09d46a4a620d962606a6b7f839130af129af65a9f41ee39d42f58267ef60f136

Analysis

user interaction
yes
max time kernel
149s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
21/04/2026, 11:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
! §6§lAstralys §7[16x]§r.zip
Size 17.0MB
Sample260421-nvhdaahs9v
SHA256 09d46a4a620d962606a6b7f839130af129af65a9f41ee39d42f58267ef60f136
MD5 cf5647d2aeada158f80b672550329f62
SHA1 e4e9d723af1881093854daf80dc3d246d7477ae5
SHA512 e1fe7274fe1a246dc09b393770a3d5bf0877ca0bee2bc7e12b0a706fb5add07ed1db3ad20a4e512f9fd8ffcde7c044223c1a7e5998d224acc780ddb788899a2b
SSDEEP 393216:CPZrC1chTr+2xOZDwiTqFSsFYlHtn0r1R/uMZknR1roYS:CP1tgDwF5FIty1R3K7roYS
TLSH
T19A072359D2775D50E89FA73A60BA5283F9A0C736B928F1EF613C60807EDECD40643A35
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2008	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134212454974684514"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe
Token: SeShutdownPrivilege	940	chrome.exe
Token: SeCreatePagefilePrivilege	940	chrome.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe
940	chrome.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 940 wrote to memory of 1464	940	chrome.exe	91
PID 940 wrote to memory of 3348	940	chrome.exe	92
PID 940 wrote to memory of 3348	940	chrome.exe	92
PID 940 wrote to memory of 2008	940	chrome.exe	93
PID 940 wrote to memory of 3620	940	chrome.exe	94
PID 940 wrote to memory of 3620	940	chrome.exe	94
PID 940 wrote to memory of 2520	940	chrome.exe	96
PID 940 wrote to memory of 2520	940	chrome.exe	96
PID 940 wrote to memory of 1716	940	chrome.exe	97
PID 940 wrote to memory of 1716	940	chrome.exe	97
PID 940 wrote to memory of 5072	940	chrome.exe	98
PID 940 wrote to memory of 5072	940	chrome.exe	98
PID 940 wrote to memory of 3392	940	chrome.exe	99
PID 940 wrote to memory of 3392	940	chrome.exe	99
PID 940 wrote to memory of 1140	940	chrome.exe	101
PID 940 wrote to memory of 4964	940	chrome.exe	104
PID 940 wrote to memory of 4964	940	chrome.exe	104
PID 940 wrote to memory of 2772	940	chrome.exe	108
PID 940 wrote to memory of 2772	940	chrome.exe	108
PID 940 wrote to memory of 5064	940	chrome.exe	112
PID 940 wrote to memory of 5064	940	chrome.exe	112
PID 940 wrote to memory of 3336	940	chrome.exe	113
PID 940 wrote to memory of 1348	940	chrome.exe	114
PID 940 wrote to memory of 4472	940	chrome.exe	115

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\! §6§lAstralys §7[16x]§r.zip"
1⤵
PID:3356

