4faf518d1bf0c5e22cfc3bdfb96c170192255cafb115f4847516c333c2c2af50

Analysis

user interaction
yes
max time kernel
900s
max time network
900s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
03/05/2026, 03:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jre-8u491-windows-x64.exe
Size 69.0MB
Sample260503-d7xcvsbs5s
SHA256 4faf518d1bf0c5e22cfc3bdfb96c170192255cafb115f4847516c333c2c2af50
MD5 c127d266f40807796f06bbbc114ae24b
SHA1 64df0d6797f85213b4a84ef43997efa1c6957bf3
SHA512 93b9a56bad4c4f9e37776559acdc5772e8db7e359b0c5a4b2c30056dbcb7202c1dfae7e136bc67662dae1e3df01ced959cd5ffc9735598d13a756d10f79d9ae0
SSDEEP 1572864:dkL4pUAFcwIqC/VS1E+ADQeRFI5AnfaO1M0NRNQ:8fwa/Vp+eQWmAfP1Jz+
TLSH
T144F73307A7A541B8E0FBD278CC678506E6B1BC4A4371958F339D65962F733A08F3AB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Executes dropped EXE 1 IoCs

pid	Process
1744	jre-8u491-windows-x64.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2840	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134222532234248615"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3724	chrome.exe
3724	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe
Token: SeShutdownPrivilege	3324	chrome.exe
Token: SeCreatePagefilePrivilege	3324	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe
3324	chrome.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1744	jre-8u491-windows-x64.exe
1744	jre-8u491-windows-x64.exe

Suspicious use of WriteProcessMemory 22 IoCs

description	pid	Process	procid_target
PID 3852 wrote to memory of 1744	3852	jre-8u491-windows-x64.exe	79
PID 3324 wrote to memory of 1720	3324	chrome.exe	81
PID 3324 wrote to memory of 1332	3324	chrome.exe	82
PID 3324 wrote to memory of 1332	3324	chrome.exe	82
PID 3324 wrote to memory of 2840	3324	chrome.exe	83
PID 3324 wrote to memory of 1708	3324	chrome.exe	84
PID 3324 wrote to memory of 1708	3324	chrome.exe	84
PID 3324 wrote to memory of 4392	3324	chrome.exe	85
PID 3324 wrote to memory of 4392	3324	chrome.exe	85
PID 3324 wrote to memory of 992	3324	chrome.exe	86
PID 3324 wrote to memory of 992	3324	chrome.exe	86
PID 3324 wrote to memory of 4436	3324	chrome.exe	87
PID 3324 wrote to memory of 4436	3324	chrome.exe	87
PID 3324 wrote to memory of 1600	3324	chrome.exe	90
PID 3324 wrote to memory of 1600	3324	chrome.exe	90
PID 3324 wrote to memory of 3968	3324	chrome.exe	91
PID 3324 wrote to memory of 4480	3324	chrome.exe	93
PID 3324 wrote to memory of 3400	3324	chrome.exe	94
PID 3324 wrote to memory of 4368	3324	chrome.exe	95
PID 3324 wrote to memory of 3724	3324	chrome.exe	96
PID 3324 wrote to memory of 2032	3324	chrome.exe	97
PID 3324 wrote to memory of 2032	3324	chrome.exe	97

C:\Users\Admin\AppData\Local\Temp\jre-8u491-windows-x64.exe
"C:\Users\Admin\AppData\Local\Temp\jre-8u491-windows-x64.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3852
- C:\Users\Admin\AppData\Local\Temp\jds240659843.tmp\jre-8u491-windows-x64.exe
  "C:\Users\Admin\AppData\Local\Temp\jds240659843.tmp\jre-8u491-windows-x64.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:1744

