hxxps:///3534236e[.]z9[.]web[.]core[.]windows[.]net/

Analysis

user interaction
yes
max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-es
resource tags

arch:x64arch:x86image:win10v2004-20260513-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
06/07/2026, 21:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https:///3534236e.z9.web.core.windows.net/
Sample260706-zyfjmsgx7k

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5004	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134278456904044650"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
2072	chrome.exe
2072	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe
Token: SeShutdownPrivilege	1480	chrome.exe
Token: SeCreatePagefilePrivilege	1480	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe
1480	chrome.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 1480 wrote to memory of 4616	1480	chrome.exe	85
PID 1480 wrote to memory of 5004	1480	chrome.exe	86
PID 1480 wrote to memory of 4384	1480	chrome.exe	87
PID 1480 wrote to memory of 4384	1480	chrome.exe	87
PID 1480 wrote to memory of 1812	1480	chrome.exe	88
PID 1480 wrote to memory of 1812	1480	chrome.exe	88
PID 1480 wrote to memory of 4184	1480	chrome.exe	89
PID 1480 wrote to memory of 4208	1480	chrome.exe	90
PID 1480 wrote to memory of 4184	1480	chrome.exe	89
PID 1480 wrote to memory of 4208	1480	chrome.exe	90
PID 1480 wrote to memory of 1904	1480	chrome.exe	92
PID 1480 wrote to memory of 2504	1480	chrome.exe	104
PID 1480 wrote to memory of 2540	1480	chrome.exe	105
PID 1480 wrote to memory of 3700	1480	chrome.exe	106
PID 1480 wrote to memory of 2456	1480	chrome.exe	108
PID 1480 wrote to memory of 2456	1480	chrome.exe	108
PID 1480 wrote to memory of 5024	1480	chrome.exe	109
PID 1480 wrote to memory of 5024	1480	chrome.exe	109
PID 1480 wrote to memory of 5116	1480	chrome.exe	110
PID 1480 wrote to memory of 5116	1480	chrome.exe	110
PID 1480 wrote to memory of 2480	1480	chrome.exe	111
PID 1480 wrote to memory of 2480	1480	chrome.exe	111
PID 1480 wrote to memory of 4176	1480	chrome.exe	112
PID 1480 wrote to memory of 4176	1480	chrome.exe	112
PID 1480 wrote to memory of 2072	1480	chrome.exe	113
PID 1480 wrote to memory of 4236	1480	chrome.exe	114
PID 1480 wrote to memory of 4236	1480	chrome.exe	114

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https:///3534236e.z9.web.core.windows.net/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x108,0x10c,0x110,0xe4,0x114,0x7ffe154cc728,0x7ffe154cc734,0x7ffe154cc740
  2⤵
  PID:4616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1568,i,2965412499692646981,13140560002342505057,524288 --field-trial-handle=2044,i,8518064271212751826,3263817913021587395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2068 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1720,i,7975942994436198669,2787602933216270879,262144 --field-trial-handle=2044,i,8518064271212751826,3263817913021587395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2040 /prefetch:2
  2⤵
  PID:4384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,12353068738776921234,11068486903914198245,524288 --field-trial-handle=2044,i,8518064271212751826,3263817913021587395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2360 /prefetch:8
  2⤵
  PID:1812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3208,i,2355412436462334232,1949638135727909750,2097152 --field-trial-handle=2044,i,8518064271212751826,3263817913021587395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:4184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3216,i,16214810401446943852,2170265927294284517,2097152 --field-trial-handle=2044,i,8518064271212751826,3263817913021587395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:4208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5124,i,2632781750444175765,1842261327450134857,524288 --field-trial-handle=2044,i,8518064271212751826,3263817913021587395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:1904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5456,i,5021906314317074113,15396540707661122446,524288 --field-trial-handle=2044,i,8518064271212751826,3263817913021587395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5468 /prefetch:8
  2⤵
  PID:2504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5460,i,3688736820479756326,9992314938717839448,524288 --field-trial-handle=2044,i,8518064271212751826,3263817913021587395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5472 /prefetch:8
  2⤵
  PID:2540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5464,i,7372232249573306009,3695872886586200253,524288 --field-trial-handle=2044,i,8518064271212751826,3263817913021587395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5540 /prefetch:8
  2⤵
  PID:3700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5524,i,17240886373730272577,407772919037977299,2097152 --field-trial-handle=2044,i,8518064271212751826,3263817913021587395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5504 /prefetch:1
  2⤵
  PID:2456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5740,i,3033208621107968814,17834358625205787909,2097152 --field-trial-handle=2044,i,8518064271212751826,3263817913021587395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5692 /prefetch:1
  2⤵
  PID:5024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5780,i,7830147729265255616,12302397991490972691,524288 --field-trial-handle=2044,i,8518064271212751826,3263817913021587395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5788 /prefetch:8
  2⤵
  PID:5116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5980,i,7767358189588255900,18108407736921903749,524288 --field-trial-handle=2044,i,8518064271212751826,3263817913021587395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  PID:2480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5872,i,1718698972140011292,10992203871187702504,2097152 --field-trial-handle=2044,i,8518064271212751826,3263817913021587395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5860 /prefetch:1
  2⤵
  PID:4176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3200,i,6656299671773494440,2148783413540218783,262144 --field-trial-handle=2044,i,8518064271212751826,3263817913021587395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3304,i,14460601450414659822,1025226243730528342,2097152 --field-trial-handle=2044,i,8518064271212751826,3263817913021587395,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:4236

