hxxps://download[.]cyberlearn[.]academy/download/download?url=hxxps://files-ld[.]s3[.]us-east-2[.]amazonaws[.]com/f2d0c66b801244c059f636d08a474079[.]zip

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/05/2026, 15:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://download.cyberlearn.academy/download/download?url=https://files-ld.s3.us-east-2.amazonaws.com/f2d0c66b801244c059f636d08a474079.zip
Sample260503-srbhsab18v

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6016	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134222952847601425"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-643422742-1162610606-620613169-1000_Classes\Local Settings	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4928	chrome.exe
4928	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe
Token: SeShutdownPrivilege	4768	chrome.exe
Token: SeCreatePagefilePrivilege	4768	chrome.exe

Suspicious use of FindShellTrayWindow 41 IoCs

pid	Process
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe
4768	chrome.exe

Suspicious use of WriteProcessMemory 20 IoCs

description	pid	Process	procid_target
PID 4768 wrote to memory of 4740	4768	chrome.exe	85
PID 4768 wrote to memory of 5852	4768	chrome.exe	86
PID 4768 wrote to memory of 5852	4768	chrome.exe	86
PID 4768 wrote to memory of 6016	4768	chrome.exe	87
PID 4768 wrote to memory of 3972	4768	chrome.exe	88
PID 4768 wrote to memory of 3972	4768	chrome.exe	88
PID 4768 wrote to memory of 2216	4768	chrome.exe	90
PID 4768 wrote to memory of 2216	4768	chrome.exe	90
PID 4768 wrote to memory of 1708	4768	chrome.exe	91
PID 4768 wrote to memory of 1708	4768	chrome.exe	91
PID 4768 wrote to memory of 6124	4768	chrome.exe	92
PID 4768 wrote to memory of 6124	4768	chrome.exe	92
PID 4768 wrote to memory of 3916	4768	chrome.exe	93
PID 4768 wrote to memory of 4600	4768	chrome.exe	100
PID 4768 wrote to memory of 4600	4768	chrome.exe	100
PID 4768 wrote to memory of 3036	4768	chrome.exe	101
PID 4768 wrote to memory of 5312	4768	chrome.exe	107
PID 4768 wrote to memory of 5360	4768	chrome.exe	108
PID 4768 wrote to memory of 1476	4768	chrome.exe	109
PID 4768 wrote to memory of 4928	4768	chrome.exe	111

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://download.cyberlearn.academy/download/download?url=https://files-ld.s3.us-east-2.amazonaws.com/f2d0c66b801244c059f636d08a474079.zip
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffdd572c728,0x7ffdd572c734,0x7ffdd572c740
  2⤵
  PID:4740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1664,i,8626388252987632740,6500224520910101525,262144 --field-trial-handle=1956,i,16831729626103052311,14916187541185396559,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1952 /prefetch:2
  2⤵
  PID:5852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1576,i,3612469868245660518,12024806984401209867,524288 --field-trial-handle=1956,i,16831729626103052311,14916187541185396559,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - System Time Discovery
  PID:6016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2380,i,2263224930561464735,11668548088627461589,524288 --field-trial-handle=1956,i,16831729626103052311,14916187541185396559,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2416 /prefetch:8
  2⤵
  PID:3972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3196,i,6395791250024754441,6920385202155195134,2097152 --field-trial-handle=1956,i,16831729626103052311,14916187541185396559,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:2216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3200,i,9385388522212357087,15707297381230664862,2097152 --field-trial-handle=1956,i,16831729626103052311,14916187541185396559,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:1708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4420,i,11491078310000705795,1365105524595206162,2097152 --field-trial-handle=1956,i,16831729626103052311,14916187541185396559,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4428 /prefetch:2
  2⤵
  PID:6124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5320,i,17401650714574290547,17088448827800842784,524288 --field-trial-handle=1956,i,16831729626103052311,14916187541185396559,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5328 /prefetch:8
  2⤵
  PID:3916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5680,i,11171844700138266606,5901694585664310188,2097152 --field-trial-handle=1956,i,16831729626103052311,14916187541185396559,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5604 /prefetch:1
  2⤵
  PID:4600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3284,i,13534025606706330177,13602221074102346606,524288 --field-trial-handle=1956,i,16831729626103052311,14916187541185396559,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5568 /prefetch:8
  2⤵
  PID:3036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6112,i,4818342107434024734,6224439473889502585,524288 --field-trial-handle=1956,i,16831729626103052311,14916187541185396559,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:5312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5376,i,17535484208720166828,502072844872327623,524288 --field-trial-handle=1956,i,16831729626103052311,14916187541185396559,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=208 /prefetch:8
  2⤵
  PID:5360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5992,i,4023194178924229609,13834577209513836914,524288 --field-trial-handle=1956,i,16831729626103052311,14916187541185396559,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6104 /prefetch:8
  2⤵
  PID:1476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6044,i,869435196777858110,2916318770357204589,262144 --field-trial-handle=1956,i,16831729626103052311,14916187541185396559,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4928