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff57a6c728,0x7fff57a6c734,0x7fff57a6c740
  2⤵
  PID:1720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1692,i,15656884245903736695,15043110602182994530,262144 --field-trial-handle=1976,i,17231459734251812843,13984685483253018720,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1972 /prefetch:2
  2⤵
  PID:1332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2260,i,16113177541253334547,11177577748975349307,524288 --field-trial-handle=1976,i,17231459734251812843,13984685483253018720,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2284 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2404,i,1122879749505649901,11668911715766420294,524288 --field-trial-handle=1976,i,17231459734251812843,13984685483253018720,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2516 /prefetch:13
  2⤵
  PID:1708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3268,i,8620938584047218006,15236345772465760083,2097152 --field-trial-handle=1976,i,17231459734251812843,13984685483253018720,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:4392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3308,i,463426043192468966,16519969907310283863,2097152 --field-trial-handle=1976,i,17231459734251812843,13984685483253018720,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3332 /prefetch:1
  2⤵
  PID:992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4224,i,16140160401657787270,6929859993079271541,2097152 --field-trial-handle=1976,i,17231459734251812843,13984685483253018720,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4244 /prefetch:9
  2⤵
  PID:4436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4664,i,3520331017573222585,389003332478400590,2097152 --field-trial-handle=1976,i,17231459734251812843,13984685483253018720,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4680 /prefetch:1
  2⤵
  PID:1600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5428,i,18019575865037560862,13888659745505057894,524288 --field-trial-handle=1976,i,17231459734251812843,13984685483253018720,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5292 /prefetch:14
  2⤵
  PID:3968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5840,i,3402987829017465187,9599387960145892176,524288 --field-trial-handle=1976,i,17231459734251812843,13984685483253018720,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5724 /prefetch:14
  2⤵
  PID:4480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5860,i,8325873042059109707,10597719628876465437,524288 --field-trial-handle=1976,i,17231459734251812843,13984685483253018720,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5896 /prefetch:14
  2⤵
  PID:3400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5876,i,15498263821783077636,6843288365968562048,524288 --field-trial-handle=1976,i,17231459734251812843,13984685483253018720,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5976 /prefetch:14
  2⤵
  PID:4368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5864,i,7773273878358417183,13674259019128085821,262144 --field-trial-handle=1976,i,17231459734251812843,13984685483253018720,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6000 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5672,i,16827597987412820659,16516530406591960400,524288 --field-trial-handle=1976,i,17231459734251812843,13984685483253018720,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1560 /prefetch:14
  2⤵
  PID:2032

