hxxp://mailing-links[.]kubofinanciero[.]com/ls/click?upn=u001[.]97nFR9HS2Bjsf6QUsb8YqiCkpGs8ZmW0vK5P5RfodRo-3DABFp_8xTeOpsuBXqZLHPKV8K9ay5sqCzHZ8dJ-2FVOE3vcKatqlkUxZlp4CI-2BsgpbpYhFvQLc48f3KpWaR59uL-2BlKkfUmPPO2gCzB4-2FdnRjdWgaG4-2FlNDVPmdpLb7uZiq3Z61w9kdmYwpsdSXbUrrx8Ttbao2RANjy9ZFQ6VWSEYntOLYH1LsSZig8FrY9mMaPwKYGmJoGU4BrxNovdIu6RRZYtHQ-3D-3D

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
29/04/2026, 22:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://mailing-links.kubofinanciero.com/ls/click?upn=u001.97nFR9HS2Bjsf6QUsb8YqiCkpGs8ZmW0vK5P5RfodRo-3DABFp_8xTeOpsuBXqZLHPKV8K9ay5sqCzHZ8dJ-2FVOE3vcKatqlkUxZlp4CI-2BsgpbpYhFvQLc48f3KpWaR59uL-2BlKkfUmPPO2gCzB4-2FdnRjdWgaG4-2FlNDVPmdpLb7uZiq3Z61w9kdmYwpsdSXbUrrx8Ttbao2RANjy9ZFQ6VWSEYntOLYH1LsSZig8FrY9mMaPwKYGmJoGU4BrxNovdIu6RRZYtHQ-3D-3D
Sample260429-11rkcsgz21

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3620	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134219740731137667"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1456842261-3464001825-2855069093-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
2768	chrome.exe
2768	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe
Token: SeShutdownPrivilege	3400	chrome.exe
Token: SeCreatePagefilePrivilege	3400	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe
3400	chrome.exe

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 3400 wrote to memory of 5144	3400	chrome.exe	79
PID 3400 wrote to memory of 5968	3400	chrome.exe	80
PID 3400 wrote to memory of 3620	3400	chrome.exe	81
PID 3400 wrote to memory of 5968	3400	chrome.exe	80
PID 3400 wrote to memory of 5384	3400	chrome.exe	83
PID 3400 wrote to memory of 5384	3400	chrome.exe	83
PID 3400 wrote to memory of 2904	3400	chrome.exe	84
PID 3400 wrote to memory of 2904	3400	chrome.exe	84
PID 3400 wrote to memory of 1620	3400	chrome.exe	85
PID 3400 wrote to memory of 1620	3400	chrome.exe	85
PID 3400 wrote to memory of 1184	3400	chrome.exe	86
PID 3400 wrote to memory of 1184	3400	chrome.exe	86
PID 3400 wrote to memory of 5132	3400	chrome.exe	88
PID 3400 wrote to memory of 5132	3400	chrome.exe	88
PID 3400 wrote to memory of 1244	3400	chrome.exe	89
PID 3400 wrote to memory of 1244	3400	chrome.exe	89
PID 3400 wrote to memory of 4120	3400	chrome.exe	90
PID 3400 wrote to memory of 2432	3400	chrome.exe	92
PID 3400 wrote to memory of 784	3400	chrome.exe	93
PID 3400 wrote to memory of 6076	3400	chrome.exe	94
PID 3400 wrote to memory of 2768	3400	chrome.exe	95

