8bd9af3d26431144502031872cc79e48b426bee3aa589d702c183512cfe35e14

Resubmissions

22/06/2026, 09:35

260622-lkjggsax4j8

22/06/2026, 09:34

260622-ljqjeabs9z8

22/06/2026, 09:29

260622-lfwagsbs714

Analysis

max time kernel
900s
max time network
891s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
22/06/2026, 09:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
SPx-uFMDag.html
Size 47KB
Sample260622-lfwagsbs71
SHA256 8bd9af3d26431144502031872cc79e48b426bee3aa589d702c183512cfe35e14
MD5 087f9ba8374ab1725d625da32719b02d
SHA1 a10e5dc08500cb9f037b9dd0ef01dc0d16bb350c
SHA512 322741c124e12f61b3fc3a480c2ef9e5a904ce4673349d52c7ba1ce5f7e8a16b3cede61a956231a43c78e30ea2bb42724bd6518481ed522b1cdde599b2192001
SSDEEP 384:LThOC0ASQ/2C/k5Z1LH5hGhtfebjtcetWKtXo2KBVZgh/p:LThOlAhF/Y1LZhGhtfc5jBKWVp
TLSH
T13123F985B801F97A4C678DEE267DEF76400AF13ACB7CCC14D29FC95E2291672A716C06
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
712	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134265941621926515"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1768642833-2142038154-4041560723-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1768642833-2142038154-4041560723-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1768642833-2142038154-4041560723-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1768642833-2142038154-4041560723-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1768642833-2142038154-4041560723-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
5220	chrome.exe
5220	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe
Token: SeShutdownPrivilege	3560	chrome.exe
Token: SeCreatePagefilePrivilege	3560	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe
3560	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 3560 wrote to memory of 4308	3560	chrome.exe	80
PID 3560 wrote to memory of 2792	3560	chrome.exe	81
PID 3560 wrote to memory of 2792	3560	chrome.exe	81
PID 3560 wrote to memory of 712	3560	chrome.exe	82
PID 3560 wrote to memory of 5152	3560	chrome.exe	85
PID 3560 wrote to memory of 5152	3560	chrome.exe	85
PID 3560 wrote to memory of 5324	3560	chrome.exe	83
PID 3560 wrote to memory of 5324	3560	chrome.exe	83
PID 3560 wrote to memory of 4972	3560	chrome.exe	84
PID 3560 wrote to memory of 4972	3560	chrome.exe	84
PID 3560 wrote to memory of 1492	3560	chrome.exe	87
PID 3560 wrote to memory of 1492	3560	chrome.exe	87
PID 3560 wrote to memory of 324	3560	chrome.exe	89
PID 3560 wrote to memory of 5976	3560	chrome.exe	91
PID 3560 wrote to memory of 2680	3560	chrome.exe	92
PID 3560 wrote to memory of 3752	3560	chrome.exe	93
PID 3560 wrote to memory of 5220	3560	chrome.exe	94
PID 3560 wrote to memory of 1988	3560	chrome.exe	95
PID 3560 wrote to memory of 1988	3560	chrome.exe	95

