hxxp://links[.]notifications[.]fileforms[.]com/wf/open?upn=u001[.]5Cb88WvX7-2BOAydRQUFFbH47MhFk-2FQxvKNsOgzy2IDUSdAEtZvUqJ4EqUgqU8aD6SrLodBmDHnAAZwmH3ZDyQIz-2FPFogcy2jpTcJ7Cr2y-2F6pwwP6USbIpj-2Bing5TQr3jA4g1ov2cebVC1tQUvvnPzmXAn8lGDQgsm2xekR06-2FtNtURR3hCJ7BXt4sKLK-2B1p-2BReTsNKxRFu-2FA-2FNEb62rOYdGDHxomdmWxLzAcRukTNYqtYLMNk6S60SvNpJ80g0fV2pK2z3TV2ikuzDZqGKoWH6yVxIYImUXZzurcd1pT4Cbw-3D

Analysis

max time kernel
299s
max time network
282s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/06/2026, 12:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://links.notifications.fileforms.com/wf/open?upn=u001.5Cb88WvX7-2BOAydRQUFFbH47MhFk-2FQxvKNsOgzy2IDUSdAEtZvUqJ4EqUgqU8aD6SrLodBmDHnAAZwmH3ZDyQIz-2FPFogcy2jpTcJ7Cr2y-2F6pwwP6USbIpj-2Bing5TQr3jA4g1ov2cebVC1tQUvvnPzmXAn8lGDQgsm2xekR06-2FtNtURR3hCJ7BXt4sKLK-2B1p-2BReTsNKxRFu-2FA-2FNEb62rOYdGDHxomdmWxLzAcRukTNYqtYLMNk6S60SvNpJ80g0fV2pK2z3TV2ikuzDZqGKoWH6yVxIYImUXZzurcd1pT4Cbw-3D
Sample260622-psep2sb15l

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3824	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134266053194467724"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
5004	chrome.exe
5004	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe
Token: SeShutdownPrivilege	1368	chrome.exe
Token: SeCreatePagefilePrivilege	1368	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe
1368	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 1368 wrote to memory of 3376	1368	chrome.exe	86
PID 1368 wrote to memory of 3824	1368	chrome.exe	87
PID 1368 wrote to memory of 5104	1368	chrome.exe	88
PID 1368 wrote to memory of 5104	1368	chrome.exe	88
PID 1368 wrote to memory of 2104	1368	chrome.exe	89
PID 1368 wrote to memory of 2104	1368	chrome.exe	89
PID 1368 wrote to memory of 4640	1368	chrome.exe	90
PID 1368 wrote to memory of 2272	1368	chrome.exe	91
PID 1368 wrote to memory of 4640	1368	chrome.exe	90
PID 1368 wrote to memory of 2272	1368	chrome.exe	91
PID 1368 wrote to memory of 1936	1368	chrome.exe	93
PID 1368 wrote to memory of 1936	1368	chrome.exe	93
PID 1368 wrote to memory of 3408	1368	chrome.exe	98
PID 1368 wrote to memory of 924	1368	chrome.exe	109
PID 1368 wrote to memory of 4108	1368	chrome.exe	110
PID 1368 wrote to memory of 1844	1368	chrome.exe	111
PID 1368 wrote to memory of 5004	1368	chrome.exe	113
PID 1368 wrote to memory of 2452	1368	chrome.exe	114
PID 1368 wrote to memory of 2452	1368	chrome.exe	114