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1656

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2144

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2832

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 eddf0c898629ff42b3bbc6f4cf76429fb57b67d59595d741adc265dace62b312
MD5 ecdbc1afa6417579ac27fa2c4cfd3a7f
SHA1 ec2283966a4c593a74d940186a03fcd51e29499a
SHA512 5c49bf0dc5da11edb605f88d7cc549daf7e8243256c5dcc6b9a883aa1c849de3f6c93598b934a3ba4206b749145e9ba8d35d4acffc3ec84844b343e48eb6c0a1
TLSH
T1E5E02B9AD821FC3708FD072920510A49F75017572F50490B763D830C8FB093B458685C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 2c66f81f7c9ea72e2c9c6a7a002cc8dd1c28054f21be224d4b623b1df557c189
MD5 db889e0570583b48d24b7d7c7ffc3f5b
SHA1 35fff14194790cd3beadfa9d16ef2fe5d14f5a62
SHA512 970cfc7028345ad285436afd5647976473a4fa3246a4d26b1f595b0d826594d578ce1097ea11fb29c7ba4240040da21d0b6f2dc5983dd7ceac1a957ea604fa47
TLSH
T14B71AEF793F88A6D8A1195F4AA186E2FCE2D0524535C3C66C9D4AF0B93F3971D20074E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 4448f793a1d21c731bf89300b87ac809cd9cf679848a19d289174f662550197a
MD5 abe4c4db32d712c6d4560e01a48689f6
SHA1 5e6f0a64019b70f6a15445e7ed5e84a7365d08f3
SHA512 394c1262a76083561f034d5f81a09c76d4b9363d437adc548788b249fc74073b19bb10840b6bea61676e7eac5b67a7210e21d2fd413c1ffb8ba52fe497978ff1
SSDEEP 192:lRoLPJcnQx/o7v7SpAPRp2ng9QHsb+WNnp+xw78eIWmkwWlhtRtts8yIsnAUge:lRoLRcFDeUX9WwUteDmKrVe
TLSH
T1AB42B56EFD54697B8CCAD229F922775BE7F5102161D01E88E6FC8A2C14E79CD322701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 de4f849d06f5a80d5e1dd447161ade9cb70abfc49ca0748b198832f6ebcd4c56
MD5 55dae339a01639864963488dec26ff92
SHA1 bf8367eae55f80f1e92855236f1dd1ac5fc75d1a
SHA512 34aee08d73e0087e59f5ae9dc1016fe00cfb519c45cfbf07d14c801ff783b0423fdae85c18c4c867a59583622ff0ce1a7030e8b68adfd54e321c9a14c0307da1
SSDEEP 192:lRofPJcnQx/ocv7SpAPRp2nN9QHsb+WNnp+xhp2NWmkwWlhtRttsVyIsnAUge:lRofRcFIeUXwWwUB20mKrSe
TLSH
T14942B62AFD54697B8CCAD229F922775BE7F5102161D41E88E6FC8A2C14E79CD322701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 b6664493cc7f354e0d0f13cf223dbfd0ee087fdfcfd4eb7b90ba4c92fef1899c
MD5 1a74105b5ba9c7d42f2e74a8af064544
SHA1 309b81e1248b2f6bc6b270d22023b2cb03179cbf
SHA512 af2c099c13f5b6f2b3d6a6520cd29bac397b634a39d7e458b68e4a7b218ff919c96de2cc9cb5a51ba5fff2451e877694ff86832421798ff9ba3d0174c5588b56
SSDEEP 384:Qyjk37KxkXqKf/pUZNCgVLH2HfgslKD7pLuLcifSzXODk7+ErU3fFHGx3Od:QSk37KxkXqKf/pUZNCgVLH2Hfgs0D7pk
TLSH
T11F72F9A7784C9A770F94CACCDC167E4FADB5024B65E9886483FA982503D5BCF110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 120B
SHA256 10e4aad8a87e54baa1ba3c83b9d3a84fd09a991187277bed8b44d12127083db0
MD5 e9a869f07bae24e615e8c3c7fb6516b2
SHA1 5a8929e8498f3ca22353682fe2c4b69fa209aef4
SHA512 dfda93d3679813572fc3c4004083d134164cae32d15c37f9104e56c4c15a1cbe2e839379980625bf1efc14cafd3b5cf0ecc096ceb8a49b35ecf6fa7de06ea069
