hxxp://hianime[.]dk

Analysis

max time kernel
900s
max time network
878s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
20/04/2026, 18:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://hianime.dk
Sample260420-wtx2cadv4v

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5108	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134211833750763027"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
4836	chrome.exe
4836	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe
Token: SeShutdownPrivilege	1924	chrome.exe
Token: SeCreatePagefilePrivilege	1924	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe
1924	chrome.exe

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 1924 wrote to memory of 4428	1924	chrome.exe	78
PID 1924 wrote to memory of 5112	1924	chrome.exe	79
PID 1924 wrote to memory of 5108	1924	chrome.exe	80
PID 1924 wrote to memory of 5112	1924	chrome.exe	79
PID 1924 wrote to memory of 4324	1924	chrome.exe	82
PID 1924 wrote to memory of 4324	1924	chrome.exe	82
PID 1924 wrote to memory of 5020	1924	chrome.exe	83
PID 1924 wrote to memory of 5020	1924	chrome.exe	83
PID 1924 wrote to memory of 3496	1924	chrome.exe	84
PID 1924 wrote to memory of 3496	1924	chrome.exe	84
PID 1924 wrote to memory of 5976	1924	chrome.exe	85
PID 1924 wrote to memory of 5976	1924	chrome.exe	85
PID 1924 wrote to memory of 4440	1924	chrome.exe	87
PID 1924 wrote to memory of 4440	1924	chrome.exe	87
PID 1924 wrote to memory of 3596	1924	chrome.exe	88
PID 1924 wrote to memory of 4148	1924	chrome.exe	90
PID 1924 wrote to memory of 960	1924	chrome.exe	91
PID 1924 wrote to memory of 660	1924	chrome.exe	92
PID 1924 wrote to memory of 4836	1924	chrome.exe	93
PID 1924 wrote to memory of 5124	1924	chrome.exe	94
PID 1924 wrote to memory of 5124	1924	chrome.exe	94

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://hianime.dk
1⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8f047c728,0x7ff8f047c734,0x7ff8f047c740
  2⤵
  PID:4428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1580,i,6088014229070355286,16318941263372927669,262144 --field-trial-handle=1972,i,7893020791195613506,7661295057930364135,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1960 /prefetch:2
  2⤵
  PID:5112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2052,i,8028174635111887321,17120254586635185265,524288 --field-trial-handle=1972,i,7893020791195613506,7661295057930364135,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2144 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2316,i,15226561751000597324,14214354872072049947,524288 --field-trial-handle=1972,i,7893020791195613506,7661295057930364135,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2416 /prefetch:13
  2⤵
  PID:4324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=2972,i,2649795875230885285,11406349254157149213,2097152 --field-trial-handle=1972,i,7893020791195613506,7661295057930364135,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2988 /prefetch:1
  2⤵
  PID:5020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=2956,i,8705427269161386832,805436227938964892,2097152 --field-trial-handle=1972,i,7893020791195613506,7661295057930364135,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2964 /prefetch:1
  2⤵
  PID:3496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4184,i,3873056606783434269,7474840213148641414,2097152 --field-trial-handle=1972,i,7893020791195613506,7661295057930364135,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4196 /prefetch:9
  2⤵
  PID:5976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3704,i,1954043566954062304,14640442135133406635,2097152 --field-trial-handle=1972,i,7893020791195613506,7661295057930364135,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4608 /prefetch:1
  2⤵
  PID:4440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5492,i,6058777747191168606,2837979993188854709,524288 --field-trial-handle=1972,i,7893020791195613506,7661295057930364135,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5496 /prefetch:14
  2⤵
  PID:3596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=212,i,5031119448837471724,7817794155573028064,524288 --field-trial-handle=1972,i,7893020791195613506,7661295057930364135,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5740 /prefetch:14
  2⤵
  PID:4148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5512,i,8926283987824198176,17472493984890928809,524288 --field-trial-handle=1972,i,7893020791195613506,7661295057930364135,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5800 /prefetch:14
  2⤵
  PID:960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5596,i,12762802215628941922,1128601144959438723,524288 --field-trial-handle=1972,i,7893020791195613506,7661295057930364135,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5508 /prefetch:14
  2⤵
  PID:660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5736,i,9298779858717932969,11038761495918911939,262144 --field-trial-handle=1972,i,7893020791195613506,7661295057930364135,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5436 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4932,i,695952686224221811,16717431673189418985,524288 --field-trial-handle=1972,i,7893020791195613506,7661295057930364135,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:5124