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:228

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2380

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 a3db79cc2534870e2afdab2904d9e1f23c2836f1aa3c0d37473db3d0b8af9852
MD5 3b78860881553023aabe02243ecc4a03
SHA1 926c3d1c9a6c46c557e41f6e70403735b3c2c2e3
SHA512 3cda83f5c3e34bc78d73684cede1eb76f4f2c431e9d17f8fa64f52a3a584ce537d27f1aa295212d298e9d4c3e0b6b978a03091040bb0514abe591db364047208
TLSH
T1FBE02BD9E921DC2B08FD47A971540B46F721139B2740494F3B7C810C8FB0A3B4A8986C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 a732e21bdd47c3f6f82fba636f24e8eacf7947ab12afc44471a374f0cd7aea57
MD5 8b4b9a3657623b0fd9eb20c7ced41c6e
SHA1 5d8ee6f31271af723ebdcb698b79425323fb31eb
SHA512 a190708acba32b78f33c8462158d53ac48cbc0af304f6f4e1028eda796d09da3a153be6ff5ffc76e5c2ac65c92c46294ab99daa8e41f137e98f071b44a57e940
TLSH
T13A618CF793E49A7D851196E4DA246E2FDE6D0A25131C3C62C9D4AF0B53F2972D20038E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 4ed62375a3a41562afb1fcf181246f2022356f9b240596755aa0dafcb17d3b12
MD5 424304bc90d5be71aeb82d4c8785f50d
SHA1 411d467acb88bd6c2f7ec000690e4ddc5b9cde94
SHA512 e359345d72ac2dc3b5bca27825f55f8e0b00ee89115f28eec5ba65e496113e8e280e3861e0daeca3abde92214f34ed9e1c5077e5e276bdd75d2fb49111e7d7ef
TLSH
T196617EB793E49ABDC511A6E4DA246E2FDD7D0A25131C7C62C9D4AE0B43F2973D20138E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 8265bb064a711c6c218002f633e836c5967c87a349b094250856dd714a715ff8
MD5 6f8f784a9c35f24e0a044bacc3218a0b
SHA1 5b5451a103c9bfa908976ae05b27318315047b31
SHA512 c205cb02bb06184c20579a03becce2f058c6657839adae479affad5fbc4e5fe388d77510cc7b62db1210aac04f440b20009dbe1bf55d45af242b49032e39cc58
TLSH
T1D0717AB793E49ABD851162E4DA246E2EDD6D0A25132C7C62C9D4AF0B43F2973D20038E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 46b8238740e29c8f57dc9d0a61be4807fe9e38634e9b16201162c244f999718f
MD5 9f76b489859239964c3c989f2ee97390
SHA1 855b3b5c90f2567f8b21aaa5f917c8867be57f24
SHA512 39a234a93fc63515e5236db094a9cd4fa7c0fa57b9d57f3468f9a30d35cc5b6d0a63eaadc554a952ba4ae7f752cd82a374278f548397571af9a38adb02692069
TLSH
T18A719DF793E49ABDC511A6E4DA246E2FDD7D0925132C7C6289D4AE0B43F2973D20038E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 f5ed40028b52f0f951663b38605aad674aa80fdedf096e6afff948fbd6cbaab5
MD5 96bc1f978ec69d47d8f870e973b3295f
SHA1 2c7843e4740827bf6c5c5106237ee8ebb7ef5ded
SHA512 8b519973f37635d65d1eaf9ab6efcf79ee2d9be4013569ba07ca6af0d1b9f3b62b73edf1fb18899f7c6dfdbcb4098370a37ee1d38cbc31f7b0760eca53fff817
TLSH
T101719EF793E49ABDC511A6E4DA246E2FDD7D0925132C7C6289D4AE0B43F2973D20038E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 916a5c20d07f63c4545eca7e990f0c5e98a401771642b7be7f4082ad4703c67f
MD5 ecb1148d027e1df8189eb88ecf1a26f3
SHA1 0fd28ecafcf1705e2a0a756dcb6a63497659e795
SHA512 b2271a90a604e3f85d5e19ff8e986aac96fc324a8cf6e62fbe1dd3f51ff535e8687e40214cf7e4ec2bacd9164b5db57954b24049aa143960a0973606ae7c41d6
TLSH
T159519DF793E4957D851196F4DA246E2FDE6D0A18131C3C62C9E4AF4B43E2872D20178E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 521B
SHA256 0ac40c257d851a76cd16311aee3b8cf0b41f09f3f68f98534c9f7a0b485a671d
MD5 56a4d4ba21aba38fb6b4873a47800f5c
SHA1 2d9ac58bd9830313463674e965731632725041f7
SHA512 a698314937e9e50a58f1faeffeedac02084c532c36f66995513c9cf4ab85a48c65aca0c2b88be85fc49c50f941629556135f34b030d50854c824e2bba04b1f48
TLSH
T1F8F050EBA7B9B42710BC85BB1D047C0A25B5983109C12CF1CEA7426CA0C56E31B02893
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 5b928076bbde9c68c910dc8937fef03fa7e7f168bf873ea22e5571a9851af350
MD5 585da1471f9211160d6b578bab2d30ff
SHA1 b8d91e9fad300725d5562c7c7304c5ef74cec564
SHA512 d8ae84fefbb4d4e6747b9e073c130c7039a5769f71ddbecfd4c2e0aa1ea14e42628b157818128c44ab73deee202b3df39ed2d693fcd5a067f01e412faea0a933
SSDEEP 192:5Rrdq0+CB/Yv7ApAPRp2w9qHsb+WNnet0bj0VNIkwwaOvfVyIsnAUgtaJ:5RrdZEsUXz4wA00EQaOv58
TLSH
T10342D52EBD18693B5CCAC219FE61B753E7F6102161841E88E7FC8A1C15D7ACD621B02B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 7be93376a38acdaf7fd5217f338014ad42d5df36b8cef45b4b1be5143edc54b6
MD5 47764e1bf5aa021a432c6141c8e8c1a0
SHA1 fd4994dd4b3b72e1be0a04513756eda444e43b0a
SHA512 1fbd6f8d24a377ef15dee786e328a474a82416f089572a0de02ef49b16cd6709d8853483dfa7c2e0f97b28315e62aac64dcc959cb319948e8faec21482e01655
SSDEEP 192:5Rrdq0+CB/rv7ApAPRp2w9qHsb+WNnet0Lj0VNIkwwaOvsVyIsnAUgraJ:5RrdZTsUXz4wA0EEQaOvIe
TLSH
