hxxps://modsfire[.]com/41nNC1oWUOK2LF5

Analysis

geolocation tags

eueuropefrfrance
max time kernel
900s
max time network
895s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
19/05/2026, 22:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://modsfire.com/41nNC1oWUOK2LF5
Sample260519-15tkhsfx5j

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3528	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134237025267896149"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
4572	chrome.exe
4572	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe
Token: SeShutdownPrivilege	2108	chrome.exe
Token: SeCreatePagefilePrivilege	2108	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe
2108	chrome.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 2108 wrote to memory of 3792	2108	chrome.exe	80
PID 2108 wrote to memory of 3528	2108	chrome.exe	81
PID 2108 wrote to memory of 3024	2108	chrome.exe	82
PID 2108 wrote to memory of 3024	2108	chrome.exe	82
PID 2108 wrote to memory of 692	2108	chrome.exe	83
PID 2108 wrote to memory of 692	2108	chrome.exe	83
PID 2108 wrote to memory of 1420	2108	chrome.exe	84
PID 2108 wrote to memory of 3800	2108	chrome.exe	85
PID 2108 wrote to memory of 1420	2108	chrome.exe	84
PID 2108 wrote to memory of 3800	2108	chrome.exe	85
PID 2108 wrote to memory of 4876	2108	chrome.exe	86
PID 2108 wrote to memory of 4876	2108	chrome.exe	86
PID 2108 wrote to memory of 2368	2108	chrome.exe	89
PID 2108 wrote to memory of 2368	2108	chrome.exe	89
PID 2108 wrote to memory of 2160	2108	chrome.exe	90
PID 2108 wrote to memory of 2160	2108	chrome.exe	90
PID 2108 wrote to memory of 4744	2108	chrome.exe	91
PID 2108 wrote to memory of 4744	2108	chrome.exe	91
PID 2108 wrote to memory of 4072	2108	chrome.exe	92
PID 2108 wrote to memory of 4148	2108	chrome.exe	94
PID 2108 wrote to memory of 2728	2108	chrome.exe	95
PID 2108 wrote to memory of 416	2108	chrome.exe	96
PID 2108 wrote to memory of 4572	2108	chrome.exe	97
PID 2108 wrote to memory of 1092	2108	chrome.exe	98
PID 2108 wrote to memory of 1092	2108	chrome.exe	98

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://modsfire.com/41nNC1oWUOK2LF5
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8a577c728,0x7ff8a577c734,0x7ff8a577c740
  2⤵
  PID:3792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1448,i,7060244404902134603,4936139817795570623,524288 --field-trial-handle=2040,i,680645654659832678,17415241666745314186,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=2072 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1584,i,16599135251609270634,11820155417806368227,262144 --field-trial-handle=2040,i,680645654659832678,17415241666745314186,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=2036 /prefetch:2
  2⤵
  PID:3024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2400,i,492837559772108610,11286603347843777997,524288 --field-trial-handle=2040,i,680645654659832678,17415241666745314186,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=2364 /prefetch:13
  2⤵
  PID:692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3208,i,15118389316356472307,17353447222674986562,2097152 --field-trial-handle=2040,i,680645654659832678,17415241666745314186,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:1420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3212,i,921198925831474130,944618325958537330,2097152 --field-trial-handle=2040,i,680645654659832678,17415241666745314186,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:3800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4300,i,14810540766080720910,11778731001549789660,2097152 --field-trial-handle=2040,i,680645654659832678,17415241666745314186,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4308 /prefetch:9
  2⤵
  PID:4876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4596,i,6331073803541214470,3969858357178300951,2097152 --field-trial-handle=2040,i,680645654659832678,17415241666745314186,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4796 /prefetch:1
  2⤵
  PID:2368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4272,i,14892287952566193614,9930304790899161284,2097152 --field-trial-handle=2040,i,680645654659832678,17415241666745314186,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5004 /prefetch:1
  2⤵
  PID:2160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4844,i,17335310561361896210,1898857524790905386,2097152 --field-trial-handle=2040,i,680645654659832678,17415241666745314186,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4836 /prefetch:1
  2⤵
  PID:4744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5820,i,9910700024430344039,15878051160600052739,524288 --field-trial-handle=2040,i,680645654659832678,17415241666745314186,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5824 /prefetch:14
  2⤵
  PID:4072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4828,i,5187071534759968608,869381323001661862,524288 --field-trial-handle=2040,i,680645654659832678,17415241666745314186,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4900 /prefetch:14
  2⤵
  PID:4148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5852,i,6739701598112917330,14445248934830037792,524288 --field-trial-handle=2040,i,680645654659832678,17415241666745314186,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5868 /prefetch:14
  2⤵
  PID:2728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5820,i,5088466652210155026,5757821577937593682,524288 --field-trial-handle=2040,i,680645654659832678,17415241666745314186,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4864 /prefetch:14
  2⤵
  PID:416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6048,i,4276830908614731367,8390259211490990693,262144 --field-trial-handle=2040,i,680645654659832678,17415241666745314186,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4876 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6064,i,16841404370477475545,15488616437682471126,524288 --field-trial-handle=2040,i,680645654659832678,17415241666745314186,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6076 /prefetch:14
  2⤵
  PID:1092

