hxxps://link[.]edgepilot[.]com/x/O4A08UkHahKWoHqOPoEPXII?u=hxxps://secure-web[.]cisco[.]com/15bI-zyFrm14pEdWuOVs54mb7AXxRwmf6IfyXkam2Fn1T0NAUVrTkzeZtD-Vuzq5YJQJampif6G7L6pXhtizWH8IHYeVtkXLMhwcr7OXWPYBi_s2OwM9EFMWXE-6zXqIDj0Nba-59sbkwZxZIUklFD2_32qISiUE5gauPLOmMhYwJ5GccnCTk5nvslR4awp58jLgJ7WTiLh1TnaJq5k7hwIhpg7cnt6MK2tRT5G3WnFLCT-dm-Zt3owmOp19mUpnUbgdSAmJOMWyLqjTWrBBNJMI1mUzM7h2QGEYkeKc9i2ckOhY7qjZ5GpOXRxYlKWoVWEdIfEJ1GkYmrWCeF5gfJkmdbss3xiZOOx0X1k6PLYgJfOtOMOUjxujAmoyXjD6lj8ou2kvHg96KIuHTQtC_Fg6-LQbqFaBuFxLRbkhyYnCLjqwO88Gfqg_Gv_mMQAqUsSXG705Zphmjjpai8o6Mdfw7wbBZgo2JTmuT4IetXuM/https%253A%252F%252Franjangartis[.]com

Analysis

max time kernel
149s
max time network
146s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
28/05/2026, 00:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://link.edgepilot.com/x/O4A08UkHahKWoHqOPoEPXII?u=https://secure-web.cisco.com/15bI-zyFrm14pEdWuOVs54mb7AXxRwmf6IfyXkam2Fn1T0NAUVrTkzeZtD-Vuzq5YJQJampif6G7L6pXhtizWH8IHYeVtkXLMhwcr7OXWPYBi_s2OwM9EFMWXE-6zXqIDj0Nba-59sbkwZxZIUklFD2_32qISiUE5gauPLOmMhYwJ5GccnCTk5nvslR4awp58jLgJ7WTiLh1TnaJq5k7hwIhpg7cnt6MK2tRT5G3WnFLCT-dm-Zt3owmOp19mUpnUbgdSAmJOMWyLqjTWrBBNJMI1mUzM7h2QGEYkeKc9i2ckOhY7qjZ5GpOXRxYlKWoVWEdIfEJ1GkYmrWCeF5gfJkmdbss3xiZOOx0X1k6PLYgJfOtOMOUjxujAmoyXjD6lj8ou2kvHg96KIuHTQtC_Fg6-LQbqFaBuFxLRbkhyYnCLjqwO88Gfqg_Gv_mMQAqUsSXG705Zphmjjpai8o6Mdfw7wbBZgo2JTmuT4IetXuM/https%253A%252F%252Franjangartis.com
Sample260528-bcdadscv2p

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3564	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134244036024737019"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
3428	chrome.exe
3428	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe
Token: SeShutdownPrivilege	5040	chrome.exe
Token: SeCreatePagefilePrivilege	5040	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe
5040	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 5040 wrote to memory of 1760	5040	chrome.exe	81
PID 5040 wrote to memory of 3260	5040	chrome.exe	82
PID 5040 wrote to memory of 3260	5040	chrome.exe	82
PID 5040 wrote to memory of 3564	5040	chrome.exe	83
PID 5040 wrote to memory of 992	5040	chrome.exe	85
PID 5040 wrote to memory of 992	5040	chrome.exe	85
PID 5040 wrote to memory of 4852	5040	chrome.exe	86
PID 5040 wrote to memory of 852	5040	chrome.exe	87
PID 5040 wrote to memory of 4852	5040	chrome.exe	86
PID 5040 wrote to memory of 852	5040	chrome.exe	87
PID 5040 wrote to memory of 2040	5040	chrome.exe	88
PID 5040 wrote to memory of 2040	5040	chrome.exe	88
PID 5040 wrote to memory of 4032	5040	chrome.exe	90
PID 5040 wrote to memory of 4032	5040	chrome.exe	90
PID 5040 wrote to memory of 5068	5040	chrome.exe	91
PID 5040 wrote to memory of 3272	5040	chrome.exe	93
PID 5040 wrote to memory of 2468	5040	chrome.exe	94
PID 5040 wrote to memory of 2144	5040	chrome.exe	95
PID 5040 wrote to memory of 3428	5040	chrome.exe	96

