b74bf321ec1061e969b297f86cfbc58a39f99fc39b23cc9326e7397c87bacc15

Resubmissions

02/05/2026, 10:49

260502-mwrgxadt2t1

02/05/2026, 10:45

260502-mtpwasds7x3

Analysis

user interaction
yes
max time kernel
148s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/05/2026, 10:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Start For Window.cmd
Size 346B
Sample260502-mtpwasds7x
SHA256 b74bf321ec1061e969b297f86cfbc58a39f99fc39b23cc9326e7397c87bacc15
MD5 1935cf410a4aebc6928fcb207057054c
SHA1 18f0f563ef246af154da24b23fc67002a04cece2
SHA512 df30cc474086dc3123a471a3c316e3a5bdcc08edf7a155c522932307b928a9b82fecf431a3c66beed561372b698fc4cbf97c89fb1e0d570c582e70cb2add0507
TLSH
T1ADE026087E11827CD0A5B8C9A67EE7F852CA251D4092532956CB9304700FE5F8381E71
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4928	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134221923911500177"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe
Token: SeShutdownPrivilege	5736	chrome.exe
Token: SeCreatePagefilePrivilege	5736	chrome.exe

Suspicious use of FindShellTrayWindow 36 IoCs

pid	Process
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe
5736	chrome.exe

Suspicious use of WriteProcessMemory 20 IoCs

description	pid	Process	procid_target
PID 5736 wrote to memory of 5836	5736	chrome.exe	95
PID 5736 wrote to memory of 4928	5736	chrome.exe	97
PID 5736 wrote to memory of 2584	5736	chrome.exe	98
PID 5736 wrote to memory of 2584	5736	chrome.exe	98
PID 5736 wrote to memory of 1836	5736	chrome.exe	99
PID 5736 wrote to memory of 1836	5736	chrome.exe	99
PID 5736 wrote to memory of 3808	5736	chrome.exe	100
PID 5736 wrote to memory of 1976	5736	chrome.exe	101
PID 5736 wrote to memory of 3808	5736	chrome.exe	100
PID 5736 wrote to memory of 1976	5736	chrome.exe	101
PID 5736 wrote to memory of 3724	5736	chrome.exe	102
PID 5736 wrote to memory of 3724	5736	chrome.exe	102
PID 5736 wrote to memory of 5320	5736	chrome.exe	103
PID 5736 wrote to memory of 5320	5736	chrome.exe	103
PID 5736 wrote to memory of 1124	5736	chrome.exe	104
PID 5736 wrote to memory of 5872	5736	chrome.exe	108
PID 5736 wrote to memory of 5424	5736	chrome.exe	109
PID 5736 wrote to memory of 1384	5736	chrome.exe	110
PID 5736 wrote to memory of 5968	5736	chrome.exe	111
PID 5736 wrote to memory of 5968	5736	chrome.exe	111

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Start For Window.cmd"
1⤵
PID:4652

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffc1d22c728,0x7ffc1d22c734,0x7ffc1d22c740
  2⤵
  PID:5836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1964,i,8727793657070969738,13646665820006034813,524288 --field-trial-handle=2092,i,15177759654763693551,12716199689462422245,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2204 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,14055660529733446160,12884708471196822677,262144 --field-trial-handle=2092,i,15177759654763693551,12716199689462422245,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2088 /prefetch:2
  2⤵
  PID:2584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2432,i,3116688579156244682,7223051635897143242,524288 --field-trial-handle=2092,i,15177759654763693551,12716199689462422245,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2600 /prefetch:8
  2⤵
  PID:1836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3248,i,603696798571023524,14034570320533614172,2097152 --field-trial-handle=2092,i,15177759654763693551,12716199689462422245,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:3808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3452,i,4653534880027560931,12164362322022081238,2097152 --field-trial-handle=2092,i,15177759654763693551,12716199689462422245,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:1976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4472,i,15224769954892753666,11099602181678342441,2097152 --field-trial-handle=2092,i,15177759654763693551,12716199689462422245,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4476 /prefetch:2
  2⤵
  PID:3724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4712,i,4227620901834639673,11720290553228328609,2097152 --field-trial-handle=2092,i,15177759654763693551,12716199689462422245,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4660 /prefetch:1
  2⤵
  PID:5320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5520,i,2407017029974869933,9660549982973670301,524288 --field-trial-handle=2092,i,15177759654763693551,12716199689462422245,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5524 /prefetch:8
  2⤵
  PID:1124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5820,i,4738268553327461717,9062516392016874727,524288 --field-trial-handle=2092,i,15177759654763693551,12716199689462422245,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5780 /prefetch:8
  2⤵
  PID:5872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5824,i,16260585105832185521,1179078661558454958,524288 --field-trial-handle=2092,i,15177759654763693551,12716199689462422245,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5532 /prefetch:8
  2⤵
  PID:5424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5828,i,2814604238406105144,8830783077429402819,524288 --field-trial-handle=2092,i,15177759654763693551,12716199689462422245,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:1384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5916,i,5993434540040137341,3849669876173992736,2097152 --field-trial-handle=2092,i,15177759654763693551,12716199689462422245,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5976 /prefetch:1
  2⤵
  PID:5968

