hxxps://anotherstrat[.]online/api/v1/px?xmlid=2lXEzFiTChwoKnX7gmg9Se1tgEP5LAjnszluzu2Sd33

Analysis

geolocation tags

brbrazilsouth-america
user interaction
yes
max time kernel
32s
max time network
33s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
15/04/2026, 18:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://anotherstrat.online/api/v1/px?xmlid=2lXEzFiTChwoKnX7gmg9Se1tgEP5LAjnszluzu2Sd33
Sample260415-xche1aa151

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2632	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134207521581641600"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2560	chrome.exe
2560	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe

Suspicious use of AdjustPrivilegeToken 62 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe
Token: SeShutdownPrivilege	2560	chrome.exe
Token: SeCreatePagefilePrivilege	2560	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe
2560	chrome.exe

Suspicious use of WriteProcessMemory 26 IoCs

description	pid	Process	procid_target
PID 2560 wrote to memory of 3644	2560	chrome.exe	85
PID 2560 wrote to memory of 2632	2560	chrome.exe	87
PID 2560 wrote to memory of 4352	2560	chrome.exe	88
PID 2560 wrote to memory of 4352	2560	chrome.exe	88
PID 2560 wrote to memory of 4512	2560	chrome.exe	89
PID 2560 wrote to memory of 4512	2560	chrome.exe	89
PID 2560 wrote to memory of 4532	2560	chrome.exe	90
PID 2560 wrote to memory of 4532	2560	chrome.exe	90
PID 2560 wrote to memory of 5044	2560	chrome.exe	91
PID 2560 wrote to memory of 5044	2560	chrome.exe	91
PID 2560 wrote to memory of 3320	2560	chrome.exe	92
PID 2560 wrote to memory of 3320	2560	chrome.exe	92
PID 2560 wrote to memory of 4948	2560	chrome.exe	93
PID 2560 wrote to memory of 4780	2560	chrome.exe	96
PID 2560 wrote to memory of 4780	2560	chrome.exe	96
PID 2560 wrote to memory of 2568	2560	chrome.exe	101
PID 2560 wrote to memory of 2568	2560	chrome.exe	101
PID 2560 wrote to memory of 2040	2560	chrome.exe	102
PID 2560 wrote to memory of 2040	2560	chrome.exe	102
PID 2560 wrote to memory of 4148	2560	chrome.exe	105
PID 2560 wrote to memory of 4148	2560	chrome.exe	105
PID 2560 wrote to memory of 1300	2560	chrome.exe	106
PID 2560 wrote to memory of 1300	2560	chrome.exe	106
PID 2560 wrote to memory of 2868	2560	chrome.exe	108
PID 2560 wrote to memory of 4344	2560	chrome.exe	109
PID 2560 wrote to memory of 704	2560	chrome.exe	110

