hxxp://legitvendor[.]us

Analysis

user interaction
yes
max time kernel
299s
max time network
298s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/04/2026, 22:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://legitvendor.us
Sample260420-2dpmxsew8r

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
384	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134211977024849355"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
5196	chrome.exe
5196	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe
Token: SeShutdownPrivilege	3512	chrome.exe
Token: SeCreatePagefilePrivilege	3512	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe
3512	chrome.exe

Suspicious use of WriteProcessMemory 23 IoCs

description	pid	Process	procid_target
PID 3512 wrote to memory of 2308	3512	chrome.exe	86
PID 3512 wrote to memory of 404	3512	chrome.exe	87
PID 3512 wrote to memory of 404	3512	chrome.exe	87
PID 3512 wrote to memory of 384	3512	chrome.exe	88
PID 3512 wrote to memory of 628	3512	chrome.exe	89
PID 3512 wrote to memory of 628	3512	chrome.exe	89
PID 3512 wrote to memory of 5576	3512	chrome.exe	92
PID 3512 wrote to memory of 5576	3512	chrome.exe	92
PID 3512 wrote to memory of 4940	3512	chrome.exe	91
PID 3512 wrote to memory of 4940	3512	chrome.exe	91
PID 3512 wrote to memory of 5260	3512	chrome.exe	93
PID 3512 wrote to memory of 5260	3512	chrome.exe	93
PID 3512 wrote to memory of 788	3512	chrome.exe	94
PID 3512 wrote to memory of 788	3512	chrome.exe	94
PID 3512 wrote to memory of 3872	3512	chrome.exe	95
PID 3512 wrote to memory of 5932	3512	chrome.exe	106
PID 3512 wrote to memory of 5932	3512	chrome.exe	106
PID 3512 wrote to memory of 4816	3512	chrome.exe	108
PID 3512 wrote to memory of 3772	3512	chrome.exe	109
PID 3512 wrote to memory of 5308	3512	chrome.exe	110
PID 3512 wrote to memory of 5196	3512	chrome.exe	112
PID 3512 wrote to memory of 5160	3512	chrome.exe	113
PID 3512 wrote to memory of 5160	3512	chrome.exe	113

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://legitvendor.us
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffc1b2bc728,0x7ffc1b2bc734,0x7ffc1b2bc740
  2⤵
  PID:2308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1672,i,7870171706548733434,13561987645996104927,262144 --field-trial-handle=1984,i,13223822940572344473,15213149387494419649,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1980 /prefetch:2
  2⤵
  PID:404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2260,i,18140316210661240710,9452602442791951810,524288 --field-trial-handle=1984,i,13223822940572344473,15213149387494419649,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1568 /prefetch:3
  2⤵
  - System Time Discovery
  PID:384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2368,i,8510640138798517142,11574364644313727097,524288 --field-trial-handle=1984,i,13223822940572344473,15213149387494419649,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3108,i,2193287702588260709,2264250116386456421,2097152 --field-trial-handle=1984,i,13223822940572344473,15213149387494419649,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:4940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3124,i,4667182094276842179,8399750155183959370,2097152 --field-trial-handle=1984,i,13223822940572344473,15213149387494419649,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:5576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4416,i,7736229328115395229,18139646724951400954,2097152 --field-trial-handle=1984,i,13223822940572344473,15213149387494419649,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4420 /prefetch:2
  2⤵
  PID:5260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4700,i,4376261579959390740,8962083309935053767,2097152 --field-trial-handle=1984,i,13223822940572344473,15213149387494419649,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5588,i,4226624554557644151,17936200176990164464,524288 --field-trial-handle=1984,i,13223822940572344473,15213149387494419649,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5580 /prefetch:8
  2⤵
  PID:3872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5112,i,8796509126808313329,18066168588715942685,524288 --field-trial-handle=1984,i,13223822940572344473,15213149387494419649,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5616 /prefetch:8
  2⤵
  PID:5932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5880,i,6714325144520581007,1670268298076820134,524288 --field-trial-handle=1984,i,13223822940572344473,15213149387494419649,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5060 /prefetch:8
  2⤵
  PID:4816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5872,i,4039860690514997364,5549379121342715463,524288 --field-trial-handle=1984,i,13223822940572344473,15213149387494419649,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5756 /prefetch:8
  2⤵
  PID:3772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5868,i,11556485960611470194,2450443233408206704,524288 --field-trial-handle=1984,i,13223822940572344473,15213149387494419649,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4872 /prefetch:8
  2⤵
  PID:5308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5044,i,1576322949935669843,1408044359802158522,262144 --field-trial-handle=1984,i,13223822940572344473,15213149387494419649,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=732 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4992,i,5024971878409700829,8378217464892769467,524288 --field-trial-handle=1984,i,13223822940572344473,15213149387494419649,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1488 /prefetch:8
  2⤵
  PID:5160

