hxxp://www[.]linde[.]at/

Analysis

user interaction
yes
max time kernel
46s
max time network
47s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
22/06/2026, 07:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://www.linde.at/
Sample260622-jdlbdsh16r

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3316	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134265872073056281"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1260	chrome.exe
1260	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe
Token: SeShutdownPrivilege	1260	chrome.exe
Token: SeCreatePagefilePrivilege	1260	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe
1260	chrome.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1260 wrote to memory of 2936	1260	chrome.exe	81
PID 1260 wrote to memory of 3408	1260	chrome.exe	82
PID 1260 wrote to memory of 3408	1260	chrome.exe	82
PID 1260 wrote to memory of 3316	1260	chrome.exe	83
PID 1260 wrote to memory of 5188	1260	chrome.exe	84
PID 1260 wrote to memory of 5188	1260	chrome.exe	84
PID 1260 wrote to memory of 2884	1260	chrome.exe	86
PID 1260 wrote to memory of 3480	1260	chrome.exe	87
PID 1260 wrote to memory of 2884	1260	chrome.exe	86
PID 1260 wrote to memory of 3480	1260	chrome.exe	87
PID 1260 wrote to memory of 5508	1260	chrome.exe	89
PID 1260 wrote to memory of 5508	1260	chrome.exe	89
PID 1260 wrote to memory of 5024	1260	chrome.exe	90
PID 1260 wrote to memory of 5024	1260	chrome.exe	90
PID 1260 wrote to memory of 4236	1260	chrome.exe	91
PID 1260 wrote to memory of 4236	1260	chrome.exe	91
PID 1260 wrote to memory of 2940	1260	chrome.exe	92
PID 1260 wrote to memory of 2940	1260	chrome.exe	92
PID 1260 wrote to memory of 4896	1260	chrome.exe	93
PID 1260 wrote to memory of 5652	1260	chrome.exe	95
PID 1260 wrote to memory of 5652	1260	chrome.exe	95
PID 1260 wrote to memory of 5804	1260	chrome.exe	96
PID 1260 wrote to memory of 5804	1260	chrome.exe	96
PID 1260 wrote to memory of 3060	1260	chrome.exe	97
PID 1260 wrote to memory of 3060	1260	chrome.exe	97
PID 1260 wrote to memory of 5084	1260	chrome.exe	98
PID 1260 wrote to memory of 5084	1260	chrome.exe	98
PID 1260 wrote to memory of 1804	1260	chrome.exe	99
PID 1260 wrote to memory of 3124	1260	chrome.exe	100
PID 1260 wrote to memory of 5264	1260	chrome.exe	101

