hxxps://sites[.]google[.]com/view/legal-proof-document9629/legal-proof-document

Analysis

user interaction
yes
max time kernel
119s
max time network
120s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
27/05/2026, 12:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://sites.google.com/view/legal-proof-document9629/legal-proof-document
Sample260527-pa3ddsfs2x

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
1	sites.google.com
2	sites.google.com
3	drive.google.com
20	drive.google.com

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2072	2448	WerFault.exe	98

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Bewijs van overtreding.docx .exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4576	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134243573143635977"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Local Settings	chrome.exe

NTFS ADS 2 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Bewijs van overtreding.zip:Zone.Identifier	chrome.exe
File created	C:\Users\Admin\AppData\Roaming\SysCacheLib\CacheSvc.exe\:Zone.Identifier:$DATA	Bewijs van overtreding.docx .exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe
Token: SeShutdownPrivilege	4800	chrome.exe
Token: SeCreatePagefilePrivilege	4800	chrome.exe

Suspicious use of FindShellTrayWindow 46 IoCs

pid	Process
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe
4800	chrome.exe

Suspicious use of WriteProcessMemory 23 IoCs

description	pid	Process	procid_target
PID 4800 wrote to memory of 2812	4800	chrome.exe	79
PID 4800 wrote to memory of 4576	4800	chrome.exe	80
PID 4800 wrote to memory of 3260	4800	chrome.exe	82
PID 4800 wrote to memory of 3260	4800	chrome.exe	82
PID 4800 wrote to memory of 4668	4800	chrome.exe	81
PID 4800 wrote to memory of 4668	4800	chrome.exe	81
PID 4800 wrote to memory of 1200	4800	chrome.exe	84
PID 4800 wrote to memory of 3228	4800	chrome.exe	85
PID 4800 wrote to memory of 1200	4800	chrome.exe	84
PID 4800 wrote to memory of 3228	4800	chrome.exe	85
PID 4800 wrote to memory of 3472	4800	chrome.exe	87
PID 4800 wrote to memory of 3472	4800	chrome.exe	87
PID 4800 wrote to memory of 4968	4800	chrome.exe	88
PID 4800 wrote to memory of 4968	4800	chrome.exe	88
PID 4800 wrote to memory of 2628	4800	chrome.exe	89
PID 4800 wrote to memory of 2628	4800	chrome.exe	89
PID 4800 wrote to memory of 2712	4800	chrome.exe	90
PID 4800 wrote to memory of 4344	4800	chrome.exe	92
PID 4800 wrote to memory of 4344	4800	chrome.exe	92
PID 4800 wrote to memory of 4128	4800	chrome.exe	93
PID 4800 wrote to memory of 2964	4800	chrome.exe	94
PID 4800 wrote to memory of 3316	4800	chrome.exe	95
PID 4800 wrote to memory of 488	4800	chrome.exe	96

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://sites.google.com/view/legal-proof-document9629/legal-proof-document
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa7ea9c728,0x7ffa7ea9c734,0x7ffa7ea9c740
  2⤵
  PID:2812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1444,i,16828746617009617585,581204341614015202,524288 --field-trial-handle=1952,i,1294422111197180473,17879601330579752593,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2056 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1652,i,743858474721321730,3295268224722740312,262144 --field-trial-handle=1952,i,1294422111197180473,17879601330579752593,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1948 /prefetch:2
  2⤵
  PID:4668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2272,i,14351641934798965479,12324641393048836747,524288 --field-trial-handle=1952,i,1294422111197180473,17879601330579752593,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2340 /prefetch:13
  2⤵
  PID:3260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3220,i,12783702266847134469,6533500040260049611,2097152 --field-trial-handle=1952,i,1294422111197180473,17879601330579752593,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:1200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3224,i,1790670812445308451,7806325453145926108,2097152 --field-trial-handle=1952,i,1294422111197180473,17879601330579752593,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:3228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4316,i,17967619988574479144,2159179659945044006,2097152 --field-trial-handle=1952,i,1294422111197180473,17879601330579752593,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4320 /prefetch:9
  2⤵
  PID:3472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4632,i,6161722286140712984,7845334105329965064,2097152 --field-trial-handle=1952,i,1294422111197180473,17879601330579752593,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4796 /prefetch:1
  2⤵
  PID:4968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3820,i,14732139784318562989,15671611546027279716,2097152 --field-trial-handle=1952,i,1294422111197180473,17879601330579752593,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4944 /prefetch:1
  2⤵
  PID:2628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5668,i,3659846336830050655,834411901351256093,524288 --field-trial-handle=1952,i,1294422111197180473,17879601330579752593,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5688 /prefetch:14
  2⤵
  PID:2712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5904,i,8533273953344729335,8998575722264725763,2097152 --field-trial-handle=1952,i,1294422111197180473,17879601330579752593,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5984 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5024,i,4260848853425342589,8088456664677426318,524288 --field-trial-handle=1952,i,1294422111197180473,17879601330579752593,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4996 /prefetch:14
  2⤵
  PID:4128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5940,i,158348275580913114,6932792068576068493,524288 --field-trial-handle=1952,i,1294422111197180473,17879601330579752593,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5032 /prefetch:14
  2⤵
  PID:2964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6080,i,2135836740717333906,15282802222839780770,524288 --field-trial-handle=1952,i,1294422111197180473,17879601330579752593,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4976 /prefetch:14
  2⤵
  PID:3316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4948,i,9606700747664026550,9807698246106534434,524288 --field-trial-handle=1952,i,1294422111197180473,17879601330579752593,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6080 /prefetch:14
  2⤵
  - NTFS ADS
  PID:488

