hxxps://google[.]com

Analysis

user interaction
yes
max time kernel
157s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20260513-it
resource tags

arch:x64arch:x86image:win10v2004-20260513-itlocale:it-itos:windows10-2004-x64systemwindows
submitted
06/07/2026, 16:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://google.com
Sample260706-vb2fdadx8m

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4368	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134278302019885439"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
4200	chrome.exe
4200	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe
Token: SeShutdownPrivilege	468	chrome.exe
Token: SeCreatePagefilePrivilege	468	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe
468	chrome.exe

Suspicious use of WriteProcessMemory 23 IoCs

description	pid	Process	procid_target
PID 468 wrote to memory of 2628	468	chrome.exe	86
PID 468 wrote to memory of 3236	468	chrome.exe	87
PID 468 wrote to memory of 3236	468	chrome.exe	87
PID 468 wrote to memory of 4368	468	chrome.exe	88
PID 468 wrote to memory of 4944	468	chrome.exe	89
PID 468 wrote to memory of 4944	468	chrome.exe	89
PID 468 wrote to memory of 2860	468	chrome.exe	90
PID 468 wrote to memory of 2820	468	chrome.exe	91
PID 468 wrote to memory of 2860	468	chrome.exe	90
PID 468 wrote to memory of 2820	468	chrome.exe	91
PID 468 wrote to memory of 5108	468	chrome.exe	92
PID 468 wrote to memory of 5108	468	chrome.exe	92
PID 468 wrote to memory of 2272	468	chrome.exe	94
PID 468 wrote to memory of 2272	468	chrome.exe	94
PID 468 wrote to memory of 1564	468	chrome.exe	97
PID 468 wrote to memory of 312	468	chrome.exe	105
PID 468 wrote to memory of 3032	468	chrome.exe	106
PID 468 wrote to memory of 4708	468	chrome.exe	107
PID 468 wrote to memory of 4600	468	chrome.exe	108
PID 468 wrote to memory of 4600	468	chrome.exe	108
PID 468 wrote to memory of 2812	468	chrome.exe	109
PID 468 wrote to memory of 2812	468	chrome.exe	109
PID 468 wrote to memory of 4200	468	chrome.exe	111

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://google.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff87e80c728,0x7ff87e80c734,0x7ff87e80c740
  2⤵
  PID:2628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1784,i,11995719351806523708,15171839229155931568,262144 --field-trial-handle=2020,i,1514808201012848855,6426263559080433067,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2012 /prefetch:2
  2⤵
  PID:3236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=it --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2268,i,12092646818086363187,13731163509098387776,524288 --field-trial-handle=2020,i,1514808201012848855,6426263559080433067,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2260 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=it --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2384,i,10923700352339513623,8242383828550305151,524288 --field-trial-handle=2020,i,1514808201012848855,6426263559080433067,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2560 /prefetch:8
  2⤵
  PID:4944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3200,i,16856266468922679069,14503596155966678284,2097152 --field-trial-handle=2020,i,1514808201012848855,6426263559080433067,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:2860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3212,i,369358976182903120,9345754203547425928,2097152 --field-trial-handle=2020,i,1514808201012848855,6426263559080433067,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:2820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4464,i,7476833161548463671,14545979383872970719,2097152 --field-trial-handle=2020,i,1514808201012848855,6426263559080433067,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4456 /prefetch:2
  2⤵
  PID:5108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4636,i,1063752439072960107,15869078659756695602,2097152 --field-trial-handle=2020,i,1514808201012848855,6426263559080433067,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4744 /prefetch:1
  2⤵
  PID:2272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=it --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5356,i,1506179904740687627,11765398054066449020,524288 --field-trial-handle=2020,i,1514808201012848855,6426263559080433067,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  PID:1564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=it --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5344,i,1989090940630063264,9059600238737113626,524288 --field-trial-handle=2020,i,1514808201012848855,6426263559080433067,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5368 /prefetch:8
  2⤵
  PID:312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=it --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5372,i,14321830946007853233,10898230310711329314,524288 --field-trial-handle=2020,i,1514808201012848855,6426263559080433067,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5424 /prefetch:8
  2⤵
  PID:3032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=it --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5376,i,9714926566006905335,372013077746786744,524288 --field-trial-handle=2020,i,1514808201012848855,6426263559080433067,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5636 /prefetch:8
  2⤵
  PID:4708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4568,i,5093691395050346706,6748276714665930248,2097152 --field-trial-handle=2020,i,1514808201012848855,6426263559080433067,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4532 /prefetch:1
  2⤵
  PID:4600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4504,i,351210996654843130,15813882512766464204,2097152 --field-trial-handle=2020,i,1514808201012848855,6426263559080433067,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5344 /prefetch:1
  2⤵
  PID:2812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5872,i,9834976990996269623,3066807256674646227,262144 --field-trial-handle=2020,i,1514808201012848855,6426263559080433067,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1060 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4200

