hxxps://bazaar[.]abuse[.]ch/download/2f4d753ef744d84d4b00732b49b323ea206621ed24394939cdc09b0122a2e320/

Analysis

geolocation tags

cacanadananorth-americatoronto
user interaction
yes
max time kernel
48s
max time network
49s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/05/2026, 11:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://bazaar.abuse.ch/download/2f4d753ef744d84d4b00732b49b323ea206621ed24394939cdc09b0122a2e320/
Sample260528-nc84aae18s

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4060	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134244406010753822"	chrome.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{0CE214E0-B58A-42E3-B018-42ABBAF05A25}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3232	chrome.exe
3232	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe
Token: SeShutdownPrivilege	3232	chrome.exe
Token: SeCreatePagefilePrivilege	3232	chrome.exe

Suspicious use of FindShellTrayWindow 41 IoCs

pid	Process
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe
3232	chrome.exe

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 3232 wrote to memory of 5112	3232	chrome.exe	86
PID 3232 wrote to memory of 4060	3232	chrome.exe	87
PID 3232 wrote to memory of 4652	3232	chrome.exe	88
PID 3232 wrote to memory of 4652	3232	chrome.exe	88
PID 3232 wrote to memory of 2096	3232	chrome.exe	89
PID 3232 wrote to memory of 2096	3232	chrome.exe	89
PID 3232 wrote to memory of 748	3232	chrome.exe	91
PID 3232 wrote to memory of 748	3232	chrome.exe	91
PID 3232 wrote to memory of 4140	3232	chrome.exe	92
PID 3232 wrote to memory of 4140	3232	chrome.exe	92
PID 3232 wrote to memory of 1232	3232	chrome.exe	93
PID 3232 wrote to memory of 1232	3232	chrome.exe	93
PID 3232 wrote to memory of 2296	3232	chrome.exe	97
PID 3232 wrote to memory of 2296	3232	chrome.exe	97
PID 3232 wrote to memory of 1512	3232	chrome.exe	101
PID 3232 wrote to memory of 1512	3232	chrome.exe	101
PID 3232 wrote to memory of 2956	3232	chrome.exe	105
PID 3232 wrote to memory of 4360	3232	chrome.exe	106
PID 3232 wrote to memory of 4360	3232	chrome.exe	106
PID 3232 wrote to memory of 2304	3232	chrome.exe	107
PID 3232 wrote to memory of 5916	3232	chrome.exe	118
PID 3232 wrote to memory of 6032	3232	chrome.exe	120
PID 3232 wrote to memory of 6040	3232	chrome.exe	121
PID 3232 wrote to memory of 6048	3232	chrome.exe	122

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://bazaar.abuse.ch/download/2f4d753ef744d84d4b00732b49b323ea206621ed24394939cdc09b0122a2e320/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7fffdba2c728,0x7fffdba2c734,0x7fffdba2c740
  2⤵
  PID:5112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,1193821864761611789,9404179564536344940,524288 --field-trial-handle=1800,i,3546887709703168347,9069301693057290630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2204 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1724,i,6469699420483430117,2213216699974768839,262144 --field-trial-handle=1800,i,3546887709703168347,9069301693057290630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1796 /prefetch:2
  2⤵
  PID:4652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,15225070809219674816,10015192109098382934,524288 --field-trial-handle=1800,i,3546887709703168347,9069301693057290630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2488 /prefetch:8
  2⤵
  PID:2096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3200,i,6317539827940643126,1605625145450411440,2097152 --field-trial-handle=1800,i,3546887709703168347,9069301693057290630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3208,i,17271006382932252490,12659481799030244287,2097152 --field-trial-handle=1800,i,3546887709703168347,9069301693057290630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:4140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4412,i,16568140562783310050,9674124188306609918,2097152 --field-trial-handle=1800,i,3546887709703168347,9069301693057290630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4416 /prefetch:2
  2⤵
  PID:1232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4708,i,5302610981104974927,15582098136970999230,2097152 --field-trial-handle=1800,i,3546887709703168347,9069301693057290630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4680 /prefetch:1
  2⤵
  PID:2296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3648,i,9289149264165842110,5565179131911786693,2097152 --field-trial-handle=1800,i,3546887709703168347,9069301693057290630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4916 /prefetch:1
  2⤵
  PID:1512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5100,i,7410088491918430649,879649708395714887,524288 --field-trial-handle=1800,i,3546887709703168347,9069301693057290630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5108 /prefetch:8
  2⤵
  - Modifies registry class
  PID:2956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5112,i,2832719799267312983,9806227714033620712,524288 --field-trial-handle=1800,i,3546887709703168347,9069301693057290630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:4360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5780,i,18352880825540469490,3489579446635764592,524288 --field-trial-handle=1800,i,3546887709703168347,9069301693057290630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5788 /prefetch:8
  2⤵
  PID:2304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5896,i,16281889389780046989,9632859656262351038,524288 --field-trial-handle=1800,i,3546887709703168347,9069301693057290630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3076 /prefetch:8
  2⤵
  PID:5916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4820,i,6391154253645987988,7046961106947658622,524288 --field-trial-handle=1800,i,3546887709703168347,9069301693057290630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6080 /prefetch:8
  2⤵
  PID:6032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4756,i,18172546609578702473,8173524898575543072,524288 --field-trial-handle=1800,i,3546887709703168347,9069301693057290630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:6040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6040,i,14811564370048228872,10058377939754266233,524288 --field-trial-handle=1800,i,3546887709703168347,9069301693057290630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6112 /prefetch:8
  2⤵
  PID:6048

