hxxps://www[.]jotform[.]com/app/261458306142150

Resubmissions

27/05/2026, 15:07

260527-shgy7sbs3z3

27/05/2026, 15:01

260527-sdvdqsaz5y3

Analysis

max time kernel
299s
max time network
291s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/05/2026, 15:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.jotform.com/app/261458306142150
Sample260527-sdvdqsaz5y

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1716	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134243676943556052"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
1132	chrome.exe
1132	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
4960	chrome.exe
4960	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe
Token: SeShutdownPrivilege	4960	chrome.exe
Token: SeCreatePagefilePrivilege	4960	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe
4960	chrome.exe

Suspicious use of WriteProcessMemory 17 IoCs

description	pid	Process	procid_target
PID 4960 wrote to memory of 3060	4960	chrome.exe	87
PID 4960 wrote to memory of 4728	4960	chrome.exe	88
PID 4960 wrote to memory of 4728	4960	chrome.exe	88
PID 4960 wrote to memory of 1716	4960	chrome.exe	89
PID 4960 wrote to memory of 548	4960	chrome.exe	90
PID 4960 wrote to memory of 548	4960	chrome.exe	90
PID 4960 wrote to memory of 4676	4960	chrome.exe	91
PID 4960 wrote to memory of 2120	4960	chrome.exe	92
PID 4960 wrote to memory of 4676	4960	chrome.exe	91
PID 4960 wrote to memory of 2120	4960	chrome.exe	92
PID 4960 wrote to memory of 5088	4960	chrome.exe	99
PID 4960 wrote to memory of 4412	4960	chrome.exe	110
PID 4960 wrote to memory of 4296	4960	chrome.exe	111
PID 4960 wrote to memory of 4468	4960	chrome.exe	112
PID 4960 wrote to memory of 1132	4960	chrome.exe	122
PID 4960 wrote to memory of 4632	4960	chrome.exe	126
PID 4960 wrote to memory of 4632	4960	chrome.exe	126

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.jotform.com/app/261458306142150
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7fff0f2ec728,0x7fff0f2ec734,0x7fff0f2ec740
  2⤵
  PID:3060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1664,i,15581521671983888086,8779162332203314005,262144 --field-trial-handle=2000,i,5994762846928835692,5575529067521359626,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1984 /prefetch:2
  2⤵
  PID:4728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2220,i,15964465103624530735,14313431869566280345,524288 --field-trial-handle=2000,i,5994762846928835692,5575529067521359626,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2252 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2384,i,16473222697361976127,4355142665001360725,524288 --field-trial-handle=2000,i,5994762846928835692,5575529067521359626,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2360 /prefetch:8
  2⤵
  PID:548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3208,i,14681877127455973843,4561850232571732116,2097152 --field-trial-handle=2000,i,5994762846928835692,5575529067521359626,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:4676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3220,i,9784488776276759547,3897415755472268295,2097152 --field-trial-handle=2000,i,5994762846928835692,5575529067521359626,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:2120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5436,i,10997174374198490093,12361386867859324108,524288 --field-trial-handle=2000,i,5994762846928835692,5575529067521359626,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5352 /prefetch:8
  2⤵
  PID:5088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5512,i,16957730296892537929,2189272233090483528,524288 --field-trial-handle=2000,i,5994762846928835692,5575529067521359626,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4564 /prefetch:8
  2⤵
  PID:4412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4576,i,9543889972751895891,5878764626988152566,524288 --field-trial-handle=2000,i,5994762846928835692,5575529067521359626,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  PID:4296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5508,i,17175726067560934192,5871227354952198878,524288 --field-trial-handle=2000,i,5994762846928835692,5575529067521359626,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4604 /prefetch:8
  2⤵
  PID:4468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4756,i,10486357410948122756,4182977819983296638,262144 --field-trial-handle=2000,i,5994762846928835692,5575529067521359626,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4660 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4368,i,14409486699149406583,17700813180007900944,524288 --field-trial-handle=2000,i,5994762846928835692,5575529067521359626,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1164 /prefetch:8
  2⤵
  PID:4632

