440ceb0dc5911faca54ed9a4dd186dad3d006ae4f52d0bb7d1e4b4edd8c3693a

Analysis

user interaction
yes
max time kernel
900s
max time network
892s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/03/2026, 22:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
lua51.dll
Size 381KB
Sample260309-2tkc5sgv7n
SHA256 440ceb0dc5911faca54ed9a4dd186dad3d006ae4f52d0bb7d1e4b4edd8c3693a
MD5 ca9a5f85ee1449c731b6d30aa958c982
SHA1 b4f561add9ad0e57f0a56b0e490f782df4a1a48d
SHA512 d27c9c8b55cc3ca39c996923057b281605e130458d3656d2a6bfc9beedd0c45b39f27feeb34c89e182904195e8c0f0be1613816370243bc45e69ed3ac523fc41
SSDEEP 6144:J/aQQeHuezLr8tmq6IV9y8kNY1AS0cfDFC/gGIFZ4O9f/eewsUZVFDPVpr4opQzv:xaKamDIVwybsIXUZVH9vUSj/TBM3
TLSH
T18E848D0AE770017AD9678174CA279E0FCBF6BC4913209A4F47A57E976F37B21190B329
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1544	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134175708227127232"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-914486190-3969805341-592249730-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-914486190-3969805341-592249730-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-914486190-3969805341-592249730-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-914486190-3969805341-592249730-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-914486190-3969805341-592249730-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
4168	chrome.exe
4168	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe
Token: SeShutdownPrivilege	228	chrome.exe
Token: SeCreatePagefilePrivilege	228	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe
228	chrome.exe

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 228 wrote to memory of 4992	228	chrome.exe	113
PID 228 wrote to memory of 640	228	chrome.exe	116
PID 228 wrote to memory of 1544	228	chrome.exe	115
PID 228 wrote to memory of 640	228	chrome.exe	116
PID 228 wrote to memory of 2876	228	chrome.exe	118
PID 228 wrote to memory of 2876	228	chrome.exe	118
PID 228 wrote to memory of 6108	228	chrome.exe	119
PID 228 wrote to memory of 6048	228	chrome.exe	120
PID 228 wrote to memory of 6108	228	chrome.exe	119
PID 228 wrote to memory of 6048	228	chrome.exe	120
PID 228 wrote to memory of 4612	228	chrome.exe	121
PID 228 wrote to memory of 4612	228	chrome.exe	121
PID 228 wrote to memory of 4820	228	chrome.exe	123
PID 228 wrote to memory of 4820	228	chrome.exe	123
PID 228 wrote to memory of 2952	228	chrome.exe	124
PID 228 wrote to memory of 5328	228	chrome.exe	129
PID 228 wrote to memory of 3040	228	chrome.exe	130
PID 228 wrote to memory of 3568	228	chrome.exe	131
PID 228 wrote to memory of 4168	228	chrome.exe	132
PID 228 wrote to memory of 4632	228	chrome.exe	133
PID 228 wrote to memory of 4632	228	chrome.exe	133

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\lua51.dll,#1
1⤵
PID:4784

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffd1f5ec728,0x7ffd1f5ec734,0x7ffd1f5ec740
  2⤵
  PID:4992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,13099984759124363257,12713697116965073227,524288 --field-trial-handle=2092,i,12703029152895050778,9327430375106376320,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2056 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,9652277107869369961,9931014759780766153,262144 --field-trial-handle=2092,i,12703029152895050778,9327430375106376320,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2088 /prefetch:2
  2⤵
  PID:640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2456,i,6855171954768645111,18080028856476738868,524288 --field-trial-handle=2092,i,12703029152895050778,9327430375106376320,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1416 /prefetch:8
  2⤵
  PID:2876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=2896,i,1621857991977189226,7070176846782080611,2097152 --field-trial-handle=2092,i,12703029152895050778,9327430375106376320,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3080 /prefetch:1
  2⤵
  PID:6108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3264,i,4783394563751176281,13978086084995398272,2097152 --field-trial-handle=2092,i,12703029152895050778,9327430375106376320,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:6048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4412,i,3801761807685677841,6255316107150241301,2097152 --field-trial-handle=2092,i,12703029152895050778,9327430375106376320,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4456 /prefetch:2
  2⤵
  PID:4612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4800,i,5548218163278012432,9002497879234495255,2097152 --field-trial-handle=2092,i,12703029152895050778,9327430375106376320,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4724 /prefetch:1
  2⤵
  PID:4820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5564,i,13837099073824429898,4069859874189712782,524288 --field-trial-handle=2092,i,12703029152895050778,9327430375106376320,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5548 /prefetch:8
  2⤵
  PID:2952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6068,i,11068150549897398291,7142413011686138521,524288 --field-trial-handle=2092,i,12703029152895050778,9327430375106376320,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6060 /prefetch:8
  2⤵
  PID:5328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6076,i,11980641651110634307,6858456849253927572,524288 --field-trial-handle=2092,i,12703029152895050778,9327430375106376320,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  PID:3040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6024,i,13093670825373541547,1650904072829831409,524288 --field-trial-handle=2092,i,12703029152895050778,9327430375106376320,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6040 /prefetch:8
  2⤵
  PID:3568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4528,i,12818070114400256947,4773549425508727302,262144 --field-trial-handle=2092,i,12703029152895050778,9327430375106376320,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4580 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4664,i,8454262642085398293,10262537098017318634,524288 --field-trial-handle=2092,i,12703029152895050778,9327430375106376320,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4416 /prefetch:8
  2⤵
  PID:4632

