hxxps://down-cs[.]su/Download-Half-Life

Analysis

max time kernel
900s
max time network
899s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/04/2026, 23:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://down-cs.su/Download-Half-Life
Sample260426-3fe2yah13t

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
852	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134217200932473499"	chrome.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2714754311-527593155-1440850301-1000\{E88FCFEB-1E80-4071-A4AD-6EC3B137288B}	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
1660	chrome.exe
1660	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe
Token: SeShutdownPrivilege	2884	chrome.exe
Token: SeCreatePagefilePrivilege	2884	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe
2884	chrome.exe

Suspicious use of WriteProcessMemory 26 IoCs

description	pid	Process	procid_target
PID 2884 wrote to memory of 1916	2884	chrome.exe	83
PID 2884 wrote to memory of 852	2884	chrome.exe	84
PID 2884 wrote to memory of 1180	2884	chrome.exe	85
PID 2884 wrote to memory of 1180	2884	chrome.exe	85
PID 2884 wrote to memory of 1528	2884	chrome.exe	86
PID 2884 wrote to memory of 1528	2884	chrome.exe	86
PID 2884 wrote to memory of 4524	2884	chrome.exe	87
PID 2884 wrote to memory of 4524	2884	chrome.exe	87
PID 2884 wrote to memory of 2568	2884	chrome.exe	88
PID 2884 wrote to memory of 2568	2884	chrome.exe	88
PID 2884 wrote to memory of 4548	2884	chrome.exe	89
PID 2884 wrote to memory of 4548	2884	chrome.exe	89
PID 2884 wrote to memory of 2924	2884	chrome.exe	91
PID 2884 wrote to memory of 2924	2884	chrome.exe	91
PID 2884 wrote to memory of 5100	2884	chrome.exe	93
PID 2884 wrote to memory of 5100	2884	chrome.exe	93
PID 2884 wrote to memory of 4232	2884	chrome.exe	94
PID 2884 wrote to memory of 768	2884	chrome.exe	95
PID 2884 wrote to memory of 768	2884	chrome.exe	95
PID 2884 wrote to memory of 3980	2884	chrome.exe	96
PID 2884 wrote to memory of 1028	2884	chrome.exe	106
PID 2884 wrote to memory of 1512	2884	chrome.exe	107
PID 2884 wrote to memory of 3800	2884	chrome.exe	108
PID 2884 wrote to memory of 1660	2884	chrome.exe	110
PID 2884 wrote to memory of 2508	2884	chrome.exe	111
PID 2884 wrote to memory of 2508	2884	chrome.exe	111

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://down-cs.su/Download-Half-Life
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff9d23cc728,0x7ff9d23cc734,0x7ff9d23cc740
  2⤵
  PID:1916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,2311526439475664304,13908964211898942344,524288 --field-trial-handle=1696,i,7007889779054295369,1006594596647335498,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2116 /prefetch:3
  2⤵
  - System Time Discovery
  PID:852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1668,i,14386336842648947378,4196950449174605125,262144 --field-trial-handle=1696,i,7007889779054295369,1006594596647335498,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2044 /prefetch:2
  2⤵
  PID:1180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2392,i,7392282918649821073,13171756860772859903,524288 --field-trial-handle=1696,i,7007889779054295369,1006594596647335498,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2512 /prefetch:8
  2⤵
  PID:1528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3156,i,9381079475800766379,7993991560564608777,2097152 --field-trial-handle=1696,i,7007889779054295369,1006594596647335498,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:4524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3160,i,15066175927007933813,17593891238693243296,2097152 --field-trial-handle=1696,i,7007889779054295369,1006594596647335498,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:2568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4160,i,11127778223788112919,3604566454550512309,2097152 --field-trial-handle=1696,i,7007889779054295369,1006594596647335498,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:4548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4132,i,9395614694853446986,5110082167096022381,2097152 --field-trial-handle=1696,i,7007889779054295369,1006594596647335498,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4712 /prefetch:1
  2⤵
  PID:2924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4968,i,9776588472464447875,16061810008823764997,2097152 --field-trial-handle=1696,i,7007889779054295369,1006594596647335498,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4908 /prefetch:1
  2⤵
  PID:5100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5084,i,14805544425873140544,8744200278337415132,524288 --field-trial-handle=1696,i,7007889779054295369,1006594596647335498,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  - Modifies registry class
  PID:4232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5096,i,7787821629879101342,13830229262663986585,524288 --field-trial-handle=1696,i,7007889779054295369,1006594596647335498,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5108 /prefetch:8
  2⤵
  PID:768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6080,i,7927642829765358565,7644620325150710034,524288 --field-trial-handle=1696,i,7007889779054295369,1006594596647335498,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5976 /prefetch:8
  2⤵
  PID:3980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6344,i,14036112863875281039,5111229813242601718,524288 --field-trial-handle=1696,i,7007889779054295369,1006594596647335498,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6348 /prefetch:8
  2⤵
  PID:1028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6352,i,10000585062909680281,12926291865826336945,524288 --field-trial-handle=1696,i,7007889779054295369,1006594596647335498,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6336 /prefetch:8
  2⤵
  PID:1512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6356,i,193483722204007527,4728824507559597894,524288 --field-trial-handle=1696,i,7007889779054295369,1006594596647335498,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:3800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6016,i,1269872843450184352,3502437500330495531,262144 --field-trial-handle=1696,i,7007889779054295369,1006594596647335498,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4384 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4632,i,16922768019558698054,6535443401465029467,524288 --field-trial-handle=1696,i,7007889779054295369,1006594596647335498,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5340 /prefetch:8
  2⤵
  PID:2508

