            • SHA256 e207a2f9646cce24336294ad74beb9813c42f1ebf8ad6bee7ac6fedaa617ddf9
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            32.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_1047996012\Icons\32.png
                                                                            • Size 1KB
                                                                            • SHA256 06c00fa3cb29713aa4317b352fc1e1e035c0c7720a42f107cf758fbb21eaed0c
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            48.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_1047996012\Icons\48.png
                                                                            • Size 1KB
                                                                            • SHA256 bebe7c8f23573efeedb8259fd9e866662dfad2c8e974d2715bb5aebdac870f6d
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            64.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_1047996012\Icons\64.png
                                                                            • Size 2KB
                                                                            • SHA256 f5fcedc00655f8a9b63b379feb04ef904a64328e9ef79e7a411de5139d398ebe
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            96.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_1047996012\Icons\96.png
                                                                            • Size 2KB
                                                                            • SHA256 03d15ce246e276c1c2b6dd066cdda74bda3c79b61e5b9e18825d144d9c64c6fe
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            128.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_1136038907\Icons\128.png
                                                                            • Size 8KB
                                                                            • SHA256 fa0d73901ae74d2d2c01f26442a2d489abc53facb18d532c67846bcb2cc6877a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            192.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_1136038907\Icons\192.png
                                                                            • Size 5KB
                                                                            • SHA256 cca43d465fed69867dfec3ee1faa43fe3cfc4fb118e3762f9f4f318856f2664e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            256.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_1136038907\Icons\256.png
                                                                            • Size 20KB
                                                                            • SHA256 ba50637a9a54c98264373add3ad0514b06e6ae59524a3f7a4552f556d1afb78f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            32.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_1136038907\Icons\32.png
                                                                            • Size 1KB
                                                                            • SHA256 bff3a19327fd09a24c1aa4e7f34c508d7e668a8eb32f2cc7c33bcaa7e9ee2319
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            48.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_1136038907\Icons\48.png
                                                                            • Size 2KB
                                                                            • SHA256 afbfdd55b59a6385a28bfe27ef81ffae07f9d77b8c073dc299c6060b5d964a89
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            64.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_1136038907\Icons\64.png
                                                                            • Size 3KB
                                                                            • SHA256 02bd0f5d045eb5247e576d8151da19d36dc0eee7746c9a426d4dc92ee83125c8
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            96.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_1136038907\Icons\96.png
                                                                            • Size 5KB
                                                                            • SHA256 a5c76c56766d79ac0e66fbbf57806501919a63913fb224b0965041ec3645f9e0
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            128.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_1894769714\Icons\128.png
                                                                            • Size 1KB
                                                                            • SHA256 a57ffe3b3cd0a1bafe37e36daa89d2f9afb9446423cba25df883ab0f9aa8293a
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            192.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_1894769714\Icons\192.png
                                                                            • Size 1KB
                                                                            • SHA256 f25ab19c435c2cb43e7d86b9bf58f46ec8af6228bc4511d4c5cb9d23e1cc4c04
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            256.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_1894769714\Icons\256.png
                                                                            • Size 4KB
                                                                            • SHA256 dee5357bd2992efefb04ed8bbb64dbf7becd768d75dff17dcb2b335c4fd2a903
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            32.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_1894769714\Icons\32.png
                                                                            • Size 952B
                                                                            • SHA256 e566796c18517e7084e3a892b3291cc189b85e7830800503c256998ab697a507
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            48.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_1894769714\Icons\48.png
                                                                            • Size 1KB
                                                                            • SHA256 6a379d8e9545ee7885dcff4c53f1ca553dc9fb0cbaa18a0c71c0b75c8883d044