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5056

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2404

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 aaae4134d5d89daf91a4eb416cc080bcca48709014ca988e55dd4a8611023f30
MD5 92ab9000a4115d26f0ac70e3cf1e178a
SHA1 d4a5b08a0d72df07b88baa300b9a457a8368e1da
SHA512 d8900937257c1eb49dc1f930950dc672ee85092b38c4401bcc61559f3bdd35ceaf90e9e9e6f545fe36192c3b59b1539a874cb61a9b7137dd1904312b3212903d
TLSH
T109E022AAC8A6EC2B08F91B28A014570AFE1117176B455D0F7B3C960C8FF133BC98681C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 acc4dc377982fa7cb770010a40595072cb8dad8b803e14b17ff188fd9edd1cab
MD5 e4533911df4766dd9d28d34262145ffb
SHA1 6ccb8a2ee44d2585fbdf974619286401a3401e52
SHA512 2fabc98e74aa53bfc06bf9933a348e9945badbff1e4865fa05f6a8cfd67e1c7f11ed0c545a481f80c2977dd54aca621552a40cd6c769feb322344609d3bb74d5
TLSH
T1AD518DB3D3E8867D851192E4AE256F1FCD7E0A18131D3C66C8D4AF5B53E2872D21138E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 46de003db5b2c27d8e3ea81cd06bd65fba022b08391f234767cf953dd6e3e8b7
MD5 346a94501a26970cb18637bccd949ec0
SHA1 e6104586e4fc4dfe3cff1af8851b5f83f9f2b9dd
SHA512 441f05deceb5dbf8edc9f7064bd6227f2e2f6399b3da43cb66b4c06f012987529ee30a36b51d54a2d72e8b91b2fecb686b44fc1985054834b17a90e05a6a7d56
TLSH
T112618CF3D3E8867D851196E4AE256F2FCD7A0A18431D3C5688D4AF5B93E2872D20178E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 8b85e09515461c44ccfe76b664b3b6ed280c5e841be7c3f69b9892d933d28966
MD5 0634df730aa9c40ffaf18b83991b5f47
SHA1 e2a3a5ce58e56b3cf7216cd7248d565e6bb0d0fe
SHA512 90446c6824b47ddfe3133728f4b4143fccef383ee51f9f34cd0c73939e4d2c29e4c96f7f9a54c11a3484a8329edec03bd7d5f40217b0477bbcd58b43536fca23
TLSH
T185519DF7D3E4867D851196F4AB256F2FDD790914032C7C62C8D4AE1B53E2972D20138E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 523B
SHA256 7261ab3570e8ccb387b9a98e4fcbcdbe9d15d25d70d3f27729334ea875504e9b
MD5 008a8af0c0e4260ede0910f927949eb3
SHA1 0dd6f90ef69e401a7149b7fb1af2999f8b02de29
SHA512 7a17102452b1ababdf43a991353dbc3c3323fe0c21047acad1cd0411febdd902bb1104b2fb3cd5ce429569c860b12f724dc5b33640c3d43276819fa95275cc1c
TLSH
T15DF059E797FAB47B10BD446B1E04B8852DBBA871078118F4CEAA82ADF0505F31F16493
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 0f8f857084fe2349b255e1ecba96f7febdc4b98f26c190ea974e96cb2353e3ec
MD5 2c7e9937db5c87220a66a44b16dac237
SHA1 9fad883e0f09fe1f970239a781444defe0524028
SHA512 55798cfe6ee286c4668e94b62d280150174b3774bc94f75f037e1c74829ef2f5322c1668ea3968f030d2a0aceedc7d6fd87d4dd228bed59bffdbb3782bc848f1
SSDEEP 192:URgPX+csUScHWwdCv7jah5PRptw9mHsb+WNndJ0XPXy5kw7qzuVyIsnAUgraJ:URgPNsUldOaXXiIwH0Pesme
TLSH
T11852B62DA914697B9CCBD319F9567B17DBF5203120942E88E6FC8A2C05E76CD321B01B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 6c669b5ec5cfb55b6f89f6947b8d7346c8c14ef2241372456b037e8592788916