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3968

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2804

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2c8fcbf9-7a61-4012-a8b5-b253e0f4a35b.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\2c8fcbf9-7a61-4012-a8b5-b253e0f4a35b.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 34b66cce788ce8c99190dc40b45174090d2720eed06fb131cb859c6a11e88a86
MD5 5dd37a71fcda06dbba3bf47b056ea9ef
SHA1 6964c92471cd22f2923482051b2ebc6db1251c1f
SHA512 238f0fef60c6ce5d121862065f87a4a908dbecc02cbdaf2ebfd2f2ea103bdcaed4ec1d20d449b7ddd9c3fc86c393d78736193365783efc51727ff0bb5ed93605
TLSH
T112E02BAAC921FC2714FD176870840745E69413C63B404D4F3E3E82088FB873E028AC6C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 984B
SHA256 62b2ba40e4fa329cfb64761ab7d893bbfd6d8704b3df96bd0b489dec61fdd786
MD5 43d38cca70d0f85a78be4e2be1c690f2
SHA1 df95949ee1def6d961c6be96e8cd719ffc9c286b
SHA512 27dba7e4a12b835219374df2dd8060635d6c6353688958bb8696405eec6e6c4ab44f3483eec4758705beec1c63e2c55c181b3bbac4ea5c372441e0458a2cd7f6
TLSH
T1DE11FC8543F6DCD0EF7624FC7B4C4FC015A0A99AC90EEBC366C1509A6C332CE104648C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 ba89e1dd499fd09b8b2429392c25d680e41ca360b9e0b58f78d9d32838f31dc7
MD5 5fa13a5e891ca5427111074ac5c1d49e
SHA1 77ae69f357a0462242a4d72001d897c9c183c5f3
SHA512 085cb56f652418fb2826c9dd428f73f6a3dbab9409f354ea5f24993038555277530e05d20415e89eda5ff4768db5fa5bdc4ae8688b6bdcf7c40a4d9a205b1866
SSDEEP 96:DuXvgPuPgbGWaIaEg7MoZWcMDFaIYaaBy6lqej:DuXvgPuPgbbaIaEg7MoZWcMDFaIYaaBP
TLSH
T1E6C1CDF3D2E8C56EC81166F0AB197A2BCE6A0959532C3C1BCDD4DF4B53E2472E21065E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 6433d4dc28cc2365e1d4c929dbf32fa72f5d3299725cbb1ffbb851579592723a
MD5 f7553d007c2e816609a13786e568fa4e
SHA1 c29853ee9741f0aa20e14068ce3b9702f82aa189
SHA512 84e1cda055e1cf05b4765102eb0a7fafb5c952bb887835ad1be044681fd1f36d228937736ff82d271521e7e675bc2db12b232acdbca75427d5e7448d726e4b97
SSDEEP 192:VORPHf37ardptefv7tYpqPRpkhDH9CHsb+WNnfAJgfYS2eb3n2a/ab7nVyIsnAU3:VORPHPW43hY2XYT4wo6YQ3n2Sa3BE
TLSH
T1B452092EA914683B9CCBD329FD257B57E7F5102121D42E84EBFC8A2C19D7ACD221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 e656506f3b21caabaf7d71a8bd75a1f0d7819bd21ceacfda8ffcc50b22636a96
MD5 f00fa2d74f3e1de975440ccd984fd504
SHA1 5b38f6c07fa7c3d2bb4310ac9f98220ce0d17ca5
SHA512 c11854253e69ca83ba01d4d7623b68bf19e6727d3ee442101104e80f4f407731c43667aa20e58128020b8720a76778e04fd982bfa3876a4890563f8182ae0f39
