Resubmissions

27/06/2026, 15:09

260627-sjs3vsbv2w3

27/06/2026, 15:02

260627-sesxasbz5k5

Analysis

  • user interaction
    yes
  • max time kernel
    8s
  • max time network
    53s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    27/06/2026, 15:09

General

  • Target
    http://gokalp.world
  • Sample260627-sjs3vsbv2w
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks SCSI registry key(s) 3 TTPs 4 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 16 IoCs
  • Suspicious use of FindShellTrayWindow 36 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 14 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://gokalp.world
    1⤵
    • Checks SCSI registry key(s)
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1364
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffedb8dc728,0x7ffedb8dc734,0x7ffedb8dc740
      2⤵
        PID:3916
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1704,i,7807478194712996322,14470831976797649698,262144 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2012 /prefetch:2
        2⤵
          PID:2436
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2176,i,11652150002123200463,10060884660183356878,524288 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2264 /prefetch:3
          2⤵
          • System Time Discovery
          PID:924
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2400,i,48539523278131025,13593779336145793894,524288 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2584 /prefetch:8
          2⤵
            PID:2044
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3164,i,1525014211355345255,2933514779236915874,2097152 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3204 /prefetch:1
            2⤵
              PID:2408
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3184,i,4142156660585649788,13345782456350783716,2097152 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3304 /prefetch:1
              2⤵
                PID:4776
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4436,i,2025923158685369590,9339373699922443153,2097152 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4460 /prefetch:2
                2⤵
                  PID:4200
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4756,i,6822313874919018596,18010812020347115115,2097152 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4768 /prefetch:1
                  2⤵
                    PID:3320
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=6212,i,6294065059865261694,13699902141893173071,2097152 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6228 /prefetch:1
                    2⤵
                      PID:896
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6492,i,4383322775354540333,14689223940055519274,524288 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6560 /prefetch:8
                      2⤵
                        PID:4856
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6864,i,12846964409923190128,12672700462497163288,524288 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5992 /prefetch:8
                        2⤵
                          PID:4404
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5988,i,7408641468587898984,13622903715426765272,524288 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6072 /prefetch:8
                          2⤵
                            PID:3640
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5964,i,7150723772225805538,3698358219427446952,524288 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7056 /prefetch:8
                            2⤵
                              PID:4520
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=7264,i,14232279531803548176,2731414140225708046,524288 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7128 /prefetch:8
                              2⤵
                                PID:1812
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=7300,i,15281503305790473309,14697115652970526934,524288 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7308 /prefetch:8
                                2⤵
                                  PID:5032
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4888,i,12781353599442051356,662033799839896868,524288 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3324 /prefetch:8
                                  2⤵
                                    PID:4788
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4884,i,14495493457324756742,16760336255403563768,2097152 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7416 /prefetch:1
                                    2⤵
                                      PID:4704
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3308,i,7290667210537064481,4668487031609390919,2097152 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7480 /prefetch:1
                                      2⤵
                                        PID:2484
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=4432,i,10355087869858792461,12445501013068613802,2097152 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7856 /prefetch:1
                                        2⤵
                                          PID:4136
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=7940,i,9858424568561720435,6791285921398932925,524288 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7956 /prefetch:8
                                          2⤵
                                            PID:1604
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=7636,i,14906011931500009696,13789354168122362398,2097152 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8016 /prefetch:1
                                            2⤵
                                              PID:456
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=7332,i,17293893554754896526,1257241628741704457,524288 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6012 /prefetch:8
                                              2⤵
                                                PID:2244
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=7372,i,9083050404512445816,5356967293131985771,524288 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4888 /prefetch:8
                                                2⤵
                                                  PID:652
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=7580,i,10595605148651690903,7178333746608078009,524288 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7424 /prefetch:8
                                                  2⤵
                                                    PID:3264
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=7880,i,11711522705296859441,2380797804376466725,2097152 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6324 /prefetch:1
                                                    2⤵
                                                      PID:3960
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=5012,i,15890465482163994924,2910134999842538649,2097152 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7500 /prefetch:1
                                                      2⤵
                                                        PID:4472
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=7656,i,14497869312703281307,5166989487982365406,2097152 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7648 /prefetch:1
                                                        2⤵
                                                          PID:636
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=8164,i,1580175902814478923,9295928625246527295,2097152 --field-trial-handle=2016,i,15498897075723080503,14067191034952596636,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8072 /prefetch:1
                                                          2⤵
                                                            PID:5080
                                                        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                          1⤵
                                                            PID:2492
                                                          • C:\Windows\system32\AUDIODG.EXE
                                                            C:\Windows\system32\AUDIODG.EXE 0x2f4 0x4a4
                                                            1⤵
                                                              PID:4576
                                                            • C:\Windows\System32\CredentialUIBroker.exe
                                                              "C:\Windows\System32\CredentialUIBroker.exe" NonAppContainer -Embedding
                                                              1⤵
                                                                PID:3696
                                                              • C:\Windows\system32\svchost.exe
                                                                C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                1⤵
                                                                  PID:2600

                                                                Network

                                                                      MITRE ATT&CK Enterprise v16

                                                                      Replay Monitor

                                                                      Loading Replay Monitor...