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4180

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3436

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 dbaff343936ed8526e23eaf0bff2ab3bf588185f6de4d73187238d2e0778a1c8
MD5 264a692bbccb88266d5687adc57ca082
SHA1 a2468b0cd250ef6a08a9396c0b8037bf01cfb997
SHA512 d0dd009f9f3857d03a29ef2320995a45a09816eac0351820e27894583ff7995ce491b8fcb96756d6325588ea44469a9482fb6e24249f022e88d436f201ed4b7c
TLSH
T1A1E0EDAACC21AC7B48FD1768A5500B42FB10135B2A815D6F363C96098FF067E018686C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 816B
SHA256 ab40bb93d46a92a8357c87716d05ed5a045db7d3feb3e9e2ec342f6f8c41cba5
MD5 1332fdbbba710b57ee4136d17beff18d
SHA1 16c3b924b45ccfb316aae194eff52ce7e5ad6f87
SHA512 33f373284ead2b9b9dd86618aae3c0d733b8cfc2f9e49fb1935dbcfc3ce260983453a1c7ad10fabd9c8a27335b6793854d3cc99463c835e7d16fc0887731ccc0
TLSH
T1AA01FF97BADC1084EB39117001E34BD8BD3019089C57EF4782817130A72FB94573114C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 51c4104f9b2339a8fc3fa067d84a3f9242642bd9d90bab761bae85e820b643cf
MD5 cd6802661f4a01a6d66bb0610c92f2f2
SHA1 046bf6b36110f5f7093737a899626813df5411bd
SHA512 d4de2f01222856b3eca387e114bdf33696c8b9a2765e659777501fe1c79da5bd517f47938ec098415726decb7e26f58b14bc2eaf0b975ab4deb3497f9010f786
SSDEEP 192:DubKeh3tyVIh6A2Lnt1TgZHYzhTYTI0T+qa91q4BLTD2qpsx5qV2K:DubKeh3tcIh6A2LnbTgZHYzhTYTI0T+z
TLSH
T144F16AB7C7F88A6D8D2152F5BA162E2FCE5D0915632C3C2A88D4DF4B93E1871E20164F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 715749b9d36b9f63c9c4ec60df1d7ad2eeeb43d454c104ee36b771e44f6afc76
MD5 f10e1478c563e5859d6a6db95ef951ce
SHA1 dd1e74126e4b2707b578f5ee55b19c297890471e
SHA512 3929b7c5c4384aa8454efbb9e34ffe109440696358df8e4fc8d4139c107c455b2cf4b749d8b31213194bde28882b0fe1920f760b969f1c4f7a66bbed5e236c8d
SSDEEP 192:DCY1e/zMyVIh6A2Lnt1TgjHYzhTYTI0T+qA1q4BLTp2qpsx0qRIjhSK:DCY1e/zMcIh6A2LnbTgjHYzhTYTI0T+x
TLSH
T101E19CF7C7F89A6D8D2152F1BA162E2FCE5D0915632C7C2A88D49F1B93E1871E20164F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 0a04066053fcf422693a3f49149ddd62b4f5304839b6d4328b805790511b149c
MD5 49caf69c899c3764f5646570e1665a31
SHA1 e0c30227e774de5e6f5346490855d887be887eb8
SHA512 1c9b7527e787b9540594d54421696ad7fd65e33faa891d1b4fe1c0022db31413153f0a629690d4ace501935f7622acb651deb3d192130cff1693bdfdeed5b4f1
SSDEEP 192:DCY1e/HLyVIh6A2Lnt1TgjHYzhTYTI0T+qA1q4BLTp2qpsx0qRIjhMK:DCY1e/HLcIh6A2LnbTgjHYzhTYTI0T+b
TLSH
T115E19BF7C7F89A6D8D2152F1BA162E2FCE5D0915632C7C2A88D49F1B93E1871E20164F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 e3c72b03a78c4d3559992c619ef398a491cdb6cb5190dda7056580714fa79cab