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3940

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4276

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 2beaf81dd00fe7e2c306331268e86cb597227ec4d414195242f6829e5609407e
MD5 47dddb828f85c00dd976d6e57c4450de
SHA1 6a736d3f42698062204fb7d21ebbcb47b274a9e7
SHA512 fd14a327f40272ad576a5c5ac4f4391bd8f682380e8420b2f7e868cf833e575c0b8b2d8ee4e2bf35397c6ccdc385b0a8f6e5c221e8204626a48eb44ca78b958d
TLSH
T1F9E022BEC82ADC371CFD0B2861454A42E740275B3781889F3B3CD20D8FB467A4A9282C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b
Size 263KB
SHA256 ef80f698983cef3b8ae7fc63e7488d37251572a29f6c4374704c74902bd367ce
MD5 f2cff0dbb536aee099a9211b761f7031
SHA1 30531cdc1263a20593cac138ca357091a0f5f14d
SHA512 366472136ed919414eb22115d952bfde167d8c96b5a6be151ec8fe16c759492888b743bdd8ce4649a0ca821ba16e3d57625b26f3ba839f50987800fbb675622e
SSDEEP 6144:/TDIi3WJTXzALd3R+RP2xxIbBXMCQWkATsp7M:/wLFARR+RmAB8Cfw7M
TLSH
T1E0441723EE5441E5CA7B4630EC8F8526ED423303ABAD856DA5211A3F3AD23135B1B5DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c
Size 640KB
SHA256 9e62f615fa86568390237f9780f171393157a8f9662901f332df08e156859b5c
MD5 6ea15c64e2593ff7fbf40553f7d4f264
SHA1 7db586913f657b2f8aac090959af50c3bd7bbeea
SHA512 5df082ecb04770562fc581d365e56ac40b99b3be71d8b7fe80493860bc065b0f224b05f45a2a6c26981a07fe5b5ffea65b2691473d96eb5faa0e9b221f16f12b
SSDEEP 6144:FHRpBmj/UY5TH2vPFmqJqj0QbPPcvLPsgjF8w0Be/aEl4n1aNEggb:Fxnmj/OvPejwLPtetn1JZ
TLSH
T1BDD40247E033A718DABC89354CD2EC485B18FA0E1D069C3B653EEA01B6A11933F5739E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 408B
SHA256 4e540453b6dab35b00e511378a613070e822c557f9a23ac9b08a3f2297d5f338
MD5 bee028f8d28128c9c064ec8915385f65
SHA1 a8f06dda0bf0090ccb9c2103d528a42b9100399d
SHA512 e612510509a6506b8ff99aec87c9abe0adf65c8f28d3aebed5b3d81b2fab83c2fe6f75f3ea1248e141e10c43a456ac7db1b25123bfbd8030cfefda4f70221016
TLSH
T1B6E0C21606D3E6C2FB8441302CD9C850BAF1E505806F0F5745CB943ED97F7E60AC9053
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_down-cs.su_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_down-cs.su_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 8977cd08f7ef83358f0f032ba1b88efec7a724dda4c5e47f9b7908100a79de89
MD5 9091e9e5ab8763a732cbf90de9805918
SHA1 5b162a0c215aec819b1079af33934ff894d01408
SHA512 366520872baadad4ec59d3e534c283a805849b5bcd5c15a24d35c2114ba7f77fc41bc2514804022140754d607595fef824a159cc75df955c29d0a71c662636bd
SSDEEP 192:DA38sezYYaIaEgdQyiQgFi5Idb7rZsywaf0Wmdo15:DA38sezYYaIaEgdQyiQgFi5Idb7rZsyr
TLSH
T1A0E1BBF7D3E4962E890296F4AA19AF1FCE2D4924072C3C26C9D49F4B93E1C72D24564F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 9e9c345fc95c0928a44bf3e7411a20b76a05228ec2e52f2938541de4fb595084
MD5 850008c667654aa8960f2f177e90e4c4
SHA1 12259ad15b82661fd8c873d87bddd22570ce758b