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://mailing-links.kubofinanciero.com/ls/click?upn=u001.97nFR9HS2Bjsf6QUsb8YqiCkpGs8ZmW0vK5P5RfodRo-3DABFp_8xTeOpsuBXqZLHPKV8K9ay5sqCzHZ8dJ-2FVOE3vcKatqlkUxZlp4CI-2BsgpbpYhFvQLc48f3KpWaR59uL-2BlKkfUmPPO2gCzB4-2FdnRjdWgaG4-2FlNDVPmdpLb7uZiq3Z61w9kdmYwpsdSXbUrrx8Ttbao2RANjy9ZFQ6VWSEYntOLYH1LsSZig8FrY9mMaPwKYGmJoGU4BrxNovdIu6RRZYtHQ-3D-3D
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8aad9c728,0x7ff8aad9c734,0x7ff8aad9c740
  2⤵
  PID:5144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1644,i,1541426119458587578,13409834982116243503,262144 --field-trial-handle=2056,i,7314343635107717048,937600154665524163,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2052 /prefetch:2
  2⤵
  PID:5968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1452,i,4645151814335805647,16760047010617606899,524288 --field-trial-handle=2056,i,7314343635107717048,937600154665524163,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2092 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2356,i,16599133452989135230,11206085105620360692,524288 --field-trial-handle=2056,i,7314343635107717048,937600154665524163,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2508 /prefetch:13
  2⤵
  PID:5384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3096,i,1882588922422713398,3098528461016287599,2097152 --field-trial-handle=2056,i,7314343635107717048,937600154665524163,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:2904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3104,i,1151245993266284898,11648025862961071303,2097152 --field-trial-handle=2056,i,7314343635107717048,937600154665524163,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:1620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4180,i,1310507862303112490,3681477999734163503,2097152 --field-trial-handle=2056,i,7314343635107717048,937600154665524163,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4212 /prefetch:9
  2⤵
  PID:1184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4680,i,1962973262752687152,12001535172903663465,2097152 --field-trial-handle=2056,i,7314343635107717048,937600154665524163,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:5132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5056,i,17077522550181605899,4966739319830811947,2097152 --field-trial-handle=2056,i,7314343635107717048,937600154665524163,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5080 /prefetch:1
  2⤵
  PID:1244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5652,i,6210347643153197077,8375232567899786322,524288 --field-trial-handle=2056,i,7314343635107717048,937600154665524163,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5660 /prefetch:14
  2⤵
  PID:4120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5872,i,12100165747284927383,11939917501053986406,524288 --field-trial-handle=2056,i,7314343635107717048,937600154665524163,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5820 /prefetch:14
  2⤵
  PID:2432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5824,i,496718672006173404,14439478184945980335,524288 --field-trial-handle=2056,i,7314343635107717048,937600154665524163,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5748 /prefetch:14
  2⤵
  PID:784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5888,i,3847797899020320269,7791560568714583827,524288 --field-trial-handle=2056,i,7314343635107717048,937600154665524163,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5908 /prefetch:14
  2⤵
  PID:6076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4216,i,16197785683413808876,14114511531488010149,262144 --field-trial-handle=2056,i,7314343635107717048,937600154665524163,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4220 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2768