MD5 d2b324d3f18fafbcde3b17d591ab13dd
SHA1 b7e3fbbf7aa83ee4bc6f3f4a888b98e7051b4d1d
SHA512 dc19a4778508c6d4849992db58fb1739f668bdadd993549689f990d46b05ac06b06d987c04ef669a308e45e4808e04926bbd9ac58ab2e1ad446ccdaa3996093b
TLSH
T12C21AAA793FFB42B10281CBB1D01BC19597B603611C1B4F8CA7A502DF0886F71B06873
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 e6d47def19f571d4d9c9b7b951471afcfe92c136754202bc03a1f22418e57959
MD5 349c27f641ac301c3ad42a3edeec4e31
SHA1 4f49733ebc91329d7daf7cdb901836d5bb389b20
SHA512 aa4f016fd8b57fd6532bd6d5194e29daadbd399add3443d7f8e73b02d4c8dcbc7aa40f76477636249081b6abefdd5710560807582f26f51f8e89d19a0afaeaa0
SSDEEP 192:GRnPqK2zugoQ9v7+pAPRp2zf9uHsb+WNnWXFGbA25teU6VyIsnAUge:GRnPL2wQ96UXKUwCL2Me
TLSH
T10642B52FAA54653B5CCBD3A9FA657B63D3F5113221D02E84EAFC8A2C05E75CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 f7547b49184e37249b84c7b0cd587ff55cb425c39d0b5cddfb3ea2aa740d571d
MD5 7521ce1ebc43570b6700f650d0f0b5d7
SHA1 9f1401f643c0bac3d6bcb9dd0fde27ed65adc5c1
SHA512 df02935aa245663ee1c7ecff3276ec3274312d04a1dd373e818d40219a44c17f6c01149763159c63ac04ebfaec739606cef2e2f59986b03ef3b123887474d7cf
SSDEEP 192:GRnPAK2zugoQ9v7+pJPRpNzf9uHsb+WNnWXFGbA2lteS6VyIsnAUgE:GRnPd2wQ96fXhUwCL2QE
TLSH
T18B42C72FAA54653B5CCBD399F9667B63E3F5113221902E84EAFC8A2C05E75CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 87abfd6483e055ddeb2f8fc2f483f91af443de3130ad7f6cceeeecc94a6c2511
MD5 04c2655e775a571e3b09dcdcd782d924
SHA1 84dda5dbd4088a2a3591384e8279d568339c383c
SHA512 38ea57f7244c49bbd8e846e3f0d5342b6c186f24c011ef661cc6a4f6836da0e0f816f76146075af79a69abcd50476432db60bf14c0daf6c81fe144ac588ce833
SSDEEP 384:fFjLm7KxkXqKf/pUZNCgVLH2Hfgsl+27pLuLcSjBsXODLi+ErU3ZSHG7Ep83wCv:fVLm7KxkXqKf/pUZNCgVLH2Hfgs427p+
TLSH
T18C7208676C4C9E370F94D6C8D8267B4FADB5024B65DD886493FA982903D4BCF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 fd420bae5eebac05547247d637c3474f7dc5ea5a71b72f453ace3b69f09ffa0b
MD5 faaac5a181f2f70507dca9426cbd9594
SHA1 833ed9cb49a4162f91f36272eda74049d3cae9cd
SHA512 7e1b04c96e3a08925bccaf9eac7b97648e042a7ab42f3d6bc346134346f358303b35e0939ef092f3cef9446b40f73c6d0ba3571211a554e5dc443fde3eb05c28
TLSH
T12CB012008001A501C0A206B0165318C872746F109B0A2F0143E06923DC2B6618014050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a11d.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58a11d.TMP
Size 96B
SHA256 929a9a320eeb7026fa234dfba536694fc25d1c70043927f119a0f2422f737d88
MD5 1674e7a8f6a3ce2691728f5fde07fbae
SHA1 a506371562558803d8ba3c79df10966d831334bf
SHA512 ceeece58b11cf400c7e38a40900a5f3707f3846031aa6acb2785d43c7ebf2a067feaf49f231567fe77f016155486d317330cad54a1efd778c2b206e3c35472bf
