2435cf7388d4dd6534a32cd7a6615fce3de6a8bd30bd034f3449d1b13a0e3265

Analysis

user interaction
yes
max time kernel
150s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
28/06/2026, 04:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
config.js
Size 2KB
Sample260628-e29lnsfs4j
SHA256 2435cf7388d4dd6534a32cd7a6615fce3de6a8bd30bd034f3449d1b13a0e3265
MD5 45735a87155ac3f7745294fd6911dbfe
SHA1 69dc3474a83913eafa3ff05647951df23feb5255
SHA512 5121f0badade5245b419df71ad8e52dd013b18cc74469554c1c3ec0aad48c42557611d7c84e28b0ba861c26651231997b240de74a9cc0d8142d4fff8171889b1
TLSH
T1014120B2A0947331066E9E1150F0FDBC67A56CE6CA768810F1EF9AC4BF7AC209C19DD1
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery execution

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3368	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134270944557303519"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2409539145-3342400454-2096821238-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
5896	chrome.exe
5896	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe
Token: SeShutdownPrivilege	1316	chrome.exe
Token: SeCreatePagefilePrivilege	1316	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe
1316	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 1316 wrote to memory of 3552	1316	chrome.exe	81
PID 1316 wrote to memory of 3772	1316	chrome.exe	82
PID 1316 wrote to memory of 3772	1316	chrome.exe	82
PID 1316 wrote to memory of 3368	1316	chrome.exe	83
PID 1316 wrote to memory of 4152	1316	chrome.exe	84
PID 1316 wrote to memory of 4152	1316	chrome.exe	84
PID 1316 wrote to memory of 764	1316	chrome.exe	86
PID 1316 wrote to memory of 764	1316	chrome.exe	86
PID 1316 wrote to memory of 2032	1316	chrome.exe	87
PID 1316 wrote to memory of 2032	1316	chrome.exe	87
PID 1316 wrote to memory of 3908	1316	chrome.exe	88
PID 1316 wrote to memory of 3908	1316	chrome.exe	88
PID 1316 wrote to memory of 4572	1316	chrome.exe	90
PID 1316 wrote to memory of 4572	1316	chrome.exe	90
PID 1316 wrote to memory of 3596	1316	chrome.exe	91
PID 1316 wrote to memory of 5728	1316	chrome.exe	93
PID 1316 wrote to memory of 5696	1316	chrome.exe	94
PID 1316 wrote to memory of 5692	1316	chrome.exe	95
PID 1316 wrote to memory of 5896	1316	chrome.exe	96

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\config.js
1⤵
PID:2592

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb9222c728,0x7ffb9222c734,0x7ffb9222c740
  2⤵
  PID:3552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1600,i,7577693988814083338,192734902774910800,262144 --field-trial-handle=1960,i,6525945213967858337,1807569144323022153,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1952 /prefetch:2
  2⤵
  PID:3772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2240,i,12649145898604316552,3953836146108902658,524288 --field-trial-handle=1960,i,6525945213967858337,1807569144323022153,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2280 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,9809165769258150031,7825562055536491579,524288 --field-trial-handle=1960,i,6525945213967858337,1807569144323022153,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2360 /prefetch:13
  2⤵
  PID:4152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3236,i,16667946542412032834,17228616517490817475,2097152 --field-trial-handle=1960,i,6525945213967858337,1807569144323022153,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3268,i,11645086429415116772,17781397617870360655,2097152 --field-trial-handle=1960,i,6525945213967858337,1807569144323022153,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3360 /prefetch:1
  2⤵
  PID:2032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4328,i,16800862761230391786,8190825033017604689,2097152 --field-trial-handle=1960,i,6525945213967858337,1807569144323022153,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4292 /prefetch:9
  2⤵
  PID:3908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4732,i,13028175081169272725,14305489743867589102,2097152 --field-trial-handle=1960,i,6525945213967858337,1807569144323022153,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:4572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5528,i,14016647732383479443,11255606073617324239,524288 --field-trial-handle=1960,i,6525945213967858337,1807569144323022153,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5536 /prefetch:14
  2⤵
  PID:3596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5964,i,10218468600163668400,5660791590795068211,524288 --field-trial-handle=1960,i,6525945213967858337,1807569144323022153,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5976 /prefetch:14
  2⤵
  PID:5728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5968,i,11713664786383115130,8007572803930261041,524288 --field-trial-handle=1960,i,6525945213967858337,1807569144323022153,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5956 /prefetch:14
  2⤵
  PID:5696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5972,i,12526675478180766475,15111579462540908601,524288 --field-trial-handle=1960,i,6525945213967858337,1807569144323022153,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5872 /prefetch:14
  2⤵
  PID:5692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5936,i,16189451525844545561,6195853226396311007,262144 --field-trial-handle=1960,i,6525945213967858337,1807569144323022153,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5640 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5896