MD5 f133bac7c049e15f4be09b5f22e14173
SHA1 373282b7248673e8433588d0f1a592ebfd1b8877
SHA512 9d68ecc61686caab637d4badce8fea04d102121339b3d20dd8749843752659ec63d82362126321f5f846842424904074749c7f9c64320dc16a54cf127415968f
SSDEEP 192:URgP5+csUScHEev7jahAPRp2w9mHsb+WNndJ0DXy5kw7qKuVyIsnAUgtaJ:URgPTsUAaa8XbIwH0Tejm8
TLSH
T11242B62DAD14757B5CCBD319FA667B17DBF5202160852E84EAFC8A2C04DB6CD321B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 404d08ea0f4faa7fe9733e7a3faa695ec21935e45369b665fdebc3a3910d7fea
MD5 ba2802f250a41ab7e8d93b27a38f886a
SHA1 82e660b813fd316f21101c9a3754fd699ffcf342
SHA512 0d64d37d7505c7233253bdc0392acf33e7df2e80f867c6411a3f4b0a836b996559b7ea8de096989c798dca598fdc8acd0d83ac0f60063fef31e25580776e9823
SSDEEP 192:URgP5+csUScHWwbv7jahAPRp2w9mHsb+WNndJ0DXy5kw7qKuVyIsnAUgtaJ:URgPTsUlja8XbIwH0Tejm8
TLSH
T1A442B62DAD14757B5CCBD319FA667B57DBF5202124852E84EAFC8A2C04DB6CD321B01B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 895ad721f9982842720150db65c4291b452ff1eac2c5d9439fc8616efd4c58f5
MD5 3804ece8f69af506063867c8450d2ae5
SHA1 015624b3832ec04a46dbe41d7a15d923456edd53
SHA512 cb6eb5740bfdcc9b168cd3ee824f21b338a3936232801d922704c189aa40fbbabc8ebf12fbd8e312cbd3558cd6e4c6c18f6e853626fb443d1f0e389049138f79
SSDEEP 192:URgP5+csUScHWwLv7jahAPRp2w9mHsb+WNndJ0b4Xy5kw7qPuVyIsnAUgraJ:URgPTsUlza8XbIwH0GeCme
TLSH
T14842A62DA914797B9CCBD319FA567B17DBF5202124852E84E6FCCA2C05EB6CD321B01B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 56a1e8c00cba78461b814b7af7b99a3de58a4329a7a44475b23e4150677716ca
MD5 6932e737f9fb5bb798f741f34796b7e1
SHA1 58bd5e6597f4a5801de9e176eca39fb244cddab8
SHA512 6e0d027f757f85c0e73419b5d0cc63c8778e317595fc91efbb163ddebee9c4ad7ab8467ebddc43b66b02293c61347fd81b0b3e241e6794b5bc99b05d775c9885
SSDEEP 384:y4jGR7KxkXqKf/pUZNCgVLH2Hfgslyi7pLuLcifIpXODGJ+ErU3DcHG8akl78fPY:yMGR7KxkXqKf/pUZNCgVLH2Hfgswi7pz
TLSH
T1FC720AA76C4C997B0F94CACCC8177F4FADB5015B65E9886493FB582603D8BCB11091EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 d7e33b2a264b33353a7b45e7eeda2e0ab3b49fdd8a61b37b6d3950f9836fa9af
MD5 8b9b47ffe76b91eee26b9143b3162beb
SHA1 b49476827c835829b050407aecb244f18d6900c4
SHA512 ba5fe3b12ba69686b803b1afc47d8ff861a2c03c2d6c7e7e7e98837a55c4350a120775d12d39140136785c75f7334f2c18de10ca827f99fba9e0285a12b3f767
TLSH
T12AB0122080025605C04743B1128604A831547F14D705131193E86EB1D8262B14025150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ad042.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5ad042.TMP
Size 96B
SHA256 6d15b5b9f81cfbf11bec8fb6e0b1c6ca6a39d35e7c6a2c7c90873c9fdf3b783c
MD5 03462b92d108f05c720b8bcff47703c2
SHA1 ebf2375ebe96a4eee9d2690054fb476dd19bb7e0
SHA512 54a84e1925feffe21c3224070ea4a04803db0d4bf79ffab427c7bdeb257084d309ef24fcbd830e6795fd0a82f66d9c5fed54f5e4d9a415471ccd79cccba31147
