2f7140dd613f0a5b4947e071f18442e8b2e8ca0df9cdf5df47f5d31b60827088

Analysis

user interaction
yes
max time kernel
149s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/04/2026, 18:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Valex_Cheat.exe
Size 3.8MB
Sample260418-w4jlpsev2m
SHA256 2f7140dd613f0a5b4947e071f18442e8b2e8ca0df9cdf5df47f5d31b60827088
MD5 a567b537a358799feb7e48dcdde4097c
SHA1 aaa3eccaf4bfc3726ae70076866d88b8e5105466
SHA512 3b10cf88ffbf0d4a893ea92aad35585a206fc37f3a4e10b2da262958b92cc29ddb8c796adf66f3245597781b6e0295f124b5f96ae5d5737caf712209d0730455
SSDEEP 49152:JerR31rbrA9SNJd83bhPYhEIuWaG8dpG9kgS5UpXmsOj9lAXbrnk3Vk13TYnx:J0rbrAQrEIz8jGJOjbAXkK3TYn
TLSH
T10906AE03B39541D8C036D138C64B9663E772380897319AFB17E49A66AF639F46E3BF41
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1580	chrome.exe
3824	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134210105426830781"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
816	chrome.exe
816	chrome.exe
60	chrome.exe
60	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe

Suspicious use of AdjustPrivilegeToken 40 IoCs

description	pid	Process
Token: SeShutdownPrivilege	816	chrome.exe
Token: SeCreatePagefilePrivilege	816	chrome.exe
Token: SeShutdownPrivilege	816	chrome.exe
Token: SeCreatePagefilePrivilege	816	chrome.exe
Token: SeShutdownPrivilege	816	chrome.exe
Token: SeCreatePagefilePrivilege	816	chrome.exe
Token: SeShutdownPrivilege	816	chrome.exe
Token: SeCreatePagefilePrivilege	816	chrome.exe
Token: SeShutdownPrivilege	816	chrome.exe
Token: SeCreatePagefilePrivilege	816	chrome.exe
Token: SeShutdownPrivilege	816	chrome.exe
Token: SeCreatePagefilePrivilege	816	chrome.exe
Token: SeShutdownPrivilege	816	chrome.exe
Token: SeCreatePagefilePrivilege	816	chrome.exe
Token: SeShutdownPrivilege	816	chrome.exe
Token: SeCreatePagefilePrivilege	816	chrome.exe
Token: SeShutdownPrivilege	816	chrome.exe
Token: SeCreatePagefilePrivilege	816	chrome.exe
Token: SeShutdownPrivilege	816	chrome.exe
Token: SeCreatePagefilePrivilege	816	chrome.exe
Token: SeShutdownPrivilege	816	chrome.exe
Token: SeCreatePagefilePrivilege	816	chrome.exe
Token: SeShutdownPrivilege	816	chrome.exe
Token: SeCreatePagefilePrivilege	816	chrome.exe
Token: SeShutdownPrivilege	816	chrome.exe
Token: SeCreatePagefilePrivilege	816	chrome.exe
Token: SeShutdownPrivilege	816	chrome.exe
Token: SeCreatePagefilePrivilege	816	chrome.exe
Token: SeShutdownPrivilege	816	chrome.exe
Token: SeCreatePagefilePrivilege	816	chrome.exe
Token: SeShutdownPrivilege	816	chrome.exe
Token: SeCreatePagefilePrivilege	816	chrome.exe
Token: SeShutdownPrivilege	816	chrome.exe
Token: SeCreatePagefilePrivilege	816	chrome.exe
Token: SeShutdownPrivilege	816	chrome.exe
Token: SeCreatePagefilePrivilege	816	chrome.exe
Token: SeShutdownPrivilege	816	chrome.exe
Token: SeCreatePagefilePrivilege	816	chrome.exe
Token: SeShutdownPrivilege	60	chrome.exe
Token: SeCreatePagefilePrivilege	60	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
816	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe
60	chrome.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 816 wrote to memory of 5252	816	chrome.exe	94
PID 816 wrote to memory of 6068	816	chrome.exe	95
PID 816 wrote to memory of 6068	816	chrome.exe	95
PID 816 wrote to memory of 3824	816	chrome.exe	96
PID 816 wrote to memory of 1260	816	chrome.exe	97
PID 816 wrote to memory of 1260	816	chrome.exe	97
PID 816 wrote to memory of 5184	816	chrome.exe	98
PID 816 wrote to memory of 5184	816	chrome.exe	98
PID 816 wrote to memory of 3924	816	chrome.exe	99
PID 816 wrote to memory of 3924	816	chrome.exe	99
PID 816 wrote to memory of 3428	816	chrome.exe	101
PID 816 wrote to memory of 3428	816	chrome.exe	101
PID 816 wrote to memory of 5780	816	chrome.exe	102
PID 816 wrote to memory of 5780	816	chrome.exe	102
PID 816 wrote to memory of 1720	816	chrome.exe	103
PID 60 wrote to memory of 1032	60	chrome.exe	116
PID 60 wrote to memory of 1580	60	chrome.exe	117
PID 60 wrote to memory of 2160	60	chrome.exe	118
PID 60 wrote to memory of 2160	60	chrome.exe	118
PID 60 wrote to memory of 840	60	chrome.exe	121
PID 60 wrote to memory of 840	60	chrome.exe	121
PID 60 wrote to memory of 1208	60	chrome.exe	119
PID 60 wrote to memory of 1208	60	chrome.exe	119
PID 60 wrote to memory of 5196	60	chrome.exe	120
PID 60 wrote to memory of 5196	60	chrome.exe	120
PID 60 wrote to memory of 1292	60	chrome.exe	123
PID 60 wrote to memory of 1292	60	chrome.exe	123