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1164

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1168

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 9d5b0d4202d637b8e09c75ca169d662f56a1e698a18254dff1345713b95d60a1
MD5 7357a1f67b4dee8bdea5b0891672e5cb
SHA1 96a6705026d009cc050d88460643b247edf932f2
SHA512 f57a5036776eb37b5fe8eba2c710a446f275f4383643c09786bf699e106aeb2b33827e12af58dcef7172a9411c90ad9bebdb17e88dcb933b6d875913884a1d3a
TLSH
T115E0ABADC821DC2708FD0B9C24520707E648172B2B90A88B3F3D810D4FB063A05C584C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 384B
SHA256 5e5ef4a188ad32e0d7a620499c256069868da25580ee32e81a1b23b5a6dfa603
MD5 70ed8dffe8862d2cab454dbc16e3e6f1
SHA1 3a891156e4d5be9be4c27f962ea96bf1c914a3cd
SHA512 40a104ed2f5fc9ef28694a543a5bedc7721e78715ea675bd80fe17b88f40fc6fbf95a54a6f6acd74136047613939be7de1c876693b406dcdf5aae01174d349e2
TLSH
T158E0C2C2FCB1E580DB844D704CBDDD42E0351D6C813FA217DDDEA55C9C022F840B6448
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 6431fe4a064096032a765caa29200a1995983a585b9dad22f0a13be12b9f7f6d
MD5 93738c57f7b3adde12fa4c51400fcd0a
SHA1 00116edf5df496fe1ee61f1e5427adfe2bdadaf0
SHA512 4accd6849a017f91a3c3355657ed8d50c9c2661c1cf2543ddc247a14267b684ed0930d6253822672bab4b1118fb437a37a027434d02f16d38d2f0d0a049a6b41
SSDEEP 192:D0KRUxaIaEgdVYjz2znDz5SFV3eUvr1k4uQdKiJ40:D0KRUxaIaEgdVYjz2znDz5SFV3eUvxkk
TLSH
T18FE19EF3C3F8862D8D1696F5AB24AE1BCE290964475C3C26C9D46F4B93F2971D20174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 f61516f79f10278717c5fd7261da6c40f88984c84311c4f0280365302699a726
MD5 5cae09b67b4d8a5218d306fd35f53e95
SHA1 da84d52bce7eea54e5a19ff67440a2cbc289ee85
SHA512 289cff5a6f78a2c4097ac8fd36abdbf4307cd911bebd9285b44b286385007235ba3194d96485e2398d07c9b22d3dd545c2d6147f6827645e10046e43819ad1ba
SSDEEP 192:D0966xaIaEgdVYjz2zn0z5SFV3eDvr1k4uQdK6J4JjhU:D0966xaIaEgdVYjz2zn0z5SFV3eDvxks
TLSH
T1AEE1AEF383F4862D8D0596F5EB24AE1BCE290964475C3C26C9D46F1B93F2971D20074E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 2KB
SHA256 2bedc533c773af2dd8750a21519cfd0795f6ed6c643afc16625572fa31a53b7e
MD5 ee779a516b47c15665f4e14705583777
SHA1 781082a862a2336ed619e3796a41a20ab018a5ed
SHA512 463167d1a89633c874fb6d9403249d7eaff3f8730a74fb85e313909b238b3e95eb2dbfd6f53f4827bb32005008835721155e787ec8cb07bc3a953d04a9654d00
TLSH
T134416B63E27EB527207D88AB2E44780D69BEA43141D366F5CF6B412C70C45F75B06077
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 202bcb141acb004f1009801e522c117ed2accd06fcbee316d15ddcd5b5b52423
MD5 16b776dc86dbee21b013c354b7c2c268
SHA1 7eafddb1a540d2ab11a34dadc3d32e82f0646a29
SHA512 a6fbfcdf730705b23678c8c27d2254b618bdfb12f0da1371ecf66b3f1c449b27a220e73cbe2e8015ab28ecbc95ff13a98608b4b7b035219438b76f734e78c29c
SSDEEP 192:xQRfxftSTpLv7XpAPRp2nZL9BHsb+WNn3d46ca28Lz2gekS4iVyIsnAUge:mRfxmpz7UXmDwN4k28n2mwe
TLSH