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3344

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3232

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 398689860495097b66736c7540fb01babb9d503cb3058a0f87761a57c695840e
MD5 07bde19a6874b92af58b9a321616d59c
SHA1 954d08f9991ef46cb55f23671478783f0a2b43ed
SHA512 ec604c03c65ec249cce7a835d84cdb898809aef75cbd5c9357cab5dc8f436ff344b35017d9cf8436ed7424d20e98e6dfc93161e40319fcef4f6bb7a009c809e8
TLSH
T15BE02BBAC8219C2718F91B2C64504649E75013163F91C90F3B3E820C8FB5A3A45A692C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 288B
SHA256 1a15ae8e5ca7cdebdbe4b8ff45c46d02ce7bcf856f066ce20ea2b2eaa4557534
MD5 1225fa6ae2f90ee7464de75ae334eb4b
SHA1 485b02c2144c7c7e15cbd682d8e88fcdb153b2a4
SHA512 95ec9d6713cde433716a897124e69ee18466c0073dae96945973035037dc8b9891771d72b54632cbf66765ad2ebec298878fe6776b1267efd46f959af25725ce
TLSH
T1C0D02224DAC30201DF8B833266EF00C63E3B2A0601F207D583C6D072543F8743BB1002
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 840B
SHA256 bf26eadc745250375fe9b2f84eb70dc9eb0dfd41fdcd0f22ade5434343a2b629
MD5 58ec72f34b10fc0c24ed5f79841356fa
SHA1 c3c68ef5d863df32c60f53b05074c509742703b3
SHA512 ec1160e00a861cbc4ecdb709108f7b4d87464e7d2ddd2728d9ed86d106875264ac5b80231a2bb76347241c2c603a35dbe222bec98cb57df6ac6c24ded91a3ea4
TLSH
T124017824E6CF0C11DF66757245EBCE672ABF260602E113AF02D9E12D457E4BD31B0A48
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 c70e7a9d6f24b2f43629c1800a1bb38d18b4208a4c4731ec0c896a0af927bac8
MD5 78395ab357f238026eaf6804746cb0ec
SHA1 ef2c045ffcf6163c761fd7faaa152aa91da7c5c1
SHA512 91db38cb5cfe0f9e05d33743d37675c7b16d7f058d3e223da43eac18267ab0b1b99f2acb3a72e41388442c47b87e0ff880e283e28b9a9bef554f0c66c41b5bd5
SSDEEP 192:D8tLMqk+IaIaEdDB/oIcTUNPNaPlfPww4IcIwlPNlI6UvtxOW:D8tLMqk+IaIaEdDB/oIcTUN1atfYw4IZ
TLSH
T13CF19DF7C3E8C52D891156F89B156F2FCE590A28431C3C76C8D8BE1B93E2871E21565E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 9cf2564d5ed695fdb215213a2023cbacfb614e35617c00fb919372a41b723c4c
MD5 d52fd7400ea1df4bdbd14efe0f84b138
SHA1 182fc3ffbd28944a541d893d9f684fd7a80132a3
SHA512 d3db45dd51c4866a475324d0207a4d84a205ed9e43a50603c90df7a45ab065afda3aa7983e1d3c93638dbaa151c73e00bdbf8404bb18a26a0394aa7c1f761b4a
SSDEEP 192:D8tLMqkWaIaEdaUB/oIzUTUNPNaPlfPww4IcIwlPNlI6F:D8tLMqkWaIaEdaUB/oIzUTUN1atfYw43
TLSH
T1D9E19CF7C3E8C53D890156F89B156F2FCE590A28432C3876C9D8BE1B93E2871E21565E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a7b6cc7f622c02c0b8fc664bdc3daa7a95da2587f497fb6dc04baa4fabd453c8
MD5 1a09983993bcb302011a71aee387a673
SHA1 25e1ff6a005251b7379bc65a8a71ea434854c3f7
SHA512 b36c5baad9a4b58740853d3b120d9f9556b2083dd6fab1838b6dbe7fa52488247dae4fbaac52fcf101d76e2d6ee6984ccd810a02a7109a48f3f7e0615f0e34fc