C:\Users\Admin\AppData\Local\Temp\Valex_Cheat.exe
"C:\Users\Admin\AppData\Local\Temp\Valex_Cheat.exe"
1⤵
PID:3720

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff9cdc4c728,0x7ff9cdc4c734,0x7ff9cdc4c740
  2⤵
  PID:5252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1704,i,5409898839132083612,12738343100061207383,262144 --field-trial-handle=1928,i,2949950996085205418,3421173310755298092,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1960 /prefetch:2
  2⤵
  PID:6068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1612,i,17907803899715353022,13517403750057907665,524288 --field-trial-handle=1928,i,2949950996085205418,3421173310755298092,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2248 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2420,i,5165625879421608116,9447140442258154439,524288 --field-trial-handle=1928,i,2949950996085205418,3421173310755298092,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2008 /prefetch:8
  2⤵
  PID:1260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3172,i,5432617875453200818,13546208419854331348,2097152 --field-trial-handle=1928,i,2949950996085205418,3421173310755298092,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:5184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3168,i,3691023905357910559,14270880077975583003,2097152 --field-trial-handle=1928,i,2949950996085205418,3421173310755298092,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:3924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4480,i,14225563931757637754,9383944299814417958,2097152 --field-trial-handle=1928,i,2949950996085205418,3421173310755298092,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4496 /prefetch:2
  2⤵
  PID:3428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4740,i,7917751827139671457,4894651184697032162,2097152 --field-trial-handle=1928,i,2949950996085205418,3421173310755298092,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4780 /prefetch:1
  2⤵
  PID:5780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5500,i,3474195980066984942,11457847550389005322,524288 --field-trial-handle=1928,i,2949950996085205418,3421173310755298092,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5504 /prefetch:8
  2⤵
  PID:1720

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5488

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1288

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4776

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:60
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff9cdc4c728,0x7ff9cdc4c734,0x7ff9cdc4c740
  2⤵
  PID:1032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1980,i,8875099155869522648,14130563264645114220,524288 --field-trial-handle=2164,i,15267808708507651407,3765661105397530627,262144 --variations-seed-version=20260418-030034.010000-production --mojo-platform-channel-handle=2200 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1700,i,17791878040430529138,8724986728618704761,262144 --field-trial-handle=2164,i,15267808708507651407,3765661105397530627,262144 --variations-seed-version=20260418-030034.010000-production --mojo-platform-channel-handle=2160 /prefetch:2
  2⤵
  PID:2160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2408,i,7255986003840218957,7888365477627861125,524288 --field-trial-handle=2164,i,15267808708507651407,3765661105397530627,262144 --variations-seed-version=20260418-030034.010000-production --mojo-platform-channel-handle=2580 /prefetch:8
  2⤵
  PID:1208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3036,i,2915513484413271896,14501491818591130708,2097152 --field-trial-handle=2164,i,15267808708507651407,3765661105397530627,262144 --variations-seed-version=20260418-030034.010000-production --mojo-platform-channel-handle=3108 /prefetch:1
  2⤵
  PID:5196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3032,i,100034101914534207,7074750324752166070,2097152 --field-trial-handle=2164,i,15267808708507651407,3765661105397530627,262144 --variations-seed-version=20260418-030034.010000-production --mojo-platform-channel-handle=3044 /prefetch:1
  2⤵
  PID:840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4428,i,11465547738648297567,6807079629570896053,2097152 --field-trial-handle=2164,i,15267808708507651407,3765661105397530627,262144 --variations-seed-version=20260418-030034.010000-production --mojo-platform-channel-handle=4604 /prefetch:1
  2⤵
  PID:1292