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5040

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4392

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 6870995f8bbce5731d7d7ff5721ad19b360a34208520f10123d46706dea2ef7c
MD5 afe075b8a69ef0dab30dd7644f636028
SHA1 a55fe45af8811ece22355000188b068cf141563f
SHA512 a8dcbeea76e59ef2f9d016b0bd378ce76dd0c62ceb86cf071cff951515c86526cb5eee0522b6aeaa6404f71f67ab9fde9a273880a8a62d1c64029f64f90d2a1f
TLSH
T1A1F0F9BAD925AC3718FC1B2960944B47E75013572B80995F3A3C820D8FB5A3B454581C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00001c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c
Size 162KB
SHA256 cdb3262e2facd3fd48551ef032b6c8f891c9923fb90040dad875b8307ce969ec
MD5 1f19ea2b3160e6ccea919f00d18d0fa8
SHA1 1ea32ff33847ccdb5a6ab977c30c0d9a399e6e50
SHA512 c75e1b4e4daef3149dfdf78c9bcc56ac54c39e287a4571518b30dfe673be2eb625b3997c79d3895b69b4bdd0ad3bfe4e40bc4d34864dbb5e3cb92b50af0baeba
SSDEEP 3072:4RVUG+UGT5yxw30ljznvpRRRw1XQPBgTsW7tAkE/fHHLQjg:GVUG+BYWsnw1SsjxEXnLUg
TLSH
T14EF30150C9EFEF61114D95F504A09E6065A3CCAE7EB642418C1A13C4E368FE2DBEAF4D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 1d29b4bab8cb9f22354eb49486858d05dcea04ea9e39b4679111aaae005e13a5
MD5 cec28688cedecba0961b7f1e3467fbbc
SHA1 8e4ac49ca6450ed900fcf4da6159a8beb2be659a
SHA512 d728795f0abf35c707ebd6b5125d0cbb26a783155be0f8cb0f7d25f97ed80f99d472a076f619aa6ca15cafe08451db05dc91aa0ad201dc1dc21505bcb2f4608e
TLSH
T15B21C552F0F0E644EF3993B50196EE12343C54B41E134B170316AF5B306B3C18609E2F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 912e9c4605587c8f5d17344b6334feb5e8c1b75f9d24d9c43fbe36b704181c99
MD5 0a21f57a938016928cefed3264f8fc24
SHA1 c6398880cf730f21dece0ee87ac32fa228f1abe6
SHA512 d47df79afa6419517f36e65443d64f6d66321e6c54e58d48f7712cff3b9ec80a8d1974cff0ca5ac4acbffaae7b50cc97547ef8998f83cdeba8144a311edf60c7
TLSH
T1EC4148B7C7D8897D890156E8A6156F2FCD690E14531C3C1A88D8BE0F93E6876E20059E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 b053affdb90c35e5fb8ac93cdaff44552739a23df30a6c4dfbfe33376d176933
MD5 f0e2ae2d0ffb21b348b2cd210ac33849
SHA1 006fe3f9577e6f0af936ec7cadc200d695e0d30d
SHA512 eb78a538a831a7d767eaa45510ddeeacab743903e2be4d55d10a1a11099dbe1da514ff9d50fe25fc8b8906fca6b657c7e12de74783d07c56fdf9ec1370ac1e6d
TLSH
T17B818DB7C3E88A7D891156F8A7156F1FCD290E28535C3C2AC8D6AF0F93E6871D14069E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 2341705e30123578690e669da38a89b47fc2ff685feff7db3ace61b18cb1b31a
MD5 c07d1f3ae5cc0fd5169d62e06ce1dc72
SHA1 8902180b4996e40a31403fc67220c1e12f7383eb
SHA512 9956522d70f43c0429c83325dcbc5c50aa513ca8bf45fc86679c217cc840f6326cdeff4659c36008a33f6370b555b514371ca1f11b3a9f2c37c460efe05fcced
SSDEEP 48:YALlOB+6vOB+PnhS+TsmRs4XLsCffoKsuFfsfoswuKsg4sDOBrs0OBXzs4OBZshV:DuluapvjftaLSDuluFuKusuUu3ikjhq
TLSH
T1FD916CB7C3E8867D891156F8B7156F1FCD290E2853683C26C8D5AF0F97E6871D14068E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 1dd5315f230e9f8073d8a40de42ba48836e877f7e62c4a3903b8a4e076ac7bdd