SHA512 07d55bd7e0f33757b94bce020b7268085941ae8b319d3e065835659b63df809f8294e1115397f2f227d3143cfae33a5177b377fd14e3b47b153c5a62342c5790
SSDEEP 192:DXPkTet5wEaIaEgdQyiQgFi5r7rZ6ywc30WCcCd4/jhn5:DXPkTet5wEaIaEgdQyiQgFi5r7rZ6ywI
TLSH
T108E18AF793A4962E890296F4AA19AF2FCE2D4524072C3C76C9D49F0B93E1C72E14574F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 57f87e35d16c39e76a78d3d6c8c58229f0fc60ed5469876aeb4c7628c79b43ea
MD5 37727f068f9052ff2ca82ea0258d8729
SHA1 03c9538e671463ae5c0a2f6b12e9f5f682ccd589
SHA512 7bb6aa437d2f7242db45f182c28fe4482b51274190d629016362d0e69b9d322463b93418c566fc8c5ce01865df8c1000e22115926b7b7cfbf71476c2b3703389
SSDEEP 192:DA38sezYYaIaEgdQypRcQgFi5Idb7rZsywaf0WnxA:DA38sezYYaIaEgdQypRcQgFi5Idb7rZU
TLSH
T145E1BAF7D3E4962E890296F4AA19AF1FCE2D4924071C3C26C9D49F4B93E1C72D24564F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 6ac6e5e47376e6610c1d779bdb00a98be2df1b84dd97c702b283529421dc2d7f
MD5 524f2fd285de1c4f722289d5ede04bd2
SHA1 38316e11073ab7a629ad6cffd620f7240b190572
SHA512 a7bd7deca86f25147609bafddef2dd3c4aeb75d643ca0bbd12ee5d1a47a18dd8540a9367b50bc5fed9d3e4bf67aeea7a9ec0e2266a03eba807a204ab1dc8a6dc
SSDEEP 192:DA38sezYcEaIaEgdQyiQgFi5r7rZsywaf0WmLLd4U5:DA38sezYcEaIaEgdQyiQgFi5r7rZsyw5
TLSH
T10EF1A9F7D3E4962E891296F4AA19AF1FCE2D0924072C3C26C9D49F0B93E1C32E14564F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 8c3b3a0897ec91fd2786e2dbd1351eec6d98f2689c6a30a832306199b020af3e
MD5 cdeee0e6b7f861eea8a43436d4161d0e
SHA1 62ecf00cc9fed8db6a2c5f705343d8f0ad91c5a0
SHA512 9eb07eff9671330f37a7e068bfd5291802f24cf599589539bc4e066273a0bf0a47077ff2300e77ef2de5933f24f740fc8a1f528a8af4e1ae9b22c8b23b5bedd0
TLSH
T14251BFB3C7D89A3D895155E49A143F2BCEA90968631D3C56C8D8AE0F53F28B6D20154F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 409ed2034e3840399a5042bdfc62ff3c5a8d82330bf1cad51d93c1bd3163eea9
MD5 2b6818fec6d5f79b4c40c21234f1547b
SHA1 589c48f2f69848740bfe9226cea477e5b5f5339a
SHA512 b59da58e798e70468421c830df885d8a484fab8e2e56ac0e5b0cdd669d153917eaaef7c05638f81359fd9b4c59159c64d497f8928310ce915f5cd19353d1fb04
SSDEEP 192:DXPkTet5wwaIaEgdQyiQgFi5r7rZ6ywc30WCcCdR/jh85:DXPkTet5wwaIaEgdQyiQgFi5r7rZ6yw0
TLSH
T1D3E17AF793A4962E890196F4AA19AF2FCE2D4524072C3C76C9D49F0B93E1C72D14574F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 d25fe2c189da5a1faf76cc5b6c4105a9afdd71b604e11c2e0f458a4d95f29fc1
MD5 90190af64d296783f3240e7b2bc1dba0
SHA1 6d997fcb1646c3a60edbfb1123f6be56eb0d5fc9
SHA512 889956d21c0ea2c08945e2494c946f0b73240ca8442b0a5cd11d1ac22dd0a2bfccc2de85a79784249f58b1e0f5d85c66ae03e4cc37ef4b86db6fd97052671c6a
TLSH
T153318FA7D7BDB49B547D0CBB1D19B8052D7AB43502C264F4DEB780ACA1809F74B26036
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 3d14f4f73497118f215deba73c96db441fe176338c9ceb5ce670a4312ac1d527
MD5 49bc2d49fbcf60b467e717d7a9618ea2
SHA1 cb57997fff5f6fbc3d0993023abdfa73dfc4966e
SHA512 0f4cab774d17be5ff3f42e68b3c23ffe2316d74c9b7108e856230ac82980b9c32701bf6f8892c9b4c70c0ba386af12f093ff84d47af4e4b7bd87d39998fefcc4