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4504

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3796

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 f92ae300b42578d6e3ee8860e858cc22b690f27615980cf3026f77e844b1eab7
MD5 a617a6f7b28997736afded957dfa2816
SHA1 2307a621caf659894d4f9f9c7007912b438d0794
SHA512 40a44449c53cb912e7abbb851be2ea45364e4e3e0e20b9db3a93a64347e6071dae46672cce475f8e0e0f1760ce4e97b31f162cc3341b082cb603079b46aa440f
TLSH
T1B2E0E5AAC861E83B28FE0728A0615786F610135B2E40495B7B3C860C8FF0A3A5A49C1C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 bbeecdffa5efc13daed6081ea99de81fcb6efcc801e675888e312b6ea6b4efbe
MD5 c1fab712c333e69204199c5ff1b27213
SHA1 1193b5ebb6f958b86040e32bdcd5e7aa0361fb1b
SHA512 92041a0219b85f15fe34d75177d59545b0da244a80b81ed80fec846aca4f64f23e55138fd9e2e703b4890f457b8ff6eb67966c397e2e3226d50be9628cf0be2d
TLSH
T12BB022A0238CC0FEC32233FC38F008A338380CBE0383032280E082A8C8B33E02382002
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 1c5a378e35d125c325816751502673faa0453c718810833dc7c6864a826775b4
MD5 9022c987fa096eca23a613134da64b2d
SHA1 7f372143000a44337dfe7a0ff9b0aea10ef5791a
SHA512 1cc22a58f71f736e87d18e2872d303ae58abdc773073485ee0922a06dd0eef40e4ecf5d4caf9dfbf74bd9c96a492e3506db3d2bcf8a26a3c61eefaaddcd62954
TLSH
T14F519EF7C3E4853D891191F4AB156E2FCE290924432C3C66C9E46E1B93E29B1E20564F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 07b887f1cca484e0cf15f5a0c22a0ff5b6f4ef92400a2f38166cf08e82ae5207
MD5 7fb37e801a0598f89d9752b6a1dc57b1
SHA1 356c54c28db998e549e5fdba4057e439111d55e2
SHA512 7c567bc777315f4177801947e88a93ff92cab3b9438b526a35e438f881ffea2f644dbe3d00779bb5e27da6198d9207ed8e850878e84a21e8c30acd213bd050d8
SSDEEP 192:6RaIHnAv72vAPRp2bh9THsb+WNnNgRDc2NzAkwna/+VyIsnAUge:6RaIHcC6XCFwma2OHa/2e
TLSH
T13942B46FA920753B5CDBD229FA217756E7F5003126D42E84EAFC8A2C15E75CC222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 fcadc32b82e0cb8eb549da757eddcc6a6e64b0f260903f2e90378b1cda24044c
MD5 b2da8c43762c20070dccb1d9b9da9b40
SHA1 ce91f83916ebc702c8e12b87c5571366b79e8326
SHA512 33aea7ef16df44f4a6e7b696432f9d1d481fafc05a16dee39b260bb27586ca392ab24720e9eee651eb1a008fe82d27ed0d689a7d7b3098b1692d7ef1ad377339
SSDEEP 192:8RacBzIHlIv72HZPRpo+RS49THsb+WNnagIx3qYe2ezAkwnaB+8yIsnAUgE:8RamzIFUCxXvFwhWQ2jHaB5E
TLSH
T1A852C76BAC2429375DDBD219F9217766EBF5103126D42E84EAFC8A2C15E79CC322701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a4f86b32079fd2cb3701d6c1ea40ee18c1fd0a3d48002c8d0c4dedcd9ffe1981