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            64.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_1894769714\Icons\64.png
                                                                            • Size 1KB
                                                                            • SHA256 3772d9c9a6fabba60ac0c7b9c93bf230e3c99ebac9af480efc6c778d9881dd85
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            96.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_1894769714\Icons\96.png
                                                                            • Size 1KB
                                                                            • SHA256 f2b25026f9dde3d50479d07494efff95f79c2bfa6c7eff6867051a951d38f9e0
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            128.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_2065598713\Icons\128.png
                                                                            • Size 5KB
                                                                            • SHA256 63be4dfbc222f0c026579113af9aa7dea61e78a166ab9af053b46c1e172240ff
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            192.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_2065598713\Icons\192.png
                                                                            • Size 2KB
                                                                            • SHA256 e401220b69a76a298b2e081a5424af69791a4caa3936af85d8862c05f4ced4a8
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            256.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_2065598713\Icons\256.png
                                                                            • Size 12KB
                                                                            • SHA256 6e8f581f4cee7f8f8af4a9e1059f0d3088b792de7045067d74254e2a6f1f9a6b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            32.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_2065598713\Icons\32.png
                                                                            • Size 1KB
                                                                            • SHA256 ccefdc2d816137b5954b591e8954c392e0cf27388fef2e437991e3999d9ad3d8
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            48.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_2065598713\Icons\48.png
                                                                            • Size 2KB
                                                                            • SHA256 bff87e21fa845d8ce3c266db6d904e9c7a3bf9fc2b95a1f1a5ca375f3fdb045a
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            64.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_2065598713\Icons\64.png
                                                                            • Size 3KB
                                                                            • SHA256 abe4eaa1a6fa423bcef61b423dc72386a9cf1968b1041de5270c56a7780254ad
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            96.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_2065598713\Icons\96.png
                                                                            • Size 3KB
                                                                            • SHA256 00f563fcf365eb53a4037624ab3783dd6e19d2c6689c9892aa30ad2b16577848
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            128.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_404044725\Icons\128.png
                                                                            • Size 2KB
                                                                            • SHA256 f127267b7d6f1ef83d170f6460343638b3b48d3f96f4bf8dd2896418dfa36c7c
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            192.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_404044725\Icons\192.png
                                                                            • Size 1KB
                                                                            • SHA256 2ae1736c46f88d30ded3748674c469f6ebd5f824b167abc77511d1a17204a767
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            256.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_404044725\Icons\256.png
                                                                            • Size 5KB
                                                                            • SHA256 f214b739d59d1aa2edb41c8809d8132dc5a5775f66c1725e849b9d5f45f8b017
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            32.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_404044725\Icons\32.png
                                                                            • Size 1KB
                                                                            • SHA256 23fb4d1613fb426612119928a7222ca84a9cba4ba081a8b1be7f2565c013c590
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            48.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_404044725\Icons\48.png
                                                                            • Size 1KB
                                                                            • SHA256 7b1aa50219251762867246b79677fac99c1b61a4ef4e471ae3473c10ada2c50b
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            64.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_404044725\Icons\64.png
                                                                            • Size 1KB
                                                                            • SHA256 2a560cdee5965876269d30cf82a85b83aeac16903d4f325209ca3354b971c25b
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            96.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Default\Web Applications\Temp\scoped_dir4236_404044725\Icons\96.png
                                                                            • Size 1KB
                                                                            • SHA256 1ddb7863b4ff09dd3185943cce8261b98d230f7a239df307a4600ab0c20a8322
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Local State

