1922c1f0adb9b2999a2ff2c453d95e923c09f39936672b4dae6a255b8a332b8c

Resubmissions

17/04/2026, 13:04

260417-qa6w9ahv5t4

17/04/2026, 12:59

260417-p8ed8aew5l3

Analysis

user interaction
yes
max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/04/2026, 12:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ConsoleApplication1.exe
Size 92KB
Sample260417-p8ed8aew5l
SHA256 1922c1f0adb9b2999a2ff2c453d95e923c09f39936672b4dae6a255b8a332b8c
MD5 e49ee7a15bb40ddeefb03087373c632c
SHA1 7ec6ee7be802b9bad3c7ac78f25dbb5910d1ffcf
SHA512 01afc6e8c90b1abd0d98cf21c2c1d1ef840678ab8645c0ca6661b85bd46a51b81693e1fae8cf9884f7bc05c767d199d25623b9eea12cbe2379e1e8eb32ff73da
SSDEEP 768:+ZtKrxzahvccyZ9I/I0Q1BgkmIjHVAv9:txcvc1W/ZQ1B3l1
TLSH
T11E93E74E739D61F3D876C0799D870225FBB2716413226BDB811589B9AE227EC3D3C788
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4132	chrome.exe
4072	chrome.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134209044497938351"	chrome.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-721190819-434563495-2007910846-1000\{C58C88DF-BCAC-4877-8843-20F92A241D2B}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3904	chrome.exe
3904	chrome.exe
912	chrome.exe
912	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	3904	chrome.exe
Token: SeCreatePagefilePrivilege	3904	chrome.exe
Token: SeShutdownPrivilege	912	chrome.exe
Token: SeCreatePagefilePrivilege	912	chrome.exe
Token: SeShutdownPrivilege	912	chrome.exe
Token: SeCreatePagefilePrivilege	912	chrome.exe
Token: SeShutdownPrivilege	912	chrome.exe
Token: SeCreatePagefilePrivilege	912	chrome.exe
Token: SeShutdownPrivilege	912	chrome.exe
Token: SeCreatePagefilePrivilege	912	chrome.exe
Token: SeShutdownPrivilege	912	chrome.exe
Token: SeCreatePagefilePrivilege	912	chrome.exe
Token: SeShutdownPrivilege	912	chrome.exe
Token: SeCreatePagefilePrivilege	912	chrome.exe
Token: SeShutdownPrivilege	912	chrome.exe
Token: SeCreatePagefilePrivilege	912	chrome.exe
Token: SeShutdownPrivilege	912	chrome.exe
Token: SeCreatePagefilePrivilege	912	chrome.exe
Token: SeShutdownPrivilege	912	chrome.exe
Token: SeCreatePagefilePrivilege	912	chrome.exe
Token: SeShutdownPrivilege	912	chrome.exe
Token: SeCreatePagefilePrivilege	912	chrome.exe
Token: SeShutdownPrivilege	912	chrome.exe
Token: SeCreatePagefilePrivilege	912	chrome.exe
Token: SeShutdownPrivilege	912	chrome.exe
Token: SeCreatePagefilePrivilege	912	chrome.exe
Token: SeShutdownPrivilege	912	chrome.exe
Token: SeCreatePagefilePrivilege	912	chrome.exe
Token: SeShutdownPrivilege	912	chrome.exe
Token: SeCreatePagefilePrivilege	912	chrome.exe
Token: SeShutdownPrivilege	912	chrome.exe
Token: SeCreatePagefilePrivilege	912	chrome.exe
Token: SeShutdownPrivilege	912	chrome.exe
Token: SeCreatePagefilePrivilege	912	chrome.exe
Token: SeShutdownPrivilege	912	chrome.exe
Token: SeCreatePagefilePrivilege	912	chrome.exe
Token: SeShutdownPrivilege	912	chrome.exe
Token: SeCreatePagefilePrivilege	912	chrome.exe
Token: SeShutdownPrivilege	912	chrome.exe
Token: SeCreatePagefilePrivilege	912	chrome.exe
Token: SeShutdownPrivilege	912	chrome.exe
Token: SeCreatePagefilePrivilege	912	chrome.exe
Token: SeShutdownPrivilege	912	chrome.exe
Token: SeCreatePagefilePrivilege	912	chrome.exe
Token: SeShutdownPrivilege	912	chrome.exe
Token: SeCreatePagefilePrivilege	912	chrome.exe
Token: SeShutdownPrivilege	912	chrome.exe
Token: SeCreatePagefilePrivilege	912	chrome.exe
Token: SeShutdownPrivilege	912	chrome.exe
Token: SeCreatePagefilePrivilege	912	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
3904	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe
912	chrome.exe