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4468

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\CrashpadMetrics-active.pma
Size 1024KB
SHA256 ae1bddb9e2cc97b0c9cd78ef3cd17553be6e5204677bd67e0b8f7fa27007f189
MD5 b0366599d64b0fc1adb2a712dcd02ee1
SHA1 b7a1c09ccd2846664cab5f76bd80b8e9f107acb0
SHA512 d7de6d48285018f8b709c81ca01688126db7893ce9f48829524ee3122aa6f2200c7f78186b5a558d0b1ecf8157ee78a20064b63b45ab89f7aa0835b8409435d0
SSDEEP 12:bHCsEXhVMMBKEKSCemJKlkQyYVhYJ0I+pPK6BsyW1inP6:biPROMMBS+MkIYWIE1BtXP
TLSH
T117252786A30815EFC54288B589AE03602374F9E55F52079B2E2DAA1F2E271D80F45164
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 6845dc964e521a1f71d86a520a5a6535af6301398514da6d1a49c8ab4b9725b0
MD5 eeada1874586398ed8bdf1f3c912dc61
SHA1 24c7547fbb116ba15d1da38b649da9f4d9f32838
SHA512 13aab50c5c41f7c555b9fefe5ddb2b2a5be7ca990841a8bee3b2b08185c6fbc690ca5ebc811c2895d25cadccc26029f252f1907d14808c47b683cb5838d2f964
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 0107f1b65d000d53bd1627451b613eddad4af4515929b77f7f97c1af69221c5f
MD5 ebabd66eb3fcd6542b60e572eca8539d
SHA1 b18bb8bd69b1b5618b5f4762263adfcc5df5c3d8
SHA512 65435e56984feaeee24d01fb1d2517865aaa759298eb192d9911ff41f37842236e9f5f09d49a1991bdaf19ffa4f0d70df06b2e784d0e5f22dc9382e96b9bd484
TLSH
T10AE02BEAC961EC2718FD177871454B4AFB5903572B904D4F3E3E821D8FB463A428681C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 16610ae6c0fdefed6363de026be207f696ad5e55dccf388d27263d33f0f6736c
MD5 c7d01d794d7c088bd872093b92d30578
SHA1 0d3ffeb85efe403566d7bb1140126c6a11ca75b9
SHA512 431191951849849be34956d2f917ed352988111496d58a125612943e4b503eafe591ebc7311298c1fd3e43b82e55a80b2e5f57cfa7a3fe21d99bb5ce56618129
SSDEEP 6:/F48zWJG8mJ0wJ501YtjuUIGUpoRglUlyCnKcd7INXUfR7U1llddylvne:d48zWJbB85pjuGg8yHcBaOU1/2ve
TLSH
T12E1368BC8AC1CF32DAA9903968C33F74E771A008E33BB6B7AC70B42042AC7201407360
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 3eee404941931b3dc28ffcdc0169e36c1e77559dd8dd0e97d7ec902464d09940
MD5 434b8ef4158502440dd557c75e163b3b
SHA1 905170a6a79182014f05b186e1b8cb96eedc2b14
SHA512 8569287820ceed174ad32886d22df20fd603031221d42fe100ac297e4f8e57be07fd9a32b012c4b7345d0160d63115f57a20acf74e868c258f8ee560d710967d
SSDEEP 96:GRTH0WnBZ/gloJmDWHPDqSCyoaBF0d0nug9jHSTjUVOLHKWol:GZ0sCSmw3ZE8JzST4Scl
TLSH
T1E144CAFB1908EDD7EB3CCEB42C8042388D3297262C55AD76F67944B206565F331287A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 71c7df00b1387183dac42c6dabc4b8e140e3347c12c6096d3b3f06c39668931a
MD5 5690b5713cdc8a2709d0fb101b58a457
SHA1 b56ecd098bafdd0edde0854c966b0ba98ea596c5
SHA512 42e9ac7b4cde172bf295ff0dc91a67ff96b2e73bebe00c0363416729a31c46cb97a9aa1bcf1d30c951620c76cd67531914b3e8e501410f52b8c6d26f7556bd65
SSDEEP 96:nGaFWJo9ADGmlYVnYzI+fPB65eunxW3FYfOh/f:Gvq9HmlMYzI+fPwouxW3FY8/f
TLSH
T151256BBAFC8BBD45C5DC60723F908993E6708C1BA5D561E194FCA4DA224527230D8473
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 3773da9a3482e1497851ffe46db14607386924c6895e61a5167dc74f7ea15ad2
MD5 8ce6dbf1c4ae472a203e065e83359745
SHA1 d7e9528b733d5e7e516c877e4f8091c6f0ec43dd
SHA512 01b232b1b67eb1318aee53991f5063ee0b3291a89d5b9d01efac11d1713c3275178d26fe04e9601e341164cca2d750c607884e3dded40bbeb109ce9506053896
SSDEEP 768:dUfDPLSgcRUv+k4EX4w4O4x4DxN4NB4o4lUfDPLSgcRUv+S4Wl4Ye64:MLZ78GKtHPlv
TLSH
T1BE164BA70F68B542EB86EFB0BBCDED1C7C702392ACD79492951282B949F0FC4178519D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Size 65KB
SHA256 7bc424130eda2bae7fca759b777f9af68b2ffdd1db9799c7f5b482bbf3375a2f
MD5 2bd30bcdb6172c371ff17cac2fbc52c3
SHA1 17b341c22afa48bf9ac82b7525da4969ce516ec7