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\Local State
                                                                            • Size 1KB
                                                                            • SHA256 a9f9057acb14d909759dba5e399efac8196f44810d34e2d546896031ce1aeacb
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            aa83f171-5d91-4647-b389-49febcb02e47.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\aa83f171-5d91-4647-b389-49febcb02e47.tmp
                                                                            • Size 148KB
                                                                            • SHA256 524972a28ef5af1c9c20aa58cbcc8905246db47220c95ea37e059ba273b88c5e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            276f5205-c730-4954-9612-f7e570374778.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessChrome4236240683750\extensions_crx_cache\276f5205-c730-4954-9612-f7e570374778.tmp
                                                                            • Size 13B
                                                                            • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                            • MD5 SHA1 SHA512

                                                                            settings.dat

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessEdge5980240696015\Crashpad\settings.dat
                                                                            • Size 280B
                                                                            • SHA256 6de52a852ce3f3da7d2fba77e396c0acf6d255ccb9c5143d87999a7c1f1b6d4b
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            throttle_store.dat

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\HeadlessEdge5980240696015\Crashpad\throttle_store.dat
                                                                            • Size 20B
                                                                            • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                                                                            • MD5 SHA1 SHA512

                                                                            ba84ff2f-b89c-43f3-90b8-ac1643eb0912.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\ba84ff2f-b89c-43f3-90b8-ac1643eb0912.tmp
                                                                            • Size 242KB
                                                                            • SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            fe488714-abdf-461a-9157-4c920438e46c.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\fe488714-abdf-461a-9157-4c920438e46c.tmp
                                                                            • Size 158KB
                                                                            • SHA256 3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\bg\messages.json
                                                                            • Size 796B
                                                                            • SHA256 a114e2783d0e9b12155017323ba70838f0f82a71c7ee8dc1f115ae36991241f8
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\ca\messages.json
                                                                            • Size 675B
                                                                            • SHA256 c67898b67f9c9209eafda6532b62d5789863cfb855998dd6a70e7775316cec20
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\cs\messages.json
                                                                            • Size 641B
                                                                            • SHA256 32290d69a90e6baac428b10382c99221b12773bb9a184f3b93dfb48a4f6d7a40
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\da\messages.json
                                                                            • Size 624B
                                                                            • SHA256 4977d4a053542ff66967faed6b06585dd70e68e20bfeb533b66fe3287f9655d9
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\de\messages.json
                                                                            • Size 651B
                                                                            • SHA256 a62ffab910e31531758eee48b2cc71a8857bec3021dead50b668cba3c8667053
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\el\messages.json
                                                                            • Size 787B
                                                                            • SHA256 a052c32b4fcac61152eb0adb2c260fb6a8256ad104aa0013db93e9798d41a070
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\en\messages.json
                                                                            • Size 450B
                                                                            • SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\es\messages.json
                                                                            • Size 661B
                                                                            • SHA256 4db9b2721e625c18b9e05c04b31af5d9694712f1caaf6219abe34bb08e5db1c7
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\es_419\messages.json
                                                                            • Size 637B
                                                                            • SHA256 6659bc3705311d7641a73995dcfea80c7734f2f4ebbc3787b3892a240348324f
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\et\messages.json
                                                                            • Size 595B
                                                                            • SHA256 c85800bf45942fcc7fd6b1df929c25f9cc2a977a6678966bd03d4b6b69889afd
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\fi\messages.json
                                                                            • Size 647B
                                                                            • SHA256 0bde54b20845124113383b6eb81e43a0f05e4eb0c44bee3c1dfac4cc5fec2836
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\fil\messages.json
                                                                            • Size 658B
                                                                            • SHA256 ec002ed92359f67818b49455dfc579e140368e6a004080af022fd4f57f6b03f2
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\fr\messages.json
                                                                            • Size 677B
                                                                            • SHA256 599491f8c52b945c16c441adf45bfd45afae046da07757d97c56af4de75ed3b5
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\hi\messages.json
                                                                            • Size 835B
                                                                            • SHA256 8106d98c4f8da16db698444409558e29cc96735e188bfa303c333a5d99231c1d
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\hr\messages.json
                                                                            • Size 618B
                                                                            • SHA256 a2b2ec359a9dd9dccce02859ce1e738bd30faa4a05f1dc522893ffdf722bbc15
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\hu\messages.json
                                                                            • Size 683B
