hxxps://exam[.]net/student?code=3zsnMr

Analysis

user interaction
yes
max time kernel
900s
max time network
901s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/05/2026, 07:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://exam.net/student?code=3zsnMr
Sample260506-hsrahsb13t

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1036	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134225244320982120"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
2368	chrome.exe
2368	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
812	chrome.exe
812	chrome.exe
812	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe
Token: SeShutdownPrivilege	812	chrome.exe
Token: SeCreatePagefilePrivilege	812	chrome.exe

Suspicious use of FindShellTrayWindow 36 IoCs

pid	Process
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe

Suspicious use of SendNotifyMessage 34 IoCs

pid	Process
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe
812	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 812 wrote to memory of 3520	812	chrome.exe	87
PID 812 wrote to memory of 1036	812	chrome.exe	88
PID 812 wrote to memory of 4360	812	chrome.exe	89
PID 812 wrote to memory of 4360	812	chrome.exe	89
PID 812 wrote to memory of 3412	812	chrome.exe	90
PID 812 wrote to memory of 3412	812	chrome.exe	90
PID 812 wrote to memory of 1780	812	chrome.exe	92
PID 812 wrote to memory of 4876	812	chrome.exe	93
PID 812 wrote to memory of 1780	812	chrome.exe	92
PID 812 wrote to memory of 4876	812	chrome.exe	93
PID 812 wrote to memory of 2368	812	chrome.exe	94
PID 812 wrote to memory of 2368	812	chrome.exe	94
PID 812 wrote to memory of 1916	812	chrome.exe	95
PID 812 wrote to memory of 4564	812	chrome.exe	107
PID 812 wrote to memory of 4440	812	chrome.exe	108
PID 812 wrote to memory of 4180	812	chrome.exe	109
PID 812 wrote to memory of 2368	812	chrome.exe	117
PID 812 wrote to memory of 1492	812	chrome.exe	118
PID 812 wrote to memory of 1492	812	chrome.exe	118

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://exam.net/student?code=3zsnMr
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffb212cc728,0x7ffb212cc734,0x7ffb212cc740
  2⤵
  PID:3520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,17014933628947930475,12318859957340661460,524288 --field-trial-handle=2132,i,7254912545821962243,12923032042762603191,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2160 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1668,i,16510361857664646975,17052917463820211503,262144 --field-trial-handle=2132,i,7254912545821962243,12923032042762603191,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2128 /prefetch:2
  2⤵
  PID:4360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,6843436509504193303,16570636053256216009,524288 --field-trial-handle=2132,i,7254912545821962243,12923032042762603191,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2396 /prefetch:8
  2⤵
  PID:3412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3156,i,14953697192500734547,10775469480916074835,2097152 --field-trial-handle=2132,i,7254912545821962243,12923032042762603191,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:1780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3160,i,9510039937155247720,17633302926763022396,2097152 --field-trial-handle=2132,i,7254912545821962243,12923032042762603191,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:4876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4464,i,2942155819086612058,3322382833136313103,2097152 --field-trial-handle=2132,i,7254912545821962243,12923032042762603191,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4472 /prefetch:2
  2⤵
  PID:2368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5584,i,4982008869749319154,12344806284625522757,524288 --field-trial-handle=2132,i,7254912545821962243,12923032042762603191,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5592 /prefetch:8
  2⤵
  PID:1916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6000,i,13959836032200633835,1796070492648601552,524288 --field-trial-handle=2132,i,7254912545821962243,12923032042762603191,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6008 /prefetch:8
  2⤵
  PID:4564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5876,i,6808711097108203055,8668267363330508402,524288 --field-trial-handle=2132,i,7254912545821962243,12923032042762603191,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:4440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5864,i,10662364495089190296,5549903128475975933,524288 --field-trial-handle=2132,i,7254912545821962243,12923032042762603191,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  PID:4180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5872,i,2478210472102167840,7805256337771431162,262144 --field-trial-handle=2132,i,7254912545821962243,12923032042762603191,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6036 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5852,i,7642641162083945769,16952257678869904201,524288 --field-trial-handle=2132,i,7254912545821962243,12923032042762603191,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6100 /prefetch:8
  2⤵
  PID:1492