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3980

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff9b9d9c728,0x7ff9b9d9c734,0x7ff9b9d9c740
  2⤵
  PID:1464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1692,i,14790716303505753713,14121182808173095828,262144 --field-trial-handle=1968,i,4292765312440548849,12798792825082764771,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1964 /prefetch:2
  2⤵
  PID:3348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1616,i,9704883295314038879,2785678352992544953,524288 --field-trial-handle=1968,i,4292765312440548849,12798792825082764771,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2268 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,14306782787105950649,8250490550907779878,524288 --field-trial-handle=1968,i,4292765312440548849,12798792825082764771,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2564 /prefetch:8
  2⤵
  PID:3620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3216,i,2897608426977973253,11881527899857585969,2097152 --field-trial-handle=1968,i,4292765312440548849,12798792825082764771,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:2520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3236,i,9441027911883879714,128251989616597454,2097152 --field-trial-handle=1968,i,4292765312440548849,12798792825082764771,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:1716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4232,i,2230143313964838081,9920960519744160694,2097152 --field-trial-handle=1968,i,4292765312440548849,12798792825082764771,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4440 /prefetch:2
  2⤵
  PID:5072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4680,i,9457089528183913249,944711749586569397,2097152 --field-trial-handle=1968,i,4292765312440548849,12798792825082764771,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4712 /prefetch:1
  2⤵
  PID:3392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5504,i,7393429214820264267,5769256269969777203,524288 --field-trial-handle=1968,i,4292765312440548849,12798792825082764771,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5512 /prefetch:8
  2⤵
  PID:1140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5880,i,15637820722761608212,2125095751908112542,2097152 --field-trial-handle=1968,i,4292765312440548849,12798792825082764771,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5900 /prefetch:1
  2⤵
  PID:4964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3336,i,10685489265577477833,12498312974820132783,2097152 --field-trial-handle=1968,i,4292765312440548849,12798792825082764771,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3420 /prefetch:1
  2⤵
  PID:2772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3424,i,11118251938045236144,7830257918231291095,2097152 --field-trial-handle=1968,i,4292765312440548849,12798792825082764771,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3376 /prefetch:1
  2⤵
  PID:5064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6016,i,9138697145109244447,5632726132965062051,524288 --field-trial-handle=1968,i,4292765312440548849,12798792825082764771,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6020 /prefetch:8
  2⤵
  PID:3336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3396,i,7315121686858291092,13813635822359991239,524288 --field-trial-handle=1968,i,4292765312440548849,12798792825082764771,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6136 /prefetch:8
  2⤵
  PID:1348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6060,i,11595227713088343475,17047928455902088394,524288 --field-trial-handle=1968,i,4292765312440548849,12798792825082764771,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6104 /prefetch:8
  2⤵
  PID:4472