T1F142D52EBD18693B5CCAC219FE61B753E7F6102161841E88E7FC8B1C15E7ACD621B027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 d62dafbe389856c7007cb322c4506982dfcb2d7fec5858d27f6a4f6400c1784f
MD5 3c29c0ef7b4708d364562660a4b0b091
SHA1 2aee7cd51159815dc9aae460e62d0e9f2377838f
SHA512 3fcf4faab12089cc6c04ebfc4aeb604db2f4c7d22e1ce79c552673cc456bdd76beff74401b4e0a1133462d305f37c13f9c40bbea0fea04a753b503be6068a2bb
SSDEEP 192:5RrdU0+CB/rv7ApRPRp5w9qHsb+WNnet0Lj0VNIkwwaOv+VyIsnAUgraJ:5RrdPTsHXC4wA0EEQaOv2e
TLSH
T1A352C62FBD18693B5CCAC219FE51BB57E3F6102161941E88E7FC8A1C15D7ACD621B027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 02fa3748cc960b0ed806669146286ae61d8f8c37c72e1c20fff625c9b568d7c5
MD5 e1d791f76039330e35fa0e1827d639ea
SHA1 a37e7b6749565fdef84e626eb8e8ab5cfd1eaf09
SHA512 4cd2d4ec371de591ed8fc49a3c9c69bf2d80c0d8879044f55af268ee4a35e216538e529304db502c0dc2822c3e20cfadd9949c623d30489800bbc0cdffa3ddcc
SSDEEP 384:2Mjqt7KxkXqKf/pUZNCgVLH2Hfgslo67pLuLcifklXODqt+ErU3sjHG9TDWxSal2:2Aqt7KxkXqKf/pUZNCgVLH2Hfgsq67pU
TLSH
T1B672E8676C0C9D7B0F94C58CD8267E4FADB9024B65ED886483FA582A03D5BDF110A1F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 ded69396ba0875b65277752c498680437651e939a360bf14e69d011cf9f08167
MD5 465cc7e4f812d75fe02e1b785af89d3e
SHA1 da6548fa0f351a5681a68da3ea74c2ed52530ba1
SHA512 b8afa3eb4a19a66431980597375724cf73917b9a044ba3fa129de0e641266ddc8f6a7c697fecca287ecd15ebfb71706018c17b98946ee2dea085e92231e53ccd
TLSH
T1BFB0125080015A22C41303F812D2048831149F158705230173E06D719C371B54014760
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588c8b.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe588c8b.TMP
Size 96B
SHA256 6cf5c771a646580bc3efdc4bbc65251672fa7767960dbe84c75deb6f87c0eb7e
MD5 7177df9705604b4ce7b4311737641a97
SHA1 6043ad75802eddfc2c02988b7f42c8ea4a4a04b4
SHA512 34e36089b7c81b0829c8e3fda8c2e502b23809a0c9ad883fa6b90cf9a12754950421eda67ae2e2571819e0585c549f97835818fe1239928b7fc20aac49459bca
TLSH
T18DB00266D1526213C04303F0299595E87160EF6AC6031316B2E41E6ADD296658A266A0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 198KB
SHA256 73af010af98b7e54e53238f86dcf79647af7ed44fc77ededef0f3fca9ada41a0
MD5 3cbc43488863d304c103fc10ba4b695c
SHA1 6f4edd6c19ceeb0e6a363be91b8c3a116022adc4
SHA512 131eb26b8f263b33fa2712ecbfab824824fa93e6e9814660a4515879c699142e8fcbb2e96e63de346950c4d8c9665ae596afa69b7747d85de593ef23c8544390
SSDEEP 6144:xRxx+5VwBbR6GoUGU6Yq++JjcMW2VcVLb:fS5VyzoUGUOOMW1
TLSH
T15C141272AE1B7E75836FC7B7750B8C548CD388C90600A678529A6F8A0DF47A387535F4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 199KB
SHA256 7db0de97bd7c369261db97b3b93eba725a6602271b31d50f1a422e51851ee5af
MD5 fcbc84324eea528280e98a3f598291e9
SHA1 12fb10fc20228c532e71acebafe88e0de885490e
SHA512 7205769298667847b92d31c4d2f074c8538e8b22a9754ffdabfe70ab743de184ddf8c94732cbdc93e9e717982c78b82a3043a05c2139a5792380420310b3fb8b
SSDEEP 6144:2BRxx+5VwBbR6GoUGU6Yq++JjcMW2VcVLb:4S5VyzoUGUOOMW1
TLSH
T137141373AE1B7EA5836FCAF6750A8C448CD784CB0A00A77C52996F860DB47A787534F4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 199KB
SHA256 5ec5620fe3065f63c0da373a04d6147dd54e7c59d011789ccdc8c76de51eb514
MD5 fa0ddbccc3c49e785bf9622843c23c89
SHA1 9250adada946171429878469654af78213191495
SHA512 8048e040e12199d399c185027e2690abdee00465f4728ff80f1a2a3287758ab4ee3ea8bebeb3e982c6761cbafb134fac10df99bcf0e05344fb7aea59fd9792df
SSDEEP 6144:6BRxx+5VwBbR6GoUGU6Yq++JjcMW2VcVLb:cS5VyzoUGUOOMW1
TLSH
T1BC141273AE1B7EA5436FCAF6750A8C448CD788CB0A00A77C52996F8609B47A387534F4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 198KB
SHA256 3d14f9db642090643f570822c7b0cec33d88dfb1453775048edd6d1946c38d45
MD5 e641e4c6dd80ce5164c64af27e582190
SHA1 f0eca7a6195768f071faa371983a4a9d8991bde2
SHA512 1a23b03791493d3052aab86631ceeb8f147cdc2ca7d1b19bf4668df9ef442cad312fce2577b5643aff6ce9162a7971481c67916d59db6dac32df85fe473c6024
SSDEEP 6144:iRxx+5VwBbR6GoUGU6Yq++JjcMW2VcVLb:0S5VyzoUGUOOMW1
TLSH
T1EF141272AE1B7E75836FC7B7750B8C548CD388C90600A678529A6F8A0DF47A387535F4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 04a3c7463e7688a273817848a58a6252d0e93af609df3275c28101d92e698828
MD5 642c80b4584ccebe149a01fa78614196
SHA1 da314dc7d9a30d4607ccf671adc0fc63e765b48e
SHA512 72e0c6d79e71f531cfb7b933c1713df457d312382245f735fe8b2b6e79e14ac8a2cd3c42490fcf97ae4bd965f90bc8361d7ed7515280f5db43bc333408f788be
SSDEEP 1536:hZbP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:7++J3qUQm08KMWF0bFTcVHr6zT
TLSH
T1519312BA991E7D39636AC296D0079CAC8CD3CCDE1514557C30C7AF1E18BA393A30B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jusched.log