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3812

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4192

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

19b48ea7-749f-48dd-9b03-41af96b879db.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\19b48ea7-749f-48dd-9b03-41af96b879db.tmp
Size 17KB
SHA256 c48ea4851d93573421a1f5e92dfdd9c0cc0bbeca9216e615794ab2013501d5f1
MD5 9365e110646fce4577746230e9396c69
SHA1 43e90a5f0d59e1baf6618dc088b25f7ee4f34390
SHA512 9a5685ed76a706c9438a8141f54d0da5f900ed9164cb7aba717892a4e4661ae16db249ed13fc8eb242bd0321b328b8cf3e2f2ff69067bbe412ad1a880371f8d4
SSDEEP 384:RXjVs7KxkXqKf/pUZNCgVLH2Hfgsl++M9r7pLuLcSjzOXODV0+ErU3O3MDTHGRjs:RzVs7KxkXqKf/pUZNCgVLH2Hfgs8+M9k
TLSH
T1A97209A76C4C8E7B0F94C6CCD8267B4FADB5024B55D9C86483FA582903D5BCB110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 6e5db6c3d21d9b484336609394e42fc451ff2cb8069e11a5872ecd149cf490d3
MD5 1ae43fa35938b48a296687370627500f
SHA1 ef7caa1407a8bfe8b67b22fc143601f2c1c11440
SHA512 ad178ebc89258c8dd128ad3202f12ae36bfb8789216d7653ea39a6961853a45502787ea115b0e7eba83d379e649f349ca5ccd11e127a31a04f0d80fd4599aea2
TLSH
T12AE02BB6C912DC6B2EFD475850144B56D70103077741594B373D82088FB163745A586C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 ceddc031dac65a8892dd7048da6a1cb86c7210dac7401ba804df809bf4613f35
MD5 67c9bd9167d67df84797b461f59ac6bd
SHA1 f51a1180f171db688d0deedb99148516ce03db6c
SHA512 871c6fba81b4034f797e908546e9e96d4cf0fb64ffd63161e4045a6450ade70d09e4c2f06dcc0202b2b4cd2d4bbf0a8b45335c56f45baace49f329c306b3282d
TLSH
T18D519CF7D3E48A7EC91156F4AA246E2FCD2E0A14431C3C6688D4AF4B53E2972D24178F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a7b273d81f46d5a04bf4b9450ed745379c1f4e8508863d67e26ff1500440b031
MD5 d000ed559df75856ef89b85212ae9e1a
SHA1 80382a6df8d2c2ba1027eefdf227279c34059865
SHA512 62a5f3a77979134e2efdeeeec9cb5ac9afbd6c91c9a41cf685f925f4c952b3728877d009a4a388c0e94961d9945deb459584a989d37385868e6cb3d81be0ae16
SSDEEP 192:3RpZH04VGUpv7lhAPRp2O9+Hsb+WNnel0PkAc2qCkwDXVyIsnAUgtaJ:3RpZU6pR8XB0wI0cAc2qCl8
TLSH
T15842C6BEEE20657BACDBD219FA257713D7F5102122911E84EBFC8A2C15E79CC221740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 0bee0920cb8115f89b6e544b90d8cfa13a888743cc0c8b5d09aa8e34a8e633db
MD5 118b048fe60e496079874687190077ec
SHA1 59b4f40278d009e149ceb2e7c6593ff4397a9b69
SHA512 16595c6580e95bbb4ce439cd329f70e230a6cb5456cb5527d7c8dbbeb9ba483ecc46173df91b3db9ab1e38ac31e60c180992ce9eb207833ee36797b1eb85d80b
SSDEEP 192:3RpZH04VGGIv7lhAPRp2O9+Hsb+WNnel0LkAc2qCkwDaVyIsnAUgraJ:3RpZUEUR8XB0wI0YAc2qC2e
TLSH
T17842B5BEEE20697BBCDBD219FA157713D7F5102122911E84EBF88A1C16E79CC221750B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 c51d4a1c8999a8a83c77803267776311fd8ed72c46bbc2dfbd9bd0f010a1892d
MD5 7973bdfa482e9b0bf0e976407e2824fd
SHA1 4e54ab2e9c3970855fa3e5152b2df1b09eb0258f
SHA512 29ab5917b7b7599ea0953341dd32cd93d558adaaa808acd19bcd8df909db42e1f63860bf6757a6ebd8caf117ffa95842dfbeb7849eef6e776947666bf53da83a
SSDEEP 192:3RpZH04VGE/v7lhAPRp2O9+Hsb+WNnel0PkAc2qCkwDXVyIsnAUgtaJ:3RpZUWXR8XB0wI0cAc2qCl8
TLSH
T1CA42B67EEE20647BACDBD229FA257713D7F5102121951E84EBFC8A2C15E79CC221750B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 bf61d978f4c4c93e6d116e3dad450dcef12c67127fa9dd62a9282b4bbbf20c71