Suspicious use of WriteProcessMemory 48 IoCs

description	pid	Process	procid_target
PID 3904 wrote to memory of 1284	3904	chrome.exe	96
PID 3904 wrote to memory of 3272	3904	chrome.exe	97
PID 3904 wrote to memory of 3272	3904	chrome.exe	97
PID 3904 wrote to memory of 4132	3904	chrome.exe	98
PID 3904 wrote to memory of 2616	3904	chrome.exe	99
PID 3904 wrote to memory of 2616	3904	chrome.exe	99
PID 3904 wrote to memory of 5748	3904	chrome.exe	102
PID 3904 wrote to memory of 5748	3904	chrome.exe	102
PID 3904 wrote to memory of 2132	3904	chrome.exe	101
PID 3904 wrote to memory of 2132	3904	chrome.exe	101
PID 3904 wrote to memory of 4180	3904	chrome.exe	103
PID 3904 wrote to memory of 4180	3904	chrome.exe	103
PID 3904 wrote to memory of 1912	3904	chrome.exe	104
PID 3904 wrote to memory of 1912	3904	chrome.exe	104
PID 3904 wrote to memory of 5124	3904	chrome.exe	105
PID 3904 wrote to memory of 5584	3904	chrome.exe	107
PID 3904 wrote to memory of 5584	3904	chrome.exe	107
PID 3904 wrote to memory of 2672	3904	chrome.exe	108
PID 3904 wrote to memory of 2672	3904	chrome.exe	108
PID 3904 wrote to memory of 1464	3904	chrome.exe	109
PID 3904 wrote to memory of 1464	3904	chrome.exe	109
PID 3904 wrote to memory of 2480	3904	chrome.exe	110
PID 3904 wrote to memory of 4456	3904	chrome.exe	111
PID 3904 wrote to memory of 4456	3904	chrome.exe	111
PID 912 wrote to memory of 824	912	chrome.exe	122
PID 912 wrote to memory of 4072	912	chrome.exe	123
PID 912 wrote to memory of 2832	912	chrome.exe	124
PID 912 wrote to memory of 2832	912	chrome.exe	124
PID 912 wrote to memory of 2008	912	chrome.exe	125
PID 912 wrote to memory of 2008	912	chrome.exe	125
PID 912 wrote to memory of 1160	912	chrome.exe	127
PID 912 wrote to memory of 1160	912	chrome.exe	127
PID 912 wrote to memory of 2112	912	chrome.exe	126
PID 912 wrote to memory of 2112	912	chrome.exe	126
PID 912 wrote to memory of 5416	912	chrome.exe	129
PID 912 wrote to memory of 5416	912	chrome.exe	129
PID 912 wrote to memory of 5608	912	chrome.exe	130
PID 912 wrote to memory of 3132	912	chrome.exe	132
PID 912 wrote to memory of 3132	912	chrome.exe	132
PID 912 wrote to memory of 3008	912	chrome.exe	133
PID 912 wrote to memory of 3008	912	chrome.exe	133
PID 912 wrote to memory of 5596	912	chrome.exe	134
PID 912 wrote to memory of 5612	912	chrome.exe	135
PID 912 wrote to memory of 1136	912	chrome.exe	136
PID 912 wrote to memory of 4660	912	chrome.exe	137
PID 912 wrote to memory of 4660	912	chrome.exe	137
PID 912 wrote to memory of 2176	912	chrome.exe	138
PID 912 wrote to memory of 2176	912	chrome.exe	138

C:\Users\Admin\AppData\Local\Temp\ConsoleApplication1.exe
"C:\Users\Admin\AppData\Local\Temp\ConsoleApplication1.exe"
1⤵
PID:4480

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5324

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffd4a24c728,0x7ffd4a24c734,0x7ffd4a24c740
  2⤵
  PID:1284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1760,i,16448345779224767776,5456960073842214085,262144 --field-trial-handle=1924,i,4852773704540835573,16592930667958249547,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1920 /prefetch:2
  2⤵
  PID:3272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1888,i,4743309475470378433,4877880044429115478,524288 --field-trial-handle=1924,i,4852773704540835573,16592930667958249547,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2084 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2380,i,3966846455401283798,5697974396935959750,524288 --field-trial-handle=1924,i,4852773704540835573,16592930667958249547,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2416 /prefetch:8
  2⤵
  PID:2616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3244,i,16652143717502595404,17971492292456989251,2097152 --field-trial-handle=1924,i,4852773704540835573,16592930667958249547,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:2132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3300,i,13580705025107286949,1599502243042906345,2097152 --field-trial-handle=1924,i,4852773704540835573,16592930667958249547,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:5748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4448,i,10412475199809060019,18417225636374282664,2097152 --field-trial-handle=1924,i,4852773704540835573,16592930667958249547,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4468 /prefetch:2
  2⤵
  PID:4180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4740,i,15705951945888118685,60104307527230312,2097152 --field-trial-handle=1924,i,4852773704540835573,16592930667958249547,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4692 /prefetch:1
  2⤵
  PID:1912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5572,i,16098631850826535140,2264552430576033559,524288 --field-trial-handle=1924,i,4852773704540835573,16592930667958249547,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5576 /prefetch:8
  2⤵
  PID:5124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5640,i,3077387798876281479,4212047984671647516,2097152 --field-trial-handle=1924,i,4852773704540835573,16592930667958249547,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5616 /prefetch:1
  2⤵
  PID:5584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4868,i,6596544608809726387,9713934284555429702,2097152 --field-trial-handle=1924,i,4852773704540835573,16592930667958249547,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5952 /prefetch:1
  2⤵
  PID:2672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3364,i,11858143280711885480,6033851181924485195,2097152 --field-trial-handle=1924,i,4852773704540835573,16592930667958249547,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:1464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4848,i,13105480991305414118,641522955009197752,524288 --field-trial-handle=1924,i,4852773704540835573,16592930667958249547,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4864 /prefetch:8
  2⤵
  - Modifies registry class
  PID:2480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4796,i,10554229672927819973,14048791505612984073,524288 --field-trial-handle=1924,i,4852773704540835573,16592930667958249547,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4832 /prefetch:8
  2⤵
  PID:4456