                                                                      Downloads

                                                                      5640fc30-2740-4d97-9135-d945bfcdfe8d.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\5640fc30-2740-4d97-9135-d945bfcdfe8d.tmp
                                                                      • Size 115KB
                                                                      • SHA256 457062e7b0d003367e59c3bd4286cb673199f3e5725c5c7c60e907f0bcefeb52
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      Breadcrumbs

                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Breadcrumbs
                                                                      • Size 1KB
                                                                      • SHA256 f342f7046e5d53dbb1920e3678cbe188663c0c331a01a5ac1e55e9daabfaf3d8
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      Breadcrumbs

                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Breadcrumbs
                                                                      • Size 1KB
                                                                      • SHA256 d403c89805b0ff2963b7930e9699cf3709fe109a12e2460de631f79f8fcda9b2
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      Breadcrumbs

                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Breadcrumbs
                                                                      • Size 2KB
                                                                      • SHA256 461d9c094bd4f9b57dd32ce959a5423c84200f4c0c0b2ed43b75bab33dade48f
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      settings.dat

                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                                                      • Size 40B
                                                                      • SHA256 aaf079ed9afc9a46283c1f073ab5a7d641290078f9a4f9cf3731bc5ee3bcd574
                                                                      • MD5 SHA1 SHA512

                                                                      BookmarkMergedSurfaceOrdering

                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                      • Size 6B
                                                                      • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                      • MD5 SHA1 SHA512

                                                                      BrowsingTopicsState

                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                      • Size 414B
                                                                      • SHA256 1f22812ed43b269b1d0d513ab0e32568edbf3aaabe7ce33fbf8a0262548434bf
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      f_000004

                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000004
                                                                      • Size 48KB
                                                                      • SHA256 730448fbea1831201384e25e674ae37daf5b9878dbe5ae46d3639d0ac617755b
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_000006

                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
                                                                      • Size 961KB
                                                                      • SHA256 b90764f3c28bce980bf49dd3c47601165b8c85a36dfd1c76e2300af732db2b11
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_000009

                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009
                                                                      • Size 961KB
                                                                      • SHA256 ec2de4ec6f7236cc29a133a1616524427e2bbfc576c270444dc2f733d41c90ba
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_000014

                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014
                                                                      • Size 1024KB
                                                                      • SHA256 231b29427acc808414e8130ad27c4e217b22e8515f443f04c76960695698142d
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      temp-index

                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                      • Size 288B
                                                                      • SHA256 f65967b3a938182cfec189344807be0968cd8ca380105ca2cf71ccaf8027ea6c
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      Network Persistent State

                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                      • Size 2KB
                                                                      • SHA256 d3ea0634f9389b8ea09028814d9f03435f7b6a6dfa676b4dadb775896fe1cf0d
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      SCT Auditing Pending Reports

                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                      • Size 2B
                                                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                      • MD5 SHA1 SHA512

                                                                      Preferences

                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                      • Size 12KB
                                                                      • SHA256 34f23cb95ad1ef4d320ebef9347edb5402ad255d7b9df6d41479219e9b6ec456
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      Preferences

                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                      • Size 13KB
                                                                      • SHA256 4c3b56004fb8cc21fb79ec5e991d24bc32c142cb52d29e0971102ef13c2ff066
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      Preferences

                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                      • Size 13KB
                                                                      • SHA256 44a55072db1980715109d9ffaa320151f03af457030a8d950c0168542443db79
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      Preferences

                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                      • Size 13KB
                                                                      • SHA256 1ce556934fc3bfb4c2558b1b298a9a140e011d34734846bf5f899132c347a713
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      Preferences

                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                      • Size 13KB
                                                                      • SHA256 47f07f7389b0319ba35d21dc3e3cc8cfea57796597281c8f53f256595e319bed
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      Secure Preferences

                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                      • Size 17KB
                                                                      • SHA256 844d3ec03467232c0b0b31852592e1d5bfd1b998c353219bbfd11d0dd2534c85
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      the-real-index

                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                      • Size 120B
                                                                      • SHA256 5339dbf0404b0c36d847940d953807dbadffc8017c6755b1829e03948ef6237b
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      the-real-index~RFe58a61e.TMP

                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58a61e.TMP
                                                                      • Size 96B
                                                                      • SHA256 b129e86b51cb5e369b3074f5cd9240cb282b21f63ae7abe67e77be34da8f0244
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      Local State

                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                      • Size 116KB
                                                                      • SHA256 63e8220b5acfc986692ac3b59d312e57704594b21de0d117f093a5309b90c42f
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      Local State

                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                      • Size 116KB
                                                                      • SHA256 67c50e8f54a46d51f0b583b2ee8186139a1dad12c4f2a8eaec72ee247ef4dd1b
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      Local State

                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                      • Size 116KB
                                                                      • SHA256 350ff639ad58a504b6f9cfbe23bf355380b98a193c507bbe073b2dcfca4c762e
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      reaw.jpg

                                                                      • Path C:\Users\Admin\Downloads\reaw.jpg
                                                                      • Size 1010B
                                                                      • SHA256 2495bdbde53f7620320a674824629030b0c513b32cb908faee7b3be4366328da
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      memory/3696-249-0x000001501F940000-0x000001501FA0D000-memory.dmp

                                                                      memory/3696-248-0x000001501F8D0000-0x000001501F933000-memory.dmp