SSDEEP 192:4Rf7/TMeYUsv7cpAPRp2qFci9BHsb+WNnghZYn2Okq94Qkw0y+VyIsnAUge:4Rf7LMc4wUXlJrwyO2nq9XUy2e
TLSH
T10542E82FEA1069774DDAD229F9267B57E7F5102235902EC4EAFC8A2C15F75CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 109f8a025742527dcea90ef331d38d92562c0ff76c50c764ea6970f843d1d5d9
MD5 78f9f8e6aa57c79db49dbfd851566d8a
SHA1 e488a61417d84a3b68237b63ded6beed6f34ef59
SHA512 c3aebfca1fdc43a2b30eb362d63b10cf4a0ac6050f80cc65b14f8cb6da133e5870e5165bad2515f0e689239c9f0fbe93931f7b3f083664602a854c7f04a424b6
SSDEEP 192:4Rf7/TMeYUEv7cpAPRp2qFci9BHsb+WNnghZAneOkq94Qkw0y+VyIsnAUg5U:4Rf7LMcgwUXlJrwyaenq9XUy25U
TLSH
T17142F92FEA10697B4DDBD229F9167B57E7F5102235902EC4EAFC8A2C15E75CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 c99ef27ad1b3b1370364bd4ed21254515d5635e8a3ee8db3feb61ad54a394e25
MD5 418c5d7f41315cb502e3593f7c792a41
SHA1 a1412a403b8d6ac3744f30f9ecb1bfd12967c9e7
SHA512 bbc9688daf965d23b3b26097db92d837498d35a7f175bbc1bfdce9aa62b4ffddd95a9306acb73b66444823fdd774cee6d2dee750cdf9a445678bfac5a36a3a59
SSDEEP 192:4RjcBh7/TMeYUEv7cpAPRp2qFmF9BHsb+WNnghZfMEfkq94Qkw2y+VyIsnAUgvU:4Rjmh7LMcgwUXlgrwyOEsq9XWy2vU
TLSH
T15852E72FE910697B4DDBD229F9267B57E7F1102225942EC4EAFC8E2C15E76CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 30f53eb2b3e164837e88c9d0bb47a87b0ba362cdd2903bfdd9e7f17ef1721b53
MD5 daf335f10d693685c4683a7dbe7e7bb9
SHA1 498678bf7d61f7cb5bf319bba0c1668fa4e0e3d5
SHA512 8fb8bd22bb4ea146bf68592656a2c408178b4ceffbb379473d69f96f518b6289b88cdb8d4b193b1fe165c9c6809ce896677e3a0c689a4a1e108541a96e0437ec
SSDEEP 384:dXjRs7KxkXqKf/pUZNCgVLH2HfgslKR7pLALchjzOXODR0+ErU3DJHfENmGYb:dzRs7KxkXqKf/pUZNCgVLH2Hfgs8R7pV
TLSH
T14272E9676C4C9A770F94C6CCD8267F4FADB5014B66E9886483FA582903D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 a18f9954dcf2591e2ace476323722f3860f8cac0dfd594652e474e236d4ee6b3
MD5 5ef0c0e05065cffe4b3bfe648b7d28b6
SHA1 bdf76d07e25569ff5c51ed8bb646971b2477104f
SHA512 92216ca7ee96eb9cbf6438a5dfb223effa5bf6416fe409440ae34f274ccb2867fe837a306e40c875361548e338508e7079434403ea54d2bfa863fb304d4c7e3e
TLSH
T1DEB01200C0015511C44603F81163288CB3149F32960E170243E47B22DC291638054161
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588c8b.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe588c8b.TMP
Size 96B
SHA256 68ba981e32266816f2e5921becddf339c1292152a1e5db54f07474c5d4ac8cd3
MD5 95580f0605dcbc9d6c074b3e2543231d
SHA1 f5409157f6a3d234a3ddfdaf7af6961ff057efca
SHA512 be66129f8cca33e6ed7f9d4e4e7c8914aed486acd77adaed48cef1d92377bcbe540ce5affeb12347aa9533c964845e30dcfd11ec3afff4d694b03a34f2ba2537
TLSH
T145B00259D1036216E06343B1B597AAE87170DF29D603121397E8AE76DC67E714A351F0
MD5 SHA1 SHA512 TLSH