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5572

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1376

C:\Windows\system32\cmd.exe
"C:\Windows\system32\cmd.exe"
1⤵
PID:384

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffd4a24c728,0x7ffd4a24c734,0x7ffd4a24c740
  2⤵
  PID:824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2024,i,23069448867017933,13398949494291322661,524288 --field-trial-handle=2028,i,13823906038143520505,14871199535512589506,262144 --variations-seed-version=20260417-010916.149000-production --mojo-platform-channel-handle=2136 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1748,i,13257425917551150505,7709069867110364496,262144 --field-trial-handle=2028,i,13823906038143520505,14871199535512589506,262144 --variations-seed-version=20260417-010916.149000-production --mojo-platform-channel-handle=2016 /prefetch:2
  2⤵
  PID:2832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2400,i,16860113970742172498,7380820403107472409,524288 --field-trial-handle=2028,i,13823906038143520505,14871199535512589506,262144 --variations-seed-version=20260417-010916.149000-production --mojo-platform-channel-handle=2584 /prefetch:8
  2⤵
  PID:2008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3256,i,8458678857117500287,1544149355509114064,2097152 --field-trial-handle=2028,i,13823906038143520505,14871199535512589506,262144 --variations-seed-version=20260417-010916.149000-production --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:2112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3284,i,6836089768713351268,11798830657124788546,2097152 --field-trial-handle=2028,i,13823906038143520505,14871199535512589506,262144 --variations-seed-version=20260417-010916.149000-production --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:1160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4588,i,7804135520620752597,8349464781047362302,2097152 --field-trial-handle=2028,i,13823906038143520505,14871199535512589506,262144 --variations-seed-version=20260417-010916.149000-production --mojo-platform-channel-handle=4604 /prefetch:1
  2⤵
  PID:5416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5360,i,6081268192889049386,4858184073355798653,524288 --field-trial-handle=2028,i,13823906038143520505,14871199535512589506,262144 --variations-seed-version=20260417-010916.149000-production --mojo-platform-channel-handle=5364 /prefetch:8
  2⤵
  PID:5608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5432,i,7470981517275058412,4574750147204757906,2097152 --field-trial-handle=2028,i,13823906038143520505,14871199535512589506,262144 --variations-seed-version=20260417-010916.149000-production --mojo-platform-channel-handle=5592 /prefetch:1
  2⤵
  PID:3132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5652,i,15947943293404070878,16024243677513187623,2097152 --field-trial-handle=2028,i,13823906038143520505,14871199535512589506,262144 --variations-seed-version=20260417-010916.149000-production --mojo-platform-channel-handle=5700 /prefetch:1
  2⤵
  PID:3008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3428,i,3726349533648906580,5345491444992378644,524288 --field-trial-handle=2028,i,13823906038143520505,14871199535512589506,262144 --variations-seed-version=20260417-010916.149000-production --mojo-platform-channel-handle=3416 /prefetch:8
  2⤵
  PID:5596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3436,i,2738139228371782285,13822949534951000214,524288 --field-trial-handle=2028,i,13823906038143520505,14871199535512589506,262144 --variations-seed-version=20260417-010916.149000-production --mojo-platform-channel-handle=3432 /prefetch:8
  2⤵
  PID:5612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3940,i,899690138958149685,12248279851235525988,524288 --field-trial-handle=2028,i,13823906038143520505,14871199535512589506,262144 --variations-seed-version=20260417-010916.149000-production --mojo-platform-channel-handle=3412 /prefetch:8
  2⤵
  PID:1136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3376,i,9935643008961462479,6984004859072213146,2097152 --field-trial-handle=2028,i,13823906038143520505,14871199535512589506,262144 --variations-seed-version=20260417-010916.149000-production --mojo-platform-channel-handle=4588 /prefetch:1
  2⤵
  PID:4660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=3668,i,4446349367696239779,9432808838833028400,2097152 --field-trial-handle=2028,i,13823906038143520505,14871199535512589506,262144 --variations-seed-version=20260417-010916.149000-production --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:2176