T15C42F92EAE14293B5CDBC319FD65BB17D7F6102161D12E84EAFC891C10E76CD221740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 fc530206b6944a71591a478f051a2e9fdb567e3fe803c6c3681bd649092113e9
MD5 e47d39cafaa381575523d0b293895213
SHA1 2930c7db05f07aeb3953a558452fc550a8cbb1f4
SHA512 878d8cc1332d9b15c50c213df1be346608dc18fc816566e23e97c0c213865674729595adbcbd0a12fe7815cf761eebbfc21b9f24c8dc57b42515d96240452539
SSDEEP 192:xQRfxQtSTpLv7XplPRpVnZL9BHsb+WNn3d46ca2jz2gekSOiVyIsnAUgn:mRfxTpz77XHDwN4k2P2mgn
TLSH
T18752FC2EAE14293B6CDBC319FD65BB57D7F5102161D02E84EAFC8A2C15EB6CD2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 b348ef89a2004de3932b2d422cfbadcb8511ef1f7a57517647d45e46cced5182
MD5 b0d1f07abc4aceeca25ae213a8bbac55
SHA1 a12bc0ba5cc6482694c623f530bb61f84aa919e1
SHA512 31718e2157284309c07a2a635a298c85d9a7fbefa24d929b57b0b42e496770d473b3856a02414740260339a70352d551dfa116ce6cda0e72e227cf4c48e62db6
SSDEEP 384:4qj0v7KxkXqKf/pUZNCgVLH2Hfgsl0X7pLuLcifa7XOD0z+ErU3W8HGWTStBdUV:460v7KxkXqKf/pUZNCgVLH2HfgsyX7p0
TLSH
T1AE72F867AC4C9A770F94C6CDDC26BA4FADB5024B65DD886483FB581903C5BCB110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\9789e806e5cc7d57aca78e61aa4a56aa1dc6e5c7\index.txt
Size 102B
SHA256 c5e1f5f5a778e418f409797449a88770cc8dd649902552edbc45281a3fef5e67
MD5 e4b094102de0b31d7d295636f8d907c9
SHA1 98d77cd32d1413d65b5db1341ca11479f795340e
SHA512 ad356a02da1b1e9d8b005cc598fd456c88728278f801365fcd8a2096a90c858c3bbdcea06120e70beed3e5c82c04d5070f5d03e76a17423a713e6dd0d79a7671
TLSH
T120B012FF034F0C010708F6836C22190CB30D481A2CD1122990D01F0C37481EE81D7BA4
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5863d6.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\9789e806e5cc7d57aca78e61aa4a56aa1dc6e5c7\index.txt~RFe5863d6.TMP
Size 109B
SHA256 20da04c984ebc5be8f490172fe86765f27d8f80aabc0086157f22a1e144b4553
MD5 139215d48ead269805e67d936acfdb03
SHA1 77a2c9424e9cd6a74b1643fd74b414c757898cff
SHA512 deb12c7581f03abb2b614f92bed52394cb30244a9944948ad1d3bd9bbfaeefde0079e51f6ce2a2604df63920a8d83bbc19f6c44fb1a3efc5635e4ef703160987
TLSH
T1C0B092FF035B0C010704A1836822194CA2094C1A2C90522990943A0C33780EA819BAA4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 be320950b0ad5bd7da4fd8ed1bfec51c0f83aee23dce51ddd8ea2e57f253848a
MD5 7531f708548fed3369ba20a991e5c8cd
SHA1 b4f2fe5e79fe1466bbcf19c998b69398d62ffdcd
SHA512 ec6ae7dcddc724858a75dfaa14568ebc3a5bbc544cb527be09c170638fb683e2dca80e99d8b16d1f7ef3942fc9e8243ecf134e7eb8b9fd3b507bf9aaa1698b96
TLSH
T11AC01221CC05E031C0B613B850C39CDC375C9F28D716138953E86975E93A3314026162
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586397.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe586397.TMP
Size 96B
SHA256 11938b590f349b6eb29a4cf5698c9ae6b771c3edc02255f02b1f53155886910c
MD5 143d8119c06d93ffe067f32929910081
SHA1 37f601c8cd852259eafcaf05f3eaf06abb318442