TLSH
T198B00255C5026312C46303B025FA9DD8B161FF65D6031252A6E11A7FDC296B24536160
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 5c4aedc5150fc9258fec2390f6960d29dfb6fe014ed153aa6bbc96cf0e34033f
MD5 bc033a9f244c6e872712d4d3edf6d41d
SHA1 3efd25226b8b28b98e2cc2d69498df033fe21086
SHA512 4bdff19f61c44422f37177ac37fda1bee969dada61a2ceb1347197770db2f021a0412b6c0882ecdc93f0f871e96eb57dcd7b062bbf5d6aabca623e3fa6f1af67
SSDEEP 3072:B68uwLcXcgVXruSixWgL0rF6jh9JDvexqw/w5nP:BcwCcmXKegIh6jh9JvexhQ
TLSH
T116C3125A282B3DA68CFD7DB370033782869213A26C09F54EA4CCDF0A45DDDB915EB4B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 9fe3cb112eb4f3bd8b36da5af124614b057f9a04914e818d9c7f5d33e8818c1f
MD5 84f30615377ad58f389a28f0a1df6a2a
SHA1 0c6ec1cf9ca7df999de3bfc2c05390b2c887f2b9
SHA512 a1f60a5db6956ae1f2a54d10905f07456d6df2be0ffbc468462123a20ec40fdf00bf2e4e13152ddc6e65b324e0b83a5c817f273cc85dca9e1b67ae8d34007991
SSDEEP 3072:l8uwLcXcgVXruSixWgL0rF6jh9JDvexqw/w5nP:zwCcmXKegIh6jh9JvexhQ
TLSH
T129C3125A292B3DA68CFD6EB3B44333828AA213A66D05F54E90C8DF0B45CDDB415EF474
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 6b004c368eb971df7b8424054bf8bc66deca328472c1786cb3fcf367614903fa
MD5 4950ed046ea945b88ca28bddadeef52c
SHA1 383366f894170eca4da2fb22785fdf472c42df74
SHA512 d13bc07659658c1822c1343dc15cb8ee2bc4560cb09cd476ecb3ce67457f2797bcb7f2083f023218a8f4464c3306f51fb16acece41b39374f2c133cf3157bb8c
SSDEEP 3072:i8uwLcXcgVXruSixWgL0rF6jh9JDvexqw/w5nP:0wCcmXKegIh6jh9JvexhQ
TLSH
T123C3125A292B3DA68CFD6EB3B45333828AA213A26D05F54E90C8DF0B45CDDB415EB474
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 5ac9e5bd922651f2525164e5f3614aabe6ea5f35046805225b24e78abe9341b0
MD5 9ba911d8cf2f4f2bcaa586b4d3db3b47
SHA1 c6c7905fa85551845a51cdeec796f231b54e5b87
SHA512 44928f27b2d5784fb5ac0a4b735884a952c12234fd423fbeb2afcd2e749d79345f92a74f3ed588e6a120595ded4ba8298a009d5d21aa8ddb3b59d55761c75fea
SSDEEP 3072:98uwLcXcgVXruSixWgL0rF6jh9JDvexqw/w5nP:bwCcmXKegIh6jh9JvexhQ
TLSH
T1F2C3125A29273DA68CBC6EB37453338286A313A26C05F14E94CCDF0B49DDDB515EB8B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 124599a2525bdfb51898f24b806567df9578e778584e8bb712ee3ce7a2effa70
MD5 b0112f162821b1105de9aa4e8556b357
SHA1 1beaf1f168aaee181b10cada76633106f843f80f
SHA512 d34a7769705739d4d502ac3f00b6e473938e1ae1781da801fb0411eab6c9d97f3d2160cc738ec12d05c0e055741cc3236867b907eab252a83153e0a69f2a5e56
SSDEEP 3072:168uwLcXcgVXruSixWgL0rF6jh9JDvexqw/w5nP:1cwCcmXKegIh6jh9JvexhQ
TLSH
T149C3125A282B3DA68CFD7DB370433782869213A26C09F44EA4CCDF0A45DDDB815EB4B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download