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4852

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:756

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 f18d4582e7f6ca8f44a2a667ccafb418cfefe1c7da0b43ca09ae98b37bb1a99f
MD5 eb23f21d7ad8de61285e5e765cc7c9fd
SHA1 1aa16a0523379e438346430d7cdee1d0e4a2d916
SHA512 760b77c748be69b15239ae89ad9c39a11cf6c164141150c56fbc2383850c846cfef844a29c7a92e56df3be859596d426d339b0c95e017b7e63565c5b3ca812f9
TLSH
T1E5E0E5EAC961AC2728FD176870944A45E64403962B40898F3A3D9208CFB873A058281C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 264B
SHA256 1c68a7074b55e9e3627455c5960bb66f07ba0f5d3b887739cc38df11f0a86a18
MD5 1dede06834dfce3d84359c131a946b84
SHA1 588ddbd770fc42215234b4b0b1a5484a79b7cd45
SHA512 66addbb9d68a3d5db672993284c27710b3332baca8e20eeeed7efb8d7e6837c09b0e95ae65d8e3181c1d7ef0b8f790a4eeedd777c02415ffc1120c2f1ee29cc0
TLSH
T167D0C96D13C17873E7D52E7BE110C6A982154E7926761B5362D0625B5D220D5240509C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 4ef952a68e4f11d7d3bfec47fa3a199689b6709b9feb7b42968061b4c153ee59
MD5 e83989874994d8589db5b93898e095ce
SHA1 68a7841605336341dc7aea761973bd07fba987f5
SHA512 b323165f99c2cb1e2615aedc2961b9fba5c58c3b7b3988d8ffe6af222bff4027fc1d13c374b0548c57f79b2d9b675aeae5bd80b849151caf4493109d7df5e4fa
TLSH
T167818BB383E8CA6D841156E49A256E2FDD6D0E25131C3C5288D8EF4F43F2973D21178E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 99dd7c652bf7fe19119250a3bfc8c7a0d6a8a4abf06ccf6401c2e1b6663fb48e
MD5 b0849d5dc5396d20fe450022ff498bb2
SHA1 1eb9a5c207c06198b0bca35a8144f01f143ecfaf
SHA512 632c1594922f32f2ff63b71c78e0a9a9d4a9f9f53f226a8162c037077150eb2f7f6ebf1746d5fd4571e985ac9af11aed59e36dbc81b24f7e1b94aa227bea5ac8
TLSH
T1A3519DF3D3E4897DC51152E4AA146E2FDE7D0A24131C3C6289D9AF0B53F2872D20178E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 691B
SHA256 afa2fd572f28a68e12a5c52fa570ff8ada774f1b2199f328e5af629cc3e33199
MD5 6730c8eb599a1ee8083c5bfa3203351c
SHA1 eb842db505f8f403c6812ced24d3b1821cfe2002
SHA512 8c9935de888910265b7c627eaf95d5a90da9bcb60a92e21321e310dac76f4c914c76d647ced9f5e21cf7914056d62774f0f7fa51da7b32205f6d87dd8820a4ea
TLSH
T15B0170ABA729785B00FD45F71D0878491576E831124019E5CEA7812CA0C65F71F01053
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 1af1107ea94ec3d2e8ba91906b46e198f8e2ada758f51639f27b0c13fca2013e
MD5 aef9221580fd0abd0a9da6da8d967ac3
SHA1 3300bb9fbd46ae7ffb8b53adce7a5cfd96d95753
SHA512 8de757a94cfe39c2527162c6b1c396a800049c5a7d2d413db5965c562f0d1169212801dd51ce51ac754fca51db9ad5e7d028a465a0896d06a54a12ebf3886c11
SSDEEP 192:VRb9q/d1Y8v7tYpAPRp2hm9CHsb+WNnU70cgPa88bYFVyIsnAUgraJ:VRb9HohYUXem4wg0Ta2ze
TLSH
T1E542D72EA914793B9DCBC219FE61B767D7F1102121982E94E7FC8A2C15E79CD221701F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 1dc58dd340d2cf9c0325ea39067ec3c0800ce321dca4d1e4e9096b36d777c13c
MD5 0ea3ac504a68f9cc97f72c8427e43e96
SHA1 779ef533f98696bdc0a13e2d1944b3c1d5645a8e
SHA512 ed87db323dbd76ae967e665b4cff3b9aba014419b6fa6891a2c3d63463b100252a052f4ebd44342b27320655683528a50f1d18ffe6b478e872f29fd8a8f0cb63
