Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    11/05/2026, 08:28

General

  • Target
    SheetExploit.exe
  • Size 29KB
  • Sample260511-kdaqbsdt6w
  • SHA256 3b9c65435c975f38db1f5a2d2f38f17eb803d2e5a883f081d3ca8b9e9d5049a3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 16 IoCs
  • Suspicious use of WriteProcessMemory 22 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SheetExploit.exe
    "C:\Users\Admin\AppData\Local\Temp\SheetExploit.exe"
    1⤵
      PID:4144
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Drops file in Windows directory
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:5992
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc5a9bc728,0x7ffc5a9bc734,0x7ffc5a9bc740
        2⤵
          PID:3544
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1644,i,14115889132256372322,7837506559745849675,262144 --field-trial-handle=1984,i,201469915203197827,8266145655531262455,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1976 /prefetch:2
          2⤵
            PID:1736
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2252,i,7258041028650577413,13312241813226236861,524288 --field-trial-handle=1984,i,201469915203197827,8266145655531262455,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2264 /prefetch:11
            2⤵
            • System Time Discovery
            PID:3688
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2408,i,932807443742737197,1701467079412078144,524288 --field-trial-handle=1984,i,201469915203197827,8266145655531262455,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1880 /prefetch:13
            2⤵
              PID:5544
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3164,i,485685695033495726,8445285409604599047,2097152 --field-trial-handle=1984,i,201469915203197827,8266145655531262455,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3300 /prefetch:1
              2⤵
                PID:4872
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3308,i,6122043087443342396,9831485160941556434,2097152 --field-trial-handle=1984,i,201469915203197827,8266145655531262455,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3480 /prefetch:1
                2⤵
                  PID:1396
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4256,i,16760812657075533945,130226533858939465,2097152 --field-trial-handle=1984,i,201469915203197827,8266145655531262455,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4264 /prefetch:9
                  2⤵
                    PID:5908
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4668,i,5234858666594674846,6956944151479549119,2097152 --field-trial-handle=1984,i,201469915203197827,8266145655531262455,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4680 /prefetch:1
                    2⤵
                      PID:2952
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5432,i,16852525442306129812,12697264348482650653,524288 --field-trial-handle=1984,i,201469915203197827,8266145655531262455,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5444 /prefetch:14
                      2⤵
                        PID:2992
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5440,i,10278987977162343419,12997825454267115949,2097152 --field-trial-handle=1984,i,201469915203197827,8266145655531262455,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5488 /prefetch:1
                        2⤵
                          PID:3392
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3700,i,18071969209696465967,5552721816878614645,2097152 --field-trial-handle=1984,i,201469915203197827,8266145655531262455,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3572 /prefetch:1
                          2⤵
                            PID:1364
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5996,i,7867373736644307212,7963502163657409868,524288 --field-trial-handle=1984,i,201469915203197827,8266145655531262455,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=212 /prefetch:14
                            2⤵
                              PID:2944
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5892,i,5232303328332629078,6609677878268369693,524288 --field-trial-handle=1984,i,201469915203197827,8266145655531262455,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6120 /prefetch:14
                              2⤵
                                PID:4856
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5904,i,17825995417566408390,10741334247365290378,524288 --field-trial-handle=1984,i,201469915203197827,8266145655531262455,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5832 /prefetch:14
                                2⤵
                                  PID:6032
                              • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                1⤵
                                  PID:5480
                                • C:\Windows\system32\svchost.exe
                                  C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                  1⤵
                                    PID:4612

                                  Network

                                        MITRE ATT&CK Enterprise v16

                                        Replay Monitor

                                        Loading Replay Monitor...

                                        Downloads

                                        BookmarkMergedSurfaceOrdering

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                        • Size 6B
                                        • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                        • MD5 SHA1 SHA512

                                        BrowsingTopicsState

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                        • Size 414B
                                        • SHA256 2c92f28bc2ffbd547150182d160be4c715690776f739688726105f853a65119d
                                        • MD5 SHA1 SHA512 TLSH

                                        f_000038

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000038
                                        • Size 112KB
                                        • SHA256 3cf2fdc02c0f788af4059d832479e6878758fef5a8ce030e4aa5d3f37ab50083
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        temp-index

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                        • Size 1KB
                                        • SHA256 601a029ca0e5f32251cf4f65d17d4468e83a2ea1210afdb8543a4af4df1609ef
                                        • MD5 SHA1 SHA512 TLSH

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                        • Size 1KB
                                        • SHA256 6434adef602a8148cade8bd7aea3904ee5454791b1a148e5532ed68162a148e7
                                        • MD5 SHA1 SHA512 TLSH

                                        CURRENT

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_web.telegram.org_0.indexeddb.leveldb\CURRENT
                                        • Size 16B
                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                        • MD5 SHA1 SHA512

                                        MANIFEST-000001

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_web.telegram.org_0.indexeddb.leveldb\MANIFEST-000001
                                        • Size 23B
                                        • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                        • MD5 SHA1 SHA512

                                        Network Persistent State

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                        • Size 7KB
                                        • SHA256 7803da017e4c5db734551b3f4f72f226aef0369c3d2474294a682ab4a949d1e9
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        SCT Auditing Pending Reports

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                        • Size 2B
                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                        • MD5 SHA1 SHA512