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://www.linde.at/
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8c13ec728,0x7ff8c13ec734,0x7ff8c13ec740
  2⤵
  PID:2936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1628,i,1428381246772745625,3243124285157191839,262144 --field-trial-handle=2040,i,15978884717292330266,872989639705001557,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=1880 /prefetch:2
  2⤵
  PID:3408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1448,i,3928962970369779420,9810232755134769950,524288 --field-trial-handle=2040,i,15978884717292330266,872989639705001557,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=2256 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2372,i,12128615765105818133,10853396751711482109,524288 --field-trial-handle=2040,i,15978884717292330266,872989639705001557,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=2460 /prefetch:13
  2⤵
  PID:5188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3124,i,11851405798656348168,13603147444477773001,2097152 --field-trial-handle=2040,i,15978884717292330266,872989639705001557,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3152 /prefetch:1
  2⤵
  PID:2884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3136,i,6169318864863713388,13684890028630645562,2097152 --field-trial-handle=2040,i,15978884717292330266,872989639705001557,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3208 /prefetch:1
  2⤵
  PID:3480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4432,i,16394075177174875432,6031383467176412715,2097152 --field-trial-handle=2040,i,15978884717292330266,872989639705001557,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4440 /prefetch:9
  2⤵
  PID:5508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4752,i,8316258253825611019,13430355897293945655,2097152 --field-trial-handle=2040,i,15978884717292330266,872989639705001557,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4768 /prefetch:1
  2⤵
  PID:5024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3452,i,15692645093991488747,13763840100285086122,2097152 --field-trial-handle=2040,i,15978884717292330266,872989639705001557,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:4236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5048,i,954053349350384162,5653412408843447355,2097152 --field-trial-handle=2040,i,15978884717292330266,872989639705001557,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5020 /prefetch:1
  2⤵
  PID:2940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5776,i,7788750680795199831,9645174752110064353,524288 --field-trial-handle=2040,i,15978884717292330266,872989639705001557,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5784 /prefetch:14
  2⤵
  PID:4896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6088,i,9743126337549800944,12759400897791414211,2097152 --field-trial-handle=2040,i,15978884717292330266,872989639705001557,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:5652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3412,i,5576754933455955890,13664243053438088816,2097152 --field-trial-handle=2040,i,15978884717292330266,872989639705001557,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6000 /prefetch:1
  2⤵
  PID:5804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5940,i,11718236148305616329,1285009028175533744,524288 --field-trial-handle=2040,i,15978884717292330266,872989639705001557,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3444 /prefetch:14
  2⤵
  PID:3060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6184,i,940661696942288840,3813072313606746229,524288 --field-trial-handle=2040,i,15978884717292330266,872989639705001557,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6228 /prefetch:14
  2⤵
  PID:5084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6408,i,51698411782026780,2137983749519258272,524288 --field-trial-handle=2040,i,15978884717292330266,872989639705001557,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6232 /prefetch:14
  2⤵
  PID:1804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6396,i,1906665724992006766,12108819244097756383,524288 --field-trial-handle=2040,i,15978884717292330266,872989639705001557,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5232 /prefetch:14
  2⤵
  PID:3124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6416,i,4493405538563572625,9866381630010503155,524288 --field-trial-handle=2040,i,15978884717292330266,872989639705001557,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6376 /prefetch:14
  2⤵
  PID:5264

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5408

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4932

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 7bd3f850b20edfb289d8dd575bb37402386346d0088748ba426fb84649095e2a
MD5 b48b5a4571db7eeb2231d7b2230a14a9
SHA1 447211a3e5db12f65c926591aa4b89022270e761
SHA512 269e68cb68933166fd56e084909a797f2bdc7767c2a8a3e6c0e669f37f280ff5d1c7aeb87a8e8c8160dd15a7efa53d76d43bdb7b2f4204aea6f9bf39ef9d7927
TLSH
T151E02BA6CD25AC271DFD471C70504745E68013173B81990F373C921DCFF5AB7565592C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00000d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d
Size 117KB
SHA256 3b85c8ddad22071a888da896e0ca7837a17b8386d167776d8c0391caa34b3b94
MD5 bb3e5806ad8e04468f36245af586972a
SHA1 1dadbf07baacd3b44382d7b1ec3d9628b9e288f8
SHA512 21714f86ff9178d3a26676e59daac6a52e66c2f9d686a50a85273094025f8c5027103fe00a85748d2668db2c4c28966be8d12d59bbf453725fbe8c341ee5901b
SSDEEP 3072:NwPhR13rVDUYLRJwapm3vmgsfLrWCsTLnR4CAE+:NwPhRJVHdJ43zLCsTLR4Ca
TLSH
T112C31288820B35D3799F8C1C10D259E2CE36DCF7AAC53A2702E8275FBCF6A8DD159064
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000012

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012
Size 375KB
SHA256 431a3251deb71c9c6d19db7ece22c26583f9d8fdba96fdfbb6a5b27d4214e31f
MD5 a3e719f84f525e2c6689b3f6ac73c402
SHA1 e3e93bf2c5aa88529ea3c1e524d2350245e91515
SHA512 0816380a9e625ce2e34fef598104a90a2724096b4d627bbe790c58008eeb3c50c732aa24500caa54fdc46c7f63216533adfb46d119a74aff4ed421b9f381ddbc
SSDEEP 6144:bk02i6NJqyLQCeqg5Vici0bU4rCHA9Q9lkOmEeWxF9Mh+kLNYr7tHLh:bMNJqybeqYvxCHAmXmEevbK3Bd
TLSH
T1A4842368F4BFE4A2AE8449215E5E0D746F487EB21740540AFB7DE2BB2415C493B6F203
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000013