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://links.notifications.fileforms.com/wf/open?upn=u001.5Cb88WvX7-2BOAydRQUFFbH47MhFk-2FQxvKNsOgzy2IDUSdAEtZvUqJ4EqUgqU8aD6SrLodBmDHnAAZwmH3ZDyQIz-2FPFogcy2jpTcJ7Cr2y-2F6pwwP6USbIpj-2Bing5TQr3jA4g1ov2cebVC1tQUvvnPzmXAn8lGDQgsm2xekR06-2FtNtURR3hCJ7BXt4sKLK-2B1p-2BReTsNKxRFu-2FA-2FNEb62rOYdGDHxomdmWxLzAcRukTNYqtYLMNk6S60SvNpJ80g0fV2pK2z3TV2ikuzDZqGKoWH6yVxIYImUXZzurcd1pT4Cbw-3D
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff90109c728,0x7ff90109c734,0x7ff90109c740
  2⤵
  PID:3376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2016,i,3093571790029633469,16716338656209963018,524288 --field-trial-handle=1856,i,9031976411907341232,16233409849574140533,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2144 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1660,i,10339038210468875058,5604098042259504436,262144 --field-trial-handle=1856,i,9031976411907341232,16233409849574140533,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1852 /prefetch:2
  2⤵
  PID:5104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,16103103079558722918,5246765577361189696,524288 --field-trial-handle=1856,i,9031976411907341232,16233409849574140533,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2412 /prefetch:8
  2⤵
  PID:2104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3124,i,16674044867062272804,4260415148710029986,2097152 --field-trial-handle=1856,i,9031976411907341232,16233409849574140533,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3144 /prefetch:1
  2⤵
  PID:4640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3136,i,15355980993125963543,8330583168733000237,2097152 --field-trial-handle=1856,i,9031976411907341232,16233409849574140533,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3184 /prefetch:1
  2⤵
  PID:2272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4312,i,6690440321813412029,5999285251040490124,2097152 --field-trial-handle=1856,i,9031976411907341232,16233409849574140533,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4316 /prefetch:2
  2⤵
  PID:1936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5324,i,10865692594611642775,1297203577082987552,524288 --field-trial-handle=1856,i,9031976411907341232,16233409849574140533,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5332 /prefetch:8
  2⤵
  PID:3408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5640,i,13802889496079460194,16248369052495293047,524288 --field-trial-handle=1856,i,9031976411907341232,16233409849574140533,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5616 /prefetch:8
  2⤵
  PID:924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5716,i,14382304801869152617,15640319989293045969,524288 --field-trial-handle=1856,i,9031976411907341232,16233409849574140533,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5732 /prefetch:8
  2⤵
  PID:4108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5720,i,13090899887532006431,9076512335926790676,524288 --field-trial-handle=1856,i,9031976411907341232,16233409849574140533,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5712 /prefetch:8
  2⤵
  PID:1844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5532,i,7885985222222302542,5918005928127752500,262144 --field-trial-handle=1856,i,9031976411907341232,16233409849574140533,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5564 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5208,i,12150675573423870957,16002445905539466269,524288 --field-trial-handle=1856,i,9031976411907341232,16233409849574140533,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1132 /prefetch:8
  2⤵
  PID:2452