SHA512 6e5ec1b1aa0558d9ebc3439adfee842b7f31e9e307ce221f9c463ba6b1d40dfc938d9dbdcd8537980ca600778a97db6b76c15e5915045a9f817699000efd5016
SSDEEP 1536:uYZknOit3uYJaoHyR2Ebg/dEgINEX1b25IjcpXQzv3zC+VFNB:uYmOittLyRHb+dEPsb2Ojc1QzLC+VHB
TLSH
T1CD630202D4949D8DF6F31853F73309BA5F669E70E628CCEB64F8CF6F6818050740A5A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 35KB
SHA256 48247879cf798447558e86a678f2ef09530dd9e2f424921b748579aa02382850
MD5 4aee3ade0643d59873ce8c2a597e2b25
SHA1 0abf1543bf81a44668b56a7c7460adb96187b34c
SHA512 3753da750d65c854855245c0b2f286ebf625d2b12996a9aaa9a9a65566fa142e8247779b2cfc7a1fcfe15a71b9c942e32cd1af544cef77fb685f8bf69735369e
SSDEEP 768:m7Uh2sNSVfEQGuqeh3xHcma8LqaXZhQ5V86FbDcKkc/oiZaE:vhHYVOHeh3xHRdLaVRFbnXJ
TLSH
T163F2F17780C95DDC5B1B3C1CE990131EF83816C6A38BBBCB59F5894A0A6FA15E923108
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
Size 320B
SHA256 576de7296bc6defe06cad365d11fe126ee575a52e723977d39ea3d0f0c3170ff
MD5 1d488bb4f6eb70ffce6b2cad05240bdc
SHA1 2ee036d25be19370d988700f70a18dcbc0ae16e0
SHA512 63d7f4c7af22d4cd5bbeae114a73f4c15f67d93617983260a7900e9c0e79708b74e07c8c175f7b1b17b39f5bec86f0fed900bbb266c56de6a7bf1d1ab4ee6f35
TLSH
T1E2E08698798DC5BE6498D463C37E630C8AD5740AE7DC38462B899D827281A04E2D5352
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
Size 332B
SHA256 0a52464ee3c0a31d598c6310652ba9302d2623fce8a79f46e00c33779f6eeff8
MD5 b375f961cb91e8a1f5e4315c99508d39
SHA1 a96adebc87e03bbf0ccbb6f64047b89b017d811f
SHA512 75a94a432921c25a897ad6714811fe6ab89df7025ece2481f3c19d3712394997dbf25c19bbfafe31f9218d6335a1f97ab248459f8e25331ff8fafd84a59637e1
TLSH
T147E0DFFA268DC9EF3185901B832D730CCBA0340AE7DE3A860F04A487B48C108E6C2382
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Size 20KB
SHA256 a4dbc5009d87714b3ef8a7403de429357ba99ca32bf4e1c428d84caf1e449ad9
MD5 2612884649efe6bfe67717f710df4be7
SHA1 10a2e35827e2ff2e472a5e4725828bbe370ecd00
SHA512 450c8578591456ba9c72535767a881c97dab1d9c8655d92cdc0402cf49da0e3b9a46904e8a8f29c67c4d4c7c70491873aa4b08a2adc6f0ea95558bf9e4b2ca3d
SSDEEP 24:TL/91kweka6cLbXYFpFNYba5+6UwcQ8PAl5fBld5jJTHwIx20UgOcj:Tb9aw/aHLopFMavU1iBlHtj2xU
TLSH
T1EE92ED4E1F302610C0F44A36E8C1499B2EBD112C63637B89AE6410B29D939ABB5150B1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 52756ecce3fef5abc5c9f01f606447436fa3e23751c6bcc18293209e93be289d
MD5 13f19b70cee4092067d975dc933c4369
SHA1 d22d20b21a0c19cb68559e2e519c1795a631eef7
SHA512 492d651fcf96260a54345e88f7fedd91468245049f0b7e6b218033fe4e168e39d248cb1ed48180d364ea86cb150e47e4ac2d4e5554f6b9c15d9979474c941d78
TLSH
T1C5518DF7D3E4856E851193E49A256F2FDE6E4A24131C3C6289D4AE0B53F2973D20134F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 995d66f198e5f1b57ee68b3829a8451b355373cba635a6cfdc62ac7b16f9fa02
MD5 ed9cb82f0ee7a25b0f2ed89e1d7f4406
SHA1 7c713a60bb679674c8bc931cd9540c7e78a98dda
SHA512 673fb0ea21a130dcde2ae7bbfb15ef81df2990a83be13eecdc5a1263cb773d2cb07f7227d684b88b8e715d4b274c6795a51cd874bd9ef0b623b4f2757024a2c4
TLSH
T19D518CF7D3E4866E851193E49A256F2FDE6E4924131C3C6289D8AF0B53F2972D20138E
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 cd9d47f971498075e7a8519d0cbf69c0a95a028c4eda3aab5fe872f051b971ae
MD5 1c0f5aada8ba31280551395a13bfd1ae
SHA1 fe4f531bab94e1385e91cb77d700b325be8a7ac7
SHA512 37be57fbfdee0a9c34e2d78fea60effa141273b4a78c2f0e2108b36d8bacecf33fa75411aaf5d64099b7a043c7918f486a90263b2a0301a9a1589991cbac7318
SSDEEP 48:T6IopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSBLRE:OIEumQv8m1ccnvS6FIHt
TLSH
T1B0F2FEFF1B05B601C0D491B4E5810ECFFD6D112D4BAABEC09A9809F357C66F39538259
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reporting and NEL-journal