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3264

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1196

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 768B
SHA256 e6697cc89893ea172f27a1b84a6f272aeaaef9ab4c70abc9d668011d27fe4b81
MD5 5334ae873dad92eab0a4a742cdd8e910
SHA1 bf394d55c263001c70f8c6131f327b9b920d1721
SHA512 435d122c98b215f6e2cd18a03a0f924458a7f1e9f3c6c2ca2afd8af9ea34f67d19620c78f04a7d342fa51483e269b83f1700803e2f3530eabf5b23f33f485621
TLSH
T1D301FF5E47A8781FC758777F08E80317317866F1E2970DCE89AF11F9CC913A9518AC90
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 768B
SHA256 fe7d8fbee56c9f41a613e5692356204fed8f9d93ad50debc1519dc3037125f60
MD5 993cb6002b02c50c107807c97018fe82
SHA1 328dee384726ee1d35aba82e08d06c045a9b3de1
SHA512 4f664b25d4112fdfc798cbecb3c013549dfbf5f1d99e17b2f3a9d72cba93c60275d5f4b73e4fa2a8c59c535434580d798d2cda4b42cef8c489ecaa9268a00a4a
TLSH
T16C01465E87A8781FC749777F04E50317327866F1E2A70DCE85AF11F8CC513A9918AC90
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 4559121dbff7a7e7b7b1528b1521eafc13fab9eafe5f201b5817058582073bc6
MD5 9edd1d05a413af470e6c1c6e80b8a714
SHA1 4ef0c0ab131e907aacacb85489d96212ddb05253
SHA512 55a58eaf422658eedf67fdf7f58fae67bac7190d97ad86997d640a8c82f05ac4f5e5d026d3c4aa477a9d9fd00f10dc5a94b16ca72e130375ecb8dfd6bde43deb
SSDEEP 96:D09yCqCabflaIaEgduP150vgV1WIPzJhj/bltHwei:D09yC9yflaIaEgdgP0vocIPtV/HHfi
TLSH
T1E7B1BFF393E4866DC912E2F5FA146F2BCD290514931C3C5AC9E8AF4F93E2471E24169D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 1667392ffc503c8082126638303c2e6d783d594dd475811643f46bbcc9250d2c
MD5 94ea85b5cde2934d3f0639d1ca07e034
SHA1 6284dfe63ffcd7015a4cb201f8035445417ec57b
SHA512 4e5da7fd478bcfb4f25ecd024e20704960932281b730363e7626a5649dce46c4f26d6ac6a7fe63b1624ae261ce76e4250f7243a3f83ebafe36ee9f8eae5e21db
SSDEEP 96:D09yCqCabflaIaEgduP150vgV1WIPzJObdKH8wuS4i:D09yC9yflaIaEgdgP0vocIPtOJ08rri
TLSH
T1F7B1AEF393E8866D8912E2F5FA146F1BCE290514931C3C5AC9E8AF4F93E2471E24169D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 0d0855699722c5c3c54cdf11d7426a243fb6310005c1ebd6e610d0cd0c5481d0
MD5 abb43ea26166481e05ad6b6a7fef8fcf
SHA1 369e8b1d072ecc0d8a20e28a98fa31be8095c838
SHA512 4e730e97d03d1d74465bc57b5886f0be62b41038aaca61dc60439c4fae70ec5d90e94995cdc5fc293eeb811719abe9173d4ed2eb04bed0eafd96875dcbf7dbfb
SSDEEP 96:D09yCqCabfdLaIaEgduP150vgV1WIPzJObdHwijqSxi:D09yC9yfdLaIaEgdgP0vocIPtOJHf2yi
TLSH
T167B18DF393E4866E8913E2F5FA146F1BCD290514932C3C5AC9E8AF4F93E2471E24169D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 f755930101e6ceeb27318b161cf9d83a63c3e25082f9475ed2331817bad94d0a
MD5 e137bb654a7d17d66d053388e7e415e3