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://link.edgepilot.com/x/O4A08UkHahKWoHqOPoEPXII?u=https://secure-web.cisco.com/15bI-zyFrm14pEdWuOVs54mb7AXxRwmf6IfyXkam2Fn1T0NAUVrTkzeZtD-Vuzq5YJQJampif6G7L6pXhtizWH8IHYeVtkXLMhwcr7OXWPYBi_s2OwM9EFMWXE-6zXqIDj0Nba-59sbkwZxZIUklFD2_32qISiUE5gauPLOmMhYwJ5GccnCTk5nvslR4awp58jLgJ7WTiLh1TnaJq5k7hwIhpg7cnt6MK2tRT5G3WnFLCT-dm-Zt3owmOp19mUpnUbgdSAmJOMWyLqjTWrBBNJMI1mUzM7h2QGEYkeKc9i2ckOhY7qjZ5GpOXRxYlKWoVWEdIfEJ1GkYmrWCeF5gfJkmdbss3xiZOOx0X1k6PLYgJfOtOMOUjxujAmoyXjD6lj8ou2kvHg96KIuHTQtC_Fg6-LQbqFaBuFxLRbkhyYnCLjqwO88Gfqg_Gv_mMQAqUsSXG705Zphmjjpai8o6Mdfw7wbBZgo2JTmuT4IetXuM/https%253A%252F%252Franjangartis.com
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa7ba2c728,0x7ffa7ba2c734,0x7ffa7ba2c740
  2⤵
  PID:1760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1592,i,7249681488726593899,1639398694656006401,262144 --field-trial-handle=1892,i,2317447975174847944,18140614288036152199,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1888 /prefetch:2
  2⤵
  PID:3260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2216,i,13151433133689906716,8928350631995522862,524288 --field-trial-handle=1892,i,2317447975174847944,18140614288036152199,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2228 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2372,i,4628800387613022049,13282789037030585604,524288 --field-trial-handle=1892,i,2317447975174847944,18140614288036152199,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2544 /prefetch:13
  2⤵
  PID:992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3220,i,555493153355533645,15159393235152076800,2097152 --field-trial-handle=1892,i,2317447975174847944,18140614288036152199,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:4852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3224,i,13808759279063678652,1057003433514177442,2097152 --field-trial-handle=1892,i,2317447975174847944,18140614288036152199,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4336,i,8405851180153338554,132101801427379797,2097152 --field-trial-handle=1892,i,2317447975174847944,18140614288036152199,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4352 /prefetch:9
  2⤵
  PID:2040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4760,i,1313395134169558669,12675233651271181142,2097152 --field-trial-handle=1892,i,2317447975174847944,18140614288036152199,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4736 /prefetch:1
  2⤵
  PID:4032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5712,i,6239390077664759987,7785275747460928272,524288 --field-trial-handle=1892,i,2317447975174847944,18140614288036152199,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5716 /prefetch:14
  2⤵
  PID:5068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5716,i,13765533925942820211,15051743380577312237,524288 --field-trial-handle=1892,i,2317447975174847944,18140614288036152199,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5776 /prefetch:14
  2⤵
  PID:3272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5932,i,2231488084210582098,8852339297700057465,524288 --field-trial-handle=1892,i,2317447975174847944,18140614288036152199,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5992 /prefetch:14
  2⤵
  PID:2468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5636,i,8373002654188929650,17291482323352667460,524288 --field-trial-handle=1892,i,2317447975174847944,18140614288036152199,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5732 /prefetch:14
  2⤵
  PID:2144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1064,i,13742804905727773224,13088454940249768343,262144 --field-trial-handle=1892,i,2317447975174847944,18140614288036152199,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5952 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3428

