hxxp://quick-excel-7[.]preview[.]emergentagent[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
153s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
07/07/2026, 12:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://quick-excel-7.preview.emergentagent.com
Sample260707-pcw96aev3k

Score

6^/10

discovery

Malware Config

Signatures

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2680	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134278999326998695"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
3824	chrome.exe
3824	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe
Token: SeShutdownPrivilege	4796	chrome.exe
Token: SeCreatePagefilePrivilege	4796	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe
4796	chrome.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 4796 wrote to memory of 916	4796	chrome.exe	83
PID 4796 wrote to memory of 3024	4796	chrome.exe	84
PID 4796 wrote to memory of 3024	4796	chrome.exe	84
PID 4796 wrote to memory of 2680	4796	chrome.exe	85
PID 4796 wrote to memory of 4844	4796	chrome.exe	86
PID 4796 wrote to memory of 4844	4796	chrome.exe	86
PID 4796 wrote to memory of 3472	4796	chrome.exe	87
PID 4796 wrote to memory of 3472	4796	chrome.exe	87
PID 4796 wrote to memory of 3636	4796	chrome.exe	88
PID 4796 wrote to memory of 3636	4796	chrome.exe	88
PID 4796 wrote to memory of 2992	4796	chrome.exe	89
PID 4796 wrote to memory of 2992	4796	chrome.exe	89
PID 4796 wrote to memory of 3348	4796	chrome.exe	91
PID 4796 wrote to memory of 3348	4796	chrome.exe	91
PID 4796 wrote to memory of 4840	4796	chrome.exe	92
PID 4796 wrote to memory of 4840	4796	chrome.exe	92
PID 4796 wrote to memory of 3496	4796	chrome.exe	101
PID 4796 wrote to memory of 3496	4796	chrome.exe	101
PID 4796 wrote to memory of 1788	4796	chrome.exe	102
PID 4796 wrote to memory of 2544	4796	chrome.exe	104
PID 4796 wrote to memory of 2544	4796	chrome.exe	104
PID 4796 wrote to memory of 4200	4796	chrome.exe	106
PID 4796 wrote to memory of 4608	4796	chrome.exe	107
PID 4796 wrote to memory of 3664	4796	chrome.exe	108
PID 4796 wrote to memory of 3824	4796	chrome.exe	109

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://quick-excel-7.preview.emergentagent.com
1⤵
- Drops file in Windows directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x21c,0x220,0x224,0x1f8,0x228,0x7ff94147c728,0x7ff94147c734,0x7ff94147c740
  2⤵
  PID:916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1804,i,10609844628947728837,15717237587680461787,262144 --field-trial-handle=2024,i,12559054680206906254,13756563065966264240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2016 /prefetch:2
  2⤵
  PID:3024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1672,i,4400927275117181068,17523678473708507995,524288 --field-trial-handle=2024,i,12559054680206906254,13756563065966264240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2276 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,14827671874630539656,18231504101211837348,524288 --field-trial-handle=2024,i,12559054680206906254,13756563065966264240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2416 /prefetch:8
  2⤵
  PID:4844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3168,i,4285119967211099363,8098056574737341138,2097152 --field-trial-handle=2024,i,12559054680206906254,13756563065966264240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:3472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3184,i,14958777631127657488,13288833456185232177,2097152 --field-trial-handle=2024,i,12559054680206906254,13756563065966264240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:3636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4444,i,14261772428074475142,13017233847380553896,2097152 --field-trial-handle=2024,i,12559054680206906254,13756563065966264240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4456 /prefetch:2
  2⤵
  PID:2992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4736,i,5822204320897705447,1721601558902623363,2097152 --field-trial-handle=2024,i,12559054680206906254,13756563065966264240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:3348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4884,i,4608842268851358815,4256763972826288008,2097152 --field-trial-handle=2024,i,12559054680206906254,13756563065966264240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4908 /prefetch:1
  2⤵
  PID:4840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5864,i,9040302491625639698,16318304526885609496,2097152 --field-trial-handle=2024,i,12559054680206906254,13756563065966264240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5124 /prefetch:1
  2⤵
  PID:3496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6524,i,13163820150631082206,8930547107044142205,524288 --field-trial-handle=2024,i,12559054680206906254,13756563065966264240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6528 /prefetch:8
  2⤵
  PID:1788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5804,i,8615262138471727416,13917137138796731025,2097152 --field-trial-handle=2024,i,12559054680206906254,13756563065966264240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6540 /prefetch:1
  2⤵
  PID:2544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5780,i,14653607360048843765,16858769588890679675,524288 --field-trial-handle=2024,i,12559054680206906254,13756563065966264240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5724 /prefetch:8
  2⤵
  PID:4200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5800,i,17046406694058992643,6041780589220106767,524288 --field-trial-handle=2024,i,12559054680206906254,13756563065966264240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:4608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5784,i,6371859682441026644,7365689380745864891,524288 --field-trial-handle=2024,i,12559054680206906254,13756563065966264240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:3664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6316,i,15722955429949551940,12045965954213407681,262144 --field-trial-handle=2024,i,12559054680206906254,13756563065966264240,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5076 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3824

