6cec8fe38c77c5d61e568cf146b7ea094cda1c1586642cb5f58a54562f50cf28

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260130-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260130-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
21/04/2026, 16:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Bashar-al-Assad-main/Mega File Download.txt
Size 92B
Sample260421-thv2hahs3p
SHA256 6cec8fe38c77c5d61e568cf146b7ea094cda1c1586642cb5f58a54562f50cf28
MD5 510191f4e399c89f84983c53d8779a5d
SHA1 d60bab708da6a39a13feb28b3e951242baf5dc3e
SHA512 b2b537125ccc1105aa2a9e4d07c8774945dd4ab8e401295a60893002b45ec3d107784c753bfc529fe22bbe9db085d8b4a4c2108a77adef91eb20307394a90ed1
TLSH
T1D5B0124B510109CD8B0B8083B0519674E95B845F5446FCC12CE46A088C23070A140269
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3276	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134212610959316678"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe
Token: SeShutdownPrivilege	2932	chrome.exe
Token: SeCreatePagefilePrivilege	2932	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe
2932	chrome.exe

Suspicious use of WriteProcessMemory 18 IoCs

description	pid	Process	procid_target
PID 2932 wrote to memory of 4292	2932	chrome.exe	94
PID 2932 wrote to memory of 5508	2932	chrome.exe	95
PID 2932 wrote to memory of 3276	2932	chrome.exe	96
PID 2932 wrote to memory of 5508	2932	chrome.exe	95
PID 2932 wrote to memory of 5140	2932	chrome.exe	97
PID 2932 wrote to memory of 5140	2932	chrome.exe	97
PID 2932 wrote to memory of 1800	2932	chrome.exe	99
PID 2932 wrote to memory of 1800	2932	chrome.exe	99
PID 2932 wrote to memory of 2656	2932	chrome.exe	100
PID 2932 wrote to memory of 2656	2932	chrome.exe	100
PID 2932 wrote to memory of 5344	2932	chrome.exe	101
PID 2932 wrote to memory of 5344	2932	chrome.exe	101
PID 2932 wrote to memory of 1412	2932	chrome.exe	102
PID 2932 wrote to memory of 1412	2932	chrome.exe	102
PID 2932 wrote to memory of 448	2932	chrome.exe	103
PID 2932 wrote to memory of 928	2932	chrome.exe	105
PID 2932 wrote to memory of 5376	2932	chrome.exe	106
PID 2932 wrote to memory of 3736	2932	chrome.exe	107

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE "C:\Users\Admin\AppData\Local\Temp\Bashar-al-Assad-main\Mega File Download.txt"
1⤵
PID:5096

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x220,0x224,0x228,0x20c,0x22c,0x7ffb2bebc728,0x7ffb2bebc734,0x7ffb2bebc740
  2⤵
  PID:4292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1724,i,10641189441145099899,15121861685662225613,262144 --field-trial-handle=2004,i,10388195023675799939,1957794351625036373,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2000 /prefetch:2
  2⤵
  PID:5508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1636,i,4339286663861972939,17296825388666664614,524288 --field-trial-handle=2004,i,10388195023675799939,1957794351625036373,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2108 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2404,i,1821034657466192617,16393784800940323253,524288 --field-trial-handle=2004,i,10388195023675799939,1957794351625036373,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2228 /prefetch:8
  2⤵
  PID:5140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3240,i,3017411638997294886,8172793884646088232,2097152 --field-trial-handle=2004,i,10388195023675799939,1957794351625036373,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:1800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3248,i,12149873664462415475,15589243910320436450,2097152 --field-trial-handle=2004,i,10388195023675799939,1957794351625036373,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:2656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4460,i,5690431061604004467,6078985526458036022,2097152 --field-trial-handle=2004,i,10388195023675799939,1957794351625036373,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3868 /prefetch:2
  2⤵
  PID:5344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4764,i,12107041569192295301,15326131360548479746,2097152 --field-trial-handle=2004,i,10388195023675799939,1957794351625036373,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4712 /prefetch:1
  2⤵
  PID:1412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5436,i,1343657330834426308,4658969117743519396,524288 --field-trial-handle=2004,i,10388195023675799939,1957794351625036373,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5440 /prefetch:8
  2⤵
  PID:448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5764,i,4764325495257528226,15759909132562250246,524288 --field-trial-handle=2004,i,10388195023675799939,1957794351625036373,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5792 /prefetch:8
  2⤵
  PID:928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5796,i,12543907316308092254,3000078567192905865,524288 --field-trial-handle=2004,i,10388195023675799939,1957794351625036373,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:5376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5800,i,8955087615392907212,2340642335612335342,524288 --field-trial-handle=2004,i,10388195023675799939,1957794351625036373,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5620 /prefetch:8
  2⤵
  PID:3736