                                                                            • SHA256 32a249749f12adb6a220bf9adc272c7e5d9ad5497a38b0086d961e3aba17fbc6
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\id\messages.json
                                                                            • Size 604B
                                                                            • SHA256 c6e8800450602de0f39fe9f6854472383813fb454b08abae7e25a9167ce004c3
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\it\messages.json
                                                                            • Size 603B
                                                                            • SHA256 cd891c45f7586fb4a2514205a11f260e4a6d4482fa03d901909dd9f57be0536d
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\ja\messages.json
                                                                            • Size 697B
                                                                            • SHA256 706312a4a2aef3317223f141eb2b82685345b7eed444f16bb4df3a272716da1f
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\ko\messages.json
                                                                            • Size 631B
                                                                            • SHA256 d1467b8d037114403e8f4efc52e88c4a7feb96126be4cff883feff1084ef7e68
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\lt\messages.json
                                                                            • Size 665B
                                                                            • SHA256 7c311ab751d840d750c11553c083785813e079c1d464fe568a98c9e3ef3db96c
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\lv\messages.json
                                                                            • Size 671B
                                                                            • SHA256 1fa1df2ca8516def490fb8484e9aa498acff80eef5c9258ffe42d3678e6c7ded
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\nb\messages.json
                                                                            • Size 624B
                                                                            • SHA256 2cd700aeb57d89c2e73333d0702556ee3ff3863516170f85669bc680fcbdc4e0
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\nl\messages.json
                                                                            • Size 615B
                                                                            • SHA256 92be7c2dc9cfbe5a65e9ce6488d364c8d7ec19e7b67a31e4d43c1cb2b169671c
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\pl\messages.json
                                                                            • Size 636B
                                                                            • SHA256 e2699f98c511b18a2afb82eae9a4804b646c4ff1077d80e77c17a3943a6373c2
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\pt_BR\messages.json
                                                                            • Size 636B
                                                                            • SHA256 6374880fdd1f8af1ee8aea6a06b73be0ab265afceb4fe6f08bde3b3989264b21
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\pt_PT\messages.json
                                                                            • Size 622B
                                                                            • SHA256 c1c94f65fabaf17def98a8587711a56d61b1e5607500e9b01f2824db109f9e83
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\ro\messages.json
                                                                            • Size 641B
                                                                            • SHA256 113a13900cba62fe8aed06751971c23a80a99b47f9be219cf884d57db19611d9
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\ru\messages.json
                                                                            • Size 744B
                                                                            • SHA256 fbaf22ce6e16de174ced8cb5ea3098cca1c3426a2111ff33bd3e64da64ed67ab
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\sk\messages.json
                                                                            • Size 647B
                                                                            • SHA256 7fa16af97e6cfc52ec6008eb679d3f30e7e0c24f9ef2d18a9228eaf4ded9d63b
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\sl\messages.json
                                                                            • Size 617B
                                                                            • SHA256 18aff072ee0df7c3495045435c752a805606e6d5d462ef2321c443f1773f4b3a
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\sr\messages.json
                                                                            • Size 743B
                                                                            • SHA256 7ffde34c58e7c376c042de64def6481dae32be8b70f0b18edf536290cbe0c818
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\sv\messages.json
                                                                            • Size 630B
                                                                            • SHA256 b8ba77e0089b0676545ec16d32468b727812b444f90b33a7a5b748e6c36c4388
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\th\messages.json
                                                                            • Size 945B
                                                                            • SHA256 2feca577f43d97baeea464741d585892103585208fd0a935b810a03bdce83c88
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\tr\messages.json
                                                                            • Size 631B
                                                                            • SHA256 a7cb86f30c9c31fe5540282c308ba96adb4ec16ef98c87129eb88105e5bef5fc
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\uk\messages.json
                                                                            • Size 720B
                                                                            • SHA256 68aba284751eb9c856032062ef9b1651e2a1e5ce5fda0977ffc97d63ba7bed9e
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\vi\messages.json
                                                                            • Size 695B
                                                                            • SHA256 051f96ed874c11c4a13589b5f68964e4f5b03b52dda223d56524f2ca23760c04
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\zh_CN\messages.json
                                                                            • Size 595B
                                                                            • SHA256 d804f2a040d21d7511efd5213d8e1721d64964a1a0dbb48e21622ceedc9d967e
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_locales\zh_TW\messages.json
                                                                            • Size 634B
                                                                            • SHA256 c6f8c640f3353a7b9b1432a0c139c1aeec40133800e6c9b467b63991ad660308
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            verified_contents.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\_metadata\verified_contents.json
                                                                            • Size 7KB
                                                                            • SHA256 52a24fa2fb3bcb18d9d8571ae385c4a830ff98ce4c18384d40a84ea7f6ba7f69
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            craw_background.js