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://anotherstrat.online/api/v1/px?xmlid=2lXEzFiTChwoKnX7gmg9Se1tgEP5LAjnszluzu2Sd33
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffec17fc728,0x7ffec17fc734,0x7ffec17fc740
  2⤵
  PID:3644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1576,i,18112669039741363373,8532896496683307297,524288 --field-trial-handle=1960,i,17243266377661867181,3478932739691519749,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2004 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1664,i,7481866703880494387,6795173006382411175,262144 --field-trial-handle=1960,i,17243266377661867181,3478932739691519749,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1936 /prefetch:2
  2⤵
  PID:4352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2380,i,16670323458506305289,2993389496334486370,524288 --field-trial-handle=1960,i,17243266377661867181,3478932739691519749,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2488 /prefetch:8
  2⤵
  PID:4512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3196,i,18387265271776199580,612496176349303682,2097152 --field-trial-handle=1960,i,17243266377661867181,3478932739691519749,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:4532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3216,i,5032859560679341118,18266286326299786106,2097152 --field-trial-handle=1960,i,17243266377661867181,3478932739691519749,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:5044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4412,i,12885016989502524313,2396804198786521823,2097152 --field-trial-handle=1960,i,17243266377661867181,3478932739691519749,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4432 /prefetch:2
  2⤵
  PID:3320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5316,i,17476993764755546534,11102640410971145756,524288 --field-trial-handle=1960,i,17243266377661867181,3478932739691519749,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5324 /prefetch:8
  2⤵
  PID:4948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5524,i,15310669571329323932,16699320621468097384,2097152 --field-trial-handle=1960,i,17243266377661867181,3478932739691519749,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5664 /prefetch:1
  2⤵
  PID:4780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=3928,i,17414099111670330396,9842519643060021536,2097152 --field-trial-handle=1960,i,17243266377661867181,3478932739691519749,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5840 /prefetch:1
  2⤵
  PID:2568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5780,i,12731084514837886434,17351831385798350247,2097152 --field-trial-handle=1960,i,17243266377661867181,3478932739691519749,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5764 /prefetch:1
  2⤵
  PID:2040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5912,i,6460359104025557382,8826803824307655430,2097152 --field-trial-handle=1960,i,17243266377661867181,3478932739691519749,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5944 /prefetch:1
  2⤵
  PID:4148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5736,i,773786422163849432,15969834532556042725,2097152 --field-trial-handle=1960,i,17243266377661867181,3478932739691519749,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6092 /prefetch:1
  2⤵
  PID:1300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5364,i,6955590373354189869,12180284269783406241,524288 --field-trial-handle=1960,i,17243266377661867181,3478932739691519749,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6224 /prefetch:8
  2⤵
  PID:2868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6116,i,3592583108572084832,12191946223466436639,524288 --field-trial-handle=1960,i,17243266377661867181,3478932739691519749,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:4344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6196,i,8049115781820569954,14170024412113175505,524288 --field-trial-handle=1960,i,17243266377661867181,3478932739691519749,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:704