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Reporting and NEL-journal
Size 8KB
SHA256 1ac896895531273ae5c94e54531809ab0bf1d80593b5f57687b83fb1d73852eb
MD5 94361fefa5ca6765c049067e2c0e4c01
SHA1 22f263ff9ae19871bff167f46da73a23f89a9738
SHA512 fe37eefc9407dbf4639acaab7254bde172c85242d832e93978c6437f3b971a44bd26287baaa5f8f64ed68daf86702ee61db1a7947e581cac268e35b5d2f069aa
SSDEEP 48:7MIosD1CXq6IopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1Gmzz:7ta7IEumQv8m1ccnvz
TLSH
T1A8025AAE0B097600C0F49275D5C10EC7BD6D512D8796AEC45EEC06F2BB962B3A538119
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 521B
SHA256 f6012166dc87dcbf64b170288845da1ca04117909cc05cc513e6b9a2a9b51c35
MD5 0eefbbf379efd5e600c5f827e76a5e25
SHA1 433719e7de5da2e99db417788862ca62e4bfe6e2
SHA512 8a03e951d37cb583742d6b9e04225cc72de44bd5ec2478c5f62f8464e4f12603785dc57a1cf619424d41aad5631fcef725592a9ba562fd9741660852f053c482
TLSH
T148F05067E779742B10BD46AB1D10780959B5D834068164F0CEAA421CA0C56F71F03463
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 523B
SHA256 5b63d81a806ff7586461dc610c4febae6edf3d5592fe0c0ea079dab34f235cd2
MD5 168b64be94a067d135a6cc24e49edd30
SHA1 549590eb31bd1083e03f65b29a70e835531848e2
SHA512 f8e8d38950d706cce15c0af637f6f133d636cf5d546485347eb710ae40776f29d8370e34947041b26f7d09ad3d5428a3ae0c47d8f6e4d4a705b0aeeb242eb073
TLSH
T19EF059ABE779743B20BDC6EB1D00B80655B5E835068168F5CEAB822CA0CA5F71F13423
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 f033a611e0ea61f14b2fe7f1f8350eb736bb11643a59327254ac46741f29ff0d
MD5 9550c761eef214f2beecab0be71109a8
SHA1 5678ee75e7a6130e6674399c291a58cef054ee53
SHA512 ec83756f307569707db6e8ee8e508ad79070965a988092075c548e27fd76d95910abf0734b642c1cd34b6c8925a02f9e2446aa75daa4428fd218ef2718141fe1
SSDEEP 192:kROAx1Tid7I0v7tYhAPRp2hm9CHsb+WNnncnJuXajUdhVyIsnAUgtaJ:kROAxhwhY8Xem4wcnAaj4H8
TLSH
T14F42D82EA914793B9DC6C22AFD617B67D7F5102170D82E84EBFC8A2C09E79CD2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 5b8b53f38586627a3f44df70999adbcce801d91d59baecf630399ef78a2df4ff
MD5 d4671f753d768248b4a8f2ee3f23b25b
SHA1 3db27525d0341b4e23a512455db3e99979a2aed0
SHA512 f77b56fc702d38dc9b4183ed7879600438990d6e62a0c16ce5c426102558c27fae5efa68638885a69fbba29c17bcbc22dc1604fdd861c76ebb5efa2b2cc6df82
SSDEEP 192:kROAx1Tid7I0v7tYhAPRp2hm9CHsb+WNnncn+uXajUdRPyIsnAUgtaJ:kROAxhwhY8Xem4wcnjaj4l8
TLSH
T13B42D82EA914753B9DC6C22AFD617B67D7F5102170D42E84EBFC8A2C19E79CD2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 22449578ecdaa8e3fe806d5b2772b38cfd08666f07c95f199c42f504c782cea9
MD5 0d0a515c0351ac11b03b10ef100bc7d9
SHA1 c05e684e22b6881cb2d37593714edededf55ac10
SHA512 9882c308e7de72430657cdf426f1f27c2bd08b94a3b7efdd786e5b20c9386c6ad79be4d69eb89b014cde18de20c795e50454fcbb828410cd4a146dd020b5d7da
SSDEEP 192:MROAx1Tid7Lpv7tYhAPRp2hm9CHsb+WNnTk0KuXajUdrPyIsnAUgtaJ:MROAxiphY8Xem4wo03aj4f8
TLSH
T11E42D72EA914743B9DC6D62AFD627763D7F5102160D42E84EBFC8A2C19E79CD221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 e3e85507733b74e650902d1645f4c8e2a47131f5f4d003efbf580d80d51d1e18
MD5 d25832a19ff9c1c57c95ef5ecf3d457d
SHA1 30d5ae73ddd9dfab1127bd841aef79ad540016fb