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\craw_background.js
                                                                            • Size 531KB
                                                                            • SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            craw_window.js

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\craw_window.js
                                                                            • Size 255KB
                                                                            • SHA256 5721a4b3f8e09c869a629effd350b51c9d46f0ac136717d4db6265c0ee6f9ac8
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            craw_window.css

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\css\craw_window.css
                                                                            • Size 1KB
                                                                            • SHA256 10dfbd2d98950b79ee12f6b8e3885aabe31543048de56ad4fc0a5e34d0d9d4ec
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            flapper.gif

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\images\flapper.gif
                                                                            • Size 68KB
                                                                            • SHA256 2b73533f47a99ffea9cc405ffafa9c4c53623f62487aebfba415945120b22040
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            icon_128.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\images\icon_128.png
                                                                            • Size 4KB
                                                                            • SHA256 149fc2270389655ee20da9cebb31ffde75e16e3ad371b9b907f62013ed45e705
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            icon_16.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\images\icon_16.png
                                                                            • Size 582B
                                                                            • SHA256 15b1cc630202324ad6b3b142a22cb1a55de8d6d9a0bcab78d5b14cd997a5ddd5
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            topbar_floating_button.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\images\topbar_floating_button.png
                                                                            • Size 160B
                                                                            • SHA256 d5f9234dc36e7ffa85f35b2359a4f82276f8395efa76e4553507ea990b27fc6c
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            topbar_floating_button_close.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\images\topbar_floating_button_close.png
                                                                            • Size 252B
                                                                            • SHA256 131817cd9311c03df22d769dd2ad7fa2e6e9558863a89f7e5e1657424031a937
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            topbar_floating_button_hover.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\images\topbar_floating_button_hover.png
                                                                            • Size 160B
                                                                            • SHA256 721b7aaa9a42a54a349881615a12e3a26983aca48e173fd2f66e66aa0d725735
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            topbar_floating_button_maximize.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\images\topbar_floating_button_maximize.png
                                                                            • Size 166B
                                                                            • SHA256 afa4ea944cbdec8543242e627ef46d5bfd3766dcac664e7e50cdeef2b352740c
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            topbar_floating_button_pressed.png

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\images\topbar_floating_button_pressed.png
                                                                            • Size 160B
                                                                            • SHA256 5c10ce0589eb115600f77381130b70ae0b7b3752614d86d4c89e857658aa222b
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            manifest.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_1187564787\CRX_INSTALL\manifest.json
                                                                            • Size 1KB
                                                                            • SHA256 f52714812d68c577a445169d11e84df6751c2d6886bc429643072bb5d61c6c27
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            messages.json

                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4236_378808767\CRX_INSTALL\_locales\en_CA\messages.json
                                                                            • Size 711B
                                                                            • SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            memory/3164-1202-0x0000000000F10000-0x0000000000F11000-memory.dmp

                                                                            memory/3164-956-0x0000000000EF0000-0x0000000000EF1000-memory.dmp

                                                                            memory/3164-420-0x0000000002BE0000-0x0000000002C00000-memory.dmp

                                                                            memory/5252-1-0x00007FFB88D00000-0x00007FFB89402000-memory.dmp