SSDEEP 192:VR19q/d1YPv7tYIcjPRpvhm9CHsb+WNn30higPa88b6FVyIsnAUgraJ:VR19HHhYIwX5m4wEhxaQze
TLSH
T14F52D72EA914793B9DCAC219FD61BB67DBF1102121942E84E7FC8A2C19E79CD221705F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 492764fd967532df797f9f1027af81bebf5377e714939f55657e45082486001b
MD5 85e619e07c28f1fe45420bce731199b1
SHA1 0e70f088861ca43d42dc81803478620060a856aa
SHA512 57ff3c225c995ba1ce33cf245ad1981984b5211018c1662aef9a242b998e786ebedc99197c8b3bafd609cd39e40030ded83c7a267663b7fe24a0a9f3279f11d0
SSDEEP 192:VRb9q/d1YPv7tYhjPRpvhm9CHsb+WNn29tXgPa88b6FVyIsnAUgraJ:VRb9HHhY5X5m4wstUaQze
TLSH
T18852D72EA914393B9DCBC219FD61BB67D7F0103121982E84E7FC8A2C19E79CD221705B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 39639f67c93e6f708b763bfd5bfbc0a276398f2e1c95cfef758fc805d2498cd0
MD5 000540b02d929e7c443e13895cdff665
SHA1 1e77a50c02f356e03cf2fec9ba46671211fa6b2b
SHA512 638a02d5b6f946f48d7643de7ea343c2ccc4890b658b0bc789ee6cac1b6038455293af9a6afe503355bdf5db4eef847ca3f6df90b4e4379c911d08dc16227829
SSDEEP 192:VRb9q/d1Y0v7tYpAPRp2hm9CHsb+WNnU708gPa88bvFVyIsnAUgtaJ:VRb9HwhYUXem4wg0za1z8
TLSH
T1BA42D62EA914793B9CCBC219FE61B767D7F5102121982E94E7FC8A2C18E79CD221705F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 84f14a91cec782555e874b9dd4f548776987448cce6e23f99e66d71b15ef934d
MD5 5f41b388e376d3aa7e972051c9c6bb0b
SHA1 b59806f357227f7a6727f7f5d00a00ae82bdafe0
SHA512 e9bbb903007e9310007fa08f94c19b622ea696cd00377f1ce118dbe3a93a02b051d2a2c97df57286c42b691e0ebbb19a6dfdfaf877125864e44533a5d913231a
SSDEEP 192:VR19q/d1YPv7tYhjPRpvhm9CHsb+WNn30higPa88b6FVyIsnAUgraJ:VR19HHhY5X5m4wEhxaQze
TLSH
T19E52D72EA914793B9DCAC219FD61BB67DBF1102121942E84E7FC8A2C19E79CD221705F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 e3e85507733b74e650902d1645f4c8e2a47131f5f4d003efbf580d80d51d1e18
MD5 d25832a19ff9c1c57c95ef5ecf3d457d
SHA1 30d5ae73ddd9dfab1127bd841aef79ad540016fb
SHA512 680876039281bd13201af5a0d12b9eed3257e3547eb60a743076a4ef44ddf64d39464fedf9d363ec15f80fae0d8dd3610e3a09d4d4a9512ce92d01878e2ab95f
SSDEEP 384:S0jWV7KxkXqKf/pUZNCgVLH2Hfgslvy7pLuLcifcdXODW1+ErU3IQHGtHkr0:SYWV7KxkXqKf/pUZNCgVLH2Hfgshy7pd
TLSH
T15372D8676C4C99370F94C6CCDC167E4FADB6024B65DD886893FA582A03D5ACF120A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 ca030fb2b738283acba11ab0f4864029b94951ecb993f94dc7ffbcb94484edbf
MD5 75290fc0bbf2d37f516c91041342eac3
SHA1 33406575602b646a7f4f4db96f6abdbc49961e99
SHA512 4489c0d0e40917685b7ff5d98cf609b7833e329575e135315f1a1c09f148fba75aa67b0f8b07a1cfb512d4f3338f6f2d750e49f88373845b48e0850c6fdeb568
TLSH
T160B0121080016502C08303B051D2989831145F21DB05535153E0A9B6E8265A14028150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a553.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58a553.TMP
Size 96B
SHA256 1aca946cc816970ea8cb8bcc84be778df7c5a286d19ea9fe422c6af0f009edff
MD5 2c8b970b64620e21898c3d31a28094e7
SHA1 814cda59dd4090af57d511e9f043711b2b993a31
SHA512 8f9813826145b3fe3870872b6e93941609cbabba70a107c1563a4f2831b95216a9f55eb7f30d04854a8a3a9bf62fc67fbdb276b7093a2bcb72ffaa2a98e3a93a
TLSH