SHA1 94603915efe90f4d456afa68877d9314f1580f20
SHA512 804b019b53a5b1c7fef8891d1e5c806b70df37c87df313b5b7439dd99d1259ad0534942e4bf11e64bd9e3f974cd119d46f909f6c2597926473f353ad58060944
SSDEEP 96:D0GXm6CEwX0aIaEgduP15Nv5iIPsOEKi8wJSEjhqVi:D0GXmNEwX0aIaEgdgPNv5iIPsOE58krT
TLSH
T194A1BEF393A4866ED912E2F4F6146E1BCE280415932C3C66C5E85F1B93E2471E24179D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 01a129b29f7eae81168be427484343085d168adcaae0245e3c160cf95cfecbc6
MD5 1048ca89f2d355423f45e3cb2c30bab1
SHA1 c411043203f8b9a7a8a6aadabe90459338f4dc39
SHA512 657c2b7025b2b3e8f50a6ec5e4f630d727e4e8386783b462517eb79076256f1f0f46f29dd76aa8eb4f43c6ad0e868dacb110bf7efdf36b22bb890e0cc26485de
SSDEEP 96:D0GXm6CwRohaIaEgduP15Nv5iIPsOEHjEjhnwhSVi:D0GXmNwRohaIaEgdgPNv5iIPsOEHIjhM
TLSH
T15EA1ADF393B4866ED912E2F4FA146E2BCE280415932C3C65C5E86F1B93E2471E14179E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 05429e5845b44c20c43dbbdab9e7d7f228c6cb08b23178b8486a7868b8e56378
MD5 e3c613b3e1ff17d205d76f1c6f9062e7
SHA1 f586141d2a8b7aedb3bc3e6c81464d4baa1352f5
SHA512 2150a3b5a5f42ca8d407bf4b417942db448ebb61561c4455b5e7a67120c5e56a411ce978d691dd3e180c401283cc834d4da44d3a5d91fbc9501983edab69850d
TLSH
T1B32148B7E67AB817117E09B72A14FC091CB6F430028164F5CBAB826CA0944F70616073
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 22b083e4a634db15d14701023905a1f3f035e7aa4629470bc207688b91613a5e
MD5 09422b0e42cd3f4d9d15600b75dbbea5
SHA1 f50b0c71ad3ab9453f9b8b81ccdd96a95ce0e250
SHA512 9d0fc5d3fea9233c009dd6acf0a7ebba3e5495b205850c6ce9a4f1fde59fc2866bdb553d65e41ce1eb42c6f835ffc7180a9f7313804cb42f9405889bafa3382b
SSDEEP 192:7RLCt/ete3fgRav7ZpIpAPRp2QS9wHsb+WNnB/4nw201cTuz5M9+VyIsnAUge:7RLCREAs2EUXyOwVx2gz5M92e
TLSH
T1DC42D72EB915697B9CDBD329F921B757D7F1102220942E88E6FCCA2C14EB5CD721301B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 c274b44a14a41dfce0bb4af65298a7301a801a9d86cf12be815884ac73449870
MD5 d54bafe8566b57affe36c3ea92dd3198
SHA1 c9c3516e88bc9204b5be87db6346e4da49e763ac
SHA512 88746fe0172eb6eb0655f0e015a1118f1c8d05174c2e93a577038172e85e18d21431491d95d9a2ef7270e6415b05db27ac287cb0d7e1991e33e62a3bc6b7dabc
SSDEEP 192:7RLCt/ete3fgRtv7RpIpAPRpGQS9wHsb+WNnB/4nw20o3KTDv1cTuO5M9+VyIsnv:7RLCREAsN08XiOwVx2Bo9O5M92E
TLSH
T14952D62EA914697B9CDBD329F922BB57D7F5102224902E88E7FC8A2C14EB5CD7213017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 c072483a7ec5314e20a84cb7958e4d7ec083dbf79b8b4d0c15b3a8410e669aa3
MD5 5a9736eafe1a43667215d5bf0767d1a3
SHA1 44460cb9c20aa42d6ba13ac7b0e6ddd04b3a6d37
SHA512 0289e1453b8e3ae3f29ad11e6776cd31caa68453dcbf110772eddef1ae6219d42553dc0f3a3b725c4742cf1a730406cf18b18f068ba4160c12bdca151993c8e4