SSDEEP 192:cRfhtkNBg0Hv7wpAPRp2xR98Hsb+WNncP/Is2iT2heoYaiVyIsnAUge:cRfhgPcUXi6wYT2o2+aie
TLSH
T1EC42E72EA914387B5CDBC229FA257757DBF6142160C42E84EAFCCA3C14DBACD2217457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 541a816d010b6591f16f92fa50290d120a4cb89191b79320d605d6fea9107b25
MD5 5a44e837c2a1b3af1cb56821e55921ad
SHA1 96056d7584e3a0f80d5fc0750349feee2d96684d
SHA512 c0bb6816c9584dce268183b59098bdf1696dc2d12973f84f8dcdf340c105877ebfd177b6890bcf898b024f2563e482114d82119d1621f39f22aeab968088cdec
SSDEEP 192:cRfh8kNBg0Hv7wpIPRpWxR98Hsb+WNncP/Is2rT2heoYaCVyIsnAUgE:cRfhzPc8XC6wYT232+aCE
TLSH
T19452E62EA9143D7B5CDBC269F9267757D7F6142120C42E88EAFCCA2C14DBACD2217067
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 03973a25da0021eab19b8f1369a5523343654f3887234a1e1cc301245a48728d
MD5 e96921d5ae30116aafe48367f7ac6695
SHA1 c6641ccac61c68d82ff32eff425c15feb5074091
SHA512 7547cbfa0fc206b66f70451b792b574afeb0e98365fa6e0b5000e8553976425c99b5d9d4c5ead0b18d87bd8ab8100bb185fc97363145cbc0d2cc4cf9b3e8d865
SSDEEP 384:MajIf7KxkXqKf/pUZNCgVLH2HfgslPa7pLuLcifqrXODID+ErU36SHG6+AwTlTNv:MKIf7KxkXqKf/pUZNCgVLH2Hfgs9a7pb
TLSH
T1A1720B777C4C9E7B0F94C6C8D8167E4FADB6024A65DD886482FB982A03D4BCF114A1E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 c708149b419fea9a05dff9976b76868eeb38370f550bf9cee8ae1b032d4f2e49
MD5 bf39ab3f019414714299fdbbd1e1512d
SHA1 4d18e9959adcbb70179c1471dd82cf9c4f2ea2ef
SHA512 8f512e131058f8cd5c706028e407261038a90287733a86981e0d3527ca7e9223be19cb2a735840ab8d5192c25b6af2e268449e15d986fd3e6e68a778543aaf18
TLSH
T189B012109002E581C98302B515C2448C31145F2087091302D3F07E75D8275B14015250
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ae3c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58ae3c.TMP
Size 96B
SHA256 091b2461eea68495e44083ef5518af92cde4459a2875ecf4e57ab8a95f842b77
MD5 3f400a4599c12644d4abb2ca94997659
SHA1 aeb789b3eb59329054ea50626b4673fae056297a
SHA512 83f8c24a3a7410631a41537a4f5d1682c15b4c6d30ee7a19d601916351c14ba21eb5d80038bfed71b43834d801eca27b01c6e35c15f913ead0eaf2f5ebad2ff1
TLSH
T154B02200C002B223C00303B020C2C0F83220EF2AC203020282E02A22CC3AA3080300E0
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 150B
SHA256 d799d1b282df2542cc32353f8db215dcb3773cbd017e01e0cf748848ef09dd55
MD5 152f8eb18d8ae8f4bb9ac1133a870202
SHA1 aa95e607c55279d10afdd20ed600663a33c267e5
SHA512 cdbd91aed1aa51915209ab17359e3ef63744e92c55256f2f731f9cf9bbab7982b927a7a1ce94c367aa58721b30a60d4d40c78d70bc026d321c0d0132511f8fcc
TLSH
T113C08CE70424898BABB0EEE8211CFA1EE20B46088CC0C8E8A404200232349234816928
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58adfe.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe58adfe.TMP
Size 157B
SHA256 024f3c3ba5dd6f4f1ecf50a2642315779b2100ff7595e41ac0316fbe90e02b6d
MD5 cce8ef443cbc8f734522523dcdde9e97
SHA1 5c905f642ce6cc3be370ccdce3933013ca9fa2cd