MD5 344f75dab050701e219229884e79460b
SHA1 1ac4d7b411cfaa214dfa85c23e357dc13c0c887a
SHA512 55a5a2b3aa1c3b259b35f7655c09cec974edc051885f892f347537e8252d283311ba2acf89c9a894e56e0f12b8ce83831f8f41b53b6ae774841af63f90bb4b6e
SSDEEP 192:6RaIHnSv72vZPRpob49THsb+WNnNgRuccgzAkwnaB+8yIsnAUgE:6RaIH+CpXNFwm7cxHaB5E
TLSH
T1B042C76FA920393B9CDBD619FA217756E7F5103126D42E44EAFC8A2C15E75CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 e52b1d96d8a8f3470a298a7250781e385f35e8982cbd5611a04d6032f7e21c0c
MD5 d735f96943b769f42ffe770e300f189a
SHA1 4e5b1c0e8234c960000454289003ecd5fdfca041
SHA512 621e7bd57828104cde71e3882d5f3ad024bfa8b999528cd6daa1c8faaa26e3f5715cd79b810d8dcad9802d4974df79fcab736d05a2c29fa1f6184257a754d334
SSDEEP 192:6RaIHnSv72vAPRp2b49THsb+WNnNgRmze0zAkwnat+8yIsnAUgE:6RaIH+C6XvFwmeeVHat5E
TLSH
T1F542B66FA920393B5CDBD219FA217756EBF5103136D42E84EAFC8A2C15E75CC222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 11KB
SHA256 df3f3d7e8eb52eb11376e73179228426d3d2d5efef9c19d4d305887505e18b02
MD5 cf7fedf8f7d2c16e2ee32aeccb0d6abd
SHA1 c0965f169b36b690aaf700b8f80359944a908774
SHA512 0f7e0c7f513e4fbb8754c44a17604a17a368e18bf06088e8c92d246667c4707e4e019b978bfef2975410552144093cebfb7ef11074676b8e4908dde7b23f6a1f
SSDEEP 192:ee14K6IW7KxkXqK4I40pUZNCgVLHrKHfFKslEK2cXzKD/Ty+ErUkKN9H9IB3Wh/+:/1jbW7KxkXqKf/pUZNCgVLH2Hfgslqcx
TLSH
T16F32C727948D9A3F4FECD55CDC526F4F6DB1029272780C2896FB9C0403A97CE115A1AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 a4fc67610be78b194a260d6cacfd86ed7038374d828c68b2d79f042bb74ea5dc
MD5 b620e042c29aebeab6dd27f2d1b22575
SHA1 80060ba053e56f4b2511faab0b3c190be16fb377
SHA512 d8c5c2ab8090149160d7f3a96c570f487016a7064534d9026dedb7e96379f2d1c4bc8c2c73b215f85bb26e797946484361a2dae7f2282d180cbebc153b4db15c
TLSH
T111A0022B55D85871DD100375129106C2675E99F02301F72361E200949C57546D975720
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 3500585c229281448071465eec5f9551e91bc49a74be066d69ca4f213241ef23
MD5 994963e455574f506cb17b5830974c52
SHA1 df381ce93cfda6f8f31aac354420f84ff006f187
SHA512 128301747ebf3311716ba8cfeb6ffafd89e4e6087b575b023d185dd4c11f7333d03084a6cfb6185e05e6b5528557692a2fb652f876208272d8f9c0b63afb68b8
SSDEEP 3072:XGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:Wm7Rkm1tYpBeh2BAom
TLSH
T166C3023B5D75A83759B9BB4EB04E0B1F1EF14AA6C930DE41C8D85A0437FA7CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 30fc2db819c88787042e1917e8026e85f9598a02d61efeec3ff8440d42c7d386