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4512

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\CrashpadMetrics-active.pma
Size 1024KB
SHA256 ae1bddb9e2cc97b0c9cd78ef3cd17553be6e5204677bd67e0b8f7fa27007f189
MD5 b0366599d64b0fc1adb2a712dcd02ee1
SHA1 b7a1c09ccd2846664cab5f76bd80b8e9f107acb0
SHA512 d7de6d48285018f8b709c81ca01688126db7893ce9f48829524ee3122aa6f2200c7f78186b5a558d0b1ecf8157ee78a20064b63b45ab89f7aa0835b8409435d0
SSDEEP 12:bHCsEXhVMMBKEKSCemJKlkQyYVhYJ0I+pPK6BsyW1inP6:biPROMMBS+MkIYWIE1BtXP
TLSH
T117252786A30815EFC54288B589AE03602374F9E55F52079B2E2DAA1F2E271D80F45164
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 6845dc964e521a1f71d86a520a5a6535af6301398514da6d1a49c8ab4b9725b0
MD5 eeada1874586398ed8bdf1f3c912dc61
SHA1 24c7547fbb116ba15d1da38b649da9f4d9f32838
SHA512 13aab50c5c41f7c555b9fefe5ddb2b2a5be7ca990841a8bee3b2b08185c6fbc690ca5ebc811c2895d25cadccc26029f252f1907d14808c47b683cb5838d2f964
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 ff2dba7cd3fe323b02deb2121633a23608850ba96b9bb9e325b29cbe9d820f51
MD5 33b7779e53be37c72a90d97abde56582
SHA1 a8a5913926a3d9e4e459cabca22f086d9148cb94
SHA512 89e2e21da93b81a97e28180c0ddc407a47c43e9a8b0e375b0dd7d0ae8eec52ad11da0ff28b8927236d330d0821e2be67d33b7098c5c0e7a0b2ca1fc46d9ac7d2
TLSH
T127E02BDAC971EC2B18FD1B6D70440646EA5403962B81494F3E3D81088FF463A4586C6C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 cf4e5fe675074b78196f74b13923d8e091a534697dd8c0a1a744dec8ac19c2fe
MD5 ba490d345968fc6c7af3bf7ef338c8a6
SHA1 9f39bd94b3e0808bde78eca3d1e733ef67b263a7
SHA512 301bfd852ebe820d29a8fca2dd700629d9c8c44aff2586af40f346358e9730157efa13f0fe6c60509abcd3aa56876144e04965dc683dc3be19164c069bf97e79
SSDEEP 24:dfQTYdFH1lcSPv9RLZ6noO9k0L7GKKhCEkv3IgCmYQDDL:Xr1LLUnoOy0L7KX6IgVYi/
TLSH
T158135C3CA509EE26F7E4153E1D4F2775A3FC8340D9A3906B3D7476531504B41562F179
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 5e0e05a439f58a2a8630185a877cd410f1db6a92abf93069222f8a2d9d39a59f
MD5 ec299ef1d265b64fe3009fce202d8394
SHA1 766fdbd674fcd17f555f508933a59301571016eb
SHA512 92aa7138b0be631ab154fae7a9fd8717540ae054aa15c921fe2f0af5ca2fade083cf285990f62202fabbd686445fb6dcd42c3ca54e31d4dfcbe7b9f6c5d47444
SSDEEP 192:zo2CSmw30HmyJ0bQxa4SclM9HLswZmkNhXB+1QB3wilOsYmqoHPm:k5S/30GS0bl4SdhzmqEQ3wi0sjrHPm
TLSH
T104444CF71904E982EF348BF53C81713C9C3647261D99ECB6E97C446705866E33254AB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 803d01100a0a4f093f9c025bdf6fcfbca87953f96bf152ac5d23d43429227793
MD5 d3fc96014345c17cdb6b50e369b64555
SHA1 aa7fdfbfe58a640303ade1edf74b270a755f7edd
SHA512 7798ba75fe12c3775a0956f1ef58b1a1f5e9b28cf6031ca8b06ba09de0c31cb9ca465174a2ea434f2f45421653679cf06c7ab5b6c649831f86a9cf3ae0467e15
SSDEEP 384:bJvBazjHu83Fd/x6YdEN8kb12WYFpYIrGzHtqb2Eb2dG7goR8j2bZ9Oaa6J8+:XGp7ENbnzGEEOaaV+
TLSH
T1AC259FBB14277B91FC72473438A6340CBCA74127FC8820E617DE91D360C59765A6E9FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 377ad1a87cf71e8ef4dbef5731062c80b4f8b3775faaa4ea7616c51bd93de68c
MD5 59af1c90654f54535fc0f8f3572984e0
SHA1 ecea4839d894581a7edfa01945b7f7409c9537b3
SHA512 fa8a34ca31f24dc468dfbb3f754226d305dc1effc3a68661cd657134b48db603eb9a37b6a12164b01b51866f9248344083e8a405059057f7554f00acc19b1fbb
SSDEEP 6144:InrZ78AyXbWHKiCECFbnnLZnt+JxNWt+:f
TLSH
T162167DA74F74B502EA96EF70FBC9ED1D7C702392ACCB94C2951281BA45F0BC4174A19D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005
Size 35KB
SHA256 6138c01469ba842a7abc875366587d86e48554ec76aa14f843254af52c9a7024
MD5 c0205972c08be88eaf0bfd147bd34ed2
SHA1 8b196f17f6af18a298e12774451c9e6663856a06
SHA512 e9cf1768e8ddd0e8ff2f36149160a7f378a34c69448dc6e2956e44aa12d4bb8c8e0f6f7bcc3e798ab23bd7fb24472c292d79d8196b0b9ba65d49812e6994020b
SSDEEP 768:LAixiWLosurX3CjcJk36ylB0WNVAonAHpsNDkGCOICDFXZo7GgNA:LRxiWLAryjcJLylB0WNvnIKVkaICRJoy
TLSH
T1A7F2E0EFBABEBA152CC481DD6F8DF19C61D36C16A74559EC33943DDA301A9E000DA18D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Size 65KB
SHA256 7bc424130eda2bae7fca759b777f9af68b2ffdd1db9799c7f5b482bbf3375a2f
MD5 2bd30bcdb6172c371ff17cac2fbc52c3
SHA1 17b341c22afa48bf9ac82b7525da4969ce516ec7
SHA512 6e5ec1b1aa0558d9ebc3439adfee842b7f31e9e307ce221f9c463ba6b1d40dfc938d9dbdcd8537980ca600778a97db6b76c15e5915045a9f817699000efd5016
SSDEEP 1536:uYZknOit3uYJaoHyR2Ebg/dEgINEX1b25IjcpXQzv3zC+VFNB:uYmOittLyRHb+dEPsb2Ojc1QzLC+VHB
TLSH
T1CD630202D4949D8DF6F31853F73309BA5F669E70E628CCEB64F8CF6F6818050740A5A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 336B
SHA256 8ae39463a55d5ed3c2eee173427820927ffd9dc81c6871537de06b91b69643ec
MD5 3996f93c9f660f442feea81b9ad2d6eb
SHA1 228f63f00b961ecd77952eb1ef3f6c215ef5f3cd
SHA512 9e8d2565dfd72b09fcc9583bf21469d4beb5b4349bab9cb9f8a1498212e83f42f599025f5b6b43df4f0d001013551f364fdb4bf92f9716bd0218bc11dae43383
TLSH
T1A2E05B50718ED099F7841A737C65DC4B84BF072D11AA07837CF4297C7957979034B931