SHA512 eb83718b65199b70aa9f2e4a9bbd93ab0cb2bdac7192c94fb8406aced54584489b8a006500285e861a2bdc00d87d85523e712c043da96af2201d3e30117f7444
TLSH
T18DC08CE70434498BABB0EAE8612CFA0EE20B4E088CC0C8E8E406304232349238919A38
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 be6ec32226e683a15c63c184cb67ddcd6e809f461b9a5876d7be8c7e5f29b89d
MD5 57baf7d122e037dd65f6c370e53e99ed
SHA1 ffeb407f8037ecec8fc5726c1ac83511bd1367f4
SHA512 16553945e34b5691da01026ed4bf94f20e16ee36c4b84b733b8f91357379fd1f4231c1e2c2ef84dbf2e8e1cac3cd0788519a39d1c145b31b5ce92d891af77afe
SSDEEP 1536:R8rgcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE:P3Qw/xLANk0mUW5GmRntSFCjEENl
TLSH
T1639312BA5E2A49E755BE46D1725E340ACE12130E319FA8CC726C139D21D41C92B73E33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 bb25b80d03218aa3e153f1cc9190387151eb05390efadd07623c9ea8ce0a1b7f
MD5 c91db68753d8148eed381b02bb3aa711
SHA1 f07cee3fd61fa2d863c4a66182f39a82ea506c35
SHA512 481d9d5ead0ca44720727dfa2a258228e67784cd78404337bb2ae955964c85104a53e65dc4a65dd435a2501e37816faacf40a4ac8cd8db922a18e679f57d6ff3
SSDEEP 1536:OtTYcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE:aE3Qw/xLANk0mUW5GmRntSFCjEENl
TLSH
T1269302BA4D2A49E795BE56D1729E3809CE12130E71AFA8CC716C538D21D41C82B73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 62a8d55129c2acf82efd5b23fcf216ac32eaf87e04f2a39d05c95452ff677ef6
MD5 8f70aeee2fe9e32ab5f76243dc0fb0db
SHA1 240d14dbc2b613da8732936f651271a28b88f4bf
SHA512 0940c913778b722e50501d796379c2e0f7d5bad663c7bd65ab357304cbbcd6f26a55f2329af9a53982c42d19917f76f88e5210e7c2dd451529cc01018ab9f526
SSDEEP 1536:+tTYcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE:qE3Qw/xLANk0mUW5GmRntSFCjEENl
TLSH
T1529302BA4D2A49E799BE56D1729E3809CE13130E71AFA8CC716C538D21D41C92B73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 4d86fd29920ca4d10ffe1cf2f2e23e12e4504fc2644853e22037ce3a60ef6643
MD5 063b1997680af0b98f6ae935c924dbec
SHA1 96347e44acbb21a5b0bf37e38f3bbaaca8623d89
SHA512 d7608a4ffb3eb1720b9df8ec33998b5ea5a0048f0ace62ddb3153c2d4d584672247acaf2f18b4b1080af400d424a472c620189d68a079122bbe4546425ceccf8
SSDEEP 1536:grcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE3b:e3Qw/xLANk0mUW5GmRntSFCjEENl
TLSH
T1349302BA4E2A4AE7957E469176AE7809CE13130D70AFA8CC316C539D21D01C92B73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 087da6d0cc81699fa1b775663d16c2888abd67685c9de450b9d8239593ad9d36
MD5 49ed2ff0cc579bdf1bcd74ae68d11fa6
SHA1 9c6338f87010720d4af57c83ac10382679f9f400
SHA512 800dc5c25515c56181e20e0bde80b674937d6514864434181c541ea1a81257aeb6ed38763baa66a31695bb86bddc793ef01a004a300b3e9357312462faf12a20
SSDEEP 1536:+8rgcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE:I3Qw/xLANk0mUW5GmRntSFCjEENl
TLSH
T11C9312BA5E2A49E795BE46D1725E340ACE12130E319FA8CC726C539D21D51CD2B73E33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download