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4352

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1904

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2056

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 eec0cf4b725828dcbea2cc4bb39fe3e969aed2cd184074bb9b177e10979403d4
MD5 d411eca9d223d219a8bb5121cc2af4ed
SHA1 8b9613b38f08f1bcfba154a68c1d5bac59c5868a
SHA512 f2db4bc3f0678c4d7adbd0af3ae743793df967e7efb98e149441a5ea7c134ed78d2680194416566280f3659eae0c49f219c6655841d15685f874b3b65fc0e146
TLSH
T1B3F0D6A6C9209C2B18FC07192459074AEB54135B2B41496B3A3C930D8FB553B5585D1C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 288B
SHA256 0c04548152a672d4bf73bacf29c86d9c1387157b4c52d68ae5c5538936a992a7
MD5 51ff4e72efcf68ab21d88d64835ad556
SHA1 43b576193e85b33e4555fecbb480c25683d2eca1
SHA512 4e38ab25f1bbc4e6b30dfde9f5b8353d86277e78108d20e8d871eb36c379e0e51313f69dff79f81ae2e36994191455ecd0233aa6f7c4c6f0c07b764f224a10e1
TLSH
T1C2D05E1010908FD2DFEC0272EC914C593A7E275F942A5F0DA3A2E4B024676A16AA5ED5
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 406daf30f691467470c4d2121cbba7e4d50ec66111b529404d5d98a35bc32117
MD5 cd9489bffb88c3b0263c47ecaac94653
SHA1 b6d64c86b659e47072e45499a69cc803d7f52867
SHA512 869932688c8ec30d703d78b7eb1a013b471e267eff61b43084789879f25cfbff06d51a83ae13d408b2fe820f616d35c67f5731f2615c4294bd7edf04bc52a22f
SSDEEP 192:wRnMuUhPv8Nqyfv7+ZympAPRp2e/95Hsb+WNn8/WVIP2vO8qkwPVyIsnAUge:wRnMrhcNidUXV7wocO2vgJe
TLSH
T1A342B52FA920657B9CC7C229FE267753EBF9103525902E44EAFC8B1C15E76CD2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 923ce654a0ff3484fa850d46535e6d80fa9c3c6095f3d966d6fecdfabad6076e
MD5 6087694e3c7d21f3115fef65afb1fbbb
SHA1 4ab8f3a77074ea39c08ec3757c1827b0af280bfc
SHA512 1c9c0511330828499ecb3d347e1a8b1ac8f4392b8c734e0e8fad5536a184f21e8f56e2c3777e7983138c6ee8915c0dab16df49b4ec83f0ee499cc8e3ea3fe486
SSDEEP 192:wRncuUhPv8NVfv7+ZympAPRp2ej95Hsb+WNn8/WKneR38qkwUVyIsnAUgE:wRncrhcHidUXF7woXeRLwE
TLSH
T15942B62FA920657B9CC7C229FE267753EBF9102625901E44EAFC8B1C15E76CD2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 93a969d5494520a313d59c847d3ee10e51ce49e2c8cea4f6ea38850cfab527d0
MD5 65eaa0a57fc2a07c6f5f8e9c22429ba6
SHA1 83b5d3c038efb456e4191e45a08c6c1cf8b7d43f
SHA512 2f69609ebf02ccda7dd197a901863ecdf075cd94dce3ddcaf8f69f28aa522eed4a257c71ee04de563d2d250a18b8f7b4dfd5e90247d3586bee22fe519ccbce35
SSDEEP 384:Q+jM77KxkXqKf/pUZNCgVLH2HfgslAG7pLuLcSjW3XODM3+ErU3oPHGqkkpLtE:QOM77KxkXqKf/pUZNCgVLH2HfgsSG7pu
TLSH
T136720A67684C9A370F94CACCDC16BF4FACB5025B65ED886492FA5C1503D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 f068d0b8d1226326bdd2cd88603cc58dab5c536c73726926da252eb2cb41f51d
MD5 46b46e3596ef79b9156334400448d0f1
SHA1 379cfd9eff809e0521b1d62e062af447f1567052
SHA512 a0b32721393e0c30c7efc81583922dbea8524a0fdad4c952d59c7c07f539d47ab6a9e86de8d0b91037236bab6e0ae931b3935c7edec1fd218860bd47e6de1dba