TLSH
T1C8B00259C1137292C08213F1669696E871A1DF29CB07D21296F45E6EDC2667146251B1
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 184KB
SHA256 cfc5518171359beb6be12ba5d627df960596a5be29920d97ce661998dce07a50
MD5 970f9f4611dd69d8cd6fc5c520ab48b6
SHA1 62c39a0a1c698d7a4457bdb9e785f17bce092766
SHA512 0674fd805a05dcb7d4b763604d0092c72c5ed6814d2e2a1e8757f58e7e861ca65646d8d3d85121230a0751f761acb268fb413898b8a2d43c25bbcf83beec7a94
SSDEEP 3072:0VXYgyUquFJXG7ICmAnCw1wFqyiGAM1huRa+kx3Qw/xLANk0mUW5GmRntSFCjEE8:0VXYDzZmACDcypAQhUzerOk0HOGm/SFn
TLSH
T18A0422FDBF071A9360BEE2D2B14C29098F23971B558F74DCFA54238A02953850B73DA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 d17d6ffd8b08c2fd1e6238f7cf6a367373c4d1eee400e841759c0015c3712774
MD5 4a1a02511dbe13558d3c3cad469e0f8d
SHA1 fd517ecfd598bf702aa57731ac5a2ae9250ea562
SHA512 af0565a793210ded41cdfeb58494e239a126453caa13fc3aaf1c6dea078af9748fbcf8e518d52fccc1490124b48e06f99c846093fff772f4140b40e911c4817d
SSDEEP 1536:0cC8cYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9Yj:0w3Qw/xLANk0mUW5GmRntSFCjEENW
TLSH
T18D9302BA9E2646E7957E468176AE7808CE13130D709FA9CC715C639C21D42C92B72F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 183KB
SHA256 f0fa4ee7e364ab4e9f440d457bbda946466f9108d47b6303a4a2bcb57ec8af87
MD5 5ce4ba2fcf2cc7b9fc7af8e78765dc1a
SHA1 35d1d85d2d641dbb47d549515a7eef02cbf25365
SHA512 0e2adafa10ec50c93ac9ffb69aa7c1d4f939561ce2a7fe4a40b219efaae01d3f458c4b2f7beb1ab78c7a327a3fad6224cfe6ff91a87455038d79d5ce0bdde05e
SSDEEP 3072:0wYgyUquFJXG7ICmAnCw1wFqyiGAM1huRa+kx3Qw/xLANk0mUW5GmRntSFCjEENS:0wYDzZmACDcypAQhUzerOk0HOGm/SFyW
TLSH
T19E0422FDAF071A9360BEE2D2B28D58098F339717108F74D8FA54539E02952851B73DA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 184KB
SHA256 e2eb240f67545258c77e611628f29d3cf1e3b6e9d1f8b2143f6ad50ae6201aca
MD5 343c10fb426fd30d0a5e992d1d67b4f9
SHA1 e683ee6bb333e26883c6cd9f2f0bd68719601230
SHA512 85566bf06e8711de2aebdf90d49404af59e35cea3ff0fc45a19595709425ca65c9a883489f71ad4a7b4b234d63519134bd13009df3c9e6ce30afd43a5dac9367
SSDEEP 3072:0lXYgyUquFJXG7ICmAnCw1wFqyiGAM1huRa+kx3Qw/xLANk0mUW5GmRntSFCjEE8:0lXYDzZmACDcypAQhUzerOk0HOGm/SFn
TLSH
T1640422FDBF071A8360BEE2D2B14C29098F23971B558F74DCFA54138A02993851B73DA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 183KB
SHA256 1ab6653bb207c2fd387d5a999bacaa7a8d0c29e88226955eb36f561a3d32df3d
MD5 dd53b4a713edc38640dddf5b3f2fb6b6
SHA1 ba44d183ebfb2aa99fdc7864cbd14aa4c6ef2f3d
SHA512 fd90b029e92ae00f732f44bcf87c45bdd47a292462d82a2b89ce34bd8ba3387fed9d188b797bfeff11281e71dc8581a1d6665682f71ce275156416b744d47c5b
SSDEEP 3072:0FYgyUquFJXG7ICmAnCw1wFqyiGAM1huRa+kx3Qw/xLANk0mUW5GmRntSFCjEENS:0FYDzZmACDcypAQhUzerOk0HOGm/SFyW
TLSH
T1580422FDAF071A9360BEE2E2B28D58098F339717108F74D8FA54539E02952851B73DA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download