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:6084

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1208

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3f4a8530-c459-47a7-8991-2bd982eaefc8.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\3f4a8530-c459-47a7-8991-2bd982eaefc8.tmp
Size 13KB
SHA256 98841a1c7b91d3a6f436f1c63bfed28608077071454466245262e5956bbecd36
MD5 ad3b170237211315578456ee745e9d92
SHA1 0cd5bfb00e916753cefa0103f1081197fee6181b
SHA512 edde6907bc28cd7a663c26e748177d2e27811e8e9231575274d2ba947972f19d75d2829952c15c4ddc939b775d153ec694c823934aa1f17d4f999ab2c9345f9f
SSDEEP 192:ERZ5Ge7lPj7/mn/f3xetua4rv7pFwjPRp3TsJ9YHmZab+WN7yLy0wPLVCjI2a/XE:ERbGe5onb8X8Ox2lCZ2Ahs9vT
TLSH
T15C52E86EE954297B4CCBC61AFA65BB17E7F5103121D01E88EAFC8A2C11E7ACD3127417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 1f9d9ddaafcc273be663e0d3d9ba90bc54b8736e576a26748b350bff88a7b91d
MD5 80c0f1e2e06c011535b3135bff29a605
SHA1 2a7afc4acfc07e67f480c332746de422b2b7930c
SHA512 5449ca50531849535f974461c71bcf0da5b53aa71d631571ca5e31c01e289cf9f7aa87386a8fc2ef79aa78492e84a2bcb85bdb1e2b1e2d9adc7532afc156c9d1
TLSH
T198E02BAECC34DC3B1CFE075960988705EB51131B2B90894F7A3D87088FB06374586C5D
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 66dfdddcd6739cf097b4302f7ee8db9aad2849d167be55b075b4ec0b4408d168
MD5 b177ca1fec36b95d323132c98c5300fe
SHA1 fa59cb1c90898844e0795152f9e9d23f70d973f3
SHA512 662086cd92c64f6c6c45f7673bded221fa5d676f239a730363e15c85a7ef32e776ef0459f04a486e41c9daad7674e08532f05a849fb1b90c39962a6ee65838f6
TLSH
T15141BCF783F4997E861192E4AA146F1FCE6D0924531C3CA6C8E4AE1B43F2972D20178F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 d8b7365236c1b0ff45f834c88f592506fa0854cef4b7320834c29116f1a29c2e
MD5 5b53d1655a85e9305c341f367b2c2610
SHA1 38a0fe869c1cd42dbb88ca291cec9046d52eb34d
SHA512 73b2a7ec81b244f8719a1037a4a7cdef58a3a8b8c177ce1e18abd3553f447d5caf88a84f1563ad6950de44805a17f5b2501bac6088b365fc677c3f0f238d78a5
SSDEEP 192:ERZ5Ge7lPj7/mn/f3xetua47v7pFwAPRp2TsJ9YHmZab+WN7yLy0wPL2S/XegrDI:ERbGe5o3bBXzOx2lC24hsv5T
TLSH
T1CE52D72EE954297B4CCBC61AFA61B71BE7F9103161902E88EAFC892C11D7ACD3127417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 f7ca25fc303a9418d27a90395aa7b6c80edbb5729330737486c5c6a3c360b7bf
MD5 96412ceb7457f8962a30391cdb715ae6
SHA1 601578c8aaafb16f7c00ceb31c28933bdfa1df40
SHA512 5858a7a1134f3ef24d6297d6d0ba81acc9c4411e06b897ed1fae8a89a1c3c26f90ba0c286ca3062f1c09415913c8dcf890cdef4b5ef74d8e59ad468f4d24591b
SSDEEP 192:ERZ5Ge7lPj7/mn/f3xetua47v7pFpAPRp2Tm9YHmZab+WNny0wPL2S/XegrDU35c:ERbGe5o3bUX1OxJC24hsve
TLSH
T1ED42D62EF954697B5CCBC61AFA21B71BE6F9103160902E88EAFC892C15E79CD3127417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 21e81c420f3d017ae32c8b64d4e6d75c94b8234e6b16495dd8068581d8c1d8ae
MD5 00354c26d974dd37c82892cc4543401d
SHA1 998a31960482acf892a8127374d96c3a440e9e8d
SHA512 002a30061d299c004f2cb1f953a686553784e46d60be4a0ead8a5803cc85dda5c5d4c62a1b8c130db4c0b1023316a356061b53cd0cdbc9a204299c12d96f29e7
SSDEEP 384:OEjql7KxkXqKf/pUZNCgVLH2Hfgsl817pLuLcifMtXODql+ErU3HtHGDu9P:OIql7KxkXqKf/pUZNCgVLH2Hfgsi17p+
TLSH
