hxxp://elitestripingllc[.]com/

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
user interaction
yes
max time kernel
149s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/05/2026, 04:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://elitestripingllc.com/
Sample260506-ewzvaaev2k

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
4700	chrome.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3804	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134225147031146695"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-914486190-3969805341-592249730-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
5820	chrome.exe
5820	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe
Token: SeShutdownPrivilege	4700	chrome.exe
Token: SeCreatePagefilePrivilege	4700	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe
4700	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 4700 wrote to memory of 4724	4700	chrome.exe	86
PID 4700 wrote to memory of 3612	4700	chrome.exe	87
PID 4700 wrote to memory of 3612	4700	chrome.exe	87
PID 4700 wrote to memory of 3804	4700	chrome.exe	88
PID 4700 wrote to memory of 1744	4700	chrome.exe	89
PID 4700 wrote to memory of 1744	4700	chrome.exe	89
PID 4700 wrote to memory of 760	4700	chrome.exe	91
PID 4700 wrote to memory of 760	4700	chrome.exe	91
PID 4700 wrote to memory of 2504	4700	chrome.exe	90
PID 4700 wrote to memory of 2504	4700	chrome.exe	90
PID 4700 wrote to memory of 2020	4700	chrome.exe	92
PID 4700 wrote to memory of 2020	4700	chrome.exe	92
PID 4700 wrote to memory of 5632	4700	chrome.exe	94
PID 4700 wrote to memory of 5632	4700	chrome.exe	94
PID 4700 wrote to memory of 1880	4700	chrome.exe	95
PID 4700 wrote to memory of 2668	4700	chrome.exe	112
PID 4700 wrote to memory of 5100	4700	chrome.exe	113
PID 4700 wrote to memory of 4176	4700	chrome.exe	114
PID 4700 wrote to memory of 5820	4700	chrome.exe	116

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://elitestripingllc.com/
1⤵
- System Network Configuration Discovery: Internet Connection Discovery
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffb16d0c728,0x7ffb16d0c734,0x7ffb16d0c740
  2⤵
  PID:4724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1728,i,2706041214613670592,10051802365663583382,262144 --field-trial-handle=2024,i,15142463057779169563,13943725309472882163,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2020 /prefetch:2
  2⤵
  PID:3612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2148,i,15318713428952851583,5105295231774144040,524288 --field-trial-handle=2024,i,15142463057779169563,13943725309472882163,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2380,i,4814291504476691402,4256216493080623796,524288 --field-trial-handle=2024,i,15142463057779169563,13943725309472882163,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2800 /prefetch:8
  2⤵
  PID:1744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3132,i,9019009010150038094,3775498285657238950,2097152 --field-trial-handle=2024,i,15142463057779169563,13943725309472882163,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3164 /prefetch:1
  2⤵
  PID:2504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3024,i,4586650399574556621,935464506396738402,2097152 --field-trial-handle=2024,i,15142463057779169563,13943725309472882163,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3184 /prefetch:1
  2⤵
  PID:760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4388,i,14097202347189133479,5909947082662636795,2097152 --field-trial-handle=2024,i,15142463057779169563,13943725309472882163,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4108 /prefetch:2
  2⤵
  PID:2020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4688,i,14366167098523473723,12072797876242881189,2097152 --field-trial-handle=2024,i,15142463057779169563,13943725309472882163,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4708 /prefetch:1
  2⤵
  PID:5632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5340,i,12234699625801282174,16601669670970153785,524288 --field-trial-handle=2024,i,15142463057779169563,13943725309472882163,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5344 /prefetch:8
  2⤵
  PID:1880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5344,i,9915342062814889174,11891610876652717975,524288 --field-trial-handle=2024,i,15142463057779169563,13943725309472882163,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5700 /prefetch:8
  2⤵
  PID:2668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5644,i,14975446221885079211,6672967218811836581,524288 --field-trial-handle=2024,i,15142463057779169563,13943725309472882163,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5380 /prefetch:8
  2⤵
  PID:5100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5412,i,10196441743163898766,11914817330338656176,524288 --field-trial-handle=2024,i,15142463057779169563,13943725309472882163,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5396 /prefetch:8
  2⤵
  PID:4176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4400,i,9368607468713969929,945210596693823357,262144 --field-trial-handle=2024,i,15142463057779169563,13943725309472882163,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5652 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5820