MD5 f068ca740eb01b8e94b5577212207e12
SHA1 94014a81783120c22d15ec820a04a33ea8492f09
SHA512 90b6421adeb59447842685f46a1df08f0bda2a8a45d0e72c4747331387def504eca27fa0680294e2ac7c57b4616b9bd080612fef45cfef9119f1ee07726dac79
SSDEEP 192:/RXK+VUgv78p9PRp90oZ9DHsb+WNncX074Q2tQea2cuVyIsnAUgE:/RXKuU84LXb5wY0L2O2fE
TLSH
T1F042C92BB9146A3B6CDBD629F965BB53D3F6102162D41D80EAFC8A2C15E75CC321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 4b91f38a4008dd7120c1c3d491e61133f43700e1ce9b12ee90ea5b9774a0b908
MD5 a5928fa47cb496c6bd7017f46f289b6f
SHA1 9b499990a174aa34f73f34793466c4d2109730cf
SHA512 325bc7daf148cc64afcd0100c465e87fa6aad4933231c9669543f7b383eadf39ef2702d663adc202dc00ec61c6e619b74c55c098d82817aa7606452248b6881a
SSDEEP 192:/RXKxVUgv78pAPRp20oZ9DHsb+WNncX074Q2fQea2cLVyIsnAUge:/RXK7U84UXe5wY0L2s2+e
TLSH
T1F542B82EB9246A3B6CEBD219FD65BB53D3F6102161D41D90EAFC8A2C15D75CC321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 02a8cf66535c21b2c9416ebd91b569d1454d39b7809963e48247a2d6a49e26c6
MD5 c2531f0a9f9fe789f9f94b1ab03bc35d
SHA1 a1f72be14a2a848b4a0f5325e25e5c9aa8b6f321
SHA512 16209b56907cb444edb2bf8fe50bdf32e4760bb77dd579817de82289f14f5b5aae72a162bb3a389f752154a9d01aa137a55efed47404044de619cd2e8206a324
SSDEEP 192:/RXKxVUgv78p9PRp90oZ9DHsb+WNncX074Q2tQea2cuVyIsnAUgE:/RXK7U84LXb5wY0L2O2fE
TLSH
T1D742C92FB9142A3B6CDBD619F965BB53D3F6102162D41D90EAFC8A2C15E75CC321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 13KB
SHA256 3426e293396fa1424a09f9423424627a398157ab7bfc3ec06964ae1df493a1c5
MD5 be6f9d6a2cbcb56c02708e735863c266
SHA1 974f8ac2aeecd275c490a6e72bf1549cc608ea18
SHA512 5d06f958f136237f1a30c847cff1a2af158baf7b8f8804d6c444ebc126d222c22c946442ed853f321e6823a9c6894841dac031de891b36a87a920630130e9eec
SSDEEP 384:6QjOp7KxkXqKf/pUZNCgVLH2Hfgsl9RXODOB+ErU3ymHG/5Ut4vtEp:6UOp7KxkXqKf/pUZNCgVLH2HfgsL1OSK
TLSH
T1EE52E867648D9A3B0FC8D58DDC16BF4FADB6015766780C7452FA5C0803A97CB124A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\2c20be506275b797732b4c4f7c379fa39b66b35d\index.txt
Size 184B
SHA256 a31faa4f61710094e86753f47beb5a3582508d1a33e3e5925ee5fc6bc61e05a6
MD5 f9c2dd9965a1b35fa5c6e35eb1ed7dfc
SHA1 e7ab0e56fcaf136bf8e73ef83dbdbbf1ceef0ba2
SHA512 5061c920c498f4521801a02fda3c4435c4ef2e334da7a9feca3d990e7697ab05aca5b70436069d38441085d9cf81cc408bbb7336abdbf4633db4a51feaca2f88
TLSH
T1F7C0226790014721AB20C7C121F89A55D1C10080728188E0B8831B5023A022EC803ADC
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe583728.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\2c20be506275b797732b4c4f7c379fa39b66b35d\index.txt~RFe583728.TMP
Size 192B
SHA256 4e0936f75ad5d4854d6a27770711a63e39ca621ef1a3587d4fa135368d98fe41
MD5 7bf29d0704ee1724422e32f3b233e94f
SHA1 40938c50782946a5968c8e70c50f2070bdbd4bdf
SHA512 d9f4ac6d8643af750df8bd054a7d1fdfe98379c69ee2aa78c4b3068a80e3784576e42a63f31ad9bc28b16943683252e95cf83369b2d92b695ada0a6ad08d8788
TLSH