SSDEEP 192:VORPHf37ardpte5v7tYpAPRp2hDH9CHsb+WNnfAJz42S2eb3n2a/abLnVyIsnAUp:VORPHPW4ZhYUXeT4wo+2Q3n2SaHBe
TLSH
T1AF42D82EA914783B5CCBD229FE657757E7F5102121C42E84EBFC8A2C19D7ACD222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 d95bfc085b0f4870a2b49b2349439ee765d9da6f0b4e754d64dc650d5af1ebb9
MD5 aa1750067c1f4d6e9ce06f9e6d5ce66a
SHA1 35faf775a218361b341d376dbc68f3202db7fffb
SHA512 bf6a58b69b6e81d42cb3411296b55a9bfd743d645b503cb11723f579ab2fdb88c1991911848375d56354322ebd7f5ecb0672e57671c82b5a80561b40339d0ce5
SSDEEP 192:VORPHf37ardpteqv7tYpAPRp2hDH9CHsb+WNnfAJgfYG2eb3n2a/abFnVyIsnAU3:VORPHPW4mhYUXeT4wo6Ys3n2SahBE
TLSH
T1C442E82EA914783B6CCBD259FE257757E7F5102121C42E84EBFC8A2C19D7ACD221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 e3e85507733b74e650902d1645f4c8e2a47131f5f4d003efbf580d80d51d1e18
MD5 d25832a19ff9c1c57c95ef5ecf3d457d
SHA1 30d5ae73ddd9dfab1127bd841aef79ad540016fb
SHA512 680876039281bd13201af5a0d12b9eed3257e3547eb60a743076a4ef44ddf64d39464fedf9d363ec15f80fae0d8dd3610e3a09d4d4a9512ce92d01878e2ab95f
SSDEEP 384:S0jWV7KxkXqKf/pUZNCgVLH2Hfgslvy7pLuLcifcdXODW1+ErU3IQHGtHkr0:SYWV7KxkXqKf/pUZNCgVLH2Hfgshy7pd
TLSH
T15372D8676C4C99370F94C6CCDC167E4FADB6024B65DD886893FA582A03D5ACF120A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 70fdbdb4a917f6b6fd5dcfc03d0adfe15b7a9c1d22da2e84821d94ef35ca1c24
MD5 f4237c0f22c968cde9368f66dd1f23bc
SHA1 98aaaac7ed6777a4870213613528c36aad0a5e9b
SHA512 40ff6add2c620b80210aa8cf4b8b827878829c15dfea21b3b200e155a7d09c327ffb56b4b684d9c45f17101f30e8904c1dc5720293888cf4c7064a2009391d0f
TLSH
T105B0121080029502C04302B0128214C831247F348705130253F86B71D82A5A14054152
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5868c7.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5868c7.TMP
Size 96B
SHA256 330a2a57958c980f0a4da9366701c576a8bd3790e61df087e9d4542a44b2c2ab
MD5 dc351359831657fe012ab542adbbe2fc
SHA1 58e205125f03b665726f1f1e49fc47d5f36e07ad
SHA512 b4eedfcb0b7b72febbe68afbca78bb0005e6db56f09eebaf6c16307d715393c3dad8272728fade10c172b1c5775a93074a6bf9894e9cfc3078ff402fe2e37eac
TLSH
T1D2B00299C242E352C24307F426A595E8B1A4DF6AC747131293F11A7AEC2567145ED164
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 03f61e9197c824796a07d540d2ad92300e9416ad9de52625e9673b4444bce0af
MD5 9242155b4fafc0b2a2390263edc5bd1e
SHA1 fdff4c30b011098bb37eda4fdc492fb400e1d804
SHA512 549398c068cf93d3093c530e06acfc924842d208117a8f9490241817cfd0afca0fcb6e045c96f4c499ae7d5517ceda20dad7c295f31ff09749797f64f99ecd65