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2652

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2436

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 66ed93445e8a06bfb00b7f5e4f019adaecfbbe8415504ad8012d2dd87206b33e
MD5 c6ed61ad6dd14ad3fb26516c74b5a431
SHA1 99465cd43cb582160e6d8f609e60bc2ace6592db
SHA512 e554aef48b207b10fc19094a28f86ce7b69e9b36ce958e0ff0fe7c7fb8be4cdd34c80902f236707b88cb35ea5a0789d65588586667e91eb3216f6881b034c857
TLSH
T10BE02B6AC821DC7718FC0B6D61084B82E75013162B40995B7A3C960C8F7073A85A682C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 9f8cc3f5eb0051ff18317d476226d9ecdff5e6ffff4c726173a13a5ccb0d64dc
MD5 219077c44132966485d8162458600ab8
SHA1 8f3d1605b2a6a4cfa1f4775e96193013348eb7ff
SHA512 2f02049ed2473aba1512acfbe005e31b32f2c4624c4ffddb2c500adc272d17697587f206e1a316f7ac3d47c8e583b09d549891f9de8b42a42ed58c390116157f
TLSH
T16D516209A7C7A0C5DF3144B929C20CC2FA37D648B71B7F17B85A9C7D54233A25256C68
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 23KB
SHA256 7eee59de6e90ac2200f800c48f8dc88173d3091888ef96e3249cc68f7a9ef6aa
MD5 1b0dcba5877d40e140386a04de518680
SHA1 b56d3c4201023e0d5b158b58d5f8351672d0653e
SHA512 c1c986f5550254c93ae01d6c6f2728c41683f0f7d1035f0f76b17aebfbf2961bf9b8a81b5c27e2664bd4fe292d885cb2f41bef8f1cfa720b847f8353d511e01f
SSDEEP 384:DV3xTpTQP+bWr6LNnwMaIaEdEjN+XABY1DW974x9bwcni67MVxJEeH0YBF0bFfUD:7XOEyhL
TLSH
T1D1B2DFFB83B4423DD91192F8AA646E2FCE6D1564139C383AC9D87F1FA3F1860E14564E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 e296b365e52cb50ff7a5f08484cdf784cd7bf2c7448429000b786780d9dd6c41
MD5 064039dd3f026fb30a0c9fc4a19dc666
SHA1 52b3223772022f867de7b2916b19f6f46d4e1204
SHA512 8000acac8df97dd37867ba9487e6738ee95b166fad2fcd7da851a40d5c54aee4bcd9b85d0b42d43c9733b6bde59c600b1fe063c5b67560458f564417681b3532
SSDEEP 192:ER2Ms4kyonmv7PpAPRp2mC9YHsb+WNnSHuB9T2uB2ADaOU0/VyIsnAUge:ER2MunSjUXKWwC+2O20aAZe
TLSH
T19B42B72FB914697B6DD6C22AFA237757D7F5103221942E84E6FC8B1C16EB6CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 c8ca7c7cecb078949c646a974d2bf23a3c9d61dda699ef48c74c16d4442f8ef1
MD5 dfd8419783bff0f4629265fd5a78a4ac
SHA1 73d671ff17e39b0e97b0a4c867e32734b49a5c94
SHA512 ffe68795b8d3300c351ab31189dd76291f2fcee6495fd974fcd995570b128913f7f61e824232763d654a7dcd6671333cbfe70d4fc2ce27829b2537d5cceef753
SSDEEP 192:ER2Ms4kyonuv7PpAPRp2liC9YHsb+WNM8SHuBweYuB2ADaOU06VyIsnAUgE:ER2MunKjUXyWwAWYO20aA6E
TLSH
T12F52C82FF914297BADD6D229F9237757D7F5202221942E84E6FC8B1C16EB6CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 aa6c7071841b16f7ed62edd6baa5e0fbe1e0965e3c93c57eb246ee84af17f0ef