SHA512 680876039281bd13201af5a0d12b9eed3257e3547eb60a743076a4ef44ddf64d39464fedf9d363ec15f80fae0d8dd3610e3a09d4d4a9512ce92d01878e2ab95f
SSDEEP 384:S0jWV7KxkXqKf/pUZNCgVLH2Hfgslvy7pLuLcifcdXODW1+ErU3IQHGtHkr0:SYWV7KxkXqKf/pUZNCgVLH2Hfgshy7pd
TLSH
T15372D8676C4C99370F94C6CCDC167E4FADB6024B65DD886893FA582A03D5ACF120A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\000003.log
Size 4KB
SHA256 c0a868c5752265bfcb56cdffcbdde5a7913a2ac635b919d0c818c6020a952d85
MD5 bb51eccbf3cd0b8b1e2e51c7346032dd
SHA1 e10af4143e15de655ae6247f926e72ecc05c2781
SHA512 967348a29e2cb9e4521809f8a1e6e72814a1a383c940dc2edeb9aad346331c4ae99866e3388c93be2ebd487cab5715ab3438a64d49bcafb82754df0efb5756fc
SSDEEP 96:F1mKTMwRwcnDh1JZndLXbXFXKXTXFXSXTDXFXKXTKxhXsXI0XbXNXKXTEuZXIGXf:F134bmDhhNL1aj1CjD1ajs8nL9ajz4GP
TLSH
T1F8A19E6EA50A084EE46D4937CD75571B6F79CF0C2BFE3767A9DE8A0005B065711082F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG
Size 333B
SHA256 887a3d4a576ceba6f4e1ebb358d04655b6d62d679e57c9a0348acd454fa9f066
MD5 af32a06ccd01c10c0d06a8d3e6f8bbe5
SHA1 0a19161e6b3d849564b722bda446fbf423bde7d5
SHA512 8eadf15958bae489e8429c830ad1c04bd72ae02ac0e431353fd9270b021fc61d3ce385c09a7b9752807731d64219ee6eee65175653c732265a98affb9e387088
TLSH
T1FEE026A437D8C5FE2099A153033DA30CC7E47406D3DC3C421F84CC8261C5E087292381
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 a2bf6fea4681d718092f034763e4b42eba66c37d04c7ea59a7ebc677716422ad
MD5 cf6e351bfdada2e9bcabbebea9e9aab1
SHA1 c5d7c61271eb080a8a8bb8f089ede5352d787dc5
SHA512 79cb016d46519c2c511f2d7d00a2e6a33f593143660b95cf5af2c03b45866a70ee128d83ed94f86b3089566bf45f84cb7e1c4ee8d4ce63f50e70ea08e6361af9
TLSH
T131B012108042D540C40701B8114304982204AF118608130593E06973D8371A34024160
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a052.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58a052.TMP
Size 96B
SHA256 1ec9b3c4de0d4b91dec67e9474e5451d8ec0779f14684409e7c0c55f8babd2d4
MD5 8009309090431c2c3f5e77bab437dd03
SHA1 90eacbc7a784a350c1992ddf8c291c92bf2ee4e2
SHA512 410e9d44ac55e89c245e0b1ade64f5a318c70a573390f0149741195538d5e93cc511d99e10f4c39bb454b15bbfb68c9721c7b9df8ee43fbb13715f46f20a5472
TLSH
T131B00256C113A212D04303B42F959EE87665DF2AD7132B5AD2E06AA6DC27A7045255A0
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
Size 327B
SHA256 b9ab1ed7609e2254b7d4fb655b57b21b2be601646c4ff0b207c411e8bdd9e654
MD5 a66efaa590a0d16b1874a35836ba0a4b
SHA1 bb750c61e162420271f89a90f2b58f43587680e1
SHA512 2b1ea0c798b69b360ab1546d14fccf7d5f9cb224b31bc8430cdb956c8cc570a086e4cfa10e6a843292deb862f4161dfc9b9abbc44afe397ff0ec9563646ff7a5
TLSH
T140E002D812C1F027FCD986300D4723302F21D8BD1F311D43C4CD35D0061FA653401441
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
Size 320B
SHA256 1a278ff806e01a222a663e2763fbee2e098cfeb98ea7c4c59f758957eec68cde
MD5 545e77906d83857ea873daf78d611a97
SHA1 70554a9fe3a2dcd0f94dd1f9f971a8e83c348b29
SHA512 c3db75e512b68f62770eb5633f2c3f599aad22990b5cc778fb2aba45b5583cb3423dd5328e215601a7d58f8c36b9759d856261175cf4232b77a4c528dccb9d45
TLSH
T17CE086ED3989C9BF3094D027436D730CC7E53455E7EE38461749D4C6768D608A6D1392
MD5 SHA1 SHA512 TLSH