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:216

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4776

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

6823d14a-5d1a-4f2b-8612-f301b6dc9b84.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\6823d14a-5d1a-4f2b-8612-f301b6dc9b84.tmp
Size 204KB
SHA256 190c109f4e6689e5418d764e7cfd2d1949a88461e4b3bd7d673f3e20e9609b0a
MD5 855fd14dd72f57b7a4d922d46176318f
SHA1 ca4d97b6de96bc00c9ae31b04b29a75e28908506
SHA512 830996b0be5c562a7edf80d9ae21ed5ab7c51b918f45c1ac7c368b19e5be7b4b2b9aec8288adca3ddf61c8b61079312add3599f04e5e48a707eaba85ef10b818
SSDEEP 3072:xgCeBTijLsdjaPTxCjMNE5q2ZWrS3Qw/xLANk0mUW5GmRntSFCjEENC:ahBe38jQTIjMNEHRrOk0HOGm/SFyEEc
TLSH
T1A914123FEA36A6FB197D6BB1375AB906CE61930F711D68DC68A063D5209C0143B02F72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 869139bc087c79fc0842d536643ea311b0ce490272628169bcdb160f861a546d
MD5 af12d3829b4ce3c9f0c5462ccec7d14c
SHA1 622028a269fb9d356d0a267b3590e5a8e792ca11
SHA512 a26a7345c06004493f0fbb7d6a5edc2b4bb8d3d1b06a4ff77056fcef647f8a71de9e8647677c93729667419fefd419a1bf312cf0d817733d58c27600e8734a42
TLSH
T11BE02B9BC8219C3748FE071920855345E755035717D1994F3B3C960C8FB027A518681C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2209fbeddf2527034a517c5d2d63512d4a3e9c430809d0b824f0bf52c2efbc89
MD5 98c2564f99ba67c47802295debd42593
SHA1 5ee14d4be2017f956d2129cc0a0aef7961515176
SHA512 2068a70dfd45e374714bbf206a410367ccd9a105a4258b6324fc9a013e4cb63b6292ee111743385998df0842fff7a22df1d89b6d8ed201085021cb6311392de7
TLSH
T14D51E706B381D20AFB481E3103C44A91B978788F84173E3A58D987BC3686FDB4B32B25
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 c75735280f823d9d90d1421141ba2a919ffd95475d08bd0daaba6d0066d38199
MD5 2dc6e144fcb1273f186cf8c150a091f1
SHA1 8e2bec4d5192cb03efe8b6115aa35fc2898ad18d
SHA512 658beb7fee1c15eac7c8a9d33721f64b4f73adcfc1ca6a7ba99ed01a290a47503dc72665876a3275ae6be41210268ee7e405ac6dfe3128b325b4212ca7ca9737
SSDEEP 192:D8DBqTx9m2mKZdDrAtaIabVDDdVOzoiw2NmfmmmcmDmgstmzUGXDd:D8DBqTx9m2mudvAtaIabVDDdVOzoiw2v
TLSH
T192028CF3C3E8852DD91156F4AB15AF1FCE2D0614431C3C66C9E9AE4B93E2872E21175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 807a5ed052256cc46c1fb74cbcd69a7c5490db703f8986bbf0aaaa25306ad9d5
MD5 6140340c7c3c76bdb02f969d246e2fd5
SHA1 2cca561a7eeca6a85be8498ac3a7efd98006952e
SHA512 1defd3771bfb191b461e638b2e417bd6e650f21495767e25a7905be15577e365ca87e81b8b197224bf4080c3560033847d3fa2806f0a7d1cd138c02b5bc4bbdf
TLSH
T1FB412B97D6BFF85F103E88A71D14B80E3979A8324141A8F5CFA6812CB4D95FB4F22856
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 e9756d12b93d087c02a4ea1fcdd9ce56450c163de66496e141767049d791bd97
MD5 fba625011bb86628625729182147e368
SHA1 745c8303f17bcc7f0b5955ffc39a8fb3fb07c190
SHA512 c1bc9ea15d43c8fa8c86cbc847146e8b1d08527d94df3bb5a5da86d9efc6c9f02f5ca95a75974b74add26a650a85c19da36abb750f09518ffac233788a84b3d7
SSDEEP 192:RRNcBzXWrjNkb4jv7rpAPRp219dsXV9+Hsb+WNSFC2Leq7UU2naewgBZVyIsnAUp:RRNmzXYRbfUX3Ews7zb2og9e
TLSH
T15C52C62FA9146A3B8DDBD229F9627B17E7F6202261C01D44EBFC8E2C01D76CD6207427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 cb7cc0f5eda879de573cfe95579ca5c508eff362e27cf53da6bfd0afac6bcd76
MD5 39c7250560034dd5e3fa7639d6267646
SHA1 b2fca1c72543055585fac4a7cd882d8b61a077a9
SHA512 24a205c376d95a04719c5e6e219fa6fcd4fbae2153e7bad9e839f3ba4d1e081beefa6b0ff68e7a89c71690ccf499362d16407254bde380ddf2eeb4d4b11a2514
SSDEEP 192:RRNcBzXWrjNkb4Hv7rpAPRp2/Fu9+Hsb+WNneq7UU2HaewgBkVyIsnAUgtaJ:RRNmzXYRPfUXFEwnb2Igi8
TLSH
T18152F92EB9146A3B8CDBD229F9627B57E7F6202271841D44E7FCCA2C15D79CD620702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 55c47e11808de8e94a7264b5b5c34a7f76f8fb8bcd67e201bcb3bd76e696454e
MD5 1236280ad8f76b2875bb103074e043ca
SHA1 18e838be28dc56b81070de16cfd92f03876e372d