TLSH
T1B1B0125084435682C00307F412D3048831189F10C7061302A3F0A971AA266904114350
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5855fb.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5855fb.TMP
Size 96B
SHA256 accfa7111b168dcb5da22fa13569cf0c6313b19933b71db985a4eacf8f5421ff
MD5 7199e6ed04bb72ea61801253af528a6a
SHA1 39962b772b75247d79d2381a6a8f948428a449cb
SHA512 e49f27425c4b88e85665a57ef278769ec3c19a3761352c5a658a74301522644df067932fbc42b22b1ad08a4b11e93b3ad8ad576efc3d1e80c2994d4b61931bca
TLSH
T13FB02200C0223203C00303F02AC88AC830A2CF30C2030283EAE00B32CC32A2000220A0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 495f6f0a68b568c2fd8d270c19bcb5bb547c5e769d43b1d9dfdc4a3ee9046b60
MD5 41a37e8da724d17ea60507dad1094acd
SHA1 4445acfc017d6683b859140391966cb7f8ebe894
SHA512 733288775588544bb2c80b7e76d9afe118175134ae2816f0c6671e342da5c3dc4d7351840e75d5afd0c1abb991c023cbc54fbf72da0d6cb3f1d35c9233b12dcd
SSDEEP 1536:s3jJrhcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jRh:SNh3Qw/xLANk0mUW5GmRntSFCjEEND
TLSH
T1CD9312BA5E2646E7957D4AC176AE7808CE12130D70AFA9CC326C638C61D01CD2B63E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 229ed23fe5730d2cb7c55ae3d61b1d73d2af3075be37dee84c5feabae37d07fb
MD5 507bc7826f9bf6d71e7848d062b5ae02
SHA1 eaa557cbab0d44fbcd3d056d9b1f761eb26b3b4d
SHA512 df26d7b84d9f4624c167df42e62fb977daaf1cfd8acc603d16519465f83d6603fe8cbdbe134f9143a05c797ea4f8ad26c0d68c33f0218b0b734737fe7fdc31df
SSDEEP 1536:13/KcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YO:di3Qw/xLANk0mUW5GmRntSFCjEEND
TLSH
T1F89312BA9E1646F795BA46D1725E7809CE12230E319FA8CC72AC538C61C41CD2B63F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 bf87f5850c4a4317cb49059b8a1eab3b150ca46b6c1555b6a0988eef5aecf68e
MD5 e84ccc6a25a780fa498b1f10ffa177da
SHA1 f70c01c5c23ce43006132dfdfbecf4830a314177
SHA512 ebfee710f49f7e81ca99c7e5f829e5c08617b9a41002471b82817ab25a100b0580cfbba3f0c3e655914409c820ab7cc332bf1ecf89e8fbaf3578b9a2d716d294
SSDEEP 1536:13/WcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YO:du3Qw/xLANk0mUW5GmRntSFCjEEND
TLSH
T1AE9312BA9E1646F795BA46D1725E780ACE12230E319FA9CC72AC534C61C41CD2B63F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 e770ff5ecfca1c2747b86ae135ea175de96e84e3b591b4deca3ef6e99671b32d
MD5 e6141fb24794d752dd7118e89e41023c
SHA1 0d726ed978a4be247d87b230410cd55fbf5c69a1
SHA512 6de43c7ad667d7da631034b3bee4d9fdb259b6fd371dfca560d623773d7151428449462c3b9a18f03ba5eb6825f56b544894b805df43393e002c0bd6ad8a2f61
SSDEEP 1536:13/oFcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR97:dQF3Qw/xLANk0mUW5GmRntSFCjEEND
TLSH
T1DC9312BA9E1615F785BE5A81765E7809CE12130E719FA8CC716C534C60D41CD3B63E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

memory/1656-13-0x000001BF28120000-0x000001BF281C9000-memory.dmp

Download