T118B00256C5177363C18203B03799DAD8B1B2EF35D6471612E3E05F67DC256714725160
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 197KB
SHA256 008c33f2e5af1561ce30b0ba4b20d69b1573f1d6ec88ba9569b7f42b1cb19377
MD5 efffaf6d51a34d5959460303f1c51ad2
SHA1 dd557676da71eb015fe1ad9cd305dfe001cb353a
SHA512 e88145ae8c75201db540f1829cdbba0d2582c3e0fae5ca85d21b50676342cb52a75a70d817dac0201fcc80824727e364036402cbf0adbab2593040c5c4b24216
SSDEEP 6144:hENEvPt6K3fnLWxMCJ2irOk0HOGm/SFyEEu:Osb3fnvirOjuGdF2u
TLSH
T11E141255AD2A1EE5607A9A4265BEBD09CF38230CB1EE78D857AC538D75A47CC0F33C12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 198KB
SHA256 c6c6dd6ef77c7ae4e7f2f12eb93c180eb75ab1cd536e053d59a0e0320c489973
MD5 a20f3d96182a21708c1b1234a8ec45cf
SHA1 d5858ff42de3344d5da7d70c2f4f9942d3cfa013
SHA512 b9815b53da74a90695d13610d65521357aa313e93b19f7c997045069c5225e0078e5d0b6e73290d29ee96be2ae6e6dd54c55273cbeb165755a0dea4c523fa20e
SSDEEP 6144:kENEvPt6K3fnLWxMCJ2irOk0HOGm/SFyEEu:bsb3fnvirOjuGdF2u
TLSH
T1931412756D2A1AE1607A6A4171BEBE09CF38234EA1EDB8CC57AC578C75946CC4F33C12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 198KB
SHA256 5f61842299bd0494b50b8de48f50d147505b2d17553833dcad894f0d1dc5a89f
MD5 562582749abbf92044f989d6ce7f7770
SHA1 56e7f91d0bf77b039aa0407ec96063e0cd57e5b8
SHA512 ee5d9ca3f4a842c796c6fa0c2de678a254c861ee52547c1b5623d0e8c2d5379c1449ed7b3ecb6947236b65cbdf9046f22f4436d94729d5dd40ecf673d3402926
SSDEEP 6144:oENEvPt6K3fnLWxMCJ2irOk0HOGm/SFyEEu:vsb3fnvirOjuGdF2u
TLSH
T1091412756D2A1AE1607A6A4171BE7E09CF38234EA1EDB8CC57AC578C75946CC4F33C12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 89ad7c2c1d1bdc804c4f499b058b2da3103da45b88556b1aad909db57cf76c09
MD5 3f14b1c058bbc3701e9a7c09b936d128
SHA1 6ba7cc01c721953b783c5065b338020733a14a44
SHA512 7b811e7d0711297d254b14fde1207cb71869712146ed337f7161021ed92df0569fb54d9a150feb6e30214058fc402090869ffae4a757b968c537826f979bad47
SSDEEP 1536:0NmcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEB:Im3Qw/xLANk0mUW5GmRntSFCjEEN3
TLSH
T15B9312BA4E1A4AEB957E46C176AD7808CE12130D70AFA9CC316C639D61D41C92B73F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 197KB
SHA256 243879153964eb2874c84164d733d5008ac75f3b6c2c5e70a8ee582560a9befa
MD5 4e3d4c5aa9ae163f3fdc4534cdfaefe2
SHA1 125860e91334eb3b5f1865fd1d4b3b32f197c417
SHA512 6d56ad2f6266e6568882c2e55008d3f1666e7c94b343741b352d42e08ff30699f410a6acc719ccc8f881a2d145a9c3004336663881ee217fd576c62e7f99b419
SSDEEP 6144:+ENEvPt6K3fnLWxMCJ2irOk0HOGm/SFyEEu:Fsb3fnvirOjuGdF2u
TLSH
T1CE141255AD2A1EE5607A9A4265BEBD09CF38230CB1EE74D857AC538D75A47CC0F33C12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 fbf1e7b3caf527ebcce5721a4d1774944e8c5d392bf4b1e8d20b2240f8588ae5
MD5 2d85b85070f3eeb5043d0aafb6c5199d
SHA1 99280a2b81f3fc8ecf72739420eb9e96164191da
SHA512 1f523a7629cec7ae1165c2773f419a639d50fdb8fe5576d260c9644a78000d60e246309b43ddf1af75aa607d3e087ca950f89a34d7576d845ee66c049ac5d2b6
SSDEEP 3:MsEllllkEthXllkl2zE5:/M/xT02z
TLSH
T19C44040DFFC10C47CD4510304011C3504370D4100511D743355504137CC75D40C00440
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download