Path C:\Users\Admin\AppData\Local\Temp\jusched.log
Size 166KB
SHA256 3389fcec2beba834fdbfb1f68f8c667d487f64e6ddcd4c7c2a17aa5f83fd3285
MD5 4ccef8a7381c4d71199a3e0a7ca72a65
SHA1 282f6c1daec068c7d3fa2d57b03fbca2f9e676e7
SHA512 d31f5b5ca1a11fd11c0c54973484ccaaa3b04dc45eeec110c31bbcc2fdebb5e1f74e1948019b7fbc6472283d12049c6da26eed31adefd5e672875a0b9b46dbad
SSDEEP 3072:ZUCBhIzwy2ltAwzVx3putHVr2V/WWAOGX/Y/iWwyHpNIh:ZG6y
TLSH
T126F34396C52F62BA34530FD7C3A97AA455A3060B539E092C32CF82CE6545C07DE2F5EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jusched.log

Path C:\Users\Admin\AppData\Local\Temp\jusched.log
Size 163KB
SHA256 3a8674e34a884a9777e9cfe068397eb20f033011c62aa0cead9d451452a58e66
MD5 3fb97ae1add46349f757e22b2d4299e2
SHA1 7793669a6f5a425a2050a1da513a6dacd084c6f3
SHA512 4d1c7cd5ccaad2fd4c5256c7a1af1339f971f416285c47ff150f1fcc65a9c816cadab4e5c2ac7752011bf10cf411b92e34aafb87856df02225bd23a8d615bfae
SSDEEP 3072:ZUCBhIzwy2ltAwzVx3putHVr2V/WWAOGX/Y/iWwyHpQ:ZG6+
TLSH
T1B2F35356C92F62BA34530FD7C3A97AA455A3060B539E092C32CF82CE6545C07DE2F5EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1744-158-0x0000026BD4CB0000-0x0000026BD4CBC000-memory.dmp

Download

memory/1744-157-0x0000026BD44D0000-0x0000026BD454B000-memory.dmp

Download