TLSH
T104B02288C0033302C00203B03080C0E830B2EF22CE030A8283E80A23CC30A320C20220
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 f01a856e66088e79f509a44046b7e063b5e68bbc76ed63e2ebfa9b068548aeff
MD5 dc456ad78c2c6cee83ab0894ac2aec73
SHA1 e76b80bc4685dfa72cb0c3cbda785622bbcbf5ef
SHA512 86e03c6ac9d0f4cfd15bf2d06337291fa47d8c14324131d4f1d0248c40fb324975c7c83050ff6bf3690ab0b2f651934fbbe45915c1a2bedf3a36a8917f7358ce
TLSH
T14CB0128290015501C0C203B42182188C72187F12960B170263F87972D8391618118090
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 f731431195a9fa92fc1a1b00d040fae96c76c5e1bc8777e32b965bd92dc73a68
MD5 526165cd151b1c121bdf5123bf9e1258
SHA1 9ad3bd72278916d1bb1fbc2407075d6c2ed51ce9
SHA512 8008d86f133aaf62751769847a52bef592ba0093759186e936ac45b5a77117860b2ba5d9388e01da1a068f067cfb79c8985057ec82749b267bd355cc78aea198
SSDEEP 1536:T3xeyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbz:Fkqfd7NtZL8cHQRZEQ6Spsk
TLSH
T117C30237ABC61E339ED2CB70B9130ED797B944A99034D301AA6D27FB6C83591658289C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 6498ec1db3936ffc5b743f999c42ac0f20e679061fca61cb5ff2bb1d8fd19a04
MD5 1b6ca038148b343d27d041fc10d00aff
SHA1 7a792de5bcd6dfdcd35bf2c7c615b5f555279cbd
SHA512 52c85b9c9cde40d7f82cedc4a227d98a82f1281c8108039ea4efa62257e82f66f7dfb5cce8f3e323e4fc64d8df79e05318a63f3fa51c106537b950284e97e576
SSDEEP 1536:TYQyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjf:Jqfd7NtZL8cHQRZEQ6Spsk
TLSH
T112C30237DBC21F339D96CB60B9530FD697BA44A59034D301AA6D77AF6C83491644289C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 bd5b8a464ad9c5b3474cbbe04a6cac365024eb6442efaeb829eb94ea536fe62a
MD5 13beb77b2158164a759a7afa725622cd
SHA1 95d304501fc59d263e86424c27230ee8d9b78abf
SHA512 02e06b5b387b2518f8ef052048fac32b78badfeab154b5ccd252cffe812a3c882d88ed4eeda5e62c0d0eff8bad505d4c49723f85b28e7d6fdfa88105f6cdfe0f
SSDEEP 1536:Y3xeyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbz:ukqfd7NtZL8cHQRZEQ6Spsk
TLSH
T166C30237ABC61E339EC2CB70B9130ED797B544A99034D301AB7D27FB6C83595658289C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2f4d753ef744d84d4b00732b49b323ea206621ed24394939cdc09b0122a2e320.zip

Path C:\Users\Admin\Downloads\2f4d753ef744d84d4b00732b49b323ea206621ed24394939cdc09b0122a2e320.zip
Size 3.5MB
SHA256 8169b12b0b4d0b2411197592ca25b8e25525ee2201a2dad06b335bf1724b71ce
MD5 fe993fadaea3510430351810abbdff93
SHA1 edcc15f84aa7f2279f1adb61b519df83e34afefd
SHA512 34f977cc70c4198a082e0fd7e8f11a6a6c8bbc46578c8f7ee9a9828178681c72713f9e4a305c926527ee8821aaf34d60ea49d3a34c69947dad614a7eba259253
SSDEEP 98304:GPAoWTosceWO6ezTr53SncDbPQzdkDIN+VQ0pH:GAKazTEwPq0IN+VV5
TLSH
T10BF5339E749D5107E6BBB49DA44CD1ADBA85DF6210E88DD38BA32B63905DF000CADCC3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download