SSDEEP 1536:q93cYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEB:u33Qw/xLANk0mUW5GmRntSFCjEEN3
TLSH
T1369302BA8E1A49F799BE5A91769E7809CE12130D70AF79CC716C534C21D41CC2B73E72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 9244b37614265658862d28acee31101f461cd442142ad7c8a1ba8f199568d0ef
MD5 9bec4a565047d9cce64db32f082387db
SHA1 9ed746a7d0cd9661fd42a01c41aa1ac98e1e0ef3
SHA512 7ead6759056d194008af80a09b1de099a98dc82909c581a98ac184d18472f7ad545020630ebf558e1251af71778cdd50e5ad96e1f2df10521c683bf55901716e
SSDEEP 1536:WpcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE3x:w3Qw/xLANk0mUW5GmRntSFCjEEN3
TLSH
T1B09312BA5E1A49E765BE46D1766E780ACE12130D309FA9CC726C534C21D42CD2B63E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 a5a74c11868154e6d8b2ee76c4749070407eb20653b8985d0adfeed5612d6dea
MD5 47588b9ed66894fc3ae7d080f82ccf02
SHA1 a108578280795ded9eaad63ab2bbb6c311ec632c
SHA512 486162f3b712004040982851f6529ab5b129e549ada92e9b4356a2d2b1b309fb827ac7e4f8056d024d0a0a11ac380896d317478f6398a371f9660288f57334ae
SSDEEP 1536:W93cYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEB:S33Qw/xLANk0mUW5GmRntSFCjEEN3
TLSH
T1069302BA8E1A49F799BE5A81769E7809CE22130D70AF79CC716C534C21D41CC2B73E72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 ad9e9bdd0f993439596202ef141e63bf774f9e0745e976524a594147ea859deb
MD5 fbe0492006d8499d68ecfab798ffaf33
SHA1 bf5cc60eb61f230e963ac913f54055c45a677a2c
SHA512 a24ddf3cee4fc3e5be0f3b586ba31cf6d79c3b210a1b6fc45007f8a33e2f3995073df6199e5b143337d6a6c12cfc22f00998808fe376b30d33293bbd343ace3a
SSDEEP 1536:npcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE3x:p3Qw/xLANk0mUW5GmRntSFCjEEN3
TLSH
T1579312BA5E1A49F765BE4691766E780ACE12130D309FA9CC726C534C21D41CC2B73E63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 87247f812a3e4f2399aed3b29e061adabc4c9b55f32c45dc636efc95748fdcd8
MD5 54865832dc04a1989b7a2ffbf99e19c1
SHA1 7d1b4e40e7651d27dd09e41309424c16e476e211
SHA512 08cd3cbdc95f4c04e2b416ce90724a3a9e81482edb2faf285ab12ffc1fbd0954b1351dcca5d349867fbc4954f2c99d4580c45f15e1d456c8764daea18c155798
SSDEEP 1536:0NTcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEB:IT3Qw/xLANk0mUW5GmRntSFCjEEN3
TLSH
T1609312BA4E1A4AE7957E4AC176AD7808CE12130D70AFA9CC316C639D61D41C92B73F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2804-223-0x000001FC0E6B0000-0x000001FC0E75C000-memory.dmp

Download

memory/3968-13-0x000001D2EF770000-0x000001D2EF89A000-memory.dmp

Download