MD5 c26756ffbbda5fa2c219d1abd9d98953
SHA1 cad692ac86537ced5d4bc829dd055aa5fb970557
SHA512 4ee7ae00ea4d7678632cdf2a3115adb4fc7fe48086c40bee09f883faad8c2a97e7cdd35933c878abc11b4e6c19d919be80b0502adaa1dc94f0d4d385b1ddf099
SSDEEP 3072:kGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:Hm7Rkm1tYpBeh2BAom
TLSH
T188C3023B5D75A83759B9BB0EB04E0B1F1EF14AA6C930DA42C8D85E0437FA7CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 13d63caf2473049f2e9441b06cbf137180a9596ec3ef955813f71dd2d0d2f7d9
MD5 bce4239d90e9dc2e2b73338b26831986
SHA1 75cdc3ab403352a203f9cda9df3a9becdce472f5
SHA512 eabac2cefa5927f295b395e51ceae6f5ffdd330b14641d75f34e242c3ec62b832e212eb13d7a9e96b64736622d95e861631aa8369d9c09463d304d6698042365
SSDEEP 3072:TGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:qm7Rkm1tYpBeh2BAom
TLSH
T1CBC3123B5E70E9775979A74EB08E0B1F1EF14AA2D930DA82C8D85A0437FA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 ccec069b12d65866560164490f90e13c4cd33521ca2f223779bea57660a90028
MD5 1aab6315d6febbca90a6b4115ec70094
SHA1 525e02b4d331b701d4f8a994f74c1a034d2ef22c
SHA512 4ee9573bfb1810cb0420a7600b8fdd3a9066029fbdac73cbb02e7bd47ae9d1cfc9c49ac41f1ef2926f732f5e25054e09e5f5fe5f5ff406cbb9247e2cb8546ab9
SSDEEP 3072:CoGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:CDm7Rkm1tYpBeh2BAom
TLSH
T1EFC3123B5D74E83659B9BB1EB08E0A1F1EF14AA6C930DE52C8D45B0437FA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 97c9ec633310da66f64806e52493e8cdcf1f47210023499e3b14dd509167141c
MD5 401b1e23e6839af2190377d436cc8535
SHA1 4a56327d71def68ef185cccdab8c9f3aa1892135
SHA512 fd4392ef58bc6a344218d6abe651a36dffb4c63e6cdfbd5ad506b31fa61fa9f83d0c18a43c1f722bc18c2a2fe5698bd857d749368e3fa24f7ab1319fc6775776
SSDEEP 3072:JoGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:JDm7Rkm1tYpBeh2BAom
TLSH
T152C3123B5D74E83659B9BB1EB08E0A1F1EF14AA6C930DE52C8D45B0437EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 d4c869eee7effeedb4051327860d807e6acbf4cdefd9a33695b795e5eb09977f
MD5 9d21de15f071742c758c5b9ddd94aefc
SHA1 9c47084696cbde9fe26870002d60786232babbf0
SHA512 333d63b1e2b46d2808fe3963c603b665ff005b48cd75758168a97b9f28084cefbf7dfe07ba9b3496f4b9385c3cd8f97e0483e80826835f7569bc3a0c04c92976
SSDEEP 3072:qGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:tm7Rkm1tYpBeh2BAom
TLSH
T1B5C3023B5D75A83759B9BB0EB04E0B1F1EF14AA6C930DE81C8D85A0437FA7CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

memory/3796-62-0x00000156A6400000-0x00000156A64E9000-memory.dmp

Download