hxxps://github[.]com/zentir0g/discord-username-checker

Analysis

max time kernel
900s
max time network
898s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
03/06/2026, 16:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://github.com/zentir0g/discord-username-checker
Sample260603-va3xtab12w

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3880	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134249789034506492"	chrome.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3054922120-1500138384-519748408-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3054922120-1500138384-519748408-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3054922120-1500138384-519748408-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3054922120-1500138384-519748408-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4852	chrome.exe
4852	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe
Token: SeShutdownPrivilege	4928	chrome.exe
Token: SeCreatePagefilePrivilege	4928	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe
4928	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 4928 wrote to memory of 3788	4928	chrome.exe	83
PID 4928 wrote to memory of 2044	4928	chrome.exe	84
PID 4928 wrote to memory of 2044	4928	chrome.exe	84
PID 4928 wrote to memory of 3880	4928	chrome.exe	85
PID 4928 wrote to memory of 3548	4928	chrome.exe	86
PID 4928 wrote to memory of 3548	4928	chrome.exe	86
PID 4928 wrote to memory of 3440	4928	chrome.exe	87
PID 4928 wrote to memory of 3296	4928	chrome.exe	88
PID 4928 wrote to memory of 3440	4928	chrome.exe	87
PID 4928 wrote to memory of 3296	4928	chrome.exe	88
PID 4928 wrote to memory of 3260	4928	chrome.exe	90
PID 4928 wrote to memory of 3260	4928	chrome.exe	90
PID 4928 wrote to memory of 1888	4928	chrome.exe	95
PID 4928 wrote to memory of 776	4928	chrome.exe	101
PID 4928 wrote to memory of 988	4928	chrome.exe	102
PID 4928 wrote to memory of 1808	4928	chrome.exe	103
PID 4928 wrote to memory of 4852	4928	chrome.exe	104
PID 4928 wrote to memory of 872	4928	chrome.exe	105
PID 4928 wrote to memory of 872	4928	chrome.exe	105

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/zentir0g/discord-username-checker
1⤵
- Drops file in Windows directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x21c,0x220,0x224,0x1f8,0x228,0x7ffac94cc728,0x7ffac94cc734,0x7ffac94cc740
  2⤵
  PID:3788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1752,i,16711356470602400321,16871274353350347375,262144 --field-trial-handle=2016,i,9754246382286106034,5729114340272588079,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=2008 /prefetch:2
  2⤵
  PID:2044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1660,i,1591437593609209995,229688091352728488,524288 --field-trial-handle=2016,i,9754246382286106034,5729114340272588079,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=2280 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2408,i,3846833430659937115,1363457180462616797,524288 --field-trial-handle=2016,i,9754246382286106034,5729114340272588079,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=2780 /prefetch:8
  2⤵
  PID:3548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3196,i,477281744356847020,9162715184972978300,2097152 --field-trial-handle=2016,i,9754246382286106034,5729114340272588079,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:3440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3208,i,13552377133915265218,10389668369043084059,2097152 --field-trial-handle=2016,i,9754246382286106034,5729114340272588079,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:3296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4428,i,12544257292145396173,667012563640125160,2097152 --field-trial-handle=2016,i,9754246382286106034,5729114340272588079,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=4436 /prefetch:2
  2⤵
  PID:3260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5672,i,18043688389549085084,1445011615294515391,524288 --field-trial-handle=2016,i,9754246382286106034,5729114340272588079,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5680 /prefetch:8
  2⤵
  PID:1888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5828,i,5330317133288884965,16517890017803912703,524288 --field-trial-handle=2016,i,9754246382286106034,5729114340272588079,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5692,i,17912557422689996686,4894021520794226656,524288 --field-trial-handle=2016,i,9754246382286106034,5729114340272588079,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5672 /prefetch:8
  2⤵
  PID:988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5820,i,6935168396443705201,12275095114554582018,524288 --field-trial-handle=2016,i,9754246382286106034,5729114340272588079,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:1808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4556,i,14698863626490516383,3971758066406434514,262144 --field-trial-handle=2016,i,9754246382286106034,5729114340272588079,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=4472 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4556,i,17503035030827440821,1908749752373227401,524288 --field-trial-handle=2016,i,9754246382286106034,5729114340272588079,262144 --variations-seed-version=20260513-010036.937000-production --mojo-platform-channel-handle=4500 /prefetch:8
  2⤵
  PID:872

