hxxp://ictd[.]ae/course/professional-project-leader%20and%20Kahramaa

Analysis

user interaction
yes
max time kernel
149s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/07/2026, 03:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://ictd.ae/course/professional-project-leader%20and%20Kahramaa
Sample260709-eesdwacv2m

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4688	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134280427063110460"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
4452	chrome.exe
4452	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe
Token: SeShutdownPrivilege	560	chrome.exe
Token: SeCreatePagefilePrivilege	560	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe
560	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 560 wrote to memory of 4012	560	chrome.exe	85
PID 560 wrote to memory of 4688	560	chrome.exe	86
PID 560 wrote to memory of 3228	560	chrome.exe	87
PID 560 wrote to memory of 3228	560	chrome.exe	87
PID 560 wrote to memory of 1792	560	chrome.exe	89
PID 560 wrote to memory of 1792	560	chrome.exe	89
PID 560 wrote to memory of 4496	560	chrome.exe	90
PID 560 wrote to memory of 4964	560	chrome.exe	91
PID 560 wrote to memory of 4496	560	chrome.exe	90
PID 560 wrote to memory of 4964	560	chrome.exe	91
PID 560 wrote to memory of 1940	560	chrome.exe	92
PID 560 wrote to memory of 1940	560	chrome.exe	92
PID 560 wrote to memory of 3820	560	chrome.exe	93
PID 560 wrote to memory of 3820	560	chrome.exe	93
PID 560 wrote to memory of 3788	560	chrome.exe	96
PID 560 wrote to memory of 3904	560	chrome.exe	104
PID 560 wrote to memory of 1676	560	chrome.exe	105
PID 560 wrote to memory of 4648	560	chrome.exe	106
PID 560 wrote to memory of 4452	560	chrome.exe	108

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://ictd.ae/course/professional-project-leader%20and%20Kahramaa
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffb9399c728,0x7ffb9399c734,0x7ffb9399c740
  2⤵
  PID:4012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1940,i,4907614455817115198,10001270493773992493,524288 --field-trial-handle=2072,i,17648750082318474960,3282068900954177773,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2176 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1748,i,5306478473007850429,10726177797587925201,262144 --field-trial-handle=2072,i,17648750082318474960,3282068900954177773,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2068 /prefetch:2
  2⤵
  PID:3228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2376,i,17828491336984641929,16287209667799126526,524288 --field-trial-handle=2072,i,17648750082318474960,3282068900954177773,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2388 /prefetch:8
  2⤵
  PID:1792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3136,i,16669057556787476849,8787631321494127235,2097152 --field-trial-handle=2072,i,17648750082318474960,3282068900954177773,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3152 /prefetch:1
  2⤵
  PID:4496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3156,i,13579243228642846826,210833190168048156,2097152 --field-trial-handle=2072,i,17648750082318474960,3282068900954177773,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:4964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4416,i,12066886856484508788,16156390883560721491,2097152 --field-trial-handle=2072,i,17648750082318474960,3282068900954177773,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4428 /prefetch:2
  2⤵
  PID:1940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4688,i,1962219032003292892,6110374054663600158,2097152 --field-trial-handle=2072,i,17648750082318474960,3282068900954177773,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4708 /prefetch:1
  2⤵
  PID:3820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5312,i,11606815918188787923,11805409673607866674,524288 --field-trial-handle=2072,i,17648750082318474960,3282068900954177773,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  PID:3788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5752,i,8085047700964374520,2815510364073222310,524288 --field-trial-handle=2072,i,17648750082318474960,3282068900954177773,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5644 /prefetch:8
  2⤵
  PID:3904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=208,i,13420735189352051102,444153713939880582,524288 --field-trial-handle=2072,i,17648750082318474960,3282068900954177773,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5672 /prefetch:8
  2⤵
  PID:1676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5552,i,2261421634417198371,4870491862476243472,524288 --field-trial-handle=2072,i,17648750082318474960,3282068900954177773,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:4648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=996,i,13258476601408405711,8217768772376608612,262144 --field-trial-handle=2072,i,17648750082318474960,3282068900954177773,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4384 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4452