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013
Size 224KB
SHA256 395f795f8ae8cef004ecaa547186faa37fb329a382e4f796207e9ee7be0ff4a1
MD5 5f465e4c1d1e27303f80d101c2af38bc
SHA1 0061f554d3b5e87df391d7eb43d1c24db4cb91d9
SHA512 3d29b82cbc69cad57ad7d709252e0bfe0b329a1e83ff0ffaf1ac9ebc41dfbd67b9e231962ff93c8bbdb479f6d8c0d6e527ef26dd648b115a1e11faaeb6aff4d3
SSDEEP 6144:1a0vOzSU0fKt8l0G6akAZNLhJ68WunVWF:1jOzSly2m/aXZnJ6dunVWF
TLSH
T12F2412012A7C9DB4692FB9882B35B668919F13B63D1C83B7770A84FD07E50CE1768167
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000014

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014
Size 120KB
SHA256 1a6ca553fb16410e66dc7368252c521a18daf3d249704d94e45af5cd4b126237
MD5 2402ce1db506b1a3ed6856a27497e8e2
SHA1 fc2b393ea0b6289adea7f2a0a5fa09ddaa666e2e
SHA512 b3ec024d0efdd0ba9be34b0119563ff7c2aa4967eb0b9f22f625e5f8c6822d2bfb3bec32a28c835697a64387b4bc63ec6e87568654f803dc0606212a96988dfe
SSDEEP 3072:dJe7t0Ejox4vnvXLPt6Dew5RBfztlDipmCGb6b2G9:nkLjox4XXRme2/tlkmCGbw
TLSH
T15EC31208523748824CBA289BCD220CBB254FCD7E5E47A66CF6CE8B191733B2D4667D52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 8860d3457923aade77cefde1cc3ef79e2fe0e9da2b7b00c40466209ae2534a48
MD5 c3100914a06ecd667f164e717d9835eb
SHA1 5554049aa7d16ce54f89e9e69ed6b38598083781
SHA512 d342d6b80b400d6ae31cb299a7dc085a74a4e40ea7301150e6496ece292150ba8aa324d90ce581bed6bd20df507d4eac9b1c465d7064163962c43ff29e498a6a
SSDEEP 192:oRlYYfADFxv7lpupAPRp29v9fHsb+WNnLjf8o2M3EIkw/VyIsnAUg54:oRlYAahZgUXYRwfP2C/554
TLSH
T1F342B56EED10267B5CCBD229FD627793E7F6102531941E84EAFC9A1C28D7ACC2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 6c5b4df0b19e3b6e79737a3382687b38298467947fa09ea59e7ada608222046d
MD5 b710e6b3f462f4bac088ace28cb4fd81
SHA1 9b5b82b1cea8dafc1ef42c6fd863072c11edf521
SHA512 4d97bfe7ab5c2870fc017b09efc81b0848dd0e23f86e81149f4f66a7d1f2f60ea3c11cdfcbd66c8e258e91882dea77f7e1fbbe3679c702b2b7ce0d5ef9eefeb9
SSDEEP 192:oRlYYfADFpv7lpuhAPRp2919fHsb+WNnLjf8o2n3EIkwBVyIsnAUgv4:oRlYAapZg8XSRwfP23/Hv4
TLSH
T14F52A46EAD10257B5CCBD219FD627B93E7F6102531941E84EAFC8A1C28E7ACC2217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 79ea521d9f3df87d24eec0f3607ae01ff8cf6eaeb5c7802f7c4721f58b8ddead
MD5 5d35f09b8c86835fb4877dcd0cc40e4a
SHA1 71d399e3fd153dc456fddb8f9cf7b1d428dcd2c7
SHA512 68050d4d5a4a4f94c2a29dfff1edf5350066ef5a2e47ef11dcbd09970c2009d28d7804e59c25d64e43ef8e1367105d32e929bef6a7a0e31d18837b193891b321
SSDEEP 384:WQjb+7KxkXqKf/pUZNCgVLH2Hfgsl5g7pLuLcSjQRXODaB+ErU39rHGQ3uKHaaK7:WUb+7KxkXqKf/pUZNCgVLH2HfgsLg7pn
TLSH