MD5 481f034690a5abf805b49ade618cd4ed
SHA1 8df290c2bd76dfc8d3100e69f09a04ac74279d75
SHA512 3c5725589fb7c1440f877b463f54b343f50bad4c29e1cee6511891917689cedb883a62533d8741010dd1368384596bd998d736097265e49512e956bcd7c9af2a
SSDEEP 192:3RpZH04VGG3v7lhaPRp0O9+Hsb+WNnsjtpkAc2qCkwD2VyIsnAUgraJ:3RpZUEfRmXD0w4tOAc2qCqe
TLSH
T1DC52A4BAED10697BACDBD219FA157B53D7F4102126901E84EBFC8A2C16E79CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 6d1e26dd9417abb56cb33ded4285a4ed044226ba41a86f05c203a15582e722a8
MD5 9d6988876d589b04840d4a42a2046a5a
SHA1 e2bda33ed293fc17e55e831ce09433f344662b51
SHA512 f6f83e23f6cacb489d8dc706e8c45bb7c8037a2a3862e961807f3e70f916a84e259b56386d4fe767337c4594ffbe28cdbfdfbea3d1e83567a3c7d365030e4760
TLSH
T102B01200800156C1C04702B5314258D875146F25960E170193F469A2CD351A28128094
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ae8b.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58ae8b.TMP
Size 96B
SHA256 1d0cee4f220e5983ca05921ffd9408385789e81203031358d38fa4345a329a3e
MD5 c55651ee178385978d3a8da670618829
SHA1 a8faa6e4e4a217ec66ddfb05d0ed0cc32583d556
SHA512 e0f3dd4bf11fc4122535660d1f6f286c1334ac9e65d8cc96bcf246db1b33f955e69352d2d503053fa57a7ec5fd710d54fba25b4e43685d9505e359cb512e3e09
TLSH
T13FB02200C2022202C00223BA3880C2EC3022EF23C203230283E00B2FFC20EB2C0302A0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 acc36279848f607e4a92796d9e48a9c85f24df38b177a558ac65030cef96c3d0
MD5 a4c1bfc900d6a2ceda4e963d6a27dee0
SHA1 f0ec53bf212e1a04f818967b0abd25fc1a844c76
SHA512 90501a47e26abf50fdb79308052636cfe5cfb562ba118bb988dd3010ae5858f7c9b4874c3d21c9f42e9d08eaade5e577fe79a81adff5a485a99b3f07a5ce81e5
SSDEEP 6144:hY2WL7LAd0ZqyPvvm7Rkm1tYpBeh2BAoa:62WU0K9oBGcAoa
TLSH
T1E73423239DB4643E047AEF1A708D0B5F0EF14962CE6CDFE6D9D02F4472EA5882E45A35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 d670b775909a8f907a9b687668ad9976dba1b08ac3f99ebda84df73b34256fcd
MD5 9d40b7d31b9e06c8946fb165c373a35e
SHA1 ca42324b15486db9f0e8f54d69045af022c3b9f5
SHA512 7b2a74023253cfac70f859235c51c19813883e972270fddb94eb1f2eb95b36107accd2867c6d192c877e47dc92519955974c65964a67c2d365eeed686b62a5d4
SSDEEP 6144:/1Y2WL7LAd0ZqyPvvm7Rkm1tYpBeh2BAoa:e2WU0K9oBGcAoa
TLSH
T1593412339DA4647E047AEF1A708D1B4E0DF14963CE2CDFE9D9D02F4472DA6882E45A35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 ca3462ddbc2d00d870b751497bd56c2a0ac5b7eea6427889d9dc248e0547add0
MD5 118cbf26f11bb12edbd0a072ad12c32d
SHA1 a6cff4f56476615429f106f3bebd08cce3d54ba6
SHA512 d86905ea63edf90490f62aedf399231cf5cb2ad58faad4e8920484e3e979ea4549702258f815e8febccb95206b17729369c911e6fc300d5f6e4807b42b98e925
SSDEEP 6144:GY2WL7LAd0ZqyPvvm7Rkm1tYpBeh2BAoa:52WU0K9oBGcAoa
TLSH
T17F3423239DB4643E047AEF1A708D0B1F0EF14961CE6CDFE6D9D02F4472EA5882E45A35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 693fe796bd0f85b79f75dd6e3c0f2e9f57c5a58964bcaba41ffdf39d91a11cba
MD5 ca368c11134eeb8381fdf22b9e0226fa
SHA1 b492609f2041e25fcf57497791ea59593289fd5c
SHA512 d014d93294104e528ee892d5b3037ea2e6fd11b9ad2d6f16ac500a160215035e2a1c6423553929975c4cb00674121ba6557dc67e3760fecaba494f773fd79c2c
SSDEEP 3072:WGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMa:hm7Rkm1tYpBeh2BAoa
TLSH
T1FEC312375E71A97759B9BB4EB08E0B1F1EF149A2D920DE42C8D85B0437FA7CD0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download