                                        Preferences

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                        • Size 13KB
                                        • SHA256 f231889066a765f52c2dbc0555d811fe9876b8d9fc91266002f1f4e8b4828665
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Preferences

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                        • Size 13KB
                                        • SHA256 9d8d8b84388daf648f7259e82cdcddecae44af6714c9747d8fe1c2237bc63d6e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Preferences

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                        • Size 14KB
                                        • SHA256 98ac438dc594322099b436ba006beed16946d410b039ed2accd6535107d75359
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Secure Preferences

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                        • Size 17KB
                                        • SHA256 82f19bdaa200c3a3056c6486f8d9171c832143077338572b10c4c0ee03580c4b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        9c6d83a70a3663b3_0

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\a7330ca8-eaaf-40b7-a552-26a3e252e67b\9c6d83a70a3663b3_0
                                        • Size 310KB
                                        • SHA256 fb4e850984e9644b1af3f823cfc276be6d667320c0f0d4e83672213def60fc83
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        index

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\a7330ca8-eaaf-40b7-a552-26a3e252e67b\index
                                        • Size 24B
                                        • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                        • MD5 SHA1 SHA512

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\a7330ca8-eaaf-40b7-a552-26a3e252e67b\index-dir\the-real-index
                                        • Size 5KB
                                        • SHA256 7c20a1a53425e045abd99bbb7f8d365a17425a9b8568d6ad8585e3c8800a21ca
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\a7330ca8-eaaf-40b7-a552-26a3e252e67b\index-dir\the-real-index
                                        • Size 6KB
                                        • SHA256 e6fa386108bed366dad009a95652c45c05eaedfe50aebd139beb33ccd94af24f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        the-real-index~RFe597d83.TMP

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\a7330ca8-eaaf-40b7-a552-26a3e252e67b\index-dir\the-real-index~RFe597d83.TMP
                                        • Size 48B
                                        • SHA256 95fab66c704a2762d4115b536e5b51700f0d4497382748c7110c4aec2abab56f
                                        • MD5 SHA1 SHA512

                                        index.txt

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt
                                        • Size 660B
                                        • SHA256 e957dd8d6336e7c02c453f342a71ec32ebbf73867b22fecefca5634d04d12c23
                                        • MD5 SHA1 SHA512 TLSH

                                        index.txt

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt
                                        • Size 282B
                                        • SHA256 3aa220917b24258b0263ee36806837810b1f0fc850d3054ab12d2402bd232f49
                                        • MD5 SHA1 SHA512 TLSH

                                        index.txt

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt
                                        • Size 395B
                                        • SHA256 38e1067557b7502e0a9797b577e2ec8b05746476551f61a4945425721c724d80
                                        • MD5 SHA1 SHA512 TLSH

                                        index.txt

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt
                                        • Size 496B
                                        • SHA256 9fa6fc7134c2f0cf51e5385cf0d1154876a9daf13a63187cbfd8ad6f53b12ff3
                                        • MD5 SHA1 SHA512 TLSH

                                        index.txt

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt
                                        • Size 665B
                                        • SHA256 f26138948a9b4198d1b666609dd47ba96fa8c1d23cd2bedc4ef4b016b6b522c6
                                        • MD5 SHA1 SHA512 TLSH

                                        index.txt

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt
                                        • Size 582B
                                        • SHA256 06329a787c0ca26c7fa7dae892c35231108a8f3254d108f91401eff370f8b9d1
                                        • MD5 SHA1 SHA512 TLSH

                                        index.txt.tmp

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt.tmp
                                        • Size 661B
                                        • SHA256 74f5b726181aab2e8ac84eb9cf090132a5e6a1e85ef3c6eaebc02c6e5a9a68f9
                                        • MD5 SHA1 SHA512 TLSH

                                        index.txt~RFe591dcf.TMP

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt~RFe591dcf.TMP
                                        • Size 169B
                                        • SHA256 786dfc47d762aafb67d985eeabb81b255e83115c31c5bcb37548d4e47fab7a21
                                        • MD5 SHA1 SHA512 TLSH

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                        • Size 144B
                                        • SHA256 96386e414c121adffbc37ee4df23c5c257a0ca093c3de2f25b12b0f13c98fc8f
                                        • MD5 SHA1 SHA512 TLSH

                                        the-real-index~RFe596bef.TMP

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe596bef.TMP
                                        • Size 96B
                                        • SHA256 3f7539d30e0842beb7242796c8bde8b576a50d8d46cf72ac1fb1276f3df3e5f4
                                        • MD5 SHA1 SHA512 TLSH

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                        • Size 72B
                                        • SHA256 1a62c257b64a55f8d0d843e8417f1e7e8012ba0e0e1d77609b299ff5d6763dbb
                                        • MD5 SHA1 SHA512 TLSH

                                        Local State

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                        • Size 202KB
                                        • SHA256 7a7a2ca2565a7380ce4cea00eb818325676cf6dfe14eb467888d6b697a5797b8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Local State

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                        • Size 90KB
                                        • SHA256 be6322c0712e4597e5a0303c7e9590b3f01159dcf131657b6c0035c550ac20ec
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Local State

                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                        • Size 201KB
                                        • SHA256 726aa8d688f2000a6ad57c434fcb497077bbef37186748795feb67fdf7710dd1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        memory/4144-0-0x0000000000400000-0x000000000040E000-memory.dmp