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4276

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:444

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 bdab539a33dccd1fcb1d0e294e8e1d08610d02505d53095c295260eda581ee28
MD5 7246fb418182d5ecbb89477cd8e7c33a
SHA1 3450ff79f2df384a039305a43f4e49976a40e1d6
SHA512 3f6c3a0b22c9e4a9e3fa7aff8f91958366a7863a10a57bac1acf3d6bc75780f289af95fba5c8a9c61b1074ed445c20548542dbfc2df69922527a5e081ab9d8f8
TLSH
T184E02BA9D811ED271CFD171D24544786EA6117662B92495F3B3D820CCF7267A078992C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e9c5e10b597ccf5072e37d01d0c3669ddd6bf8180569d1804c0189e4e73010a4
MD5 366bf68cb14bb24f3e683c4a68d97bbc
SHA1 f1f2b1368743ee3f2b0f144412b2f2ecb8e644e5
SHA512 c7d4589e754cecd7069cb4f365152c28923cc33329407b5c1c637e953ea68238a0c36f4d81bbc0f52d08873dcb1c2eaf04758c5c97013013c655c9d18ea1c210
TLSH
T1E1517DF793E5866E891196F49A117E2FCE7D0A18431C3C6689D4AE4B43F2972D20139E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 c3a959e6d57854e9e5e948e7eb9ee4c7676a98966924bafe503a25cf0f7d5949
MD5 214d6fbffafff174ffeffd092f56e576
SHA1 d25fe525acd2ae12f6fd7252da0f059c2bafdbb1
SHA512 bba0c8e707ea2982096d77d767dcf56236c69e9b43f0629730dfa40589d410191867955ff417b94a1400eff73c837ce9dde10340091c4b683e2617333df1134d
SSDEEP 192:8R1OygnBJ/4vVMv7XpAPRp2b9DHsb+WNn1p0QP+kwSDD/vVyIsnAUgtaJ:8RAygBiVY7UXUxwn0C+yJ8
TLSH
T10742C52DF914693B4CDBD22AFE217707D7F6142522952E84EAFC8A1C18E79CD2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 18dab2a0968e6e42bfe37a533845dbf175d043dfe19024b45b37b5733fcc313b
MD5 517429ce288e4cd51e25f72e5708e9fc
SHA1 4b6704d167259a5b0b7c26be19e87a50b0d80fa7
SHA512 94eff4a666d65feac1bc39b820fc69fed54d7bc8a1b4e2dfa6265055302ed98a2a5a29c553672a19bb66cda0ad5665b638712a581c3504ef7bec4a75c48075b6
SSDEEP 192:8R1OygWfM4vV9v7XppPRphb9DHsb+WNnkotBP+kwSDD/oVyIsnAUgraJ:8RAygEtV97TX9xw7tx+yMe
TLSH
T18B52E62EE914693B5CDBD22AF9113B57D3F6142622942F84EAFC8A1C19EB5CD2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 1b62b3022d7e9e2eb855ffc4a275095a1387e8d344706b25e0ccf460e424dba4
MD5 6aca6de2c19a739b80a7711fc4485c4c
SHA1 89912ca6535f4e1dd96ffec8b56318693b324585
SHA512 66747166b837a6df3044c4375893d6b4eeb0df73e6b92a50da4f61c12b918b0c94f371a45b440c755b02b6c270002d0d309e04bd21e142cda45db5779dbf0148
SSDEEP 192:8R1OygWfM4vVxv7XpAPRp2b9DHsb+WNnkotDP+kwSDD/KVyIsnAUgraJ:8RAygEtVh7UXUxw7tr+yKe
TLSH
T1C742E72EF914693B5CDBD22AFE213B47D3F6142622952F84EAFC8A1C15EB5CD2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 3a2129cbd053015378c572db601079ca5c9ddb7b11f1747fac1b79b10fa3f6f1
MD5 134779fd616a6c78db8e24c67d52db43
SHA1 f35ae0806c0724ae98a535a38dc772d609fdbdcb
SHA512 6ef7be3aef130668ddf59eabade7c8207e1e6e0c8d50cb9af1570fc787f2a3023f05058db3ac2f1b0e37fa1d873b3e4730ff7be93b46dd1f56d99229f63f3415