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3572

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3960

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 95f48403964cb697a7efe4fbe3fb941195a31deef15d0fa9d692ec0b5b831470
MD5 6e1b633bd7e525f1413a495ef8c074a4
SHA1 c8759521e6257d7f6756288b374606d4316d0c1f
SHA512 ede38d138033dea14a21bf7785d4f48dc3cc1c1d3a8feeccef41fce6bf61a8c947cbde00526b979a6c93205a4d28ad0fbbafef67f946be2221ddfbd874923c2b
TLSH
T13DF028A6C922EC371CFD0B1D60644B47EB5013272780888F3E3D930D8FB167B458692C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 61fa031298856c63dd84faea5439a76639d8fdaff6ba8ec04b731a0b7eae86e9
MD5 bb10bf99724bf01ab783b5ceb9284b69
SHA1 d05f54fec820b0b5f587116558f07d88a4886a86
SHA512 7c8d3c2a9d27455850a6f91d88b16074f8b0c94c5ff0fcf6b4a31af4011e11488cb899cf3b4c62e63a2fc39f0a49fdc5aa89b973e5ee548a09b72d078c7f017d
TLSH
T12B51E9BB99F4AD09DFE2213691D46948F2B868992D03BFD747870D307917BD28418C8F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 6ce17b92754fa291cdb8f7904c77c10e308b2068aefc24ae30daa5e3aea45a61
MD5 5895f33895ec96f22ad88e501cbacdb1
SHA1 d8aa0c573d0b40cd328ef489cfd94c197f8a534b
SHA512 e9d6e143472faf033f5b276dcaa815398ade9b4783a816419c5de085a93c7c52a7d91d6681030cdd66de10a53f08f7c4d2ddec977740edb76bb2694215e4e062
TLSH
T1AB4169F7C7D88A7D8901A6F5AB252E1FCE6D0E14536C3C56D8D4AF2B53E29B1D20018E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 9768157c317cd39b5040d62bb4ce9e524cecbb833dcf9f3d6707f2abdfe81a55
MD5 99d4ac1acb0e32145fba095fe39bbb06
SHA1 d04acab63d7ab33caded3a9844d3301d3aa51d0a
SHA512 bb5f3bda41a3918ba83e875bcfbf33023906682a6b5ce8ec3ba5396272ef189987c198e3f65b76c3a64b346f82e7286576d9ba07c60fab3b1514e40aace1a5b8
TLSH
T1F0818FF7C3E8857D8A0196F4BB156E1FCE2D0914431C3C6AC8E4AF5B97E2971D24068E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 3870a84492109a85cbc3e3972334c5d8ac1433e6176dd2a4c6bb7e1ead39331c
MD5 d484b4f7f6622f8e36648ed63a9d0363
SHA1 02ed9db52de2d0a80c9bf70dd33e9916a9053b1e
SHA512 e7f0cbd7c9bc0c16b1398e834705aae42d2a11f3b99a9a4e2184d7a20b675444552462c754556bfb4f5eef4be30b5d037ec32779d51768b716d6c4e008193152
TLSH
T1CD819DF7C3E8866D8A0156F4AB14AE1FCE2D0A14431D3C6AC8E4BF5B93E2971D24065F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 f12e83a29e25aa12385d70cc26000b7d8503cb86808e53f09a8a6e36de7cea17
MD5 fb1fa52cea135e7677bfee4f5ac0cd22
SHA1 8abb15c0c30a6016ac92acde1db4d38d418d9771
SHA512 e13e0d11ee71c42947357c9b030795ac57b05ff23138ec89ca79ca73c36e5afa05347de15e5615fa7047a1bfc41d7129db5cda819c0f2d8122f25d97c7891cf8
TLSH
T16C819EF7C3E8857D8A0195F4BB156E1FCE2D0914431C3C6AC8E4AF5B97E2971D24068E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 6b01d51df4dbbf9a12baa7286a89a2e587ed1a5bcc1144f1d001a8ffa1f98554