SSDEEP 192:7RLCt/5te3fgRpv7RpIpAPRpGQS9wHsb+WNnB/4nw20o3KTDv1cTuO5M9+VyIsnv:7RLCRbAsp08XiOwVx2Bo9O5M92E
TLSH
T16252D62EA914697B9CDBD329F922BB57D7F5102224902E88E6FC8B2C14EB5CD7213017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 7e48d012e766ed76cefbda63158165d7af3c7980e800616fc8b360eb09af02e7
MD5 199d1fac6e0347b43dff6db300b3110c
SHA1 5b56144cca57d0f6e9ad7e66092234f5afb0ef8f
SHA512 b88b0d1c9b7ae8abd87c504b0cbb275e311b580fd673e7d4110cf879858ce431e91151d2a8e4982146c3ade2258083596abed168539f8af3c94fcdfe34339255
SSDEEP 192:7RLCt/ete3fgRav7RpIpAPRp2QS9wHsb+WNnB/4nw20o3KTe1cTuz5M9+VyIsnAC:7RLCREAs20UXyOwVx2BNz5M92e
TLSH
T11542D72EB914697B9CDBD326F922B757D7F1102260952E88E7FC8A2C14EB5CD721301B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f52014f5468d81055dc0f686f5c1019807c2b890c43dc024b3f6ddaa36a628cc
MD5 999a573968c8f8bb52761d6ca0f9a35b
SHA1 3c56279fb029177a04be73351227d5ba779a8cd3
SHA512 64ad6b9c61b1f04ac1c86afbe89fa09844154b8d9b3c39fd836d634b09f343b8a2327edd380ef4537b525f7a6533012431441632043cdea60a60e0394b4f3e31
SSDEEP 192:7RLCt/ete3fgRYv7RpIpAPRp2QS9wHsb+WNnB/4nw20o3KT61cTua5M9+VyIsnAI:7RLCREAsE0UXyOwVx2Bpa5M92E
TLSH
T11152D72EB914697B9CDBD329F922BB57D7F1102260912E88E6FCCA2C14EB5CD7213017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 7085bd26a00ea25f436317507845db76624f1e305c5ea5c1633f0710fb2525e9
MD5 6fedf8e0cda28604a18bc21b3b3a9b01
SHA1 6e736322a4f9228617a8d1dccd80d010032b80ff
SHA512 7c43690cde2a8678a5465e416e0cead981d993013a68eccf60d0f0f8520df5a31229546fee29023f6dada5f06f5e8901b2628e5ccb2a58fa5dcaf82771739eca
SSDEEP 384:UO62joO6z7KxkXqKf/pUZNCgVLH2HfgslBr7pLuLcifKO6/XODoO6P+ErU3f6HGy:UO62oO6z7KxkXqKf/pUZNCgVLH2Hfgsr
TLSH
T18972E9676C4C9E770F94CACCD816BE4FADB5010B65D9886843FA982903D4BDB11462FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 cbf23581b9dbe0fb16b521facae9a345f7627613a5e0ea093ea5e965473ab84f
MD5 aaf66a3391d6bd4025d491d6bbbbf09e
SHA1 3a73df4e62e6a207e05ed356f7504de04d883d8e
SHA512 282c1f90e673c124acacb5be8eabab6414bf66062c4f0700346a944932df41713cdbb25f7bacc567c20d78183ba3c75fe9f819016a54e2b60edf05b3b1a59eff
TLSH
T1B6B0122484017581C04302F51182058C31945F248B16131557E06975DC263A14014350
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a36f.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58a36f.TMP
Size 96B
SHA256 83bc350be5de3df4b8a988e0b39b9aaf6d2b30d6d57bbb3cbe376ba0384f8e3d
MD5 ab78e5ebe43e0d2c1e97afd8cfb09ecd
SHA1 cbecf87f80da5f9e1bdc3ef5e3ffccb60d3ca6bf
SHA512 30f5af04e9b882fb9a43f8f6fd976e73054eb4f9f3ea915a5a7de5b874d1deaa71735ce35b8d9f0552120be0a9e1d7fdc1dba91d6bc3a9597e3e2c44169c7140
TLSH
T16FB02208C00A330AC0A303B02AA08BE83228CF30CE030302A3F00B22CC202328220028
MD5 SHA1 SHA512 TLSH