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1804

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2012

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 3203bd40eba54faf51d774e308114a958783eff4ba1c26d10697dad93158ca8e
MD5 bed226ccd761678827aee0a1a3ede1d6
SHA1 1cf52b826e1f82480f8d8cc6746ba1e4036a23d8
SHA512 7294ff190ea3eabadc5b8f4480b5f24193611f62afec5396a013fe41d43f0ac20ecdb6c40a81631550215969f6205c694eaf0ade191b74c15db028716c141df1
TLSH
T13AE022ABD862EC2B08FA1B287414474AEF1013172B41990B7B3C870C8FF123B898695C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 360B
SHA256 195d2bdc35a530921aac8be2df953921e9951abc1675927d06fcacbcb305c222
MD5 deb6069682b6606fbc41608a5f3fa37a
SHA1 53457a1d461be41f17fa45903c01b197417db427
SHA512 75a0a784130205bbc9dbf9d0c4511a937cfb45ff0dbb1c0b6833a1ac535432b49bbf4771c42144949e8b2e7c88c516de8d6fef260c56e43227220c926c784936
TLSH
T1BEE05BC1E5D03406DFA04F7769E57F50401CD7750439531F965F71B49A231DE5A4E82A
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 765e3bd17b59c004e671d395890f69e17a41474e78baa1f2e9e374b4e694b0b1
MD5 4ff556e15b388a82b3833fefaa72f44e
SHA1 5f5edd43b46f86c35a7cbe092142aaff99a37ed9
SHA512 d553c46f58afad1db59e2668f9073a49b74f2ba529a78f7200dca55416c8d240c6edeeabfddfe2d94ac78132d64ef8ddd2e333d63816d365cf73cca44574fc7e
TLSH
T1D851AFF783E496BDC51192F4EA146F2FCE690924131C3C66C9D4AE1B53F2972D24038E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 520fda89caa10cd0434656d736e3fc40fa8a824197b301680605abebd0f601af
MD5 5c5e8f646e3296ee5e1689b41ce35ef2
SHA1 97a2740c31ea58b68c420245938dd73afd07ee81
SHA512 e210e2043702e849ac01ebc355fbd104c1794bd9ba6678cd1a5db0b8eb63a6d1a3b8af9a4357d23a471d9c32d6eb90ee016327d85030f52b4209116909dc3880
TLSH
T14451AEB3C3E89A7D890196E4AB257F2FCD690A14631C3D5AC8D49F0F53E19BBD20064E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 840b38439a620bbd524b99c4ab34b3dadce28cfe4964e340a76d74b26c868f2d
MD5 ce745b8b6ef06b30b46b0d0a3f8cd7f8
SHA1 f39bd9f709d690c2c1c9010af030a1791e5f5f91
SHA512 15a279d0279b5e10ea73286350b8df6cd7615eef37ebec428eadcfdec3f309301bc512a86e2f970bf60b7695e35e3cc98e1ed8f53ed747ebf03761827ef86d86
SSDEEP 192:KR0KsJ1LaKR1Bv7japAPRp2L/9mHsb+WNnftgFD2UFfckkwpvzVyIsnAUge:KR0Ks//jaUX+Iw1K2kfbdVe
TLSH
T11B42D63EA914657F5CCBD21AF9617B57DBF5102165901E84EAFC8B2C10E79CD212701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 89cb9468f4724e93c9d9d037fa848d940880e032cb44d7e5be6e060dbac47677
MD5 554973dfe3a07216f186a7f09f489141
SHA1 0c7cc789689f54bf034c8ce4f3d03106e0d1cad4
SHA512 0b6d6f831c97c9c9e864e99295bf7f9b962a36e7afe2909c24b19d0e3f5668f026cf22934b50bd952b93928275d715b5aab71a89f8571e953f977d21815ba02c
SSDEEP 192:KR0KsJ1LaKR1/v7japAPRp2L/9mHsb+WNnftgFD2zFfckkwpczVyIsnAUgE:KR0Ks//haUX+Iw1K2xfbSVE
TLSH
T15E42E73AB914657F5CCBD21AF9617B57DBF5102265801E84EAFC8F2C10E7ACD2227017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 56a1e8c00cba78461b814b7af7b99a3de58a4329a7a44475b23e4150677716ca
MD5 6932e737f9fb5bb798f741f34796b7e1
SHA1 58bd5e6597f4a5801de9e176eca39fb244cddab8
SHA512 6e0d027f757f85c0e73419b5d0cc63c8778e317595fc91efbb163ddebee9c4ad7ab8467ebddc43b66b02293c61347fd81b0b3e241e6794b5bc99b05d775c9885