T1BA72FA676C4C9E770F94C9CCD8267E4FADB5024B65DDC86482FA982A03D5ACF110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 75be90b63d1e61e633b02b0cc10c80034009dba0547b74170209a6cfdb76ec49
MD5 c880ebcd5bf5dbe20cdb79e08737a76c
SHA1 a42e199d62eebffa55ede2dfc01d7dd04280bf59
SHA512 f253516a0d9e0eaa7da532b9874d2e1f78ad52bc1e7bb529256f368ba317ea7f10a3a89666500dd223853de861d15303c803556702f24f140de4b7bd8a243213
TLSH
T17AB0125180015985C00B02F53A82088871549F148705130153E06A71D8265E040182A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58536a.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58536a.TMP
Size 96B
SHA256 297238d52f019273b10b2688da7dd086b94aaa4640a864b6c9ed4b0ea1d0ba58
MD5 6efc8dcfe8a179adc8c4f7c3c0130a84
SHA1 5a780ab3168f3ae67da77e8e144da08ea0452171
SHA512 d1be8295eef2f8f8163509a66ce91ea45c7cd3397eedc373097f05eb1013de39fc246c1aa472d030101c63539178ad18e82ed77c9b599c010f4a1ed71e53c4a8
TLSH
T17AB00295D1437212C04303B52999DAD87170EF66C633121693F05A76DC667A855279B4
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 a7480e6c12561c48b36f039a930f4b4653590ab55c32f5d1ae5e15fe5f1b1e0f
MD5 e5bd4bf6a7a2375337fcd763a4749ec2
SHA1 0bcc938bfcf60bb4942808cb9de0583dbd70d99c
SHA512 15075041d307905657e2c2dd2f522735c1f66e52a45bc44811f9ab691f6f53393538e55c0ba1c6d14a4215850979057d3bb944b3c887f4a83c8434973420c547
SSDEEP 1536:uXeP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNz:a0++J3qUQm08KMWF0bFTcVHr6zo
TLSH
T1A99312B9981F7C7953AED69691079CAC4CE38CDE1518247C30C35F1D14BA392A35B8E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 ed55a586ce371b64e00e0bfd58c18bea453506465586c45b7ab642b4dcad3900
MD5 7dc6886d55e4bd0d5152f016bc089107
SHA1 4f237c35be98c44f6c382aba0070f01574a60747
SHA512 25161d43894c46e6a470dd93fbae3357847c6c9682dbfe199cda96481cf47e5589cf6b549f80bfcd81fb1559abe26f24cbc16c1ccb214d51a0752471118c2b3c
SSDEEP 1536:uDP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNz:m++J3qUQm08KMWF0bFTcVHr6zo
TLSH
T1789312B9991EBC35239BD6A69007DCAC4CE38CDE1514157C31C39F1E14FA3A2A34B8A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 d6d85e9d24a483ce44a6bacbc17d3e377c8a7b7247d11e2afb0ab11a5df32da6
MD5 91c7b7a413d5cd6fa342e57348fd9e64
SHA1 7f3adaf24ae59b0951439163e62d51c109ccf57f
SHA512 4c322abd86c9627fa9ef430dfa016649eea1c7539f567e8f37d583175a2d78e4e6f5c8a30601188c38e4b3c72fb302289771788429a0ce0dd1cc5df7b625bc3a
SSDEEP 1536:SlP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNz:O++J3qUQm08KMWF0bFTcVHr6zo
TLSH
T1ED9302B9991FBC79635EC69690079CAC4CE3DCDD151014BC30C65F1E18BA3A2A35B8E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 860a5fccb8b50d39c4d9c8dda953bf31e9b9f896033b6f9fac90989ab920fe86
MD5 b1f16736fe1aeb6bac322308f36bb043
SHA1 094269646690d1817ebf61eec7631966ae76d4b8
SHA512 e833e9957578eb2e4e92219c5ed27d17645e01b9cd207e10f41974d8f8c6e4075cce8e72480dca12208f8f932eb5bf8330de987bee0095c91357e5070d0fd6ea
SSDEEP 1536:bDP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNz:v++J3qUQm08KMWF0bFTcVHr6zo
TLSH
T1F79312B9991EBC35239BD6A69007DCAC4CE38CDE1514157C30C35F1E14FA3A2A34B8A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/6084-13-0x0000025C82DB0000-0x0000025C82E5F000-memory.dmp

Download