Submit Download

c8e1bab2-a7ce-4438-87f9-875d49956ae9.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\c8e1bab2-a7ce-4438-87f9-875d49956ae9.tmp
Size 414B
SHA256 9b545b4c46927aff8d617fc53a14b58ffabd8269d1519a9a00f8c8ec9d202d7b
MD5 94a5a0517ac3dbe38d086ac1d9af293e
SHA1 bb41b4d7ea378f9e6399689937a29cf593298e0a
SHA512 463e15c254f61a5d841be8e6a8f069031212a5c8ae5acfa948b83e730ebd7a6ba4cfe6ad7332f6a3a99b773099401df0305dbdf85475f679d567b3ee103ddde5
TLSH
T159E02B95C811AC3718FD571C64641742EB4143172F40885F3E3DD20DCFB46365246D9C
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 1055c7bc9a11a360a6f32c1633fc94bb17350eae8aea8fd0c69fe12ef31ad468
MD5 8bb68935a539849810022037cc27ff6e
SHA1 0969408d9ef247388d30c6522258738f85d96a4e
SHA512 77c095ac1107fff47d87225337b2da73af043d08541a91594a2ca4881e9fb5abedcbbe8e3929ef717dbf1f313aeb2927d133f080a9fbab3a1081db8ffccd58b6
SSDEEP 1536:RRXocYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YJ:LY3Qw/xLANk0mUW5GmRntSFCjEEN4
TLSH
T1639312BA9E164AF795BD9A81729E3909CE12230E716F69CC715C538C21D41CC2B73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 aba08ac0008072921aa1aad67bc1252763750c0dcc15d6672c2676decaa71739
MD5 40c7336707079f51862fdc40b765b9bf
SHA1 376de5e17b069179db6bae9104b375fda0f183ad
SHA512 34950dfd1f02bee6d0a0c6b0074df39c228cda1f4d142964ab9c72ebee387ad03e5b8a385b458002cfa57a84388f51da11adf126d9b688332b9a486869d10fe1
SSDEEP 1536:YXcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE3u:83Qw/xLANk0mUW5GmRntSFCjEEN4
TLSH
T1459312BA8E174AEB957D4A8136AE7809CE12230D70AFA9CC315C539C21D41C92B73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 8e2a23649d195baa5b4302c47249a96f7fc764d2077583aba621273080caae9b
MD5 8301385834d08d001270dfd4968e1e4f
SHA1 dfb89e6c74378100292a06ff4ac42c4d84c3af81
SHA512 4461769e308630294d46bd89de95b06a64dc22ae775c1764a1ae51f091fdb465f9b314aba8ef70b112c18343d7735d33fbed194cd8076da6cd5a76d85589d1da
SSDEEP 1536:lzdcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE+:r3Qw/xLANk0mUW5GmRntSFCjEEN4
TLSH
T10C9302BA9E164AF795BE4691729E750ACD12230E30AFA9CC725C539C21C41C92B73F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 e344524cea4bc6b5aa3e07931d273dad7d1e6ee6aa014148513ee46a37466e95
MD5 40afa9f06fd52081503dbea336505304
SHA1 d2e7035064d32035c3567246a938235fc9722fa2
SHA512 0d0ac1a3e9c5dfbeb76eba239016720acc43804bc6af34205fddcd927fd131fc423719849c79e9ce146dcca936a131ec61bf080069d1239284e40cfa82835d66
SSDEEP 1536:lRXocYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YJ:vY3Qw/xLANk0mUW5GmRntSFCjEEN4
TLSH
T1669302BA9E164AF795BD9681729E3909CE12130E716F69CC715C538C21D41C82B73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download