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
Size 317B
SHA256 90b57fc236b3c55690c04ac25d8f5ba762a3d2fc212af971be3108ef9204caf3
MD5 f647b2ce5b78ef5bf05c66bcdcc9bf58
SHA1 e1a73b172340b3289fa3f52eca90fe7311261df1
SHA512 e286af7b2d8d854019ae02b91fe3bab73736c1a22e366ec9916894c8da6241f9c174586f7f13c1d325963ce27f357e162e503ea15a71b376183307d07a15a6a7
TLSH
T181E02695268AC5FD8094C5A382A9630DCBE03801A2D93D060B45C8C07283A04E2A0787
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Favicons
Size 20KB
SHA256 20c7e3382cfa61f9aab9261daaf4472faa6096e53be634a0c9312bd1094b05a3
MD5 92ba73c1c9f2e30bae1d1bc59b004d16
SHA1 40c1a514fd393c78fa8b094ba0cc1ff48a817f00
SHA512 94cc9f250a1bed7c9393d4bd771d36e1ae6ea8efe5a2124418add9329d716386628da28a7c1722b782344ecd9de12dcf4c92f6f4457c208d0faa9e37cb61ab31
SSDEEP 96:deBCP7G038PMnOQqu4Jy9emzkOvr/5kdVp84MxE:dcJwOzu4JycmzrzRpE
TLSH
T16392C7D76CB43012FF5049B67058F92C9D77821C2FA6FC5CB6A088120DE6D1B706E0E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History
Size 160KB
SHA256 467a7544759182cf9fbbe5385841f3f6c88a59f255fac0db9c9f0bb2261dceb1
MD5 8a0af5eb5c0d2247166dfc56a2c7202d
SHA1 4c4a70af57a8cb2c5169cbf33e347eb16ba61da2
SHA512 282246d180cf2002ad4fe5022fca607f0ac229704e370c21a907725cf2168bf14db798b363610da1378eff799e110aa1e0f9c57d1cec9d1bdd57763934cc257d
SSDEEP 96:L9Mm85zMQfn/uejzH+bF+UIYysX0fxQp97UEHt/DfLcLq2piRk/E0mfhMm8Xxi:LeMI/tH+bF+UI3iWGVUWNkqp33ai
TLSH
T1B5F3435F6F743211CDBD817668D695A74CBCF02F4F63AAC99C6004B1CED2A56B05C0EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
Size 332B
SHA256 be9f8cc32b33df8ff7977245388593892f1be7c6eb8ec4a69405feb5f0c2fdfd
MD5 4d7e58aef5f3077741726c7147a8741e
SHA1 32aa09daea4291e88a8bd2659ed08e3d26ceb73f
SHA512 5e983d4936442cd6e67d0233c45db61c3cc78d3d02f46e7cea4435df314f7e85cbb24fc6e0adf449798fc5533a094884d66a825c5324f62eebee7f484a96a63d
TLSH
T17BE0DFA2669E86AE5284911BA228770ECBA0B404E6DE2E060F00E444B6C6D08A7C0A83
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Size 20KB
SHA256 038a788671dc567878bae22db05c6e38a41ba95f1c3087560d8ead1c15e9d767
MD5 bd23adb09d900e5461fdda470cda6287
SHA1 1bf83169413d3a3269fab61b7c77dfced4a0e9d6
SHA512 edab55ffd8133cffea217ec1357585f3dc9c89e6fd509b6168a1fd3dcac22c56e142403a0fa6e1422916005fd342a812ddd06a98aaba313719d7b1ca0cb52557
SSDEEP 48:Tb9aw/aHLopFMavU1ifHeu4RgRY5G+rC3dhBi4FAy0GM:XPareMal+0t+4x
TLSH
T13992538F1F303502C4B58A32E9D20A5A7EBD412C6713798DAD5424B39E9269AF10A5F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 3e566b2a3b1b3d41bd60a71e39be2935dd4f89a8e4707d55c68268e82739b509
MD5 5af923fb2d8e7cd1df34690dca8f2479
SHA1 85052bfc0b3b151c7374a48efdbf1c7fb08b856d
SHA512 6401b97a9d3afd309f656e2b72ff437fb54a561c3864b96490dc050fef9fc8c4c545638387e65c30a48fac9d3238750dd9f258f4bbf98cedf1b570c553de0d6d
SSDEEP 48:YALlqPqfqafo7ggmzsvfsRosQ7BsBHVosGtsYqzsz2NsTXLsfcsbK4s2K+Yj:DQfaagIUA7CHV2PT20G6lTj
TLSH
T181816BB7C3E8C56DC91195E4AB15AF2FCE690A24531C3C66C9D4AE0B53E2972D20174F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 84fe310a86f5b4472822bc43bea25753cd67cb4b7383a1da9a80d48598ead46c
MD5 62a33c737ac6855fa59e780a40700813
SHA1 3eb870c0f9d957ede008c247de21c08de1c0e87a
SHA512 b4c3809737930c210918d68faa07b3438401f7c0f115a3da9f32771e7335178e8bdddd293c93292e91e0917cea0fc6cb01601a64b76dedd9c4d52558eee10029
SSDEEP 96:OIEumQv8m1ccnvS6U12kQbH2pQorZHehpnSS9:OIEumQv8m1ccnvS6U12N2BZHeHSS9
TLSH
T12BF200FF1715A115C4E485B4E2415F8EFE2B11384BABBAD09A881CF392C74E3A52C359
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 690B
SHA256 3c449c6cd46249d90370bca12e3d03dcb43240dfd10ac82408e28e72d5a64374
MD5 18905b862c2a3c12e121abe77f02d11a
SHA1 6a66ad0efeb0398cb46606f0305673cf4e355665
SHA512 ef1750ea67d7cd4f5444e7f4f0f1f1ca298c6649b19cf6a046618baf257d94be6765abc3e188080d96e79e0b25819f0ead600990570515e5259497f6bc5665f9
TLSH
T1D4019E53A2ADB47354AC45FF1E087C0579F9A43941A698FCCFAA921CE0C30E31B12833
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 6df2c4f2ec14a7c0ef917cb863658a33b5e05ec483b013fb1ca3564ab89c1f8a
MD5 3979ad0c08c26d2a8eddd8dcace9c145
SHA1 3d6b970a2f3f698d957aed7c3ec7759066bb24f9
SHA512 f9938e0a67db7db6c8b650f8a8fbec92869dde29ae6f7970453e30980a1f17ef51e15a649cb0ac2508b8d8fed70a043d12264a07590a3212bf46366a65abf9a3
SSDEEP 192:jRld6Dx4d6wbv7kYVAPRp2hqCRP9CHsb+WNK2L4fpcEqT42dEeHk8GyBjVyIsnA4:jRldAkjQYgXex4w3I5l2nvBF8
TLSH
T12C52D56BA910293B4CC7D226FD617B2BEBF5103161D42E84E7FC9A2C15E79CC221781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 7f911207a4b4c070179334f2588ce15883a72fa38b8389bc347b220380b00d36
MD5 3a9ba453b2751ba5b4f4622ede471dc0
SHA1 88c5229a2514b46a3506376e63d5c599fedd3520
SHA512 95d4bf899510660de07ba49cd69ea6b739869209839f18ec65ba1e492222f65faeda47cb226b115f3dad7096b2f84aa907bd98f59116643e6048c7e296be8ef6
SSDEEP 192:jRld6Dx4d6wRv7kYVAPRp2hqCRP9CHsb+WNK2L4fpcEqT42IEeHk8G5BjVyIsnAq:jRldAkBQYgXex4w3I5l2owBFe
TLSH