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\SPx-uFMDag.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa3946c728,0x7ffa3946c734,0x7ffa3946c740
  2⤵
  PID:4308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1644,i,8263108499556420097,6152724529113003764,262144 --field-trial-handle=1932,i,18317361284885904262,1790008823780355497,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1928 /prefetch:2
  2⤵
  PID:2792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1448,i,16942232608070065197,686407993432489063,524288 --field-trial-handle=1932,i,18317361284885904262,1790008823780355497,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2236 /prefetch:11
  2⤵
  - System Time Discovery
  PID:712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2352,i,3330213139420480708,15548490977194775972,524288 --field-trial-handle=1932,i,18317361284885904262,1790008823780355497,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2688 /prefetch:13
  2⤵
  PID:5324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3100,i,2414908168595708019,10993474561756883111,2097152 --field-trial-handle=1932,i,18317361284885904262,1790008823780355497,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3172 /prefetch:1
  2⤵
  PID:4972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3108,i,1825526359694029956,4548059218941933934,2097152 --field-trial-handle=1932,i,18317361284885904262,1790008823780355497,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:5152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4092,i,7032554758830437701,13203256072855624899,2097152 --field-trial-handle=1932,i,18317361284885904262,1790008823780355497,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4316 /prefetch:9
  2⤵
  PID:1492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5324,i,14868733734591679485,17839352482603645461,524288 --field-trial-handle=1932,i,18317361284885904262,1790008823780355497,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5332 /prefetch:14
  2⤵
  PID:324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5744,i,14629350917998325161,1121137400836991089,524288 --field-trial-handle=1932,i,18317361284885904262,1790008823780355497,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5768 /prefetch:14
  2⤵
  PID:5976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5712,i,18216907127617305749,1162859798969769088,524288 --field-trial-handle=1932,i,18317361284885904262,1790008823780355497,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5776 /prefetch:14
  2⤵
  PID:2680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5736,i,18025729056561872407,16775466683531241044,524288 --field-trial-handle=1932,i,18317361284885904262,1790008823780355497,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5816 /prefetch:14
  2⤵
  PID:3752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4344,i,9304943433559246469,12850967415611282979,262144 --field-trial-handle=1932,i,18317361284885904262,1790008823780355497,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5536 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5536,i,11224573951431559295,16222408644350819702,524288 --field-trial-handle=1932,i,18317361284885904262,1790008823780355497,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5032 /prefetch:14
  2⤵
  PID:1988

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2008

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3108

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 2fc39a02b9d9eabce186e6030b4e4d5a93759aa3cc4036524828905efd71ddf4
MD5 630a240e69a4180469456bdac74c7dfb
SHA1 c40f9497f7a94b139adbd50184c40a836ef640f7
SHA512 cb0aa5f86b48c5f9517d7864600c3954c52097ce35bf66ff03ad0ee16719e436a336257f6fa6a7699666269aad2fa8874f064afb918598f954e7c245f42b0052
TLSH
T1B0E0ABAACC30EC7B15FC0B1870100647E744136A3A40485F3A3C810C4FB173B9A8AC5C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 89a11161e86eb814270b4598bdeedcc93862a01f97555e0b7f5bcb6ae91a69fa
MD5 f70f1559d056cb107638dcce3ebe05d8
SHA1 c08d993ac9d8377b1cb86c1ae9d4e1edee2e92be
SHA512 69ee3e22b73e504a04a94e242adbe8c0df445bc6a64f694e8a11f12be3790a80da1edaddf965a6691fdbfff0c39ecd004eae75158c0f7e0c456201169514e15a
TLSH
T16541CFFB83B4857E9A0192F4EB156F1FCD6A0524032C7CA288E46E1B53F2972D10078F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 65c8b5f992f5a74dde4bddf3252e1100378cc9355ba5099b444a9bc2e9a7b6bf
MD5 e9ab885bfea4261e03ab9589b9a2f678
SHA1 3aaacc234433a477ec16401273c59245a6e41849
SHA512 f40894a06bbde1772e8399efbfd9f063f5333a75cfac5aeaba35ea97a2cc54a0997946587cdb7916cf5b6c752282c24d1a826f559b535b8a568c169f5f81c458
TLSH
T1BA41C1F783B4857E960191F4EB156F1FCD690524432C7CA288E46E1B53F2972D10178F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 fdd237f7c55b682b918de04ba49d5f6cfe6e17c54e6d68dd614f83d5f7a4cc43
MD5 901f4aff0c6cfe6fc69482eb621cef18
SHA1 e9c62331d53b3f74edd439b5423872e75d6e6ebd
SHA512 8f72e41dbbd52fecd6bfc8ce3b6d98b5b94d53a35818ddd04c3d96df668b544e1e5ca6161c28b860d04df1034eb0b567720e09d5ab9428eb2e4589ff9e75d325
TLSH
T174419EFB83B4857E961192E4EB156F1FCE6D0525132C3CA289E4AE1753F2972D10178F
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 523B
SHA256 c82e035003b95950d4d2694afb759a00c722ebfbbafe8ebf536a53e46d063b9c
MD5 642c7ce128656fa29c9e71b94e8dd19a
SHA1 3f082a129d742aff710d7886113466d8e0073ec7
SHA512 5d7ad78ffe8f54b58995f8d6766b62d6b07d05e035ce079b88f59fd203e789846fe915281d8b1cf6e6d7677a499dbf2791e2b97a2b431aff3efb0e9adb71d922
TLSH
T1FEF05097D639B467207A44AE9D047C0D9976A836138158E2DF66432DD0C54E31B07493
MD5 SHA1 SHA512 TLSH