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4876

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:388

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 706abfd0e3c324dc8b9cc445984a98779b59219230c1f04f5ac929202c5c11d4
MD5 6d0920a0725143b4fa4e7f5fbd24f460
SHA1 15de77a0ae287094670d9874241641f264120cde
SHA512 24186417445dfa6fe296eb09c8f056658034dde3a06041861e795afcf22c94efc81c1148227b0170a4b92c27f5275c1949a00d67ef173df15851754953aad120
TLSH
T196E02B96CD219C773CFD071810A14749EF5513562A81591F3B3CC70C4FB0A2A8186C9C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 ad6aeed3361cb75ddf5d97eac41e01a43ef738329a692581a7510b15e2fcfe4e
MD5 2428cddc9acd06b0a4608a392a42d35e
SHA1 aa4443095794779a87f0dcc99facc9cf120b2a19
SHA512 f00c80f7c65f4e0667d0edd2714144eb93a4cb091f8e7323a032c4eacc813ea7ee4a571d22ee4f5ddee863e51dd977792d7f58e7aaf1494577b0a1c4805ddec2
TLSH
T187B024D013704013C7410F70757114F135700F550F110303C4C0005CCC513F1C401017
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 506240c62534229ecfa7341794c5013d0ac6de1ace62f1563a3b8019973a6401
MD5 c3374a69f68a26efca498af1a74a188e
SHA1 40e7a98a1ed245951c8eb1dcc41f670b8319f594
SHA512 ec22b109f9c269df74313009a3af7c75bc41e9be4cf9edc8e08d045efe76b8343b64e441e3fe947dd182a4e60966f3fca5d8c3f08aa70127c96ddf3501e8fd2e
TLSH
T1B051ABF793F4967E8A1192F4AB156F1FCE690525032C3D6688D4AE1B93F2872D21078F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 0ee1046892758aabc841b32589bc0aec361a009ba84c8e20391c58074fc267e1
MD5 475d2f662e023709898164f78ac59af6
SHA1 16b2d60df47943b160d9e03d01d3c197c9a21e14
SHA512 cb3506cf2e83f1f03bbf600c4a7cb80c217a02e85d6744edb09db74e0f16175ffbfdcaa2854fb8e4c169816fdaa18833760edaf4cdf53afb7db026deeaa6573a
TLSH
T178416BF3C7D8897D894156F4AB156E1FCE690E14536C3C5AC8D8AE4F53E28B2D20158E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 d26743855d103e390fd38c7ca1deb646e92a1f09983289ae60f93327a2c8228d
MD5 bb67dfb44bb731ed838b842e75563f47
SHA1 993d516f2e6ffdbdf140dffad7e6b0a60a60c823
SHA512 3faee9dd6a13d4283f015f32269e19df4a0605c3cfdd1ee5ba0ea6ca03d5ec40933fcd69b1d58bbe6569659692b4c5962f2308c01680263694dc146b25d08871
TLSH
T1FA416BF3C7D8897D894156F4AB15AE1FCE690E14536C3C5AC8D8AE4F53E28B2D20158E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 2a318cc7d3acd5e36a0787db77a1457b7cfe365296e98815ac4e9dc5dce78af5
MD5 44e48233e6b1da423abc58874ce86dd1
SHA1 a8d338e76eb08310d27a06185b590ff1396c8107
SHA512 dec7745e765659ec1f8b9a644c2ce598061155fa9f9a4b818065b79437fc43edbd6ca9749c102568f334920f6bfd4e4819f559db8866e41f5e0d724aa3cd2fea
SSDEEP 192:LRlILCslgdvv7hpAPRp2ih95Hsb+WNn+EKOt2xulikw3Al3jVyIsnAUge:LRlGen9UXVrw1B2eiY3Fe
TLSH
T1D642E82EBD10257B5CCBD229F9227B57E7F7146125A02E84EBFC8A2C15EB5CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 11ef2354e41103edf47fafe15085d487ebc5c4d14804dea0425cfab2b7e0a33e
MD5 3fd0d9a2db212b0da21d956be808f85e
SHA1 1b922db9a47bd0e15180169b7795c37d7fafea4d
SHA512 cbda2f9c692b691a32e2c135acb3dbd9691ea90d17c6dd1a52b181401f20c2d193dc12cde1428061960fc7089a5642726c13b7d1ba96dbea260fd111188382e6
SSDEEP 192:LRlILCslgdqv7hpAPRp2ih95Hsb+WNn+EKVaYDulikw3Av3jVyIsnAUgE:LRlGem9UXVrw1NYQii3FE
TLSH
T1A642FA2EBD10257B5CCBD229F9227B57E7F7146125A02E84DBFC8A2C15EB5CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 7f2c3bb0b002e4d7d49e8ebd780daefdc42e5000eb8a51c5ee9d65c53ca14658
MD5 238ecb1a3e1c98f2912f099b0b7b8a1c