T1E452D56BA910293B8DC7D226FD617B2BEBF1103161D41E84E7FC8A2C15E79CC220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 828906c71808ef00afa5bc72d70e021862e15bdbf1a42aca9ec3abecea79e5a7
MD5 77908014dd5aa9de288798d5e2c87359
SHA1 180b60dc69bfd2426c4a9a9147398622ac7839f4
SHA512 798f9e78b5b6f60ae44e2ab8b628be3a7c6ab1ae96fb4b50819538d00d605b80610876ddeb4c0fed3568de8ac1a6d248a037b0bb6be6792838d75c198b47cfcf
SSDEEP 192:HRldnWEd6TZv7kYhAPRp2hqCo9CHsb+WNK2LXzecE2LEeHk8GyB1PyIsnAUgtaJ:HRldWt5QY8Xew4w3/m2pvBB8
TLSH
T1B052C62EAD10653B8CD7D22AFD617B1BEBF1103161D42E88E6FC9A2C15D79CD221781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 bcd078e00f106606725e6a43cf861692d7dbfc87c5482d3c6f3a66d20e157e6b
MD5 4cc524c1f225573d4917f361e9e466d5
SHA1 ac2165cfacac4778a81bfddccd0bb286312a47ff
SHA512 b8e3acc0a01e35b19f30d01f9a57f0ee1ba4ac6e8c8149dbe80d65ece4775aa60d20dc3c0988a69fae6e2d0f6166f2943adb8391884605ed2a3fc705f99d7962
SSDEEP 192:jRld6Dx4d6Mbv7kYVAPRp2hqCo9CHsb+WNK2L4fpcE24EeHk8GyBjVyIsnAUgtaJ:jRldAgjQYgXew4w3I524vBF8
TLSH
T10D52E66AAD10253B8CC7D22AFD617B2BEBF5103161D42E84E7FC9A2C15E79CD221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 e3e85507733b74e650902d1645f4c8e2a47131f5f4d003efbf580d80d51d1e18
MD5 d25832a19ff9c1c57c95ef5ecf3d457d
SHA1 30d5ae73ddd9dfab1127bd841aef79ad540016fb
SHA512 680876039281bd13201af5a0d12b9eed3257e3547eb60a743076a4ef44ddf64d39464fedf9d363ec15f80fae0d8dd3610e3a09d4d4a9512ce92d01878e2ab95f
SSDEEP 384:S0jWV7KxkXqKf/pUZNCgVLH2Hfgslvy7pLuLcifcdXODW1+ErU3IQHGtHkr0:SYWV7KxkXqKf/pUZNCgVLH2Hfgshy7pd
TLSH
T15372D8676C4C99370F94C6CCDC167E4FADB6024B65DD886893FA582A03D5ACF120A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\000003.log
Size 4KB
SHA256 371fcc42f1597e87d0151e42986a1a10c69dc48eb7ddf35706dc4d5abc00a5d4
MD5 d6fbcdde28e340a4a988ecd761bf0bee
SHA1 7906fa2c8ab0b4204057e9b4193c6bcd7a1c8a1b
SHA512 fae0f0480e1eba6c63ce998e08807f277e3aefa8a6d42167614876aeb3843924e708d9c983b30d9fb83957ea15f42a47ba892db656c4fd9e3128177c1cf428bd
SSDEEP 96:F1mKTMwRwcnDh1JZndLXbXFXKXTXFXSXTDXFXKXTKxhXsXg0XbXNXKXTeuZXIGXz:F134bmDhhNL1aj1CjD1ajs8/L9ajR4Gj
TLSH
T1EFA19E6EB90A184EE4AD0937CD79571B6F7DCF0C27BE3727A9DE8A0405B065711082E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG
Size 336B
SHA256 b8030b2816d029b6399340e7075ef16761f14021a45005ff73e55e5f2332d498
MD5 6cbc80a3e14d88352615e1e030c80715
SHA1 ba528755dbb1211374aae95c1be104f9a29b2c62
SHA512 ca862f8bf7c4a1627eff7cabd741f60a026dee2ce3b7a58084415a907c5f3cce7c5b8fbc5394ffbf5d1156bfc31b1cc8863affb0037f5270259170003fe87416
TLSH
T195E026B12BCED9FD6095C1070224E30DC7E4B416D2DD3E061F80D99862C7F0CB291742
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 b4a6aa23e6238305b1a31e3e0f50a3c84017c7f8e128712ad623a9928946e7be
MD5 986887c7a095a78f912a10173326acce
SHA1 271e37e7dbd57af6a88b657bd7e63e2d7cecece4
SHA512 ac8e8c1480804312a201e38de793ca08c9e78917913a7cc7ed7f5f6ce10670addfd834639c09a221ab1c79d43bf10cb26563c3d2301706d24f77d1d27e94a1cb
TLSH
T11DC01251C806E1A2C04A03B12987C5EC76285F20CE09074D67FC6D27DC35179401527A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 1cb27fdd95e7a3d9e949bf427d96b49df0d675ae3dc63206e7b0f87f4d20706e
MD5 2d1d5189c3709c3be2454cbf8aecfe21
SHA1 38c4a98f26fe8206dc77bd7bd4aa8a4471250729
SHA512 74ed7e7f29a524cf3b327063261de6669122d672298a594ee767b9c320a562950b5a7e2efb0874aaa5abd00fac676885acc1013ffc0c487b4c5c4f0aa0bb2113
TLSH
T1F9B01250C0019D11C44701B41593048C22589F648F04130153F06D7AAC360A24014161
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58f018.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58f018.TMP
Size 96B
SHA256 fef5136e43a78415f55667af2a8dc1a7185f1877cc78e0f16618b4d2a0440752
MD5 e3b51852041c0f7656dcdf5b7dd94ec7
SHA1 a64504be6d02cab47f1a1f96a184a6d1c909a48e
SHA512 168b26fe8323f7a2c7bc2a8920aa0877fa60d938838c4a6191e050314ac161c7f20c1ac31eb46add49c7f88e9622e4ba83cfc95dacb6badada8b099cc9373f6a
TLSH
T1A7B02280CA02B203C02203B038A0C2C832A0EF20C2030302C2E00F3BCC28B300020030
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
Size 730B
SHA256 8689df1dc843aacd7ff9473fbccafb40f89b25a0ac7e6fdf88f319f00eca09f0
MD5 399db19be5b8a271578042dcb859e82f
SHA1 090346e5dfeae617634f156831311a144c407e60
SHA512 f3d00fd5bf2dd533963966b7ebe33454b19d208641da5902da1c01f9897737a136b55ecabcb3357252ff1754709c053d2e1e04f47a2a163c70c8a8e83e9ba7de
TLSH
T1A6014FDB1A80704BECE486B02CC53B7CEFA2D97C0FF48DA7C9C8A296064F5352455552
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
Size 320B
SHA256 8b935955ef353365a7cd8fdda1cff050000e72abbe937a970c18661fb7beedf9
MD5 5103b1965dfb036b4a9d8453632d4991
SHA1 ca502a588eb86d5bf648c1e84e150b1e0868494e
SHA512 5c476c0483e8dcf0ce1627779880f99faf45ba0481bcb3e0d66aff37790ca7e9f8cc66734d18216fd0a17f86ebaf9619efdbd536b1ecde7563aa1559cca2b7f9
TLSH
T16DE086F6369AD5FE549484672274770F8AE07415E7EC2D061F05D458738B908B3D0A93
MD5 SHA1 SHA512 TLSH