T183C0222790120B21AB20C3C221F89A85E5810C80768088D0A8433B5023B022FC602ADC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 895778a1a9b8bfc47d3ccd59a0286b6dbd6a06a16572ebe894ef5f14fd932b5d
MD5 f10da1bcce000bc41133f7a208e51d0c
SHA1 6aacc90171714ed9edc792c1a98f3615c916ba32
SHA512 b9350e1c0c783a00b1e3e10da6c108f8599bb9ce25187eab12714d466e7c050f13e7e2eba804a4b4d8acd4762c9b96720d478c35063f348152c6f591d65c2e06
TLSH
T137C01222C02F5451CC45A670B44E208832004F32C0009B9797E095D7FCE70A0912A2BC
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 e39ddccebf7b20f8fa38727611005cfb1e4e83e930b1548ff48321a89fe26aa9
MD5 88ac8d706110d5244c600b6ddc413e19
SHA1 4a79eb473e2ea74256ae7c3d21f736a8e23ab778
SHA512 cc4065c7c6a63a12376ec64581729a0a74b68929ab5247d2e3dc73f38ba678e256b448d4157e36f754f03e546d892eb1df71e688a58ff9e77660c5da8ce80c48
SSDEEP 3072:euGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:epm7Rkm1tYpBeh2BAoO
TLSH
T13DC3123BAD75E93758B9BB1AB04E0B1F1EF14DA7C920DE52C8D45B0423EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 b156a9a786ba0d036b6113f98fa373f7ca21b5bc39bc954f965c936f9d6c0baa
MD5 5395df970926ae7f8baebe704da9f916
SHA1 55232d7055a9161f4c04c940226a828f67ec9b72
SHA512 3790edc78b0f14506c33da91721317cc6461777ab8898ae490d76462f9f2753186d5e1d24fa6b31abb83d64139f682cb8bc88d0c59110e4f6569caf2f97fb7f0
SSDEEP 3072:zuGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:zpm7Rkm1tYpBeh2BAoO
TLSH
T1CEC3123BAD75E93758B9BB1AB04E0A1F1EF14DA7C920DE52C8D85B0423EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 2aec45703f267de6564fdb2df96837ff14031417d6e1d4308ca142bb7609dd76
MD5 1313835072bba2a82fdc956b19d46f10
SHA1 8bf495b715c7d9ff68e579681718b385daee59d2
SHA512 30f72fcd2e2c0caaedff74bd1a945c955c64b05342128438329baed6c0dd26c128bf63f23ed984556bf57a160aac2cee07ae2114555e960a0f1c038c9a12ae13
SSDEEP 3072:uGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:pm7Rkm1tYpBeh2BAoO
TLSH
T1BEC3123B5D75E9375979AB0EB48E0B1E1EF24DA6C930DE4288D46B0433FA7CC1905A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 cae4b674a9d957eb6e23b5ab13e71831dfe739d59d871611a2551167f3f1212b
MD5 62dfc1b9335e2157bf5f159c4f5b0748
SHA1 a2a5ac64e2f6ea41d1447ff54f8cc12c678cc930
SHA512 37f693b9f17a3630407cd8b4e3757ae685ce10e2f00d9271171eb4c60613d33940df60eff247620f86689354377a4e531575380795a4a16cf3508f5f116b7e59
SSDEEP 3072:VZGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:VYm7Rkm1tYpBeh2BAoO
TLSH
T1B7C3123BAD65E8375DB9BB1AB04E0A1F1EF259A7C930DE42C8D45B0433FA6CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 682adc9077ac6a5fc78e235d4c1a02ad6dcd820fde8383e47c5f492641e69c94
MD5 3f6588fb53c793b16290dc539cd131db
SHA1 a4a8c433426db537eda4b34cdd40ae072cfc7088
SHA512 b358111ea77c34265a616eb9dec00a546a192ca2560bfd417542a143d4dd4df48b4acd0a100417c2e8c37fe5024c5e74f20144bf092c709eb391c4d1299f7ad5
SSDEEP 3072:tZGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:tYm7Rkm1tYpBeh2BAoO
TLSH
T18EC3123BAD65A8375DA9BB1AB04E0A1F1EF259A7C930DE42C8D45B0433FA6CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download