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3948

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3352

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4976

C:\Users\Admin\Downloads\Bewijs van overtreding\Bewijs van overtreding.docx .exe
"C:\Users\Admin\Downloads\Bewijs van overtreding\Bewijs van overtreding.docx .exe"
1⤵
- System Location Discovery: System Language Discovery
- NTFS ADS
PID:2448
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2448 -s 248
  2⤵
  - Program crash
  PID:2072

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 2448 -ip 2448
1⤵
PID:572

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 d653dd2a3b952b99a48fa8452dfa4e0f40a82d4b6efa818aed6f862759a9ecbf
MD5 81266aa28b1402edb491b56b5cd46309
SHA1 e40c7afc94f84c77dfdcc53fde18b61b82adfc63
SHA512 4a211032be6bcf7b38eeadf1db7407cf87333d4bd383fdc64a93b8592b2eb81190d07375978079fe6c0633fb83d61fec3e128307557733a9f16bcd3f00ca2192
TLSH
T1C6F028BAC831EC2708FD5B6D60544B47F754131B2B91585F3B3D420C8FB163B464592C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f
Size 18KB
SHA256 68f6ef88ba434954488867eb97245d36897076869a2bf15cfd14a8f4835f881f
MD5 b13b5655b434d1fe2087f3fd649542a0
SHA1 99f2917138d5906d1bba6e672d7fed3b6203471b
SHA512 e5fb0ece914f7db7184028fac20a16873ad99b39d8914e94dca25abd508e4b3b029967920a98e0aafdb33c1bf0e0a17532e389851bee3948392aa34c1826f453
SSDEEP 384:VIGSduZbIls3uiVOOHT9RrYAyZ0lj3MketmO9dowZQiyqFW29Fpg+w9jDcygOQ:VImuiPT0hYM9TowPyqvgdNDcyk
TLSH
T1CF82D0759B4D291EF0DA3963410617CDB79BCD01ABA848D1188B9F21E09848BF9B25D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 360B
SHA256 b0fbe65c04e4ae9169e286095c5161276e0616d6c5ff04a8549043a16fd724d4
MD5 82c17b6a5ecff0cd8212f9ab68f9666b
SHA1 06cbdf0ae271fa669bb7b8b57420babb8bb4b9ce
SHA512 93134a026b33ceba45977d3f87156630544e2e2e98f659c939d61c8d7626b753b0b453fd29f73a23d29e89a0e18f687d46c72891b83d03ffd29ef21fa3cf9089
TLSH
T12CE02E06B9802329DF9874F228C3082010F28BA4282B9BA193A457E0B0838509DAF602
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 360B
SHA256 9f2d8f71fc56f1663ba0cae5c4400f1633fdddf2793e9dd9046cd3259c574fd8
MD5 74278f4551475e14462f5b988d26a91f
SHA1 559eaa532f2e6204c0e4468e2ad5911b4b09cdf6
SHA512 fa961deb473443720cc5e772d86df549c60f82dc73b50ebb60b50bf75a4ab53ced29a73603e991ec22a2d8670fc78a0c337552142916f68b9d433b95fcfa57b1
TLSH
T144E09706BDC02321CFA075F28893483420F387A4593B5F92E3E657F4B083460AEAF643
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 37aaedc39ecada5648225acce7d4e2a5691785e7294d138fabdeabfb443b6cc0
MD5 c44e2b8dde3a8e6bd7d26638c1f4f55c
SHA1 ddb8dbb95acee17ddf8e713131bb25ded6a59d20
SHA512 178688b9915629148449a424a13eb82a18f31419bf5b6df0fd7815a2dba1f4a87354830be81813cb0019fe347d2de39393c3720c06703a32841d15a782347006
SSDEEP 48:YALlhT1hghvyz1yYhzhTsIRstXLsBfsjfoKsQvos4Ksn3gmzsv4sakzs6tsSVqzs:DjuN0tp3KweLvo13YakjUjcccj6oSPzK
TLSH