MD5 5c9a5f16af2420dbac9ab63ed787a3b6
SHA1 738ea4b913d6f7dea98510e1d1e5b3a38a6f0a2c
SHA512 b1b681cc3f1caff0c5d670b28b1ce63412a84bf5ca329b25570e5176e2cc6e52da7dc47a3cd7c3fc73ab0441a9189406014e5a20099b9ad8a56495e4efcc7096
TLSH
T1A7215A97E67EB46B147D096B1D04BC1A29BAB83102636CF4DFAA816CE0915F71F1242A
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 f071eb4bfd9fb3c476cf700901bf3472342b155b1e8dec4b07ccdd91e22a545a
MD5 33b4fbb7db5d749d949ec48f086fa82a
SHA1 6868628a17e70c6cbe42dd95077515d687f595de
SHA512 b6fce94f779a3a363ff7c49532981cd4a01bb1e302e8da17389d2bb433f71d5a60331db01a1a4bf0cbfe21f5d0a08aba3a2757495ab10ac50bd4d237619ae2e8
SSDEEP 192:wRhLjNxfsaG3ROv7bpAPRp2S3+sy9Q9Hsb+WNnQX2f82lw0e22RICVyIsnAUge:wRhLjbfv0qfUXx8qw2p2lF2Pe
TLSH
T1A442D66EA950297B5CDBD36AFA253B97D7F4103261902E88EAFC8E1C08E75CC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 45a8488043d2a879c21c45a19366a3c6a6ab6f075339bb7b469a528dc841c4be
MD5 198dc9116baf78892757d7f81e39b222
SHA1 53237b77e1861b83247de1f09e6d71007a1a2a34
SHA512 33c61d04b87d457729bc384729004dd0b98b67601c29c080facd2b5bba1626b159256a538262779e9e066c783ddee4b4b91f3698f45da6a94f71efb698ae6d14
SSDEEP 192:wRhLjNxPsaG3ROv7bp9PRpNS3+sy9Q9Hsb+WNnQX2f82aw0e22RIoVyIsnAUgd:wRhLjbPv0qfzXe8qw2p2aF2Td
TLSH
T18152C66EA850287B5DDBD369FA653B97D3F41031A5902E88EAFC8A2C09E75CC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 dd2f60b87c921e0c108510918a4feab66d3dbd4c764762bb5eeb58b6c1cf829c
MD5 8e57cb8bfea0622664b34a683f258fe9
SHA1 7ade466af827577f464ccdeb75e934acd9dae0b2
SHA512 cb689c26a4fa66e4985e12ccda8317926a3b0861560065212cef74a011ca18aa9b68950bce8600ecda9aab4c7dc3d35fecf7385e3d9b44d84b7ed25efc483732
SSDEEP 384:tnjp87KxkXqKf/pUZNCgVLH2HfgsljH7pLuLcSjjeXODpk+ErU3hCHGfYT8+wA:tjp87KxkXqKf/pUZNCgVLH2HfgsBH7pl
TLSH
T1EE7219677C4C8E770F94D5CCD8267B4F9DB5024B65E9886883FA982903D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 120B
SHA256 c803b3c0bc5c48f78af55d9084c2c674dccf12fa0302c036eb115b1fb00239f1
MD5 214fe1d6713acc4bced6c3b042562a0a
SHA1 4876c864967d3f412391d51de8d6111f6278791d
SHA512 1f1c7720c34d38eb25cbf0ffb3b2992abae9efa7ce80fca118f4181627f97c3f6f5e95aa56069855187a92cee23e411a3631978c0826de144b8f4a9955f339b0
TLSH
T1DDB0125180015381C00202F41643249871159F15A60F270153E0AA2288252918015071
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58944c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58944c.TMP
Size 96B
SHA256 0c6537d7d55a788cc0784834d1d4162a4911eb14453c93758a65957de2ecba4a
MD5 ee243e9f7d08c4f555801e8b61d4276c
SHA1 671aa44841e4c8e3729ef37c6c0d78e9c5d92154