Submit Download

c1d180365c61b113_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\c1d180365c61b113_0
Size 194KB
SHA256 fe3b764119ae346cafd1e392d6f9a03535fc598ea69a7680acf309985bf02eb7
MD5 8ed2fb393c789c2c0a1ece5ca452cf42
SHA1 9a734a8b310ebca401653b6ed8fe1d7214b3f94a
SHA512 a2ff3482ccf9da974ac9c3e9a65bbc8d6ceb51abfe56dbf3e4ae7b2663021763f75feee42327ad7dd402cedf3e134c7c0da0696590df0a83a93557210f547331
SSDEEP 3072:OegF1cJu9zByRIZa8vj0QbJI1lXrZ1lThh:OegF1cc9zByRIZa8HlI93h
TLSH
T131146B316300F43BA9139E61A27F7F4E3C35A16BDD0686FCA1E4E870AEE6CB60515758
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 e6cb38bb724292243ea6659d77bf477550f1d3e410b303786485d7cda8b5e5d6
MD5 c93cc75c06132111ff7472b40ac6ba9c
SHA1 6e86390a62e83909918a5a42df1998795edb1e22
SHA512 79bcbf50cc1406474d0332e20fb5e7a7c0d150bfa1a9d6883a98de5bbf55142f7f2e6de9303cc3f6654d52725572eb3d5ac7e6422c15731c7522957ab41004c9
TLSH
T1F1A0025981C50D29DC001AB692898140265069507A19DB1FEB9E40888C66288668E007
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 535a80da8fa29db978e31a551532f5c109e88c6618eb77036c6fc5ceacde0f7c
MD5 a7a4a6389a4f5550a60ee02ac22919be
SHA1 575d15423f182b2f4b501d5e0ed84d7e59fb2434
SHA512 72ecf02ade8b9c090722f5d35048733c7873dc863daab39d06cad2337a7c5f0956847565500fcf7039e94fc8dbfe7298d0688c36b61aab336a0b6c48e46bbdcc
TLSH
T172B011A88082082ACC28AAB00AC2808022A80C203302AB03E2AC008A8CE2A208203008
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 5e36dfe0acb8afbc2acf2fe74b91c776201dc9c0a9f4bde111cdab404004e805
MD5 c152f8929e6d460f729432040ba2de58
SHA1 908129d4ac64ac2274669b9b34fef23c9b714d24
SHA512 29ec5ddf1bbace310258ada8ca8ee45fe981060cc3dee0083a71544eefbfefc9aefd0a5064b298e9005a0ffd1a8cd3c5025f44d2ad01793f5133bb0b9eb2a22f
SSDEEP 3072:SkipFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:FipFmUi21rSm8uUVNSlzY/
TLSH
T1FFC31210B9A3F8B3EE8931447ADF2A149DAC0D418291CA0156739E415DEF3C66FABB34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 dbcc290b52bbca0ee06dfd1ff5a04979fbcc200e4a331f08c9bf63279980a526
MD5 aff3d33d35be363cc66a620119381f3c
SHA1 941710812a47c4259cd64b8e5d8f5baa3bd2d3f9
SHA512 584d45fd64512336e78f36c6b8c7b48d0436c171ca4d695bf60cedf04b732c70c890a92fb3c04d5da2a059ce2dbd87b58c4e162c053217ec1a6be31cee921d9a
SSDEEP 3072:SnFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:uFmUi21rSm8uUVNSlzY/
TLSH
T194C31300B6E3E9F2EE5930447BEE2A149D6C0D818291C64156739D419DEF3C71FAAB39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 351b0e23d519397254a82d045304924a4b391d0c4c69113b7c230c94d77cfd50
MD5 94a30941f25f79bbd3bf63d8c931652a
SHA1 79084b29ebc04b53fa1c3c5d3c9e052c94765056
SHA512 936cb512614c8e1409290eedb67bde6de71431d015422ca536affb743b2cd52e4edf02d2747e0164d36350ed3cb607f3cec4e290641aea1e4dde943d8c4fe417
SSDEEP 3072:ScFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:zFmUi21rSm8uUVNSlzY/
TLSH
T10DC31310BAE3F8B2EE99304476DE2A159D680D818291C64157739E419DEF3C71FABB38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 b55f3b7ce350a078b0c48c49c9ad07f1d9f4fff06e381292c3bef241c4b68dcc
MD5 cbf0e0ce01b67a938dcf4624ba9e766c
SHA1 381553dc15b4c3b712b74293dc1a661c63eee3ab
SHA512 2ea24d3625b4a87b2baf788d339f7409b283da06c305654d158a7a6c9c30bb3cf8420e240c09237b212ca7d3f4eaafd76acc91803213d562e1aa45716283de79
SSDEEP 3072:SLFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:2FmUi21rSm8uUVNSlzY/
TLSH
T1AEC31310BAE3F8B2EE99304476DE2A159D680D818291C64157739E419DEF3C71FABB38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download