Submit Download

Session_13421010542614938

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Session_13421010542614938
Size 5KB
SHA256 875d16ff11a52de6b6800b122674632fa8a9575ab6592ebbe260933571f94a6f
MD5 2195109d834ffa81874fa3bb016bfde4
SHA1 40d9b991b102bfc8462595d6905c10d60f218e89
SHA512 9082d1474d36188b24a653a8970f65ce2320d50609e64c84a9ca6259a067e3fd76f257dcac1c13fa524afc2686db7e902e24ada4159909ef37bfe003dba8bb85
SSDEEP 48:3lHQl7FySq9wi0iYLbiWnH0C0bIYrqyMpdK/9wiUi7NBMRSiOnH0CXnUjZl69CoE:3al7FykEbIzy5NBCju9CQ/mf77L
TLSH
T1C2B1691B99D4053EE23F827985BE11EAAF31BA8135828D1F50B851440D63B436FF5EAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Tabs_13421010558942938

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Tabs_13421010558942938
Size 4KB
SHA256 35e3d4ba859b604be2a980eb97176257355a0e4dfb44c79677d14f1b0651cf7d
MD5 a758e3913e0130a7cd654baf9f204151
SHA1 9416bde5833c5e66724061cd6b87ae2c71a9aa4f
SHA512 aa1bac1e17737e1a2591867cb433dd581965202c55c44e69ac642292e5842de42ab770e595f96833a7bf46dd2b6a20d72856f41ec6285aa56782a820f9a8830c
SSDEEP 48:3nySp4n9wi0iYLbiWnH0C0bIYrqyMpGz9wiUi7NBMRSiOnH0CXnUjZl69CoTb/4:3ny84eEbIzyhNBCju9CQ/4
TLSH
T165A18A1A9AE5053FF23F813981B611F2AF76BA4131828E1F50B552040C63F432EB5EEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
Size 345B
SHA256 33c3236e621c145d74f3451e4073f64af4cbb574d103debc270164f1be49faa1
MD5 7992ed6da7fdd8d4c99a186648016e75
SHA1 ed310f17c449ea9f9ce125c7a4aacc599c45f4ae
SHA512 966d8d119dc45c8552a706ec86ab9c7dcc116519826546631f7b267968aace0b756aa8818a1b8ca10e91881447b26510af39a939955352e9294905e622a514f3
TLSH
T109E0D8B536CD8ABF61856117932DF30CC9E17412D7ED14529B08A481A285944B386741
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
Size 324B
SHA256 137d1f4e38e73e8fa1c615fd45a9f1f7468f51da1060fbffb3b5616ef5ef2013
MD5 223e03e1eeea892dea90380f89d580aa
SHA1 3d303853a66629c61ee79790dca7c38d1e64a956
SHA512 9c974e4b435d05784dfe3c54c7e6bf244bbd03ecd51d5fe30f2e3d8a9bfea4ea2dc4de61b891fa4fd01f1d576e78f6ea6abc3fb43c44bdd6ef4f9c4f76b47e39
TLSH
T179E086F476CDCABE2888E053436DB71DC6F4B809D7DD35866704D886B681A0463A5792
MD5 SHA1 SHA512 TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Data
Size 138KB
SHA256 6542f48031553676708024c6e26d84f7e7e056bb76ccb1e63f55192c8a7bbd77
MD5 cd6abb07c93b0f292aa75f7cf677a37b
SHA1 d60ad3aac95ed41acb426314df30826c7691029b
SHA512 355f898b862c5c6ec6c89059abb320256a89c3025edbcbc709bad45e32fae149d0397707696560b20f344f07df6d14e8556d1596792a2b23490a7c2cfd258799
SSDEEP 384:jeuvBnhJsueMEGvIW1DcP2OrRz1fVumCnY:1nbZeMrv/hGtrRhenY
TLSH
T192D3764B3A747002DDE69A721CE055BB5E3CB16D4F51A5D428B620688EF2863B23D4FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager
Size 40KB
SHA256 b3117075767f49b774e951c1ee67b5282e506be9b8b38677fb744b815c9e841c
MD5 8524e2d109654e4ea1cefd33733ed87a
SHA1 34ac1fffa8fbf61cc84ee948cd7c12ba6c51f8f4
SHA512 b2c64eb6bd51f22bd9bff6ec510e4c93ca294e052a0e7addb79e0c04b1bea6353dae2bc4b2cb256e73d454871e82015c9a927c67117ad613e5647ac1a27c5f4d
SSDEEP 96:f7doKsKuKZKlZNmu46yjUKVXwX4i+XvXD:7ZT0nzXggefz
TLSH
T189033D8F666850F3D0B6C13EEA9245D2FC7C6608A3337AE419ED07B55DAC13790146AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager-journal