T1BF72F967BC4C9A370F94C6CDD8267A4FADB5024B65DD886483FA982903D4BCF110A2F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 59d697776942aa7700e05429681c18b156c92b807ec2ef8ae3841e2f7dc010ba
MD5 06d3b43459e9662d3f861e429a8b366a
SHA1 59b24811866c02fe2f2d7542ce6e28a8aa40bcc4
SHA512 9e07e3d6605941c3e49229fe1b259627694753a66875b41727f55167ee639ef72118d4b5a6b413f6b4d028a53b4af68b5a945fea7a0ad82c929edd20fd094b8e
TLSH
T156B01201C0015501C05707B015C6588873149F309A0A670157E47932C8351618418050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58315c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58315c.TMP
Size 96B
SHA256 4ca66362f42f376d3ae82e45b03a968d520c19c8beadd00c56e2d9f75963aa50
MD5 d7aee2f9d94ead73834f70cf24b742c2
SHA1 1361a2682c7ed1a8836df5ae353323436afbe144
SHA512 07eca80e73b0334d461f3315125ebe276421b41357fa5f0811b26169a8c5810663e9eb176743019fad00561a22a22467bfa8c415a5a99fa5d8d26e590f4ef7aa
TLSH
T1B0B00255C702A372C05603B0699995FC71A4DF35C6031223A2E05EB7EC767758665370
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 428124f0112cd1859be2e37bd35935dd7c8bcb06aed7c66bb58db5ad87d00569
MD5 aa8f1c3ad6391f5aed175c68498d0726
SHA1 20a9456a022a38c81466dfe0ae9d630f5f824a4d
SHA512 17365cdab6f5a3a7ea47a5f49afb4a58eab9200b01986b8756c37ef85a1831c95f5b57bbc401eb9757d279695bdf78202db0baf85b86cb3879f355df408722e3
SSDEEP 1536:n+ueL6TFpmkUjlTArhJ+vgVuFM8r51TRB+BsJYuRZa8pSgeDAkwdqf8Wg+95h6mq:RDFpmzNA9J+zfAsJDREge7oWg+95hy
TLSH
T1E5B30212CEAACE9BE4A49C79A4C413F3BEBE5F9523F1B9424166E4023DCE7442391770
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 c11edabc1762e7adf2e33ee18b1c55db7ebf4d5691137764de5d1c2242ff170a
MD5 50f6d02e1d58e4e203f5d0d20ae9d56b
SHA1 42952c1ce069d61b046ef5e6b5933e9c809c81c9
SHA512 9e3febc9aa676da965838a0a3c73206e7e68d0580db271d155bf385dc295c584132c4ff177a8aa5541dc5babe7c629ac84c2c6939b3c4c3a61a6f1ca697dea08
SSDEEP 1536:DFtueL6TFpmkUjlTArhJ+vgVuFM8r51TRB+BsJYuRZa8pSgeDAkwdqf8Wg+95h6Z:pMDFpmzNA9J+zfAsJDREge7oWg+95hy
TLSH
T1B6C31212CEAACEABE5A49C79E0C413F3AEBD5F9533F1B9424166A4023DCE7442395730
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 f43db4f9966db74ccf5801d7e472fefd152900cfc1dea1f7e7d78f30976a0ecf
MD5 35ec7f4322e93c33227dbf20f873134c
SHA1 d5c9e43117a71c43732a364e165bc4d536e9a31e
SHA512 dbeaf03e7cb65e4efc491db0fe9c2cd83d007dad35b45d6514f7a4a39e9abbe6df9c05a7513b01feaeeb96f5f4c4aa60b38a9e7c7ed7a1a71c766c1acc564bd6
SSDEEP 1536:+FtueL6TFpmkUjlTArhJ+vgVuFM8r51TRB+BsJYuRZa8pSgeDAkwdqf8Wg+95h6Z:KMDFpmzNA9J+zfAsJDREge7oWg+95hy
TLSH
T15BC31212CEAACEABE5A4AC75E4C413F3AEBD5F9533F1B9424166A4023DCE7442395730
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download