Submit Download

ea2d080a-1500-4805-b54c-ac8426ed2425.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\ea2d080a-1500-4805-b54c-ac8426ed2425.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 91a859e66ef1e6a6bae10348842a0bd1ed76210a9a4ba78ce58de1da6b09c9f6
MD5 9d681adeabf2b22750531e73cf32a478
SHA1 e96536c2b72ce622c769866a535ee484d5e8d6b1
SHA512 b642e8b82159c922e9989bef5cae6b44c875e5747980f00758658c46b365d1cf3d3337c8bdd393e71bc5c0617cb88d487bff73f5cb5e961d6220e92bc573fc24
SSDEEP 192:XRrhHTi0ErWDsv7+p0PRpGcc9wHsb+WNnkgPWkE5G0kw78VyIsnAUgE:XRrhz7464XOOwPPfE5NkE
TLSH
T1F652D72FBE50653B5CCBD629FA117B53D7F5203221A41E44EAFC8A1C19E79CC222752B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 ab860c82ada9dc049a0ae894e0b3c154939630b90c3a8c922d719b1686ee6269
MD5 c6a8e4f07cde5f26442c94d2551a57f6
SHA1 a7f0b3b9c2a56771c97035666447e65dec415fdc
SHA512 14cde7734504a81f7ac540d406cc5e63b50e8e0400151114fbf8c8b05053ff916fbe330423f64f1b1acad6f355675a1d556cb4c1698b4785d4be862e3828ddd8
SSDEEP 192:XRrhHTY0ErWDsv7+pAPRp2cc9wHsb+WNnkgPNkE5G0kwz8VyIsnAUge:XRrhzd46UX+OwPPyE5Nse
TLSH
T13042B62EAE60653B5CCBD729FA117B53D7F5103131941E84EAFC8A2C19E79CC222752B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 31a5ce04ae67b5403f3453ceb77ece590798531384f472283d145995727d92f5
MD5 b28f8d2c357e9f30dbd5f6faec9be3a8
SHA1 7045d97913533ca8a4d3fd4bcccacb31200659fb
SHA512 0c3fd52647169605cd7ffcc7ff7895b9d1008ecd2a828bc0aac93f78a5c3515c5bf2ae9dd7335970687bfc199d7d6444d158da461151c200b0fb87c211b0d77f
SSDEEP 384:sejIb7KxkXqKf/pUZNCgVLH2HfgslHH7pLuLcSj2XXODIX+ErU38xHG6QDzXU:suIb7KxkXqKf/pUZNCgVLH2HfgshH7pZ
TLSH
T17072F8676C489A370F94CA8CDC267B4FADB5024B65EDC86483FA581903D5BCF114A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 c08998aca79418d7d580d93003b0b579468215fd17457fe49b0074a87dc11a40
MD5 2a0bcf8486472bce1f18c89af84ebcc3
SHA1 629e735969d8a513cc18b90a8aae7632692eba4e
SHA512 8591c31c9889379be812f4717f290fb9a7ba2d346264934c2e97f6232280bac21c75684c1b401f3a41180a7442c83cb2783c0813f9a6f023b7e460c2c63df24e
TLSH
T145B01210C4015121C0E302F0155214C8F1546F119A0E171293E5AA62C82E1628414090
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b541.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58b541.TMP
Size 96B
SHA256 985d15d052ede4dcd4bc1ce69c879e77385addbcc60bb430e4d1b59fb9ffb379
MD5 1981cf0ed79b26547c52cfeddd562eda
SHA1 c9e7626faa97cc5547a52408c88d6de00f118285
SHA512 b1289461620af114e80c5bc291a6268c2bc633752b3e666e89860a103acfad5396fb70cd2b5ece6d4e84c89a5ad7efeeb47153dcbe26cd8e290215c184cef36c
TLSH
T197B02202C0022302C0C303B020C088E83220CF38CB03030282E00B2BFC28E328A20220