SHA512 af91ee439925cde33e747a6c9d178df2839c5a7bbd10628d64e815c753df141bddc722beac0ea89940b3114e53f2e6cce80e7c4b4eecbcd07e253c575efc4b7d
TLSH
T194B02200C002E203C00203F02AC0C2E83020CF22C2032AE282E20A22CC30A3000B0020
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 40249f3827d1438bc5d4bcae982d1a1866caa25a3869ef4bd363333f3c2202ea
MD5 6efb8eec505fef88aed83b67d4cf7a13
SHA1 bd305a028953184922629c861cfb447cc4edea04
SHA512 c742e6c9b75e96ce681b097cfafd4f40c2e7da89d0774beb4ab5115cd057fa4301de057cbba02cadd33296d812ff776a455993e1e84f39819819f991fbd7ebbf
SSDEEP 1536:rP/UjP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNx:U++J3qUQm08KMWF0bFTcVHr6z2
TLSH
T10E9302B9691E7C7963ABC6A690079CAC8CD3DCCE1118157C31C76F1E04FE392A34B8A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 f3b06e2edc810cd5f1a12ffb65730be0db43f022a5273d206ff6154e841fce97
MD5 5a1f3e8ba3e5406bd16c42a449b8d933
SHA1 64b2e17957ea56eae743de1f52ea9ad37f5fa10e
SHA512 47d3b570563a6db7b8971dcdb337fbb1dd25a06ecd086a4c61f5410c36871d20e212aa22a3da436dd2b21830f7f74e5a6cfd9f6d85cfe6d639d4c2e577a8c862
SSDEEP 1536:bP/UlP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNx:g++J3qUQm08KMWF0bFTcVHr6z2
TLSH
T1C19302B8991F7C3953ABD6E690079CAC4CD39CCE2518257C31C72F1E04BE392A3578A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 8dcbd07cdc9d77366a16cd57168b6ef2347eb9977132b6717c10a1f412339586
MD5 86257a59bbb73bdb69ebcb2e0bc24d51
SHA1 c7e9fa1c55beb20347cf1d396834e42290d96805
SHA512 e061f7e25de5709f4418e0f07c2ef90247f1195b216fd9671096fe223119bcdd7c8554165abb9f396f6dfce61fc5254984af40b12a8a3255ba09e96795302124
SSDEEP 1536:rP/UlP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNx:w++J3qUQm08KMWF0bFTcVHr6z2
TLSH
T1E39302B8981F7C3953ABD6E690079CAC4CD39CCE2118257C31C76F1E04BE392A3578A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 35afcabe7efd22d098f503815de28d68db70d9130ce2c03f7a466d7f4342c0fa
MD5 ae1bbf06ad9a00cfa51e65ccda3a2f51
SHA1 4b451c468e5a539215043af4d80af12a1d6f9ef1
SHA512 5909303c921ca64e74e4cf8c9992220323fb75e04fbbf1e66ce6f7f9a963b1f84e2b0e0d637022298abb88a8bc05c822b2ab31fcf70e1c7f096d696f69cd8b31
SSDEEP 1536:+P/UjP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNx:3++J3qUQm08KMWF0bFTcVHr6z2
TLSH
T1909302B9691E7C7963ABC6A690079CAC8CD3DCCE1514157C31C76F1E04FE392A34B895
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 3a303113ac015ecf7ebc6297b9158df81f1a40eb70537dd7b5ef04bf66ffc7b5
MD5 c7cc82150f7ebb3eb52ac96a8ffaab82
SHA1 84565400fa962f89c797d6bb2f241c47c5456db5
SHA512 b01edcf9472741052a291a67cd169200171eb43ed2791ae0ee95dcc0014381d72578ce2140d3db507f11073704d005ed91756eac208c7c0b5a7a538035163f88
SSDEEP 1536:aP/eoP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNx:o++J3qUQm08KMWF0bFTcVHr6z2
TLSH
T1479302B9991F7979636BC29690179CAC4DD3DCCE111421BC30C76F1E18BE392A31B895
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download