Submit Download

Tabs_13420904453839331

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Tabs_13420904453839331
Size 6KB
SHA256 682bb9c5d35399f362d0676eb0127227b329050540d98b462840eed314901a16
MD5 3f5a1d207f67a83556eb75c3062c19fd
SHA1 ccf22f802c413738ad791b57a16713fc08fff2d2
SHA512 74c1a90d51c68f5e14a3188177e7e14fe5f094bb8661f7a3e61de5854478c78f6467882c41411edd0ff5e6e975db134acc33d282e8b16eec23498701362d4add
SSDEEP 96:3eHJjtYeCEGvQh5SIfjVJMSHDcekP3nFVfNBMFACnM:3epjyFzvKMILVJrDcekP331BwM
TLSH
T17DD1F02BB5F5013EF27BC63DD8F510A2AE75BA023991CD1E44E153050953F42AEB2E9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
Size 345B
SHA256 6398f379cde3d0e6f25bd391fe31ba7fe592b9df26e75bac7c8217b3e87d628c
MD5 f076a6b6126d0ccde7152f1859d5619e
SHA1 80ad4e7dc9345f64771cb353bbc972a1a92c7d56
SHA512 30aa3a3f9a4b37bb00bc41d015c0ba0d412fd604966bf08770025c229150c5d6d1caf3e70202e958210dc5a07d3e0dfcedcd7a8411b78c60dc609b07da993250
TLSH
T102E0D8B137DADABE70C580576234F30E86E1B400D7ED5D551F08E544B38F904B282742
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
Size 321B
SHA256 6dcd6ba7211ec24a5bd151fda97ef7fa14d887893922f6b03e4e9b3f8b2c0b28
MD5 6f6a5e0b5e6db847ae6ada54ef95530a
SHA1 bbe7ccd096da5c5ef61cdccdcc92f54c8ff7cec7
SHA512 59c880430212b9dd2e3080a0e4c633db549ab85dacecc5529b1cefb60c3dd8996f0374e5199a06087ff836f7c51809808ce338793ac73bb522d210e02f5694f0
TLSH
T1C8E080F12BD5D6FD5494C1575374B30F86F0B81597DD3A495B049454B3C7908A2B0751
MD5 SHA1 SHA512 TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Data
Size 138KB
SHA256 e333191ddccc05b9b825dba76e7ead8dcaf7724b685de8ec0fd8d7aa32977e54
MD5 cb98ddac0e8e3f827e95ad94b81fd5ab
SHA1 4c391137aea328b18129964ce6d90759f6ca669f
SHA512 8d4121e4cb0c57b232189e631a9f3ae03fd85339f6d915c8716d1ad08b3d5fa1cabda2c5f499acf0ac9f20e27f997ea99862931beea030d5534a55cbcf61a6fa
SSDEEP 384:jeuvBnhJsueMEGvIW1DcP2OrRq1fVumCnY:1nbZeMrv/hGtrRuenY
TLSH
T12AD3764B3A747002EDE69A721CE054BB5E3CB16D4F5195D428B620688EF2863B23D4BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager
Size 40KB
SHA256 8f8cd8fb0b5ac951bcbb3fa115793607324ce31ad6ab0330c3ce5fdabd4aa991
MD5 b9fd315d24cf9e6df6c47df7a3ab304d
SHA1 0c4fcd7c2e3f8b021e6274b12e419c8af91933f3
SHA512 3ff0268a76ee878a3a3cf5350e5e61d32d2d6c9830b23d21ef01267c965c3fd92d552f02c0ccf36641cc58148ecffc864fc50a448f97bcbe1aec8f8868f60d1f
SSDEEP 96:f7doKsKuKZKlZNmu46yjUKVXwX4G+XvXP:7ZT0nzXggaf/
TLSH
T16603628F562840F3D0B6C13EEAC245D2FC7C260CA32339E419F90B615DAC13751186A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager-journal