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4184

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:876

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

13d69aa5-d17e-47a1-8d0c-06d0458f5876.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\13d69aa5-d17e-47a1-8d0c-06d0458f5876.tmp
Size 12KB
SHA256 d3bb9af48c6159a9886f18b63a28a58b877ef90b2938e0a0ca8e9dee9ec1e67c
MD5 212c78e98f22370c3973fabd64a636e3
SHA1 cc55890f4be706ab518f94e440417433bb3a5a43
SHA512 85f61b49eabbfc06a4a52a7a1d2648850d4c730dddfa9d79027af8bc0d1f62f40f99426ba0fc6946aa21d2261d127cff05ab3f75b58847ae676b70d508f42b06
SSDEEP 192:pRKnizKbfiv75pAPRp2usf98Hsb+WNk+Chao22lzUkwmVyIsnAUge:pRKnNuVUXCuw4o2qee
TLSH
T1A242C52EAD50697B9CCBD32AFA217766D3F5102125D42E84EAFCCA2C14E79CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 bd45fa79600ec678b2ed0b60820d40bbaf8bbd21628cd6c90980f70fb40c0d0a
MD5 43b9a7f4fa4b021e02f1b8e8857fb18a
SHA1 f43401bfc36d062a41487863dd589282a0e3239e
SHA512 e3e51a4b1e4a68e7df8c40dae76735a6b1b93fa8e700681494c5e74baf48ae74d113be54cdc66310cbe94264f75eede652289094c662db669b81ca4c84228f18
TLSH
T18FF0F4A6DC21AC7B08FD2B6960651B47E79013272B90594F3A3C921C8FB163B4996C6C
MD5 SHA1 SHA512 TLSH