T163D18EF7C3D8C62D895155F4A716BF1ECE2A0A28532C3C67C8D8AF0B93E5871D21169E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 1885ff5a9f84343708bb6f03fbab2e44b4c9ebfddacfbb9c3a24b39a15607f2c
MD5 6e320846f48950d81f30a07c244c42ed
SHA1 7eb710a01decee34de087ab9b7e3e01f4c1ea689
SHA512 1e53676d162dfcf5e1bed4f996a3a56754446dfcfc34e4994313c3c11643ed234ecceec8456212e7bc669edbbf4e5194a85700e18d169bb7d7b1cff8e7bb559d
SSDEEP 192:CRlzidakGS+wPv7mpAPRp2de9EHsb+WNnZC80K2fLeXgVyIsnAUge:CRlzL9eHaUXBawAW2fe
TLSH
T14342B52EB924653B6CDBD229FA257753E7F6102131D42E84EBFC8A2C15E76CC221705B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 93d1ec818921464e4bf54b6d931f76b2caef301c426e68632f154620630d7092
MD5 4ec99a760b176a9c4842aecec4a1d0da
SHA1 46071fd1959f31b39be7d5e8f854a5f35a321682
SHA512 1dba537fe55b884628a2f8f1cc9c16722375c0eec843540d29ea8a9580c70001c07e15d4d216b505c15849b13ef774443e22c731e3bba4c7649ac64f1d032778
SSDEEP 192:CRlzidakGS+wlv7mpAPRp2de9EHsb+WNnZC8jP3pevhLeXrVyIsnAUgE:CRlzL9eVaUXBawAK/pevcE
TLSH
T15142A52EB914653B6CDBD229FA267753E7F6102161D42E84E7FC8E2C15E76CC2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 c13a41f72212abd640c501fe1de7679cb90e113138ba7aecafc3b63ee0e46712
MD5 8e3f7c59b44b8356786de4c232eb4c8d
SHA1 e78421e1acd677a470b9013c8236b3dc5b2e64f5
SHA512 26b8f6cee6ebac812f0edf961a4d7f0788ae2da147820e4a91503d3ffb5b653d2e7fe2b1db79e9179a92eb81eec58a4b99a8051d93806ddd73075ebf483b14a5
SSDEEP 192:CRlDidakGS+w8v7mpAPRp2de9EHsb+WNnZC8jP3pevhLeXrVyIsnAUgE:CRlDL9eoaUXBawAK/pevcE
TLSH
T1FE42A52EB914653B6CDBD229FA267753E7F6102171D42E84E7FC8A2C15E76CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 78f2b9e9ebc08798880cb4679beee8aef2e584a4e9691c5edb1c0165ca1273af
MD5 f3fb909317ed06709bfdddf6e293f823
SHA1 f9840b19b75e8120807aa0784c1bde6154aba029
SHA512 4bd189ef0e2f72445f5af07954ee4d6ebdcc450090a92b283a2c281a3cf530c9eff525dfd48ea12519fb7f49e455434598bbe11f388dcada8c12c9ada348e50c
SSDEEP 384:7NjnO7KxkXqKf/pUZNCgVLH2HfgslOv7pLuLcSjZkXODnq+ErU3BHHGu/n0To:7NnO7KxkXqKf/pUZNCgVLH2Hfgs8v7pU
TLSH
T18172E9A76C4C9E370F94CACCDC1A7B4FADB6024B65E9886443FA582503D5ACF114A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 f90f5196ab95568fb77b3e0097a1fc3b4fcc0c03f956f1560d77c08c6050556f
MD5 7ff138148835a749db5e126c717ce8f7
SHA1 331d36361eb06454be4ec301faa3a007571ff68e
SHA512 86951975696da40b28275628cbab6b011b5056577388d44be47a4c92a70c7196be27bee3d2ad1a6edb81121be714979b4220601b0c94fb8e771f3fd070b997a5
TLSH
T1CEB01241D0015201C05203F01552298971586F10D70A370153E07922C829561C414150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe584522.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe584522.TMP
Size 96B
SHA256 d1b0d56d678eb1f2bc74ed3dc6e6a66ebc38762e8b055736755a5062f030226c
MD5 49f6e56fbfb95032152f585dbc0c054c
SHA1 a79e7cef686986277feec86fde7490192aab07c7
SHA512 465d9287eb113dc78da2c9b78f0c5504f6a734791ad37590c0a503479162751db6bac5190ad95a84aee0771cd6ffee35a5b249c2fc61c1e098f2114e3f77726c