SSDEEP 384:EyjI37KxkXqKf/pUZNCgVLH2Hfgslzs7pLuLcifSzXODI7+ErU324HGZ8EJyX:ESI37KxkXqKf/pUZNCgVLH2Hfgsds7po
TLSH
T19E72F9A7B84C9D370F94CACCD8267F4FADB5025A65EE886842FA982503D5ACF11061F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 3061f20c41ea73bcc6f15f6857de93db2a4524f1a81f59394a208bdf270db434
MD5 50b66d11e3d1970116f54419d0fb4c21
SHA1 0cd31a19628cc856dbe9109abdab1e85f46b9472
SHA512 92bedf61f16185358aa4263608e8d1685877ce93ed4d8ca16fd9ecd6674c8237300a1882786f1a9842c91e58b82b4fcb85c8cddd450c94253e04217e81b7ca17
TLSH
T152B012229001D512C89303F011C34C88B2185F1087462B0253F86D75D8271E1412C161
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d107.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58d107.TMP
Size 96B
SHA256 ae4df84bc626a0ce1393392292210d31d92919ed3a0f8b85c51c34a9f16fe5f9
MD5 1e0b35c40826f1a188ffba717e75df1c
SHA1 8a8796c4d587fa59f3b00521a45727519ee13947
SHA512 7579d632cc0f1ce217bf04c9b48f596408c7be63f9f913926425e8e09f44d8b2db4fb7e4656ec3c128d14f28fff9a367477ea01b56cc5404d4c2c9c1b1db9592
TLSH
T164B02222C003E222C00203B0208AF3CC3020EF30C2232202C2F00A22CC30A300020028
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 194KB
SHA256 e2aa124afd6db96a600d5e960a70a7ea017400c6f45c314b9ae864486cd0bf2b
MD5 f236069d60614cd8572b3bb672b5734d
SHA1 701484f43a118497c46c1b305b67c0dec67402cb
SHA512 4ddadfbb939f01d3f1d963bd6a4ac4abbc5f69a163695fc3b53a287dfc1c53e7f4c3bb7290e08a40d51594ea2db9069cd3550c5851a55df23d4fe0e1e5b698fb
SSDEEP 3072:HtLn4S8GqEYfMFgU+0RSlbywsmJdAv9bDlBshIZZwINsIrS2uJBLpAkLQqv:hwGBH944/O6ZZwINsIrS2uB22
TLSH
T1371412F77999FC77888D9512943F352F9A84A086CD0AFB2818CA773F40AD5F79683052
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 194KB
SHA256 5faed0a5f0f2c72faef77956321c1365e2250551655b2c20e1f6cbaa03b6c3ce
MD5 ecbed27228b510ddc9eaa52b954f7d28
SHA1 bbd8ce5fc6a668874be28d4ef043f17e8bba530e
SHA512 0506a3fb5c0fefd6c0bc307b9ef6556cac703bd7f54135e9cd0721f9f4cb90a8859907ee67b8e3d59b0c31cc902aff4a4901b8f672a4ea5c2cf55f3040d21c40
SSDEEP 3072:O2itLn4S8GqEYfMFgU+0RSlbywsmJdAv9bDlBshIZZwINsIrS2uJBLpAkLQqv:O2IwGBH944/O6ZZwINsIrS2uB22
TLSH
T1B71412F77899ECB7898D9942943E391B8DC4A087CD0AFB2828C9773B009D5F79683452
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 61ff66a17dacc69986b6d629996e4b4d123421aa4ae8e52054d6740fb1be3be3
MD5 99ef55350fdc55a62a0c074806d32c16
SHA1 1789a4a2bfdc90572a064afafc48b927308478d3
SHA512 3d0799fc961f89826ddf095b4d2d5a781a63fb61dced0a6f59fd6617969bb6a01672cd372def39bad801128f85997627ab763a55c4ef9c1d3142a700194ec4e2
SSDEEP 1536:PWKWlBshIZW8wI/Yc5hJxedCj/S2uJYgtLaEmNsXtZdzqRatPx:ODlBshIZZwINsIrS2uJBLpAkLQqx
TLSH
T1E09312B73AA6EC37C49C4202B93C2A4D7EC8B5E9C829B57658CA677F41F2BF55103102
MD5 SHA1 SHA512 SSDEEP TLSH