SHA512 da105f18d654e8bdaf71ba40b0cb14376514684921183e5ff511408897935a988097ef94bbe22656cb5129050c1b0c494ef7d3a323a005fd147ca35dd3a325b7
SSDEEP 192:RRNcBzXWrjNkb42v7rp0PRpm19dsXV9+Hsb+WNSFC2Leq7UU2baewgB1VyIsnAUp:RRNmzXYRCfMXHEws7zb2sgxe
TLSH
T1B562D72FA9146A3B8DDBD629F8627B57E7F5202261D01D44EBFC8E2C05E76CD2207427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 4c5dbe3f3071c1cdd70e39a99dd2a8e7a0233b08f2fef9e58bef03d6b9f0f954
MD5 eaf45e095eaf8d2e1b455626d5895959
SHA1 23bbb40f8390c77932f41805e60e5023c08cbcfb
SHA512 92ecc61b66421f057e483c277097699444f9b664b973b2ed4406a72d4c026914714c5b5c5496330675ccc8e112b23772dfe4e83882fbc0b2de5ba584e72837e6
SSDEEP 384:Wcji97KxkXqKf/pUZNCgVLH2HfgslE27pLuLcifU1XODid+ErU3+NHGSdTFO:Wwi97KxkXqKf/pUZNCgVLH2Hfgs227pA
TLSH
T1EB72F8676C0C9E3B4F98C68CD9267F4FACB5014B65EA885493FA982903D5BCB11061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 55f85c85f66a535394d25b561e4b905d94406c34b43b9bb2b3577c2950e907b6
MD5 3364b7a95d14a89bf1f8a6b16690fb16
SHA1 ad968a7d1293c3e665860665b2da21f0edc56988
SHA512 ee2cc720597bdf1dc1734e686708e36c3cde50459ebdef217c651ab7d798c301c091eaf72011617ea420ef01d4adb800dcc8eb3772cc7216fbd960e508775499
TLSH
T121B01251C0119511C00B03F4119304883278EF10CB0D270163E06DB1A8365908018160
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e2e9.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58e2e9.TMP
Size 96B
SHA256 eec4f47a177d4c6132eb099848b89f90d5c54e654e554042126dd2c6f238fb54
MD5 5762909dd561a5c689c67fcd2aeec510
SHA1 a0ba4d3cb1d32d3a4f4ac292a34ce14a9990001f
SHA512 a969e8fcff33bb83f25d16260c1929fac3d7c63c2acdaadd62cf5a03233457c56008b0f5dfeba4fc68e404089b17dad439e4e57d00356bb041cb8620e91293e3
TLSH
T121B02220C202A303C08203B028E8A8C83020EF3BC303020283F00FB2FC30A300A3E020
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 aaf04229b3aa495786ea8b55ac88774278e936e06924cd9b05869e3991485d0f
MD5 a5910c2019484efd4b305b89251c864b
SHA1 c1d411fcea9c336d346189343d9f51112a7976f6
SHA512 6159a39b0c20a287a1456b9ee0ac639567d7231238ac3f42cccc26fa92bc7ca9692e5d14fd8f05eb9fd2589f902b39f7959a9224b3512b91b8da1b054576cced
SSDEEP 3:MsEllllkEthXllkl2zE/lF+/:/M/xT02zW+
TLSH
T1AC4404047FD0C447C54011704051C35013F0F51707137F5334D144335CC57715C00010
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 194KB
SHA256 25b646ee86d858247b362e091051f124cd18fcf44fc27df471a511821c269a38
MD5 d2c96ee087308b8b5d9a2d850ec8a8df
SHA1 87b2db4655551eae72194ad182c3b93af4cc9a7d
SHA512 aaa8568fce107644a178f0fe043f11c2181fc6a8957ce0df18117179512a815e0441ac1b75e1cc5b8198468cb1c75936c7a236a9626134ca8259f76c640b105e
SSDEEP 3072:xuHTijLsdjaPTxCjMNE5q2ZWrS3Qw/xLANk0mUW5GmRntSFCjEENC:oHe38jQTIjMNEHRrOk0HOGm/SFyEEc
TLSH
T14914133FFA3669E7187D6BB2375EB506CE61530F352A68DC6990B7C920580183B02F72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 527c4e32c195bd5bae893501ea29d9ab5e8b95cfd4cf7a6ce869145b2248f369
MD5 879829ec119398622fd6640b9b5d8a65
SHA1 df9fecc5e12f2f722a86a318650b89a4493aab35
SHA512 b30fc149c774c998f80514b0dca7c16c63fea6a71f89e63905cae9a7211231bc78b6b496a1514192e388626d4d2f0d77f1ca6d6ee320dbe67ca553198f94496d
SSDEEP 1536:jVWcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEm:xW3Qw/xLANk0mUW5GmRntSFCjEENQ
TLSH
T15B9302BA5E174AE7957D4A9176AE7808CE12630D70AFA8CC315CA38C21D01C92F73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 193KB
SHA256 ab37ddc5164b0bb9557a84977f9c07acb301eaec9251317d09a942293f9929a1
MD5 f7ddc52a60ce2fe3eac7c6d24175b19c
SHA1 34cf169b43bcc61dac9ffc76f1b64d9902a7797f
SHA512 4a5f4ffda52858a78d789c17f61fd3923ff73d507d6ca1b2012cda38525ecfa9feda6467867d752dca31337ac2fce529bcb00ba26e4cff038c9762de848d8c41
SSDEEP 3072:xGTijLsdjaPTxCjMNE5q2ZWrS3Qw/xLANk0mUW5GmRntSFCjEENC:Me38jQTIjMNEHRrOk0HOGm/SFyEEc
TLSH
T17314232FFA3799BB1C7D6776375EB406CE61530A302E58E869A0B3D920980583712F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download