SSDEEP 384:y4jGR7KxkXqKf/pUZNCgVLH2Hfgslyi7pLuLcifIpXODGJ+ErU3DcHG8akl78fPY:yMGR7KxkXqKf/pUZNCgVLH2Hfgswi7pz
TLSH
T1FC720AA76C4C997B0F94CACCC8177F4FADB5015B65E9886493FB582603D8BCB11091EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 c94f96187d841fbc2c2b9b602e1e94e37af3bdffe26bca087686859e4a1fd47b
MD5 d6e286f65b5fd306aa1ba2cc05cfe531
SHA1 9dcb7b232589daa4c99d81aded782eb4a8617d03
SHA512 9ab327465cb92938d97fdeb9626ffec8f2272431b736c636fe0a3d0db12f2e7d46eae3993a7fca675ea55aa9aac4603ce360b0cf34218064a5347a9e0addf4f1
TLSH
T1D3B0129084025501C00302F4118308CC3114EF10870D170563E47A71DC2B1A08036260
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588b72.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe588b72.TMP
Size 96B
SHA256 72c917ac555db939760a7d2edb4709ff15dd9f31d672041a507046e45ce69e19
MD5 d67b88e859976ce1f9bb32199657b95a
SHA1 804de54ff91d3a31e9d47de216c8d09ea5ad50e5
SHA512 4b8e1d173ccfcc2d2ab96149584033def4634b6e7399732cef22e65f00124c48fc27410b35c9501d2b3a2328429bb95db248197347d982a925cea0065f474805
TLSH
T110B02280C2023302C00A03B03888E8E83230CF28C203220382FC2B23CC38228002AF28
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 d2341467c80e64586c20edf69130c50ab70efe7d62f6027a483d529cea6163f3
MD5 8c35f1f1b23482406e5fafbcf64a98d0
SHA1 9aef1c889e42f80ae35d766add9d8f210e2525ed
SHA512 b9b7b28bac4922699ca5fd5c88613414cc1eedb6e43ad43c4c4aefa49703e92e0cb6d90e17076488e5e2ec761f93bbe151489f75acd407d30c26b8338f84db78
SSDEEP 1536:0SC7qcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9e:043Qw/xLANk0mUW5GmRntSFCjEENW
TLSH
T1789312BA9E1B46E799BE069172AE7809CE13130D709FA9CC725C539C21D41C92B73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 a16fed0fee02325a024ddb8ff43448fb706672c4ab6d4a1b5a3daac4f1a4dcaa
MD5 856115b804deb7a8d80e0bbc9c333d04
SHA1 7ad037f1aca0417c59592d78d8d8ba9a0f4fa879
SHA512 1b09da3253662324c17dfea4aa64205008c78f6d271ceb48c3c37332d23d6c6da5316d7cf5d5d65d5c380e140ec2c4d117c86d8383d250e62da117318155de42
SSDEEP 1536:0cCQcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9Yj:0s3Qw/xLANk0mUW5GmRntSFCjEENW
TLSH
T1479302BA9E2646EB957E468176AE780CCE13530D709FA9CC315C639C21D42C92B72F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 c315819f91f092d48c85905994367991343cd95c4556430b92a292fa4e41fa28
MD5 ed53ac6c2e592afe0fd58ee5840838f3
SHA1 f8b52f54eeb974fe3856c96b9e349216ee9944c2
SHA512 ef2f55a347e966ce3283d2404b46a65bea96dd4c0b97d3a2eb8c711b0b6ae1e709bbab114d49bf67ac4e50a790a7a08af37b7e75f36ada2a86323cd3c2c706f6
SSDEEP 1536:07C7qcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9e:0v3Qw/xLANk0mUW5GmRntSFCjEENW
TLSH
T1059312BA9E1B46E795BE4691729E7809CE13130D709FA9CC726C539C21C41C92B73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 113KB
SHA256 4034269d3d74efd74b11a560a81bb9d68c731ddbc5892122d1ee4254d3c46d38
MD5 0900615606f4b49f41f4e2edd5a57e9f
SHA1 45acce5c049ce6d4fbe2f86fc85dbe9f964785e7
SHA512 db4ed752e0cec1f1f30eb3e9b1266380e0eb35549b8915192e1008014f7a59fb42746abf8efe352adb0478bd445da2ec38c8d2e04d4838b18aa01af71c35ab79
SSDEEP 3072:0HkJ6ih3Qw/xLANk0mUW5GmRntSFCjEENW:0Hs6crOk0HOGm/SFyEE4
TLSH
T1EDB312F59A235DEA49BA1B95F05A7D09CE13430EB16FAC8C7168A38D25C51CD2B13F23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download