MD5 b15a6860725fbc56a9825edb39dbc47b
SHA1 799ba6c731c654a3721247204fa0803f10de1596
SHA512 58d82908c668443331b887d224fb3d31772ee38617891f344c2f72640c88f0de8e0c47297af690d3610c39c62746582ca90111de81f3b467e8175e2d2224f86c
SSDEEP 192:ER2Mq4kyonpv7Pp9PRplliC9YHsb+WNM8SHHrB/BweYcbB2ADaOU0gVyIsnAUgE:ER2MsnpjTXJWwANnY620aAkE
TLSH
T15052C92FF914297B6DD6D229F9127767D7F5203215902E84E6FC8B1C16EB6CD221301B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 ded36b52867f7940608404ed131790e7e3c46a2047342f6fa11b64b4b4f1a740
MD5 3ac50cd9a1a678d68cd082bcbd5313b1
SHA1 afd19faf5a5fc45615db2dc8d417fbeff67ff064
SHA512 b6c0f7c4437b9aaa80a2d54db26c226de8cef8340ef35c65312b6d2aa5ffb9ad7d94c3d799b6a98eba9b7dd25bf12c897a4973defd5c17e85a92b5370005eebd
SSDEEP 192:ER2Ms4kyonCv7Pp9PRplliC9YHsb+WNM8SHHrB/BweYcbB2ADaOU0gVyIsnAUgE:ER2MunOjTXJWwANnY620aAkE
TLSH
T10252D92FF914297BADD6D229F9127767D7F5203211942E84E6FC8B1C16EB6CD221301B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 4438812d966e1d11c2f4b4dcd5703934145668a842e5f18c309b93e6cd0ba09c
MD5 1386314059085d62a9101bbf1a039b65
SHA1 c0c9d9db0103f0aa592eb50b557e1c7af59924f0
SHA512 f7b9944b5b23df4170a875adebfb1950f8d576c4adda2b26467f584019e888c6a674a0a567adcf681cb9c5f7c120924ecf6d54fd0463d975b4fb31a520df19c2
SSDEEP 384:bxj3K7KxkXqKf/pUZNCgVLH2HfgslcP7pLuLcSjlAXOD3u+ErU3KMHGu/g2kRm:bR3K7KxkXqKf/pUZNCgVLH2HfgsmP7pS
TLSH
T1FF72F967784C9E370F94CACCD8177B4F9DB5015B65E9886483FA581903D8BDE11092FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 4f4f18120cf5e47b64b5c883d0142f8e494729b9f137906754adb0dc0cb8675b
MD5 4dbba72a2cb34f443de232adbe377d7f
SHA1 8ff9376334cf27f6291196a781bda511b396be23
SHA512 d77e7671f24eaae9dd629c4c642aeb8988b0aae55b15591875f44a905c271f881c67e5ff825aaa4cd430ddcdd11711acd5f4d8ef7fce6e76e70679e393b12b70
TLSH
T1B1B0124084415501C04202F411D624C871A49F20960B1B0753E0E93688265518016060
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58395b.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58395b.TMP
Size 96B
SHA256 353844e5d617c9a954869f6cc5da9cec7c0a0d743666b6a5575ed1b02776e7d8
MD5 9f33df9acae35e59dbf11a9c89f6ffd4
SHA1 56d3f93741931ca6a11b836c67385507730dafae
SHA512 d3b1c080e575224f510f9c4a3deaec16a03440946fc7b3c48e456577e8c85cc1a84180d96de06b04fa56e1968b115b3c943828aa98bca6f144934e4f2ad8c461
TLSH
T1D6B0025DC2427622C05243B17DE7A5FC7270DF25D603121A92E11B66DC356A0C525560
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\IndexedDB\indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