TLSH
T1DBB002D5C1027753D04703B42AE5A5DD72A0EF35CA031217A6E45B77ED25AB1552D1A0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 5e4ccef49536d63fef7a7f2651f6272e68cc6a2e73c482b9649459d38f0f5641
MD5 c51a259d612b19ef9ffa6661e99745d9
SHA1 3515abe327bab0b338b6c89f023e1d529c736ae5
SHA512 b51ea1e8a75fe7df7f3c1e5b1e58d673c1bd03bf851096998e3bc2b69b91ba0e0e32013a0033f8cae0ea1682d6276ba2c489bc4f376edc3099e9b7f10c4715a2
SSDEEP 3072:2cGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:2vm7Rkm1tYpBeh2BAoi
TLSH
T1EBC312375DB4E83659B5BB4EB08E0A1F1EF149A7C924DE92C8D85B0437EA7CC1A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 db10f72a4a7ae7ffb3153af8dbda4b748c6b235188445e0fb616eda546e729c4
MD5 45a96268b6f06b9258386579471b313c
SHA1 50ad5a04c8967b093d4cbeb6bf3976e4ee06ae0b
SHA512 d9aaf1fcb470777ddc39f0cc1543945c8435f93f93d20a1ff275d3c2ee5a61b137dea920c05784efccc33146d40a70f22cc8da2d3b4c87334b24ab789d11384f
SSDEEP 3072:37Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:3im7Rkm1tYpBeh2BAoi
TLSH
T160C3123B5E74E9375875BB4EB08E0B1E2EF149A6C920DA82C8D85B0477FA7CC1905974
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 9d07caf19b253e684e2568c5c70fa5eb76fd187bec36287b65d71b6f2a148e41
MD5 9b5a0b3b7dbeebfc652793760c6e0652
SHA1 7d1b88832bfd05d360a7b52c38b7cab403bf5525
SHA512 7493db1728e471cc7cd3e18e6327e6a966a7b71b8b7ee0b2e0d3ca0eb314026287d35705a4db6ddd8ebda30fb2c73bbaaa502afd31b15ba7195e43e95392273f
SSDEEP 3072:3cGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:3vm7Rkm1tYpBeh2BAoi
TLSH
T1A7C3123B5DB4E8365DB5BB4EB08E0A1F1EF149A7C924DE92C8D85B0437EA7CC1A05934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 b0921df8cc617d3084e10eaaf35a1b75b2416bc5973d83a2a315dadf8061bd66
MD5 7cf79f0a84049c5cb772594a97adf053
SHA1 0cb3655790ce3ae695f14c86184f119de4c62c6a
SHA512 90fa14ebdee9c1dbbd78461543ab34c60db5d7e10df22ff1e424d6d4d24f4a277b1a00674080f48ef4899228b93ea505a665b7cb9874f0f1568c55d8f146ffc0
SSDEEP 3072:2fLGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:2fSm7Rkm1tYpBeh2BAoi
TLSH
T1B5C312375D64E83B5CB5BB4EB04E0E1F1EF149A6D924EA92C8D85F0423EA7CC1A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Bewijs van overtreding.zip:Zone.Identifier

Path C:\Users\Admin\Downloads\Bewijs van overtreding.zip:Zone.Identifier
Size 171B
SHA256 d6d312b41b33d4aa95cb3719375f3c9d9151c2e266919f374ccbabc28d742734
MD5 0a8c9a85db4c9077d2e8d3475bfc08f5
SHA1 334f693de4429dd6849e25ce82206f01d889ab08
SHA512 9c30cad66b9534e7dfd1673756396589f1f7c0d78d7b2bf3387893b49702c2aaa6035bdaee3c73ed850e48fde8f375b243ea213eea0007df5f10899ddfeccff7
TLSH
T14CC0809B44048B11130461C4555CD15C761F5A2D941451C8DC10459F7495254E5D676B
MD5 SHA1 SHA512 TLSH

Submit Download

memory/2448-176-0x0000000000A11000-0x0000000000A12000-memory.dmp

Download

memory/2448-179-0x0000000074E50000-0x0000000074E95000-memory.dmp

Download