SHA512 752f69dfdf31a819628f097cbef87994db76d0d753df5987c67dd4bc35f3a880389a0e7cf5a71162bea3ace3608ff2418c696134d31a8de9ee928f9d4b53a6a5
TLSH
T11FB022A2C0032203C08203F02CCA8BC83220CF28C303238A83E00BE2CC202200220220
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 164KB
SHA256 66ffead6985bc62f056671011fc75e38b0a04c54e9cd4f53d2adaa6eba9f806f
MD5 c767d4956e6ca3dd314aa18f374f8098
SHA1 a35c1aa490efe0218fc1507328d5d84ae3200655
SHA512 e0f4f767c588cbe38f4863aba9df585478f5d82f715f9e1ba7366afd5b0d5dbb606e05f00b30f2b59e527604b51716e5d09307a9f0af14a767cce2b9db9fb0a0
SSDEEP 3072:EscT29UuljadeLiCqfRRV6mr9FX8RtWZ/Q+KLl+13pvDOlmHl:EFTwUwaILiCqfRRVZFX8KZGES4F
TLSH
T138F312F0D43AC46EB2D6270CD38B3F0FF95DB582A13A7E81BC959956948B28413A3716
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 2ed95d19ce9d8efd55f87fa3aad4f35898b5ee7fc898998b9cd50b61eed8e093
MD5 f78bf7841fe7edd74d5584018a501175
SHA1 1d0af650849b59d77e992f93177123de4a31863d
SHA512 d2293cac8564c31c620a12bd4e9abd995a8e1bb6d63b089d81b7e0bb9d1797239d383c7119886b5cd9ac2eb6ed706ec6f620876af8d33c5437b564322dcf7271
SSDEEP 3072:jqfRRV6mr9FX8RtWZ/Q+KLl+13pvDOlmHl:jqfRRVZFX8KZGES4F
TLSH
T14CB312F1A81AC96FF361630DC3CF2F0FF66EB141D1265AC0789D452E98477812362B69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 54cc38ccce6d79b49f2fd8c50cf428b2f0ff7ea6faca23a8482aee511a4ef2db
MD5 abc0db755782732a1b523597a8737b4b
SHA1 33e7fd671dbe230cc086a24e59bc66f08b73b571
SHA512 aef37908b2c04ffd6cf2aa3b44ae95d30f53b0e15f1940e6228e21875d604f17039d6b9cffe750a58fe1556a4284e9d86a02cdfca84a6f60137988066b18ebfe
SSDEEP 3072:4qfRRV6mr9FX8RtWZ/Q+KLl+13pvDOlmHl:4qfRRVZFX8KZGES4F
TLSH
T164C302F1A81A992FF792A30DC38F2F0FF56EA181D2255AC078DD452E94477842363B75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 f4efa6d71cbda8a2be7bc0455a90bb479d46aed789f651b9e63c225f03ee0ef6
MD5 9be6883ed60482baee2748005fc23ef2
SHA1 55b852c0142d135317ecab43cdb444fabd75cfb4
SHA512 58f14bb23a92e1cfc747b93466ac4bbd14f8a903c84a68551a5eca90f72d0cdb0fd0c52401e4b5db922079233c2ed95b927b2a27857c1ddf28ca055128ba7968
SSDEEP 3072:EaqfRRV6mr9FX8RtWZ/Q+KLl+13pvDOlmHl:EaqfRRVZFX8KZGES4F
TLSH
T152C302F1A81E886FB792630DC3CF2F0FF55EA142D529698078AD451E94477842363B66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 d30ff6456a5f64cc1bc70d9ec0eeb2bd528fe1939d7bbbe764f49a97f524ccf9
MD5 22ed914edcb86e84bb6c6d02d66f23f7
SHA1 3d8eea85787d26dcfcadb756ea72ce05ace39f6c
SHA512 a52e9bb71a41bf7bf8d030ca19b63757f3549c5be8336774601d3b406d217f6151285df1f805e23e71ad2977f42728d9ae1195bbf0d81c37eef2e232280eb508
SSDEEP 3072:RqfRRV6mr9FX8RtWZ/Q+KLl+13pvDOlmHl:RqfRRVZFX8KZGES4F
TLSH
T1D6C302F1A81A992FB792A30DC38F2F0FF56EA181D2255AC078DD452A944B7842363B75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download