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager-journal
Size 8KB
SHA256 3dd8ffcc45fa7e414dd4f1851495cdc7cbf4bcb197bfa3607ceea038e82e0cb8
MD5 ee1c2f935eff82b3260876cba8595f1c
SHA1 2b2dc71c93235d7f8d3ea583e0fa7a4fef1a69f5
SHA512 5bb6062ebf2c01c433394dcd2c20b6ba4e20fafb65a6a983077aca926291fd891edd6d8ca0c39046fe7b22acbd0dfee6ef9fb67e67aa2599498abaaaecafd736
SSDEEP 6:+XqVkBf++Bcc/XKuqHKu42ng+lCc/mLEJOgLEJLPPGn:+XqVkU+BXXwX4x+DmLULIm
TLSH
T1BF02208F7404448AE417457DC6BF94526D259D883BBBBA1929DC49181CFE11780043E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000003.log
Size 26KB
SHA256 251f395952316d77c0deed8c94d58f756734cac20cfc16a438332db6296c1dbc
MD5 46476d90a5ddbbc400a807f814aca82c
SHA1 8876a5cda02fe34c82ef274ddc9bfddcf8830901
SHA512 bc4a64e695fd200847a7e5324c48037c27fd9d4cdd6cb5c4b927c3a37dfddfa65320e122acd37437a8ea7119121c89512f9d829342e62c3ace72594cb95df6c2
SSDEEP 384:+0rIAvsdGrLIfFnHACQvIIIebOMIM1Bt0YAItasdGrf90iGK8sdGrzum+/sdGvdN:xIGCQMbylKx
TLSH
T15EC2B59AA3B01FA6DCDF97FBBC548D2F1773AC8D46560001646A56FE3823D0749813DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG
Size 317B
SHA256 4d31e0ac34117b53716067d6c2c168116ff143c5ab25f5be80f691f88bd6237a
MD5 b7de315a212220d5f780667a2e61a7b2
SHA1 87c3602de05679eef50254000a36770c591cd030
SHA512 8628ad5e7e290454b0c6295c082f6157c64639ec420e2ef2d64bfecc4d8dd88f425805d3d3af20ba8683c6096a88b85df6506c7d6e2a8f2b52435d6a65a99f1c
TLSH
T185E026A8BBC8C5FF70A49197033D634C86E03802EBEC15860F00C486A1C0A0865A3342
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 d6bc457510aea8a1d03eefb735d74b20f47809c407950c2e3de1a7593d443e08
MD5 dca6c78d08ba41fdb32a1824df1ec9c2
SHA1 3e5a204c6d1579d59894e22a1f57023fa1fbc90d
SHA512 5ec9a27ff3fe6b75b852beb4800b1757624ff691c0e2549122f8a3b82dd4a931bffeb8f321539cc2a982817928926284deb26a0c01614158c00b7625dd76b92f
TLSH
T1E2214C56F330C245C649563A617E5B2A1734C4565FF8FD0F05B9203D3EB6E050D4B2E6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
Size 338B
SHA256 9c07b73a0656a5ca52c53033a5cfde953933e3cffa5ff7962a9794d58a984e0a
MD5 58d4e4559251c64ba262fa7dccb4c8b0
SHA1 4469751a3be01e0b592fcbdcc0c154d7a64bc094
SHA512 5d6c93e8e17c8c339f3d966c796c693b91a4777ce5fae85803940d4c8ec6ce76885789a13b1deebdc427e7f342117b36e4a9cafb95e1d372293a880fe69398bf
TLSH
T1C9E026A47A88CAFF70D1A013026DB35CC7D43842EBED2F420F80C8C7A5C8E04B586351
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
Size 13B
SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
MD5 43ef949d3c6e9956545979ace65d0085
SHA1 63f2b2de8727854597e49a1216e8e74c68117c07
SHA512 313a5ab7ac9b5efd955beba4615784bdc2a9058ddaa804d85fb2d0c651dd3de07e382d61a1bb482499520a80e0b64c004ff2af03459cbc1daef47f540f0a6905
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 ecebe5bef9edb24a9ff6fa3378f552df9c4771f2ab9d4adc833c97d202abe65c
MD5 9de70585e5eb834894062d072322886a
SHA1 9f402a18afcb410b90639c9a076038c1465869e2
SHA512 bec1c0358ba2114ab4bfac8ddd44c92f567e10334abc882dc21672037c83feeeb2cd1a8f38b51d634f706c6acb2ea7780a78e5ef2dcffc51670a4d088743d4de
SSDEEP 1536:0NZcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEB:IZ3Qw/xLANk0mUW5GmRntSFCjEEN3
TLSH
T16C9312BA4E1A46E7957E4AC176AD7808CE23130D70AFA9CC316C639D61941C92B73F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 193KB
SHA256 d82a7bbb0bf5b572c75d23995063f1c1318777cd0c5ca85551de0886024e320c
MD5 168d8969be089b54e8dfb2d58a01d974
SHA1 1d82b9cf81719d861674436e104ae19426b627c9
SHA512 cffb63b64b8483dcff0b6348b93364e6430f5e45b54d3ea3b7c444f36c8cfa322ea2f44fbc95a9339b1cf37de7ac44ebc4ec73b768216a59a786da72f548a29d
SSDEEP 6144:n5io1AxQlDYjyDlP25rOk0HOGm/SFyEE4:5imBQyDhGrOjuGdF24
TLSH
T1D41413BA5E2C72DB6074C581F25A6906CC13874671AF5A8F71BDEBCF03E92C81B51E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 193KB
SHA256 cda4d772c5c49ecf39e9dc0bb9aed26f778360b2323dc7c8d0a4bcfc2f21e3a3
MD5 cca6e11bcb6c8642edf69344407e4d36
SHA1 69590b59b759d629e89eacb22e40b6c68f361712
SHA512 f6180530ebc00c010bad5024a63096b573d570d0660bbe1ec0bd199f30d86f459e8631302c5519cbc6101020277632916f33ae42d2dbd23c38ee187af7f89154
SSDEEP 6144:M5io1AxQlDYjyDlP22rOk0HOGm/SFyEE4:yimBQyDhJrOjuGdF24
TLSH
T1701413BA5E2C72DB6078C481F25A6906CC13874671AF5A8F71BDEBCF03A92C91751E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 193KB
SHA256 3eaccd985c7c021aca5e0175ce1917dc58d9ad75ac1da6b2b7d5e93f6fd02e4e
MD5 c274f48b6f84b7fe0809e7818ea0a8e5
SHA1 4c5a0d03ea3ca8877bc63c66d036c28c997c4a8d
SHA512 2f6866d3d070adf8cd649dff1efae266fd7144a562b94ef1725382c20c363a5e8f08c8210e2fc93956fb24951eb25081b44662e78a21341d83ac33b5acbd5bc1
SSDEEP 6144:D5io1AxQlDYjyDlP25rOk0HOGm/SFyEE4:timBQyDhGrOjuGdF24
TLSH
T18F1413BA5E2C72DB6074C581B25A6906CC13874671AF5A8F71ADEBCF03E92C81B51E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\component_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download