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3388

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:932

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 cfb78bfca1fdee9a21137145e42d9f01d75a48dbe21a85d7aaed1aa43ff78eb1
MD5 bcf8d6aebe6fa8a55beab06d9e13b03d
SHA1 66e353fedbccaf08b2be7de0cdfc00dc26dfbd0d
SHA512 3de135dc898f1ddc760fb3decc1a7fdc807d84518f75356747503b8d96c721ab4b1f524d33e14d1f1bcab1bfb5596502ff8f8313cdf568063733f36b2112deb4
TLSH
T180E02BBAD825DC3B08FD176CA1514B47EB10236A6BC0441F3A3E820C8FF063A0592C9C
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 ff60794f4f559e076f582407a88c40a55283c593756f24a703d83e3ac7c4523a
MD5 f32c637e0f0f7d3b4019eb9a83ca15fb
SHA1 14039a2614ea47bb2bbc207988a6c7fdea1ae824
SHA512 8c6661e1c4b3b9cfed1c21a84734b15a7d18785c4c3986c82a2710f22da4e9591dd3afce35f6434af3b76070b15791cc0a7ef9b702c0a9dc399ddd7f19637c73
SSDEEP 192:sRBR8SJYrsPiGhCJILv7CMpAPRp2u93Hsb+WNnuMPPc2mxwnaYeVyIsnAUge:sRBR/M4hzxUXZxwtPE2WaaVe
TLSH
T1D552D72EA918B93BDCE6C32AEA257F67D7F6102161842D88D6FDC52C04F79CD2227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 0754e8a64bbfd770097b387b331731f42e23afe3ffd6d855a92917befd7a6fb1
MD5 33ef4c8043feb1e944e00cd39c158061
SHA1 b9b19174cedd1b32bae126bb8d79dede260e0aea
SHA512 a995fa7ea04e450014ce6f5440374652cd05cf73549506e1a09544aa2af9073e41849310f565f363ffb07b6b75cec0691d31c165de21d041dc9827f7fe1aeee3
SSDEEP 192:nRBR8SJYrsPiGhCJkLv7CMpAPRp2u93Hsb+WNnhm0oc2mxwnaYeVyIsnAUge:nRBR/M4HzxUXZxwA052WaaVe
TLSH
T13552D72EA818B93B9CE6C32AEA257F67D7F6142161842D84E6FDC52C04F79CD2227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 9c430f8c17feb865c008f25efcb04058f5ca91ec3e589c4f1ad8c3f157cbd990
MD5 d8cfe36a6891342c51bc518f22217e71
SHA1 73290bff0114201260216b0cb931cd9bda0228c8
SHA512 7e9778e0fd6323fceb05d3cc91303d1d284a486f525d995ef288db3363d58c76ff756e8e5e9add87e5a95e7ffd83adb3cf949ed5b7444a047d33f0fd1fa9184a
SSDEEP 384:AmjUj7KxkXqKf/pUZNCgVLH2Hfgsl5x7pLuLcifuvXODUf+ErU3xeHGHHe7omBcw:AGUj7KxkXqKf/pUZNCgVLH2Hfgsfx7pH
TLSH
T15772EA677C4C9D3B0F94C68CD816BF4FADB6024B55ED886443FA982903D5ACB110A2F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 533d7495134c983042e715143abce630ff7e7b88bd21b149d30e2f7f206f5899
MD5 f8d1cf5321691024e77f9a0e4423f19d
SHA1 4634e562fe0507d6fba92eb0aafe85beb8c43cef
SHA512 7cca32c077139d95d1b0895c4f5fac9f35d3f5a17f13ce6322e6d89d382ce2ddb76c7251d73b66ac717c7e573d172289024c30f004efda04fdf1446e43e34d92
TLSH
T19DB0121380019501C04302F02386048831245F14C70513C553E069F3DC2B1B24125191
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589a66.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe589a66.TMP
Size 96B
SHA256 42b7d6f3b12a989fadc46c5c478754413baffab02efd5d3522ca675340c904c6
MD5 225e73b3d6635a60730596bd12a4468a
SHA1 26da23d1ec70a6afd6e4b2263541be61bbae828c
SHA512 b0b84d217c5b2261a5306cd0f4c7838be85af00a0104543f10bbcfaf2d8d963f2cadb8db4f254563808e14562eebeca5e231795696abd17e8651fb18f3f16cb8
TLSH
T18AB00257C502F213C04303B025A5AADC7160DF65CA032316A2E27A76DC2567146295B5
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 fd4288bdcf4f147862591553078c1caff9087665678f6de7690a48b20d28aa35
MD5 0131fd33560ce872ae509256e4fe18fe
SHA1 e5ab9116f31eee37e122bedd1fdfaf3232692c2d
SHA512 ec63612710ae73182d34b79aed59a9d1a268d10e71fd356a01dbdfedd8774b63eaa07b0ce0bc845ecc321269decc04ac5c6cd1264586d1c1e7da75d83b1e9dc5
SSDEEP 1536:ip/jcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YW:aj3Qw/xLANk0mUW5GmRntSFCjEENL
TLSH
T1B69302BA4E2A46F7997D4A9176AD7909CE12530D705FA9CC315C638C61D01C82B72F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 0933e63fdb0d3a3c533525252fc511be60802ab4a019b9ee3b08a26253793061
MD5 494bddbae0cdaac3fc5fa2834250e6d9
SHA1 70b36a167455df10ac6b6fcd41fdc2e073bad5d2
SHA512 4f44098854a6ddda4813e0ee630b78a65a3b08b552fe33697762428de36f2a500c8e4e5bd578209bd8975efaab23afc80ce0b7eae1de0e6c3b4ab79872088053
SSDEEP 1536:YpzcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEx:C3Qw/xLANk0mUW5GmRntSFCjEENL
TLSH
T16F9302BA5E1A49F799BD4691729E780ACD22130E709FA9CC3268579C21D41CC2B73F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b02abbc0-d781-4ada-ac66-0f5be708fb7f.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\b02abbc0-d781-4ada-ac66-0f5be708fb7f.tmp
Size 91KB
SHA256 50a89094071a9a87c8819a71a16af23e949bd872432605f546af53d67b620d90
MD5 a1d3d0ec7a62ab182a207396052b3cc1
SHA1 3c769507f6e02793e0e0dde6cbf6e752c719f339
SHA512 89c2f7b29d13904f0db14aebd172a998d4e129d3f9a5fb087e20b952c3ddd715a03568a8db759f166e99a067964bccaf0626b978e50d9fbbd748e3b8f5271ef2
SSDEEP 1536:YpfcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEx:W3Qw/xLANk0mUW5GmRntSFCjEENL
TLSH
T1369302BA5E1A49F799BD4691729E780ACD22130E709FA9CC3268579C21D01CC2B73F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download