Submit Download

9265921a-a940-4c07-b817-a46e70ad2c30.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\9265921a-a940-4c07-b817-a46e70ad2c30.tmp
Size 4KB
SHA256 68347eb72690a0c2ac7012ea2ebf937d472866b2986cf2ee08abbf767b602b4b
MD5 63841f97802eed70cfc10ccba2bb7ea7
SHA1 3193328166d777a6ba7e08cd4872a5666c7d659f
SHA512 44f92b95becdaa2b4c432dc022ea78570c5a2f7cf2afba777f2ba0a93d5aa762d55afa30bf3cd9a92cc5372dfedb87d00def2f28e5f9786b0f79ca159d15a15b
SSDEEP 48:YALlhSesTRs1XLsZfoKs1fsros2Ks54sCgmzs2GlzsvGBusA43zsrXzst/tzs73a:Dw2E2CmTCRGQGBG4is/IK
TLSH
T167817BF7C3F88A6D890155F5AB152F1FCE290A54532C3D5AC8E4AF4B53E29B1D20168F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 161d59dca3b4d953acbe88a2535a95d214a941baa7acf3d87233bad7a1df74d2
MD5 4eeb01691e84f34b1570c2267813d8dd
SHA1 9eee77814ddf98fb4df7fdd048280d1410be9b11
SHA512 dcdb7e3e9f09da54e697df182afe2091ebeaac7e3c55cad4f151fd4a37336576ed837caa10de3d0e315adb62733fcdde746a92779e440f6043f56b810ba0bc8d
SSDEEP 48:YALlhSesTRs1XLsZfoKs1fsros2Ks54sCgmzs2GlzsvGBusA43zsrXzst/tzsQjr:Dw2E2CmTCRGQGBG4is/HjhWK
TLSH
T161917BF7C3E88A7D890155F5BB152F2BCE290A54532C3D5AC8E4AF4B53E28B1D24168E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 d9e78e84cc26a96458cc69e536266c3df3e2e799d28f5bc1105e81246145bd57
MD5 283ea3afc0f305268ba97fc086f44825
SHA1 8187c0c2cab48a1f8577a4dd9600adcbc8066193
SHA512 e3f3151dbf98395d2d94ab78ab6a2ada643bbceef49f7c22c8690cb7c921bffa4f002048e1b76727477fba64a1abd408bdb3000b852a9a0ee0c813e7419d8339
SSDEEP 192:pRKnvzKbfiv75prPRpHusf98Hsb+WNk+Chao22izUkwZVyIsnAUgE:pRKn2uVdX9uw4o2rfE
TLSH
T12E52C62EBD50697B9DCAD22AF9117B66D3F5102129E02E84E6FCCB2C15E7ACC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 6580b9be38e043e5d2436ff4ae9296f74b369cbea58296d9af5604bd4b1cc474
MD5 64d379491386bdf9d2b82bfed49740e5
SHA1 522dcfd2f4d188bbcad58538c6461f8bbd43b2e9
SHA512 5d58b317ff66bb8f8373e7f5972247e20a553af50c4ad2756a022edf34ee0bb5688a058056e953d457420c82cddb02044d6062aa1788af614d0c7bcf05ddc3bf
SSDEEP 384:ywjuJ7KxkXqKf/pUZNCgVLH2Hfgslu17pLuLcSjwxXODuh+ErU37PHG7iK:y0uJ7KxkXqKf/pUZNCgVLH2Hfgsc17pV
TLSH
T10B72FA67BC4C9E370F94CA8CD9167F4FADF5024A65E9886482FA9C2503D5BCA11092FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 a4f1cc23ce7f8a2ae4dba4dd73dab9e70e861fb0a09bb9aa736d4859c7831f11
MD5 5961220d0dfa5c7996ff003692e28f40
SHA1 3b15e66ad29d71ac7943e1ff6a3a496a97fa06ff
SHA512 afe4b0f3517b91c7e1189fdde5c6695dc9a7fd83951ae0cdcb3b7449be93c77b24b610300fab979462920944913cf326be1c947221bac893cabce4b259e42f16
TLSH
T14FB0121080819312C04203B01192148C73546F19A70A2B09A3E06933C8265618014061
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588c3d.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe588c3d.TMP
Size 96B
SHA256 4a8eb1eadee22a7c5662a7bbc514fe4852fc5b598dec9b254299a51ed43d222c
MD5 ca900772c1ff20cfebe8f5f7b2435f5e
SHA1 10ad077a82ca5828549343464d6323779086f2d4
SHA512 e5d86b5c488ec7602f72b5d3b21f9f30962fa1bcf5875b6ff817f9a149c880801f5073e7df6c0d04668e5b5d9f7110acdae6674efccaeb4a4c55c4b390039d6a
TLSH
T1CEB00259C212622BE05303B4269595E8B164DF75C60323A393F45B77DC2D6B16665270
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 ed99352fb57316fa1bb21c9510b10e258ce497fece741b313891762eb958f0e4
MD5 7a5eb99b4d55b971707768bcbebbf0be
SHA1 a24c86f9b4c592b748316d4d9a29f412a1e7d69f
SHA512 92f79e23294bc3b08dbb825118381a6e3a90dc5af16c224e6c2a6636ab33f8b40378c6493a8fdd3e15ec58f84fd5cab1cb06b16fdc79d44ccc57bb479f73b708
SSDEEP 3072:9uGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMF:9pm7Rkm1tYpBeh2BAoF
TLSH
T129C3023B5D74A8774DB9BB5AB04E0A1F1DF149A7DD20EE91C8D85B0423E9BCC0A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 ea2a4635886cea5dbf27deba8167e37c1fb9ef498daae12b5146b991e9d695c7
MD5 4721a158667e23e6fc84ab1b04624558
SHA1 99c81e719cdd83a41d2d583f932a9ac4ea738810
SHA512 f9927d83d90dc8aed682aa110314d3ae83c6f08b80b244d869d3409a3d68371f1e029f6420bdac4ebaf5dcd9b971877c27a86e29faed0694c8112e0e33006789
SSDEEP 3072:+ZGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMF:+Ym7Rkm1tYpBeh2BAoF
TLSH
T101C312375DB4A87759B9BB1EB04E0A1F1EF149A3CD20DE92C8D85B0433EABCC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 d4aa1d187b858d03d43505bdf15afa937b25c0a59ca5e13157b2022791f37d33
MD5 79d1c1e447d9dcc65873631e2c5b3cba
SHA1 2818943e888f7e7c9050cd677405b9f17b863a46
SHA512 eecae5b7b6c369d960574cc8f248d897dcd4006b0f3dc19e183579780becaa16ac63c15d0e7b0e727b1fc13f8b26e26099625ad8497b2d601695834d0bf981f8
SSDEEP 3072:5ZGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMF:5Ym7Rkm1tYpBeh2BAoF
TLSH
T16BC312375DB5A87659B9BB1EB04E0A1F1EF149A3CD20DE92C8D85B0433EABCC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 272c6fb752822da583e1058327d7e703b87e069008e85ad862b6d73c0b4934a5
MD5 a064d82b44f1e1c2a94aff1091e8291a
SHA1 2762fcd5ce45504e8e8ed33c398aefb7a9a0bcda
SHA512 7de25ffdcc3c3467337a02b93e4c0e3a1c4e95d2f557162d33ebe294b5f941942cf06d60da94161d0beea0ccace8cb2bd0f704720d4d32c934f78c0672b9135c
SSDEEP 3072:CGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMF:1m7Rkm1tYpBeh2BAoF
TLSH
T126C3123B5D70A97759B9AB4EB08E0B1E1EF149A6C930DE92C8D85B0477FA7CC0A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download