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager-journal
Size 8KB
SHA256 1b4f8232111cf591ae90b40c7836fc656579c62ea6db973e0897b297479a0855
MD5 3ad7fdeaa1871e19ee167845cd5670a9
SHA1 c5aa24eb6640b407bbd9d178db8746032b1877e5
SHA512 d4a420f140aef144eff23b8e7874605f0dcd56262968326368edae606739c377952b61cc0fb28d4840bb25d8939d7a293fda734da5e6afde9de063fcca6aedc8
SSDEEP 6:6vlqVkgjnsHG+Bcc/XKuqHKu42nq1cBCc/mLEJOgLEJLVb/l:6dqVk0sHG+BXXwX471amLULIVZ
TLSH
T1AE02208FB4448446D417003DC6DF98C26DE50F683B53351D1CD58E041D7C127810CB97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000003.log
Size 26KB
SHA256 9688f790ac34c91f9ae9d17fb4b050f189ed16fcc4728422156f2fccbf2c876f
MD5 6c9bed5fdf4842b17a094a0b6861b0e1
SHA1 651ff1a55d2466c8098e27fa47b9b294d5a0ea24
SHA512 3cc2de361c62ebb49c0518081f5646ca92f9d3e90a5a7cd37743e0e549986d270d94155606d9475c3245faf749e1ffc091a2b0e97eedc8b9f8b828afbffd0cbe
SSDEEP 384:+0rIAvsdGrLIfFnHACQvIIIebOMIM1Bt0YAItasdGrf90iGK8sdGrzp70osdGCd6:xIGCQMbySru
TLSH
T165C2B59AA3B01FA6DCDF97FBBC548D2F1773BC8946560001646A56FE3823E0749813DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG
Size 317B
SHA256 f0c1e0585b97f7f51f94b6dd8a1fc17065ffd6544fbd94c817bccb7bb86052fb
MD5 85562ada1e774827afd96f7355f2de65
SHA1 011ecc218d14891b75aeb0ebd8315d6ac16a167f
SHA512 7b8df9df1eed1e067a8bfa07404b66aad5f556bbfdfac35c09a6407fec6945fafe242083913e9fb715b75877755d45b140186004b81082a3fdb01002a710b799
TLSH
T188E020F2B7C5C6FE9454C0C71114630DD7D43C02FAE91D090F00C444A183504A2909C3
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 d6bc457510aea8a1d03eefb735d74b20f47809c407950c2e3de1a7593d443e08
MD5 dca6c78d08ba41fdb32a1824df1ec9c2
SHA1 3e5a204c6d1579d59894e22a1f57023fa1fbc90d
SHA512 5ec9a27ff3fe6b75b852beb4800b1757624ff691c0e2549122f8a3b82dd4a931bffeb8f321539cc2a982817928926284deb26a0c01614158c00b7625dd76b92f
TLSH
T1E2214C56F330C245C649563A617E5B2A1734C4565FF8FD0F05B9203D3EB6E050D4B2E6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
Size 335B
SHA256 3350ed1183ca5dbf32cec0b69a6da2a29ab5360fb2a794dc08b6593a3dbd6224
MD5 c4debb19dd33d1daba973bff74772365
SHA1 d59aed4745a88a20052daa7965c98aef607049bb
SHA512 6d24cb2ee5198cd8c963d2d836ad3c3030af697db6dd79849c0baef90fdfeef003b95e77e1a4fd43b35d8f6aec8b52a464a36b5aa7c3cb8d63216870b4a91f7e
TLSH
T16DE020F2B685C6FF8050C0D31164A34DD7E43C41FAE91F050F00CC44A683504B2919C3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
Size 13B
SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
MD5 43ef949d3c6e9956545979ace65d0085
SHA1 63f2b2de8727854597e49a1216e8e74c68117c07
SHA512 313a5ab7ac9b5efd955beba4615784bdc2a9058ddaa804d85fb2d0c651dd3de07e382d61a1bb482499520a80e0b64c004ff2af03459cbc1daef47f540f0a6905
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 108KB
SHA256 5c0113dd358bda83bf0f6a2194f92618c0be86ccbad994baf0a28975d93473ae
MD5 f78913c21b7772f78698401b34e5fc70
SHA1 15ce752dfaa1df490b4eb7f9ee17d3fb23459d56
SHA512 4f847a02e98b8ef375425776b1645248059077995f5a217516fee39a946d30f1800fa59e9e26df598932230815a90d81d7e341ad0cd7ae535691b3ee4ce20bb6
SSDEEP 1536:QaFE7sL3hHqCLy8avJxVeSNHfa/YOWxXsxjO6roPXjiL1AiM796GXuHH50DKaeq+:Du7sLxK4avMAi/v8XsMjiJpJHHWDjeq+
TLSH
T1E9B312B95E2F2D337C4F8427A0842E069E7150864151D7B6A6FECF2EB29CE8085C7F06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 108KB
SHA256 60d0859d3f333c6be947a0ef7fd84c7830b2ba60ca3293ce66dcd128ee674d82
MD5 38c1654706b66f403aa25c4047dce247
SHA1 06d323d652ed7c44515078a0b133f5bb4ae3f8ee
SHA512 fa96ddc6ee6463c1fd1d9348a2ba94c1f901401a4ab482246b070de417346fd9c69f04db4d5978b447cbf6f571752ee6f076d17a2349d60868582df60a08a6aa
SSDEEP 1536:taFE7sL3hHqCLy8avJxVeSNHfa/YOWxXsxjO6roPXjiL1AiM796GXuHH50DKaeq+:Yu7sLxK4avMAi/v8XsMjiJpJHHWDjeq+
TLSH
T1B9B312B95E2F2D337C4F8427A0942E069E7150864151D7B6A5FECF2EB29CE9085C7F06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 193KB
SHA256 aab65279c3e1df0076607b0e831505b6af10008b6bac0edef9e003574a9eb20c
MD5 3433e93b9fdd25978356ad83d3ecd504
SHA1 ec0151c0a273dd6b2232290cd0013e590400198c
SHA512 1a6cbe2c81891c820732e3226fb5b5215d4a5130dd24ccd00792694e70a74c0052c92d15a0977ff695c97abd239f954c26809585b347db962b4f92eb1123aac5
SSDEEP 3072:ku7sLxK4avMAi/v8XsMjiJpJHHWDjeqn3Qw/xLANk0mUW5GmRntSFCjEENN:kuUxK4akAMU94IrOk0HOGm/SFyEEr
TLSH
T1811412B94F1F19B3786E4567719C2D09CE221149205BA7FE72BCC75EB2886805BE3F12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 b15048c7f90f32b7f68cfebadcffac00024c19ea6f416daaaee9cc75a2c0f078
MD5 788e738ee6cf527a47dbb952617d22a7
SHA1 c270d59fec009eafccd33788e5a96bf2dbeb2cc8
SHA512 7616c423aec7e12e3c5964e4a14bd255e7fb75c6c6e941b1d9023345a518a7204a8fa3e828d66f88e70c8c09e7a481a7c291c4450ef71901a18dbd58fe349a96
SSDEEP 1536:0NWcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEB:IW3Qw/xLANk0mUW5GmRntSFCjEEN3
TLSH
T15B9312BA4E1A46E7997E46C176AD7808CE22130D70AFA9CC316C639D71941C92B73F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

ukm_db

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\segmentation_platform\ukm_db
Size 48KB
SHA256 131f49c356697359811d30e8498afde4e4c8a8b314955637816e6568eed7a033
MD5 763c25b5ea617dcb20dca674d8dd461e
SHA1 895c1bc9afb2a16c7ab6b83c5023b57f5d560d17
SHA512 96395b072533f1e20ff7a4b4d3bef34115c9858cea6e92a0774fc9f567dbb39d5d3799ac7f89de136450c645b3cc2e9ea7771409f2ca42125ab9505290bc4e1d
SSDEEP 48:TkkhCU2QB2zbBxxtwhj5v/k/lC/0/s/v2Rt7if:QUcfgJFMk80OU
TLSH
T1E623BE4F5A681099E8D5087EFDD29C1578BE0F489E6BADD646E048724CD2C6F606F0BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4480-0-0x00007FF664810000-0x00007FF66483E000-memory.dmp

Download