SHA1 8ef41ba79237b6d6468df95cd855e11fa292bdcc
SHA512 ce27ea08a3f6036dcdccaf5606f131bfeaa96a34cb88aad7fdbbef444d0eb669f860c23142443bbec8334482763511fadcc152f5ae3ac7f75fcb910a49c20877
SSDEEP 384:Kkj+F7KxkXqKf/pUZNCgVLH2HfgsloD7pLuLcSjsNXOD+F+ErU3qsHGZ45hUeHD:Ko+F7KxkXqKf/pUZNCgVLH2HfgsuD7pY
TLSH
T16D72F9677C4C9A3B0F94C6CCEC277B4FADB6024B65E9886542FA581503D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 e4a31c50d7a07885c3133b1a48cf743ac6533eaf99a333f3b9715f990977ba94
MD5 012cc23c35f32fc0f55131bb07822696
SHA1 89c2af0b936997537fc7f8c5fc1f81fc66542bab
SHA512 4a657afde57c16d80bcb36b17a35f03cfd72d08ab8583c911f367ecc66267cc14a9d269391d6d52864c269db0d2c18f6fb18687f01f7443ef285ca42c7f4cfb9
TLSH
T1FDB012D0C001A221C01307F4159314C87174DF30D60E2701C3E06DA698295618215161
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe585c54.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe585c54.TMP
Size 96B
SHA256 b047cbdb7b9660bd1f621470a62bc80f7e27ae1a6b2192f20a271737a5de1f7d
MD5 82a29df6dd4edbd0852a080a5769e1a3
SHA1 54e212ab13cbc625612bd46d3d10b76ae1de1fb5
SHA512 1859e88f6b1963a5d38e9309d34c3b4bd75d0f56b7a4eb96f33ba97a77a9345dba81ada440f3d59ac3a0c36ea1e26c4b18a9aa7011080cc518307dc4fa940aef
TLSH
T133B02280C0022322C08303B02CA0C0E832A0CF20C2030202A2E03F2BCC202208E22030
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 165KB
SHA256 8bb9a40cc177f83c4d187c3fe6860d8a44a7029f47a8e34739b5cfbe743226bf
MD5 8bdaedb4b26f73452615db0793eb08d3
SHA1 e172dcfc9d10f97a6240eac9c56d4c885e6fe131
SHA512 5172e9e22bb8e23196af785a550a7d41e05ae86a6bda0737139724879f31e1c8685d294e7047eb70b86de65e31707ad9cbaba59dcc02851c4a714048d6c06ca9
SSDEEP 3072:1cic9iLrNWZob0nb7EJ+qfd7NtZL8cHQRZEQ6Sps9:1cSIZTb7EJ+qZ/ZLW3Ex9
TLSH
T128F31277EFD32E375EC2CF60B5130F8656B6949A64348301FA697AAF38635E0748285C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 edb9a426e2030a792fa50d940232dd458f85cdfecf638b4685ced836462c082d
MD5 edd955ccb80db5b01410199672d0cf5b
SHA1 0f931be55070a1a26f39118dc4e77c712118ddce
SHA512 90c66fab1e97138be4c8a6e29500913bf5eff34d1775d8d53f9cfcc37a259b86392428a00d0306b88419413a2c73e5f2478bf7941285b88b7b628711fbb35ba5
SSDEEP 1536:XjiyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:zwqfd7NtZL8cHQRZEQ6Sps9
TLSH
T1F5C30237AFC21E335DC2DB70B9130ED7A7B644A99034D301ABBD2BFB688345565824AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 1b997ac7e1af42cf48595963e42d8296158bb0119d9367ec38d0f9b57290827e
MD5 d9f8beab7488c9f6bbe75c21fff91ca5
SHA1 217356519a21f1e6e15de8607a7fd2c60a754c5c
SHA512 81ab5f9faf49405bdcb462232098a81237f51fba60fc4012058c8c726d23d166d3dc00c66c0f8784602e1309bffea4ca2ad66b8f33d6d547f3fac1b1c49f16e5
SSDEEP 1536:6QyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:Tqfd7NtZL8cHQRZEQ6Sps9
TLSH
T14FC30237EBC35F335D82CB64BA534FDA97B644A99030D301AABD3BEB6C93451648249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 a6bb7d138c575c8e7e58801fa2865fd06b137952366b97b6128452b60d88811d
MD5 54765249e7bf377fb3a629bc6459797b
SHA1 d783e22de31d254cb9242cdb225fa59d45d335d6
SHA512 ab041ca4e635e0a345296e1156e9ed85dadd29595b7ded8b70af36b1d999319cb94a1016eff14a4f8cda5ecea0ab975bb34fdaa00b0cc16093ec100924e11b28
SSDEEP 1536:ejiyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:ewqfd7NtZL8cHQRZEQ6Sps9
TLSH
T1EBC30237AFC21E335DC2CB70B9130ED797B644A99034D301ABBD2BFB698345565824AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download