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 2eab60bdf4c35f659c272d15829226b3a801d0233d66247126701a55540c06cc
MD5 502ffa253855728b60a84edc8664784d
SHA1 b64128d0cd49c76668d9901d9330fb7b1ab5dc79
SHA512 fcb56ccd3f83c1d70b59dc19f5f8a3b23d098a6ea631e0b8c5c2f5776c093c3f385b7dfa616d4ba7d0e5f601dc02e07c5ea459833613640218de95b1f7482161
SSDEEP 3072:vCzWs4B7zxAQ0xVOnXTZpY3g9DzcU0/DlblAITog:vYWDfxA3OnjrYQ9EU0/hEg
TLSH
T131C302A15C39BC660CF8EE98740D3E60AFF46CAB91875DD3A2E81F4C14FA5C8117A971
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 ddd267f91760a55a59cde6752c1b86ba66384486c7f6fee98d29a22948f02e92
MD5 8e5b0f3e47d84a882c65106074d0b715
SHA1 b5d0e1468ff411232e5f146c305b19da5913321a
SHA512 e748989bfb5c974c6f6a088448d68aa3570b9e26c1b18629bcb6f16cef98c9560df9deaa929da71a377181ea8425edccc95bcf3981f2f131a8334becb0b4f60a
SSDEEP 3072:nCzWs4B7zxAQ0xVOnXTZpY3g9DzcU0/DlblAITog:nYWDfxA3OnjrYQ9EU0/hEg
TLSH
T140C302A15C39BC660CF8EE94740D3E60AFF46CAB91876DD3A2E81F4C14FA5C8117A971
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 f132fe9b5cef10a08c88c4edeab8573becb99a56bb638117a50a1e1a65a84675
MD5 0958c042ad8ef612fcfe33d7bf0158cf
SHA1 f510076f0a9f2db7d0cdf4c580b9e3d3490c2566
SHA512 b1de4f909c20a836c896a0ae15996276a7caa596ec358e1de66e6711d73e1c94f0a520d011248b36048d9bfa85cc7656574b97260eb93c4207732f5040e6cc7d
SSDEEP 3072:9azWs4B7zxAQ0xVOnXTZpY3g9DzcU0/DlblAITog:9QWDfxA3OnjrYQ9EU0/hEg
TLSH
T1E4C302A15C39BC660CF8EE94B40D3A60AFF46CAA92475DC3A2E91B4C14FB5C8117A970
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 edcb7f7bafb2017d62fb3c9f1ab54f8a22840a54f4d529f9affbd41a3d049584
MD5 5cda5fcadc254b27621c3ab0443b7ce7
SHA1 f5759e959904be1fd392774047cbc066bb7e48d2
SHA512 dbbc3552e80caa7d48d5138a4d9518dcc329b4be2302154eb4120dacd4fc8be5cc9b16051ca9e38bfd24d4da181122dbb16ad9510de530070b10127ae47100fa
SSDEEP 3072:fzWs4B7zxAQ0xVOnXTZpY3g9DzcU0/DlblAITog:rWDfxA3OnjrYQ9EU0/hEg
TLSH
T146C302A15D35BD660CF8EE98B44C3F60BFF4AD9A91879DC362E91B0C24FA5C81139930
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 781904d2a2b2a2beadb8703f86dbd8a92805dfc20770594ad40e52b81b6d0c18
MD5 207c731356feb97f7a008044c63c4639
SHA1 2485450b012902ac9d440c55664596d4c9881958
SHA512 8e531b919355d345ebd5d0209a464b0db6377eccc6264e810054938a828bd755f6f47d16b7d96b583449468bb2595ece00bf2aefe799e8dd7ffd7af12ee0e4b8
SSDEEP 3072:kazWs4B7zxAQ0xVOnXTZpY3g9DzcU0/DlblAITog:kQWDfxA3OnjrYQ9EU0/hEg
TLSH
T1E7C302A15C39FC660CF8EE95B40D3A60AFF46CAA92475DC3A2E91F4C14FB5C8117A970
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download