d3196f03-f856-46fd-a03d-5cf088c1711f.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\d3196f03-f856-46fd-a03d-5cf088c1711f.tmp
Size 12KB
SHA256 96f6723a0fbbc19ff110aa4049f13d866f6c5236b47e7b7fbdf4dae7b51058df
MD5 31cd97bf063072e80dc7499db7353ccc
SHA1 709b90d34c9f82c23d3fe35e50132c92a4229204
SHA512 806f871c12c3d5e2bce1c7aa96104436f44539f09795208265a463e30322b915b35cc3104824bda7e1ec3ace5b04411fb81fa2a9aaa2de0383526d6deee0ea70
SSDEEP 192:ER2Ms4kyonBv7PpAPRp2liC9YHsb+WNM8SHuBywezB2ADaOU0/VyIsnAUge:ER2MunRjUXyWwAael20aAZe
TLSH
T1DD52C72FF914657B6DD6C22AF9227757D7F5203221942E84E6FC8B1C16EB6CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 f1b781cf6a82ed5859d238b0cedd4f6a57c2a94d872dcb9161b06b3633810e01
MD5 552c205d511fbc4c3382d43d3ef2c958
SHA1 b8d5ab060802da8f883b4cb96204fd8e181e48e2
SHA512 15d3813c233f5b418b98bf1a4d478c57ff8d8de1938dee12eff382aeb4e03f020ec302f4ae4bc4d05fde277cb1517cd1eb20eea5074fbf346a824bc8b977c145
SSDEEP 3072:FTgGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMa:FTLm7Rkm1tYpBeh2BAoa
TLSH
T176C3123B5D75A8375DB8BB4AB08E0E1F1DF149A6D924EE51C8D86F0423EAACC0945A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 f689c99d7393d410d751ff4bec308e7559ba7373ceaa92dca22829d99c82d235
MD5 3ab74086d99f40c3ebb572e2fba9e79d
SHA1 8144d5b7c0ba075169667f09ab6cb5c123527796
SHA512 35f1719181bb50182b798b643767e1d49d02927e2c398ef44109c50c1e425a78599cbb8ed33e3746bd503a6b1e2084d9968a1abb117e67b88a477d0599162a7e
SSDEEP 3072:2DGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMa:26m7Rkm1tYpBeh2BAoa
TLSH
T1EAC3123B5D75E9375978AB4EB08E0B1E1EF14DA6D930DE9288D86B0477FA7CC0A04934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 abbb909bb9992800bc0e42146969f29c38c25d65d7623f9293ef0ec78666b6df
MD5 d2627dbc32d97da2b9bfe3bd8bf0d122
SHA1 20eeda7b261d41a5260fa1fbe17a61bc21ecb49e
SHA512 7307d2e1c894c96284712b1cc24056cddbaec88803ef8939238a9344265b5a7a60063ca5321c4ad67c57451c7cf07864c9b7bae2526f3b827ac37920de2e0494
SSDEEP 3072:8/oGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMa:8/Dm7Rkm1tYpBeh2BAoa
TLSH
T176C3123B5D74E8375DB9BB0EB08E0A1F1EF14DA6C920DE51C8D85B0467EABCC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 2358d4b577548dc6962c0809e49847fa676598d64437ad0f627370fd69094c63
MD5 d5dbd2dce22daade23f8260f654337b8
SHA1 ef66aa973c520b3b30d8d71bfa74eaccca7f2d70
SHA512 86402f722f98280bcb571350c1bc7de75edac604ee8f511f4d9fe99bbd716e658bb055b41f434a6f05a68101fe0afc92cef9c5752508f7241aeaad1b8ac69088
SSDEEP 3072:8YoGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMa:8YDm7Rkm1tYpBeh2BAoa
TLSH
T1FFC3123B5D74E8375DB9BB0EB08E0A1F1EF14DA6C920DE52C8D85B0427EABCC0A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 bea4d94ee8de72318d67575385a3c8ba7d3449f466f0d8244a64d13f15e40348
MD5 002652447d22e8398e6dd8c0d2b9b818
SHA1 8597aba64c3e81d27a27e83e62effd61673bf29f
SHA512 32c188245c079bdc668ca8101fee825f818348e15353f3e72dc53305bb4ad9340bd679f67b5aa35c3baaf5d3b0496b78a91853c9e5296aed40b21de429d85167
SSDEEP 3072:FYoGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMa:FYDm7Rkm1tYpBeh2BAoa
TLSH
T1B2C3123B5D74A8375DB9BB4EB08E0A1F1EF14DA6C920DE51C8D85B0827EABCC0A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download