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1608

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4464

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 5f06d33eb421cf92f98249cd43afc71593e5714db2361091652c2da3b9b454a8
MD5 260dacb197fc953311612f2e46469dbf
SHA1 94a8f65fe7bb4587d69452782cb2a24efba89787
SHA512 166968e9a3a21300600e16d59961182b0bb4f54625eaeb68ab2b3ca7de70e985351f5914a7ad799343cb629c34a835b068ec4a35d4e744bf897c73b0cfb8ba14
TLSH
T19CE02BAAC821AC2709FE4768A0144746EB51135B2BC0955F3A3D920CCFB0A2A41C6C6C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 7627bcb7a5d4c6c385257193abdd77962f4ac0df310d3bca31476dec0799e843
MD5 8b87ad131e952ffd2100968098d4af12
SHA1 69507c9e85a493281bcf661ee363b5cbf63f3b2b
SHA512 c19f96f861f0aeb15f8fed744d4edf7ad5f15d20907c384cbe502de32f8f3c7ebda15176983a99a22a9858c944d5f1612f4c113673044d432b21acfee922869b
TLSH
T121415BF793F4897E861196E4AA156F2FCE690624031C3CA689D46E1B47E29B2E10078F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 fe821502f35dcffd0a156a415df61ace2a7b2e77996aa2d6034f859c498461c6
MD5 6553df821e08c53274a7d5d0d29de9f4
SHA1 c20d6aed4d868719a43495bc7ddcda721a3265d4
SHA512 bede743a9a715fa09d3ce810530b99d2f010b799c00ec275d22e18910a62289c94b0e00067a5fdeed3efc0dae9f43c24f072c8ae3286f2eebee73d42ad6233fe
SSDEEP 192:KRtFYwk87CBv7spAPRp22ON9wHVDb+WNn18jhP2Jkkr2ikLP7VyIsnAUge:KRtFeRYUX/WKb2B2ukr2iye
TLSH
T1BE42A52EB915693B5CCBC229F9227B57D7F5106132D02E94E6FCCA1C15EB9CC222781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 379d96542283773f422c052abe7293924621df1604b63c9a59676e1514d2db6c
MD5 d066f854d368cbebca026e5da297c2c3
SHA1 4f2f84d54b0a8dfd273bbdb70bcde51ad5e2f12f
SHA512 613285c6b38983d33fb336394c5eff7edb692f60dfa433defdbf45524dd1c84cadfc8cba744a39b1c75482b318f7db6eaaae9842cfa8649a9ad00cece8442e41
SSDEEP 384:gCjUH7KxkXqKf/pUZNCgVLH2HfgslsZ7pLuLcSjCDXODUr+ErU3/NHGcmyqOqjmo:gCUH7KxkXqKf/pUZNCgVLH2Hfgs+Z7pF
TLSH
T15A7209676C4C9E370F94C6CCD8267F4F9DB5024B65E9886483FA9C2903D5ACB114A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 1d43522b4e26bde47a0963ca8c5f5cb7954a42218dcd13d97a8208ae3c6932e0
MD5 ce5e7e92b2c2d6645b8fba15029c3699
SHA1 32e86294d5c4e4c0f6f52e0da5de45736990ee01
SHA512 f120bb13a50e2f58d1b9ee069e49f3e5e4b6d5e89140f91e5353d19cbe568684d2e88c17966699e187ffe1d270cffe61000e1cd67adb0efd7272a00969319ba1
TLSH
T121B0124084016101C40612F81192948871149F15964B270543F4692288251508014061
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe585d7d.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe585d7d.TMP
Size 96B
SHA256 ad030e1b1f5ecf45eaccf5dcc4009384aafd72c11ab3874b6d6f0f7479749655
MD5 9f976d1f83ccf2f3846f243d58074b72
SHA1 cb3936293a0a7b158431984aba56b3f9458d1ef4
SHA512 fb09da812ecfd00884b5576407fd9e9254aa9cc416888e9ee90fa8a0b24f99582b74ff396d8958e22c97ce34dd4b49e8b2498a5907d4aea1bfedf8d53d876159
TLSH
T1CBB00265E1066712D08303B5ADA5E5D97161EF25C71B121792E01A66DC256604535D60
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 dedfeff495a7a877b443ce14a3d68c698a320ceb649bf8c09d1c7354124d180a
MD5 2b8517c274593cd7bc4ceb94b49c265e
SHA1 1c3ade3c086e9448375791a27f16a8d765963c97
SHA512 968900758367b839122886efe6d0647084ebd6b8457aa9d65a6cab3510a779487ec94e6351787ccb5f80cd42dce268d0a2bdaac98fdf01918e59c8a9268dad75
SSDEEP 3072:/GGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Jm7Rkm1tYpBeh2BAoK
TLSH
T18CC3123B5D75A83799B9BB0EB08E0A1F1EF249A2D920DD46C8D85A0833F97CC1A45D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 515048efad7cdf23a9b2ec80aaa17c9a28f20046597a322278b7a6383772a7dc
MD5 910f8f66082c0f34cb33dae516a8a6a5
SHA1 79f217f9acb3785bb7bed43eb4bbe330e82cc940
SHA512 fec3b617a00d103d0e2f3122f3a3497a43b5ecf538796b3ee4fc073be6f96e8ecf07a501ccc9d420c2ade0df000579e0d76f74af674f7700fe107302f5356682
SSDEEP 3072:PGGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Zm7Rkm1tYpBeh2BAoK
TLSH
T16CC3123B5D75AC3799B9BB0EB08E1A1F1EF249A2D920DE42C8D85A0433F97CC1A45D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 4e678b589c8acbb0e149af5b543ad9c779668cc17046e86a0ddcdde6dec1e8f9
MD5 408d81443b63bad759f45b7351c20a1e
SHA1 f99ff3ef9faee67f0115305280339688943152f0
SHA512 036988f2efc1cf6b6ea3198c4ac019b4081c550013e06cb6a79aa9107dd267aae7fdfa782bf8ac9827bb96bdbe0979eb0175ad025ba0aaebd6ba06a5d094cc66
SSDEEP 3072:fGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Om7Rkm1tYpBeh2BAoK
TLSH
T112C3123B5D65E8779979A70EB08E0B1F1EF149A2D920DE92C8D86A0437F97CD0A04D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 3941261daf3b679aae8016aafb8f2a7d9124ac3910582866a6cd6182177f9f14
MD5 1b8b2d1c1684fd4933892f0975579aad
SHA1 b0d43511c9acbf31ace7b124c42a8a009573c8bf
SHA512 0775b218fd31bcdfb185b63e270d27c490d32b970f69ad62c4e2496b08571181c4a7e6250687a4c6220d94ed30522a7fb30340e15be68e165f2b25ec5bd47bd1
SSDEEP 3072:EGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:nm7Rkm1tYpBeh2BAoK
TLSH
T1C7C3123B5D65E87759B9BB5EB08E0A1F1EF249A7C920DE52C8D85B0433E97CC0A05E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 042a8feaaaa3f3db5ccbe0ce78d30f9d70fecd7211e1fef60e48542c99ce8572
MD5 39c665f2cc0a6cbc5286efe6498e3ee4
SHA1 fc15fa350522103843e24f038de09bef9b34c04f
SHA512 14768b3466e0cf91da6c7bc0af4a1fd6b31b3a8565df6d107a4263f95a1ca06df95b270c70cc68f755fc3349e95dea860f3b4dd621b6d884b2be1e0bc4925c86
SSDEEP 3072:9Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Um7Rkm1tYpBeh2BAoK
TLSH
T116C3123B5D65E87759B9BB5EB08E0A1F1EF249A7C920DD52C8D85B0833E97CC0A05E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download